last executing test programs: 16m27.903438231s ago: executing program 4 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0xee, &(0x7f0000000240)=ANY=[], 0x0) 16m26.908606158s ago: executing program 4 (id=92): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16m26.273458048s ago: executing program 1 (id=93): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000180)=0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 16m25.764376653s ago: executing program 4 (id=96): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000021c0)=@newtaction={0x14, 0x76, 0x1, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x1}) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 16m19.150588335s ago: executing program 1 (id=101): pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 16m18.923913449s ago: executing program 4 (id=102): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 16m18.608809352s ago: executing program 1 (id=104): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x400800) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000140), 0x5210c0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f00000002c0)={{0x2, 0x0, 0x5, 0x2, 0x626}, 0x2, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000340)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x8, 0x2, 0xc08}}, 0x11c) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) 16m15.365310554s ago: executing program 4 (id=106): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16m14.661266197s ago: executing program 1 (id=107): socket$inet_udp(0x2, 0x2, 0x0) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x2, 0x0, &(0x7f0000000280)) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x0) 16m14.395571249s ago: executing program 4 (id=110): socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x3, 0x2, 0x2, 0xa}, &(0x7f0000000400)=0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/packet\x00') sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a00000005000100070000000500040053000900020073797a31f20000686173683a6e65742c706f72742c6e65740000000000000000be7b87b4a9d917a200c2052f5d22de2c9dc1bcb0c720f0c5367402afcf7f3bec7919ca2b62de4ed190ca80eef3713b7682336223ff48761e7f06ef4f3581b2d9b8db7e51958afcd66864791777a820f9fc021034d037f15d4328430940dbf74327"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) 16m9.622621822s ago: executing program 1 (id=115): socket$packet(0x11, 0xa, 0x300) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) 16m5.886303187s ago: executing program 1 (id=120): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x5ecfb203) ioprio_set$pid(0x3, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="74680000000000000000000000aed305000000000000a363fb13ff56cea8c8"], 0x48}}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x100, 0x3ff, 0x1, 0xfffffffe, 0x4, 0x1000, 0xfffffffd, 0x6, 0x4, 0xa, 0x0, 0x6, 0x40000005, 0xfe, 0x9, 0xffffffff, 0x6, 0x80010009, 0xfe9, 0x401, 0xa, 0x6, 0x8004, 0x9, 0x44, 0x4, 0x80, 0x0, 0x81, 0x7, 0x1]}) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) socket$netlink(0x10, 0x3, 0x0) 15m59.086770728s ago: executing program 32 (id=110): socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x3, 0x2, 0x2, 0xa}, &(0x7f0000000400)=0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/packet\x00') sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a00000005000100070000000500040053000900020073797a31f20000686173683a6e65742c706f72742c6e65740000000000000000be7b87b4a9d917a200c2052f5d22de2c9dc1bcb0c720f0c5367402afcf7f3bec7919ca2b62de4ed190ca80eef3713b7682336223ff48761e7f06ef4f3581b2d9b8db7e51958afcd66864791777a820f9fc021034d037f15d4328430940dbf74327"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) 15m49.750988834s ago: executing program 33 (id=120): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x5ecfb203) ioprio_set$pid(0x3, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="74680000000000000000000000aed305000000000000a363fb13ff56cea8c8"], 0x48}}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x100, 0x3ff, 0x1, 0xfffffffe, 0x4, 0x1000, 0xfffffffd, 0x6, 0x4, 0xa, 0x0, 0x6, 0x40000005, 0xfe, 0x9, 0xffffffff, 0x6, 0x80010009, 0xfe9, 0x401, 0xa, 0x6, 0x8004, 0x9, 0x44, 0x4, 0x80, 0x0, 0x81, 0x7, 0x1]}) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) socket$netlink(0x10, 0x3, 0x0) 15m9.622037362s ago: executing program 2 (id=175): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x2, 0x0, &(0x7f0000000280)) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) 15m5.079326647s ago: executing program 2 (id=179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000979000/0x1000)=nil}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x7, 0x208080) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f00000001c0)={0x401, 0x2, @vsb={0x9}}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) poll(&(0x7f0000000540)=[{r1, 0x2020}], 0x1, 0xb8) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fedbdf2510000000050010006700000008000100", @ANYRES32=0x0, @ANYBLOB="8daef0c392dc352c3447afab603af6c3599c962ed097d6149393cdd2b7a5e65400000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 15m0.226684719s ago: executing program 2 (id=186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x42c25889}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) 14m59.475759186s ago: executing program 2 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) 14m55.233122616s ago: executing program 2 (id=190): bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) process_mrelease(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200000a0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) 14m49.72795193s ago: executing program 2 (id=196): r0 = socket$kcm(0x10, 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x2800, 0x0) splice(r2, &(0x7f0000000040)=0x7fffffffffffffff, r1, 0x0, 0x9, 0x1) sendmsg$kcm(r0, 0x0, 0x10040) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c015) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_usb_connect(0x2, 0x56, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r4, &(0x7f00000012c0)="a528", 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r5 = dup2(r3, r3) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 14m34.003356964s ago: executing program 34 (id=196): r0 = socket$kcm(0x10, 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x2800, 0x0) splice(r2, &(0x7f0000000040)=0x7fffffffffffffff, r1, 0x0, 0x9, 0x1) sendmsg$kcm(r0, 0x0, 0x10040) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c015) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_usb_connect(0x2, 0x56, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r4, &(0x7f00000012c0)="a528", 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r5 = dup2(r3, r3) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 10m11.675995031s ago: executing program 3 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) recvmmsg(r4, &(0x7f0000001600)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001300)=""/166, 0xa6}, 0x2}, {{&(0x7f00000013c0)=@phonet, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/248, 0xf8}], 0x1, &(0x7f0000001580)=""/80, 0x50}, 0x5}], 0x2, 0x103, &(0x7f0000001680)={0x77359400}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) socket$phonet_pipe(0x23, 0x5, 0x2) 10m9.848618094s ago: executing program 3 (id=407): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000200)=0x188, 0x4) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$TIOCSETD(r1, 0x5423, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000021c0)=@newtaction={0x14, 0x76, 0x1, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x1}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0xe) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)={'bond_slave_0\x00', 0x5}) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 10m5.426210074s ago: executing program 3 (id=410): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e) 10m1.967890668s ago: executing program 3 (id=411): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 10m1.466538487s ago: executing program 3 (id=412): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000200)=0x188, 0x4) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) 9m59.900578295s ago: executing program 3 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) recvmmsg(r3, &(0x7f0000001600)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001300)=""/166, 0xa6}, 0x2}, {{&(0x7f00000013c0)=@phonet, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/248, 0xf8}], 0x1, &(0x7f0000001580)=""/80, 0x50}, 0x5}], 0x2, 0x103, &(0x7f0000001680)={0x77359400}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) socket$phonet_pipe(0x23, 0x5, 0x2) 9m44.505120266s ago: executing program 35 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) recvmmsg(r3, &(0x7f0000001600)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001300)=""/166, 0xa6}, 0x2}, {{&(0x7f00000013c0)=@phonet, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/248, 0xf8}], 0x1, &(0x7f0000001580)=""/80, 0x50}, 0x5}], 0x2, 0x103, &(0x7f0000001680)={0x77359400}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) socket$phonet_pipe(0x23, 0x5, 0x2) 9.481730356s ago: executing program 0 (id=705): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/50, 0x32) getdents64(r1, 0xfffffffffffffffe, 0x29) 8.890202301s ago: executing program 0 (id=706): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r0, &(0x7f00000000c0), 0x0, 0x800040, 0x2000000, 0xf) 7.789470481s ago: executing program 0 (id=707): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000010c0)={[{@lazytime}, {@filestreams}, {@logbufs={'logbufs', 0x3d, 0x5}}, {@nogrpid}]}, 0x5, 0xb95a, &(0x7f000000c240)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000001040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) 4.209973062s ago: executing program 0 (id=708): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) fallocate(r0, 0x0, 0x5, 0x8ffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 980.415944ms ago: executing program 0 (id=709): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@umask={'umask', 0x3d, 0x5}}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@errors_remount}, {@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@allow_utime={'allow_utime', 0x3d, 0xce2f}}]}, 0x1, 0x1528, &(0x7f00000021c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@discard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 0s ago: executing program 0 (id=710): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f000001fb40)="$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") unlink(&(0x7f0000000280)='./file1\x00') mount(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x2390024, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51, 0x0, 0x0, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@mblk_io_submit}]}, 0x1, 0x241, &(0x7f0000001400)="$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") epoll_create(0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f00000001c0), 0x0, 0x10100, 0x79) r1 = open(0x0, 0x4827e, 0x20) fallocate(r1, 0x0, 0x0, 0x8800002) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') preadv(r2, &(0x7f0000002500), 0x0, 0x1, 0x33) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000480, &(0x7f0000000280)={[{@oldalloc}, {@i_version}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@usrjquota}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x576, &(0x7f0000005ac0)="$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") pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="325bd3b599ac", 0x6, 0x8020bff) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)) kernel console output (not intermixed with test programs): ding interface: batadv_slave_1 [ 1095.254830][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.369070][ T9983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.053464][ T9983] hsr_slave_0: entered promiscuous mode [ 1096.103122][ T9983] hsr_slave_1: entered promiscuous mode [ 1096.139262][ T9983] debugfs: 'hsr0' already exists in 'hsr' [ 1096.145463][ T9983] Cannot create hsr debugfs directory [ 1096.837848][ T7746] Bluetooth: hci4: command tx timeout [ 1096.878970][ T5699] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.935645][ T7746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1096.954024][ T7746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1096.964218][ T7746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1096.991252][ T7746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1097.006690][ T7746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1097.359080][ T5699] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.536880][T10027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.582733][T10027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.616553][T10027] bridge_slave_0: entered allmulticast mode [ 1097.660349][T10027] bridge_slave_0: entered promiscuous mode [ 1097.901268][T10027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.918959][T10027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.936250][T10027] bridge_slave_1: entered allmulticast mode [ 1097.953465][T10027] bridge_slave_1: entered promiscuous mode [ 1097.993932][ T5699] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.644172][ T5699] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.807999][T10027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.915553][ T6264] Bluetooth: hci4: command tx timeout [ 1098.979642][T10027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.075601][ T6264] Bluetooth: hci2: command tx timeout [ 1099.684746][T10027] team0: Port device team_slave_0 added [ 1099.731802][T10027] team0: Port device team_slave_1 added [ 1100.351568][T10027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.391140][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.471258][T10027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.625239][ T5699] bridge_slave_1: left allmulticast mode [ 1100.650126][ T5699] bridge_slave_1: left promiscuous mode [ 1100.689982][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.740379][ T5699] bridge_slave_0: left allmulticast mode [ 1100.751488][ T5699] bridge_slave_0: left promiscuous mode [ 1100.780179][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.995653][ T6264] Bluetooth: hci4: command tx timeout [ 1101.083691][T10152] loop0: detected capacity change from 0 to 32768 [ 1101.158620][ T6264] Bluetooth: hci2: command tx timeout [ 1101.249891][T10152] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1101.706335][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.756874][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.789630][ T5699] bond0 (unregistering): Released all slaves [ 1101.829191][T10027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.836787][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.910651][T10027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.964925][ T5574] ocfs2: Unmounting device (7,0) on (node local) [ 1102.562971][ T5699] hsr_slave_0: left promiscuous mode [ 1102.589077][ T5699] hsr_slave_1: left promiscuous mode [ 1102.614821][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.645427][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.658101][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.665940][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.721260][ T5699] veth1_macvtap: left promiscuous mode [ 1102.736075][ T5699] veth0_macvtap: left promiscuous mode [ 1102.755549][ T5699] veth1_vlan: left promiscuous mode [ 1102.761249][ T5699] veth0_vlan: left promiscuous mode [ 1103.075841][ T6264] Bluetooth: hci4: command tx timeout [ 1103.235711][ T6264] Bluetooth: hci2: command tx timeout [ 1103.905615][ T5699] team0 (unregistering): Port device team_slave_1 removed [ 1103.973754][ T5699] team0 (unregistering): Port device team_slave_0 removed [ 1104.707062][T10027] hsr_slave_0: entered promiscuous mode [ 1104.720440][T10027] hsr_slave_1: entered promiscuous mode [ 1104.730247][T10027] debugfs: 'hsr0' already exists in 'hsr' [ 1104.742800][T10027] Cannot create hsr debugfs directory [ 1104.843770][T10186] loop0: detected capacity change from 0 to 40427 [ 1104.866152][T10186] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 1104.885521][T10186] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1105.317277][ T6264] Bluetooth: hci2: command tx timeout [ 1105.610612][ T9983] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1105.688614][ T9983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1105.710150][ T9983] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1105.762633][ T9983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1105.933244][ T5699] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.970016][ T9983] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1106.029988][ T9983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1106.082353][T10186] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1106.123037][T10186] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1106.149029][T10186] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1106.219394][ T9983] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1106.234396][ T29] audit: type=1800 audit(1780151233.821:22): pid=10186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.609" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1106.334588][ T5574] syz-executor: attempt to access beyond end of device [ 1106.334588][ T5574] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1106.348440][ T9983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1106.369831][ T5574] CPU: 1 UID: 0 PID: 5574 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 1106.369988][ T5574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1106.370087][ T5574] Call Trace: [ 1106.370138][ T5574] [ 1106.370190][ T5574] __dump_stack+0x26/0x30 [ 1106.370397][ T5574] dump_stack_lvl+0x14c/0x1c0 [ 1106.370570][ T5574] dump_stack+0x1e/0x25 [ 1106.370720][ T5574] f2fs_stop_checkpoint+0xac3/0xc70 [ 1106.370927][ T5574] f2fs_write_end_io+0x1207/0x2200 [ 1106.371167][ T5574] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1106.371334][ T5574] bio_endio+0xfcc/0x1120 [ 1106.371563][ T5574] submit_bio_noacct+0x533/0x2920 [ 1106.371825][ T5574] submit_bio+0x57a/0x620 [ 1106.372031][ T5574] f2fs_submit_write_bio+0x115/0x310 [ 1106.372267][ T5574] __submit_merged_bio+0x16b/0x700 [ 1106.372471][ T5574] ? kmsan_get_metadata+0xf1/0x160 [ 1106.372714][ T5574] __submit_merged_write_cond+0x4ba/0xae0 [ 1106.372957][ T5574] f2fs_write_data_pages+0x4f4d/0x5c60 [ 1106.373251][ T5574] ? seccomp_attach_filter+0x200/0x18a0 [ 1106.373428][ T5574] ? kmsan_get_metadata+0xf1/0x160 [ 1106.373629][ T5574] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1106.373841][ T5574] ? folios_put_refs+0x61/0xb10 [ 1106.374056][ T5574] ? filter_irq_stacks+0x49/0x190 [ 1106.374239][ T5574] ? kmsan_get_metadata+0xf1/0x160 [ 1106.374429][ T5574] ? kmsan_get_metadata+0xf1/0x160 [ 1106.374626][ T5574] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1106.374847][ T5574] ? kmsan_get_metadata+0xf1/0x160 [ 1106.375044][ T5574] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1106.375256][ T5574] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1106.375423][ T5574] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1106.375587][ T5574] do_writepages+0x3f2/0x860 [ 1106.375737][ T5574] ? _raw_spin_unlock+0x30/0x50 [ 1106.375976][ T5574] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 1106.376231][ T5574] filemap_fdatawrite+0x207/0x260 [ 1106.376483][ T5574] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 1106.376699][ T5574] f2fs_write_checkpoint+0x10e1/0x3c50 [ 1106.376978][ T5574] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1106.377228][ T5574] kill_f2fs_super+0x320/0x990 [ 1106.377443][ T5574] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1106.377618][ T5574] deactivate_locked_super+0xcb/0x3c0 [ 1106.377832][ T5574] deactivate_super+0x12f/0x140 [ 1106.378004][ T5574] cleanup_mnt+0x7eb/0x870 [ 1106.378204][ T5574] ? __pfx___cleanup_mnt+0x10/0x10 [ 1106.378371][ T5574] __cleanup_mnt+0x22/0x30 [ 1106.378537][ T5574] task_work_run+0x208/0x2b0 [ 1106.378716][ T5574] exit_to_user_mode_loop+0x505/0x2420 [ 1106.378902][ T5574] ? user_path_at+0x1fc/0x330 [ 1106.379100][ T5574] ? __x64_sys_umount+0x1dc/0x250 [ 1106.379317][ T5574] do_syscall_64+0x261/0x3c0 [ 1106.379533][ T5574] ? clear_bhb_loop+0x50/0xa0 [ 1106.379694][ T5574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.379865][ T5574] RIP: 0033:0x7f0b1539e097 [ 1106.379995][ T5574] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1106.380131][ T5574] RSP: 002b:00007ffe49699788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1106.380275][ T5574] RAX: 0000000000000000 RBX: 00007f0b154321ca RCX: 00007f0b1539e097 [ 1106.380372][ T5574] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe49699840 [ 1106.380459][ T5574] RBP: 00007ffe49699840 R08: 00007ffe4969a840 R09: 00000000ffffffff [ 1106.380559][ T5574] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4969a8d0 [ 1106.380659][ T5574] R13: 00007f0b154321ca R14: 000000000010e12e R15: 00007ffe4969a910 [ 1106.380797][ T5574] [ 1106.791094][ T5699] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.811943][ T5574] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1107.301385][ T5699] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.797932][ T5699] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.813215][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.824417][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.834293][T10121] bridge_slave_0: entered allmulticast mode [ 1108.849387][T10121] bridge_slave_0: entered promiscuous mode [ 1108.938557][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.958129][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.968797][T10121] bridge_slave_1: entered allmulticast mode [ 1108.991731][T10121] bridge_slave_1: entered promiscuous mode [ 1109.222041][ T5699] bridge_slave_1: left allmulticast mode [ 1109.243632][ T5699] bridge_slave_1: left promiscuous mode [ 1109.252317][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.280417][ T5699] bridge_slave_0: left allmulticast mode [ 1109.297230][ T5699] bridge_slave_0: left promiscuous mode [ 1109.314523][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.091697][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.121545][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.151331][ T5699] bond0 (unregistering): Released all slaves [ 1110.400862][T10121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.618122][ T5699] hsr_slave_0: left promiscuous mode [ 1110.640589][ T5699] hsr_slave_1: left promiscuous mode [ 1110.665941][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.689028][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.717283][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.738558][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.780027][ T5699] veth1_macvtap: left promiscuous mode [ 1110.786119][ T5699] veth0_macvtap: left promiscuous mode [ 1110.792052][ T5699] veth1_vlan: left promiscuous mode [ 1110.820782][ T5699] veth0_vlan: left promiscuous mode [ 1111.341163][T10218] loop0: detected capacity change from 0 to 32768 [ 1111.411628][T10218] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1111.690937][T10218] XFS (loop0): Ending clean mount [ 1111.763389][ T29] audit: type=1800 audit(1780151239.341:23): pid=10218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.610" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 1111.992162][ T5574] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1112.379571][ T5699] team0 (unregistering): Port device team_slave_1 removed [ 1112.479007][ T5699] team0 (unregistering): Port device team_slave_0 removed [ 1113.086072][T10121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.613031][T10137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.631644][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.642152][T10137] bridge_slave_0: entered allmulticast mode [ 1113.665893][T10137] bridge_slave_0: entered promiscuous mode [ 1113.711574][T10137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.719751][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.752691][T10137] bridge_slave_1: entered allmulticast mode [ 1113.777816][T10137] bridge_slave_1: entered promiscuous mode [ 1113.803606][T10121] team0: Port device team_slave_0 added [ 1113.848865][T10256] loop0: detected capacity change from 0 to 256 [ 1113.959436][T10256] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 1114.064863][T10121] team0: Port device team_slave_1 added [ 1114.465307][T10137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.509808][T10137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.626368][T10121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.650802][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.686037][T10121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.821016][T10027] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1114.881169][T10027] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1114.909605][T10121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.941637][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.004628][T10121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.101786][T10137] team0: Port device team_slave_0 added [ 1115.125857][T10137] team0: Port device team_slave_1 added [ 1115.137587][T10027] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1115.203739][T10027] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1115.228468][T10027] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1115.265836][T10027] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1115.386945][T10027] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1115.447944][T10027] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.689361][T10137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.696930][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.746895][T10137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.882556][T10137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.905922][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.940053][T10137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.034265][T10121] hsr_slave_0: entered promiscuous mode [ 1116.066414][T10121] hsr_slave_1: entered promiscuous mode [ 1116.076500][T10121] debugfs: 'hsr0' already exists in 'hsr' [ 1116.095193][T10121] Cannot create hsr debugfs directory [ 1116.511249][T10137] hsr_slave_0: entered promiscuous mode [ 1116.524752][T10137] hsr_slave_1: entered promiscuous mode [ 1116.540541][T10137] debugfs: 'hsr0' already exists in 'hsr' [ 1116.547531][T10137] Cannot create hsr debugfs directory [ 1117.330189][T10276] loop0: detected capacity change from 0 to 256 [ 1117.398330][ T9983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.570065][T10276] FAT-fs (loop0): Directory bread(block 64) failed [ 1117.585569][T10276] FAT-fs (loop0): Directory bread(block 65) failed [ 1117.597728][T10276] FAT-fs (loop0): Directory bread(block 66) failed [ 1117.619757][T10276] FAT-fs (loop0): Directory bread(block 67) failed [ 1117.655819][T10276] FAT-fs (loop0): Directory bread(block 68) failed [ 1117.672265][T10276] FAT-fs (loop0): Directory bread(block 69) failed [ 1117.702559][T10276] FAT-fs (loop0): Directory bread(block 70) failed [ 1117.723081][T10276] FAT-fs (loop0): Directory bread(block 71) failed [ 1117.745677][T10276] FAT-fs (loop0): Directory bread(block 72) failed [ 1117.772025][T10276] FAT-fs (loop0): Directory bread(block 73) failed [ 1118.396698][T10285] loop0: detected capacity change from 0 to 16 [ 1118.855876][ T9983] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.119344][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.127112][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.263876][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.271769][ T5700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.681023][T10291] loop0: detected capacity change from 0 to 512 [ 1119.726204][T10291] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1119.812593][T10291] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.615: inode has both inline data and extents flags [ 1119.826651][T10291] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1119.834108][T10291] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.615: couldn't read orphan inode 15 (err -117) [ 1119.843886][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1119.843992][ C1] EXT4-fs (loop0): initial error at time 1780151247: ext4_orphan_get:1397: inode 15 [ 1119.844185][ C1] EXT4-fs (loop0): last error at time 1780151247: ext4_orphan_get:1397: inode 15 [ 1119.885905][T10291] loop0: lost filesystem error report for type 5 error -117 [ 1119.913070][T10291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1120.395665][T10027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.449383][T10291] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4 [ 1120.657851][ T5574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.765965][T10121] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1120.860109][T10121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1120.914232][T10121] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1120.982545][T10121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1121.021724][T10121] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1121.083634][T10302] loop0: detected capacity change from 0 to 1024 [ 1121.097686][T10121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1121.180139][T10027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.215878][T10121] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1121.298010][T10121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1121.799458][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.807248][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.998922][T10307] loop0: detected capacity change from 0 to 2048 [ 1122.066721][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.074339][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.106755][T10307] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1122.134483][T10307] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1122.147203][T10137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1122.199234][T10137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1122.232242][T10137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1122.278651][T10137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1122.327518][T10137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1122.415210][T10137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1122.452499][T10137] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1122.556220][T10137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1123.249686][T10316] loop0: detected capacity change from 0 to 2048 [ 1124.596169][T10121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.996673][T10121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.133897][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.141566][ T5700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.258364][T10137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.361566][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.369417][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.660187][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.670708][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.824449][T10137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.094249][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.101999][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.227154][ T9983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.338731][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.346546][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.526332][T10027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.011882][ T9983] veth0_vlan: entered promiscuous mode [ 1130.190043][ T9983] veth1_vlan: entered promiscuous mode [ 1130.772922][ T9983] veth0_macvtap: entered promiscuous mode [ 1130.793691][T10380] loop0: detected capacity change from 0 to 512 [ 1130.906185][ T9983] veth1_macvtap: entered promiscuous mode [ 1131.264647][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.408969][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.668402][T10388] loop0: detected capacity change from 0 to 1024 [ 1131.690450][T10388] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 1131.701740][T10388] hfsplus: failed to load root directory [ 1131.734715][T10121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.790062][ T5700] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.830428][ T5700] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.858713][T10388] loop0: detected capacity change from 0 to 256 [ 1131.889765][ T5700] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.928456][T10388] exfat: Bad value for 'uid' [ 1131.935863][ T5700] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.947673][T10388] exfat: Bad value for 'uid' [ 1132.441935][T10388] loop0: detected capacity change from 0 to 2048 [ 1132.582939][T10388] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1132.627464][T10027] veth0_vlan: entered promiscuous mode [ 1132.667609][T10388] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1132.754517][T10388] UDF-fs: Scanning with blocksize 512 failed [ 1132.816159][T10027] veth1_vlan: entered promiscuous mode [ 1132.903931][T10388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1133.118131][T10137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.681858][T10027] veth0_macvtap: entered promiscuous mode [ 1133.892948][T10027] veth1_macvtap: entered promiscuous mode [ 1134.269621][T10027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.510906][T10027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.751137][ T5869] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.798112][ T5869] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.866017][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.891407][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.810968][T10121] veth0_vlan: entered promiscuous mode [ 1135.983318][T10421] loop0: detected capacity change from 0 to 1024 [ 1136.094404][T10121] veth1_vlan: entered promiscuous mode [ 1137.131160][ T7746] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1137.131332][T10121] veth0_macvtap: entered promiscuous mode [ 1137.144433][ T7746] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1137.174125][T10121] veth1_macvtap: entered promiscuous mode [ 1137.193706][ T7746] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1137.210230][ T7746] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1137.222315][ T7746] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1137.691866][T10137] veth0_vlan: entered promiscuous mode [ 1138.039549][T10121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.194410][T10137] veth1_vlan: entered promiscuous mode [ 1138.492903][T10121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.747562][ T5700] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.893657][ T56] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.948822][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.018918][ T5700] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.062697][ T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.097899][ T78] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.325498][ T6264] Bluetooth: hci5: command tx timeout [ 1139.331762][ T5700] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.790432][ T5700] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.139041][T10137] veth0_macvtap: entered promiscuous mode [ 1140.398500][T10137] veth1_macvtap: entered promiscuous mode [ 1140.913689][ T5700] bridge_slave_1: left allmulticast mode [ 1140.943188][ T5700] bridge_slave_1: left promiscuous mode [ 1140.984788][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.060036][ T5700] bridge_slave_0: left allmulticast mode [ 1141.097481][ T5700] bridge_slave_0: left promiscuous mode [ 1141.130214][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.397366][ T6264] Bluetooth: hci5: command tx timeout [ 1141.738653][ T7746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1141.751997][ T7746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1141.764616][ T7746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1141.791645][ T7746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1141.812672][ T7746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1142.384836][ T5700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.481160][ T5700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.563800][ T5700] bond0 (unregistering): Released all slaves [ 1143.035200][T10137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.238351][T10470] loop0: detected capacity change from 0 to 4096 [ 1143.469005][ T5700] hsr_slave_0: left promiscuous mode [ 1143.476177][ T6264] Bluetooth: hci5: command tx timeout [ 1143.510113][ T5700] hsr_slave_1: left promiscuous mode [ 1143.520439][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.530949][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.570374][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1143.578812][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1143.682047][ T5700] veth1_macvtap: left promiscuous mode [ 1143.721719][ T5700] veth0_macvtap: left promiscuous mode [ 1143.748734][ T5700] veth1_vlan: left promiscuous mode [ 1143.771025][ T5700] veth0_vlan: left promiscuous mode [ 1143.878328][ T6264] Bluetooth: hci1: command tx timeout [ 1144.265770][ T5873] ntfs3(loop0): ino=5, mi_enum_attr [ 1144.993028][ T5700] team0 (unregistering): Port device team_slave_1 removed [ 1145.043167][ T5700] team0 (unregistering): Port device team_slave_0 removed [ 1145.555748][ T6264] Bluetooth: hci5: command tx timeout [ 1145.871651][T10137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.955392][ T6264] Bluetooth: hci1: command tx timeout [ 1146.274293][ T78] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.320407][ T78] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.344759][ T78] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.389988][T10486] loop0: detected capacity change from 0 to 32768 [ 1146.426616][ T78] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.971099][ T5700] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.465780][ T5700] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.532082][T10502] loop0: detected capacity change from 0 to 256 [ 1147.588599][T10502] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1147.881568][ T5700] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.037385][ T6264] Bluetooth: hci1: command tx timeout [ 1148.363090][T10509] loop0: detected capacity change from 0 to 256 [ 1148.387488][ T5700] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.485565][T10509] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1149.516324][T10517] loop0: detected capacity change from 0 to 256 [ 1149.694279][T10517] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 1149.914912][ T29] audit: type=1800 audit(1780151277.501:24): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.629" name="bus" dev="loop0" ino=1048649 res=0 errno=0 [ 1150.066380][ T5700] bridge_slave_1: left allmulticast mode [ 1150.106113][ T5700] bridge_slave_1: left promiscuous mode [ 1150.115333][ T6264] Bluetooth: hci1: command tx timeout [ 1150.159164][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.184816][ T5700] bridge_slave_0: left allmulticast mode [ 1150.196758][ T5700] bridge_slave_0: left promiscuous mode [ 1150.203445][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.002538][T10526] loop0: detected capacity change from 0 to 4096 [ 1151.026008][T10526] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1151.147117][T10526] ntfs3(loop0): ino=19, mi_enum_attr [ 1151.153047][T10526] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1151.181084][T10526] ntfs3(loop0): ino=1a, mi_enum_attr [ 1151.191239][T10526] ntfs3(loop0): ino=1a, mi_enum_attr [ 1151.204204][T10526] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 1151.266176][ T5700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.318766][ T5700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1151.355900][ T5700] bond0 (unregistering): Released all slaves [ 1151.865724][ T5700] hsr_slave_0: left promiscuous mode [ 1151.891003][ T5700] hsr_slave_1: left promiscuous mode [ 1151.900007][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.916365][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.931752][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.940383][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.016016][ T5700] veth1_macvtap: left promiscuous mode [ 1152.037294][ T5700] veth0_macvtap: left promiscuous mode [ 1152.065782][ T5700] veth1_vlan: left promiscuous mode [ 1152.085531][ T5700] veth0_vlan: left promiscuous mode [ 1152.366185][T10532] loop0: detected capacity change from 0 to 4096 [ 1152.393761][T10532] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1152.531725][T10532] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1152.673855][T10532] ntfs3(loop0): Failed to load $Extend (-2). [ 1152.696035][T10532] ntfs3(loop0): Failed to initialize $Extend. [ 1152.843540][T10532] ntfs3(loop0): ino=1d, mi_enum_attr [ 1153.489705][ T5700] team0 (unregistering): Port device team_slave_1 removed [ 1153.605218][ T5700] team0 (unregistering): Port device team_slave_0 removed [ 1154.348047][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.393585][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.426876][T10427] bridge_slave_0: entered allmulticast mode [ 1154.473592][T10427] bridge_slave_0: entered promiscuous mode [ 1154.548332][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.589380][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.607492][T10427] bridge_slave_1: entered allmulticast mode [ 1154.633476][T10427] bridge_slave_1: entered promiscuous mode [ 1155.049389][T10427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.141561][T10427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.649143][T10427] team0: Port device team_slave_0 added [ 1155.753122][T10427] team0: Port device team_slave_1 added [ 1155.844165][T10534] loop0: detected capacity change from 0 to 32768 [ 1155.907818][T10534] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1156.097924][T10427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.130380][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.229050][T10427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.316235][T10534] XFS (loop0): Ending clean mount [ 1156.337235][T10427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.382235][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.411627][ T7746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1156.427418][T10427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.440504][ T7746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1156.462174][ T7746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1156.485555][ T7746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1156.520987][ T7746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1156.737247][ T5574] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1157.350558][T10427] hsr_slave_0: entered promiscuous mode [ 1157.404091][T10427] hsr_slave_1: entered promiscuous mode [ 1157.434508][T10427] debugfs: 'hsr0' already exists in 'hsr' [ 1157.452939][T10427] Cannot create hsr debugfs directory [ 1157.502264][T10465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.538924][T10465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.563669][T10465] bridge_slave_0: entered allmulticast mode [ 1157.604514][T10465] bridge_slave_0: entered promiscuous mode [ 1158.022447][T10465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.040204][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.082573][T10465] bridge_slave_1: entered allmulticast mode [ 1158.103087][T10465] bridge_slave_1: entered promiscuous mode [ 1158.182157][T10561] loop0: detected capacity change from 0 to 1024 [ 1158.308746][T10561] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1158.373487][ T5699] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.408601][T10561] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.634: lblock 2 mapped to illegal pblock 2 (length 1) [ 1158.549064][T10561] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1158.550751][T10561] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1158.560374][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1158.560475][ C0] EXT4-fs (loop0): initial error at time 1780151286: ext4_map_blocks:791: inode 3: block 2 [ 1158.560684][ C0] EXT4-fs (loop0): last error at time 1780151286: ext4_map_blocks:791: inode 3: block 2 [ 1158.597033][ T7746] Bluetooth: hci3: command tx timeout [ 1158.644361][ T7746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1158.654626][T10561] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.634: lblock 0 mapped to illegal pblock 48 (length 1) [ 1158.656309][ T7746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1158.687901][ T7746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1158.697789][T10561] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1158.698908][T10561] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1158.726422][ T7746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1158.735652][T10561] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.634: Failed to acquire dquot type 0 [ 1158.747512][T10561] loop0: lost filesystem error report for type 5 error -117 [ 1158.758123][ T7746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1158.817857][T10561] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1158.827871][T10561] loop0: lost filesystem error report for type 5 error -117 [ 1158.829967][T10561] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.634: mark_inode_dirty error [ 1158.850536][T10561] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1158.860609][T10561] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1158.882153][T10561] EXT4-fs (loop0): 1 orphan inode deleted [ 1158.890814][T10561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1158.905746][ T5867] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1158.997068][T10561] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.634: Invalid inode table block 1 in block_group 0 [ 1158.997216][ T5867] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1159.095332][ T5867] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 0 [ 1159.121890][ T5699] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.253967][T10465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.346101][ T5574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.379520][T10465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.425416][ T5574] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1159.496847][ T5574] loop0: lost filesystem error report for type 5 error -117 [ 1159.499433][ T5574] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1159.578385][ T5574] loop0: lost filesystem error report for type 5 error -117 [ 1159.584655][ T5574] EXT4-fs error (device loop0): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 1159.653972][ T5574] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1159.713407][ T5699] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.901902][T10572] loop0: detected capacity change from 0 to 256 [ 1159.961884][T10572] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1160.101150][ T5699] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.510328][T10465] team0: Port device team_slave_0 added [ 1160.675890][ T6264] Bluetooth: hci3: command tx timeout [ 1160.739242][T10465] team0: Port device team_slave_1 added [ 1160.839014][ T6264] Bluetooth: hci4: command tx timeout [ 1160.981006][T10465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.015894][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.086294][T10465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.149426][T10465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.199215][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.278158][T10465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.938387][T10465] hsr_slave_0: entered promiscuous mode [ 1161.962652][T10465] hsr_slave_1: entered promiscuous mode [ 1161.992955][T10465] debugfs: 'hsr0' already exists in 'hsr' [ 1162.025503][T10465] Cannot create hsr debugfs directory [ 1162.376092][T10578] loop0: detected capacity change from 0 to 32768 [ 1162.432605][T10578] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1162.523963][ T5699] bridge_slave_1: left allmulticast mode [ 1162.542866][ T5699] bridge_slave_1: left promiscuous mode [ 1162.553913][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.573203][ T5699] bridge_slave_0: left allmulticast mode [ 1162.587373][ T5699] bridge_slave_0: left promiscuous mode [ 1162.610787][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.756428][ T6264] Bluetooth: hci3: command tx timeout [ 1162.925730][ T7746] Bluetooth: hci4: command tx timeout [ 1163.257384][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.290712][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.311295][ T5699] bond0 (unregistering): Released all slaves [ 1164.074085][ T5699] hsr_slave_0: left promiscuous mode [ 1164.083347][ T5699] hsr_slave_1: left promiscuous mode [ 1164.093337][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.104434][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.131915][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.140722][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.173013][ T5699] veth1_macvtap: left promiscuous mode [ 1164.180188][ T5699] veth0_macvtap: left promiscuous mode [ 1164.187472][ T5699] veth1_vlan: left promiscuous mode [ 1164.193124][ T5699] veth0_vlan: left promiscuous mode [ 1164.836868][ T7746] Bluetooth: hci3: command tx timeout [ 1164.964857][ T5574] ocfs2: Unmounting device (7,0) on (node local) [ 1165.005293][ T7746] Bluetooth: hci4: command tx timeout [ 1165.239704][ T5699] team0 (unregistering): Port device team_slave_1 removed [ 1165.320116][ T5699] team0 (unregistering): Port device team_slave_0 removed [ 1166.671415][ T5699] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.739360][T10427] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1166.794774][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1166.828880][T10427] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1166.887846][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1166.971198][T10427] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1167.018242][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1167.042171][T10427] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1167.075286][ T7746] Bluetooth: hci4: command tx timeout [ 1167.081375][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1167.166874][ T5699] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.437019][ T5699] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.642444][ T5699] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.756868][T10588] loop0: detected capacity change from 0 to 32768 [ 1167.823809][T10588] (syz.0.637,10588,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1167.848497][T10588] (syz.0.637,10588,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1168.004346][T10588] JBD2: Ignoring recovery information on journal [ 1168.311885][T10588] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1168.885944][ T5574] ocfs2: Unmounting device (7,0) on (node local) [ 1169.126708][ T5699] bridge_slave_1: left allmulticast mode [ 1169.153062][ T5699] bridge_slave_1: left promiscuous mode [ 1169.171122][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.209513][ T5699] bridge_slave_0: left allmulticast mode [ 1169.227347][ T5699] bridge_slave_0: left promiscuous mode [ 1169.246290][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.419780][T10605] loop0: detected capacity change from 0 to 4096 [ 1169.721252][T10605] Device name not specified. [ 1169.721252][T10605] [ 1170.036009][ T8826] ntfs3(loop0): ino=5, mi_enum_attr [ 1170.103004][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.168330][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.211079][ T5699] bond0 (unregistering): Released all slaves [ 1170.258834][T10607] loop0: detected capacity change from 0 to 128 [ 1170.429741][T10465] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1170.502026][T10465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1170.769959][T10609] loop0: detected capacity change from 0 to 512 [ 1170.777657][T10465] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1170.784633][T10609] EXT4-fs: Ignoring removed oldalloc option [ 1170.801098][T10609] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1170.830284][T10465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1170.871450][T10609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.914279][T10565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.925386][T10565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.933285][T10565] bridge_slave_0: entered allmulticast mode [ 1170.943599][T10565] bridge_slave_0: entered promiscuous mode [ 1170.980277][ T29] audit: type=1800 audit(1780151298.571:25): pid=10609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.640" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1171.021453][ T5699] hsr_slave_0: left promiscuous mode [ 1171.035878][ T5699] hsr_slave_1: left promiscuous mode [ 1171.052437][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.060771][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.089620][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.103073][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.151097][ T5699] veth1_macvtap: left promiscuous mode [ 1171.163560][ T5699] veth0_macvtap: left promiscuous mode [ 1171.170449][ T5699] veth1_vlan: left promiscuous mode [ 1171.176267][ T5699] veth0_vlan: left promiscuous mode [ 1171.222494][ T5574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.702055][T10614] loop0: detected capacity change from 0 to 4096 [ 1171.734370][T10614] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1171.902319][T10614] ntfs3(loop0): ino=1a, mi_enum_attr [ 1171.908645][T10614] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1171.955196][ T29] audit: type=1800 audit(1780151299.541:26): pid=10614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.641" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 1172.552903][ T5699] team0 (unregistering): Port device team_slave_1 removed [ 1172.637454][ T5699] team0 (unregistering): Port device team_slave_0 removed [ 1173.052649][T10551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.074685][T10551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.094403][T10551] bridge_slave_0: entered allmulticast mode [ 1173.119089][T10551] bridge_slave_0: entered promiscuous mode [ 1173.152297][T10465] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1173.209781][T10465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1173.260061][T10565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.268789][T10565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.291335][T10565] bridge_slave_1: entered allmulticast mode [ 1173.309920][T10565] bridge_slave_1: entered promiscuous mode [ 1173.399560][T10551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.416137][T10551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.433017][T10551] bridge_slave_1: entered allmulticast mode [ 1173.444134][T10551] bridge_slave_1: entered promiscuous mode [ 1173.464267][T10465] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1173.492930][T10465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1173.744466][T10565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.778953][T10551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.843420][T10565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.867418][T10551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.043972][T10616] loop0: detected capacity change from 0 to 32768 [ 1174.189096][T10551] team0: Port device team_slave_0 added [ 1174.197413][T10616] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1174.218184][T10551] team0: Port device team_slave_1 added [ 1174.279867][T10565] team0: Port device team_slave_0 added [ 1174.300005][T10565] team0: Port device team_slave_1 added [ 1174.551848][ T5574] ocfs2: Unmounting device (7,0) on (node local) [ 1174.684422][T10565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.691774][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.733010][T10565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.807698][T10551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.814873][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.905281][T10551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.944328][T10565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.955786][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.991072][T10565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.024657][T10551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.045934][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.105394][T10551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.821306][T10551] hsr_slave_0: entered promiscuous mode [ 1175.841656][T10551] hsr_slave_1: entered promiscuous mode [ 1175.853554][T10551] debugfs: 'hsr0' already exists in 'hsr' [ 1175.861826][T10551] Cannot create hsr debugfs directory [ 1175.905485][T10565] hsr_slave_0: entered promiscuous mode [ 1175.917643][T10565] hsr_slave_1: entered promiscuous mode [ 1175.928132][T10565] debugfs: 'hsr0' already exists in 'hsr' [ 1175.934385][T10565] Cannot create hsr debugfs directory [ 1176.338680][T10427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.464339][T10621] loop0: detected capacity change from 0 to 40427 [ 1176.483622][T10621] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 1176.517989][T10621] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1177.423466][T10427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.438382][T10621] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1177.470824][T10621] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1177.486060][T10621] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1177.626309][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.633905][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.744772][ T5574] syz-executor: attempt to access beyond end of device [ 1177.744772][ T5574] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1177.778055][ T5574] CPU: 1 UID: 0 PID: 5574 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 1177.778210][ T5574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1177.778293][ T5574] Call Trace: [ 1177.778347][ T5574] [ 1177.778398][ T5574] __dump_stack+0x26/0x30 [ 1177.778562][ T5574] dump_stack_lvl+0x14c/0x1c0 [ 1177.778735][ T5574] dump_stack+0x1e/0x25 [ 1177.778890][ T5574] f2fs_stop_checkpoint+0xac3/0xc70 [ 1177.779078][ T5574] f2fs_write_end_io+0x1207/0x2200 [ 1177.779310][ T5574] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1177.779480][ T5574] bio_endio+0xfcc/0x1120 [ 1177.779675][ T5574] submit_bio_noacct+0x533/0x2920 [ 1177.779965][ T5574] submit_bio+0x57a/0x620 [ 1177.780164][ T5574] f2fs_submit_write_bio+0x115/0x310 [ 1177.780392][ T5574] __submit_merged_bio+0x16b/0x700 [ 1177.780600][ T5574] ? kmsan_get_metadata+0xf1/0x160 [ 1177.780823][ T5574] __submit_merged_write_cond+0x4ba/0xae0 [ 1177.781071][ T5574] f2fs_write_data_pages+0x4f4d/0x5c60 [ 1177.781346][ T5574] ? kmsan_get_metadata+0xf1/0x160 [ 1177.781565][ T5574] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1177.781788][ T5574] ? finish_task_switch+0x3a8/0xbc0 [ 1177.781973][ T5574] ? __schedule+0x2930/0x8750 [ 1177.782168][ T5574] ? kmsan_get_metadata+0xf1/0x160 [ 1177.782367][ T5574] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1177.782568][ T5574] ? kmsan_get_metadata+0xf1/0x160 [ 1177.782772][ T5574] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1177.782981][ T5574] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1177.783146][ T5574] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1177.783305][ T5574] do_writepages+0x3f2/0x860 [ 1177.783454][ T5574] ? _raw_spin_unlock+0x30/0x50 [ 1177.783621][ T5574] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 1177.783835][ T5574] filemap_fdatawrite+0x207/0x260 [ 1177.784087][ T5574] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 1177.784303][ T5574] f2fs_write_checkpoint+0x10e1/0x3c50 [ 1177.784637][ T5574] kill_f2fs_super+0x320/0x990 [ 1177.784857][ T5574] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1177.785023][ T5574] deactivate_locked_super+0xcb/0x3c0 [ 1177.785220][ T5574] deactivate_super+0x12f/0x140 [ 1177.785393][ T5574] cleanup_mnt+0x7eb/0x870 [ 1177.785568][ T5574] ? __pfx___cleanup_mnt+0x10/0x10 [ 1177.785735][ T5574] __cleanup_mnt+0x22/0x30 [ 1177.785900][ T5574] task_work_run+0x208/0x2b0 [ 1177.786055][ T5574] exit_to_user_mode_loop+0x505/0x2420 [ 1177.786229][ T5574] ? user_path_at+0x1fc/0x330 [ 1177.786422][ T5574] ? __x64_sys_umount+0x1dc/0x250 [ 1177.786637][ T5574] do_syscall_64+0x261/0x3c0 [ 1177.786850][ T5574] ? clear_bhb_loop+0x50/0xa0 [ 1177.787009][ T5574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.787169][ T5574] RIP: 0033:0x7f0b1539e097 [ 1177.787277][ T5574] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1177.787407][ T5574] RSP: 002b:00007ffe49699788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1177.787548][ T5574] RAX: 0000000000000000 RBX: 00007f0b154321ca RCX: 00007f0b1539e097 [ 1177.787645][ T5574] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe49699840 [ 1177.787731][ T5574] RBP: 00007ffe49699840 R08: 00007ffe4969a840 R09: 00000000ffffffff [ 1177.787840][ T5574] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4969a8d0 [ 1177.787931][ T5574] R13: 00007f0b154321ca R14: 000000000011f7ec R15: 00007ffe4969a910 [ 1177.788072][ T5574] [ 1178.228065][T10427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1178.235970][ T5574] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1178.245772][T10427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1178.349251][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.356933][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.940629][T10465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1179.380100][T10465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.599759][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.607474][ T5700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.841556][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.849247][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.782864][T10565] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1180.829533][T10565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1180.851601][T10565] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1180.929529][T10565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1181.003613][T10565] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1181.057613][T10565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1181.198170][T10565] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1181.249357][T10565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1181.741425][T10551] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1181.832682][T10551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1181.881256][T10551] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1181.988861][T10551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1182.031256][T10551] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1182.135199][T10551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1182.234472][T10551] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1182.349203][T10551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1182.491842][T10427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.055228][T10565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.443751][T10565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.537717][T10551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.667361][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.675108][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.917320][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.925079][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.068981][T10551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.245675][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.253292][ T5700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.676621][ T5706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.684237][ T5706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.086282][T10465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.777115][T10427] veth0_vlan: entered promiscuous mode [ 1187.087310][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.094037][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.107585][T10427] veth1_vlan: entered promiscuous mode [ 1187.618888][T10708] loop0: detected capacity change from 0 to 512 [ 1187.703864][T10708] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1187.821686][T10708] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1188.136832][T10427] veth0_macvtap: entered promiscuous mode [ 1188.156451][ T5574] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1188.359030][T10427] veth1_macvtap: entered promiscuous mode [ 1188.889514][T10427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.090213][T10720] loop0: detected capacity change from 0 to 4096 [ 1189.103997][T10427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.136523][T10720] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1189.417907][T10720] ntfs3(loop0): ino=1a, mi_enum_attr [ 1189.424817][ T8826] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.444389][T10720] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1189.472505][ T5699] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.568323][ T5699] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.633396][ T5700] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.462656][T10465] veth0_vlan: entered promiscuous mode [ 1190.715793][T10465] veth1_vlan: entered promiscuous mode [ 1191.384524][T10465] veth0_macvtap: entered promiscuous mode [ 1191.483803][T10465] veth1_macvtap: entered promiscuous mode [ 1191.919902][T10465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.083606][T10565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.176791][T10465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.376041][ T5873] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.433156][ T5706] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.474765][ T5706] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.564431][ T5706] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.031058][T10551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.398244][T10565] veth0_vlan: entered promiscuous mode [ 1195.578929][T10565] veth1_vlan: entered promiscuous mode [ 1196.509973][T10565] veth0_macvtap: entered promiscuous mode [ 1196.801839][T10565] veth1_macvtap: entered promiscuous mode [ 1196.832143][T10551] veth0_vlan: entered promiscuous mode [ 1197.041529][T10551] veth1_vlan: entered promiscuous mode [ 1197.138121][T10565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.365901][T10565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.573924][ T5706] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.602768][ T5706] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.649914][ T5706] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.684836][ T5706] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.086808][T10551] veth0_macvtap: entered promiscuous mode [ 1198.261401][T10551] veth1_macvtap: entered promiscuous mode [ 1198.716808][T10551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.960985][T10551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.308903][ T5706] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.354645][ T5706] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.450706][ T5699] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.511259][ T5699] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.540233][ T6264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1199.552688][ T6264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1199.565532][ T6264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1199.595188][ T6264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1199.611751][ T6264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1201.043041][ T5868] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.380657][ T5868] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.714725][ T5868] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.723916][ T6264] Bluetooth: hci2: command tx timeout [ 1202.006653][ T5868] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.103683][ T5868] bridge_slave_1: left allmulticast mode [ 1203.150927][ T5868] bridge_slave_1: left promiscuous mode [ 1203.183516][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.292721][ T5868] bridge_slave_0: left allmulticast mode [ 1203.333255][ T5868] bridge_slave_0: left promiscuous mode [ 1203.369156][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.441722][ T7746] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1203.453992][ T7746] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1203.471043][ T7746] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1203.509388][ T7746] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1203.530704][ T7746] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1203.804391][ T6264] Bluetooth: hci2: command tx timeout [ 1204.137245][T10856] loop0: detected capacity change from 0 to 4096 [ 1204.500353][T10856] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1204.704315][T10856] ntfs3(loop0): Failed to load $Extend (-22). [ 1204.721824][T10856] ntfs3(loop0): Failed to initialize $Extend. [ 1204.760289][ T5868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.833976][ T5868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.889169][ T5868] bond0 (unregistering): Released all slaves [ 1205.404453][ T5868] hsr_slave_0: left promiscuous mode [ 1205.434015][ T5868] hsr_slave_1: left promiscuous mode [ 1205.469479][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.522645][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.576729][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.607651][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.635370][ T6264] Bluetooth: hci5: command tx timeout [ 1205.718159][ T5868] veth1_macvtap: left promiscuous mode [ 1205.747352][ T5868] veth0_macvtap: left promiscuous mode [ 1205.765925][ T5868] veth1_vlan: left promiscuous mode [ 1205.819127][ T5868] veth0_vlan: left promiscuous mode [ 1205.877845][ T6264] Bluetooth: hci2: command tx timeout [ 1206.262750][T10876] loop0: detected capacity change from 0 to 512 [ 1206.313432][T10876] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1206.383049][T10876] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.718744][ T5574] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1207.403941][ T5868] team0 (unregistering): Port device team_slave_1 removed [ 1207.423303][T10883] loop0: detected capacity change from 0 to 4096 [ 1207.453238][T10883] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1207.522731][ T5868] team0 (unregistering): Port device team_slave_0 removed [ 1207.696210][T10883] ntfs3(loop0): ino=1a, mi_enum_attr [ 1207.715914][ T6264] Bluetooth: hci5: command tx timeout [ 1207.731438][T10883] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1207.958338][ T6264] Bluetooth: hci2: command tx timeout [ 1209.798756][ T6264] Bluetooth: hci5: command tx timeout [ 1210.012285][ T5869] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.233710][ T5869] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.461459][ T5869] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.790486][ T5869] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.876242][ T6264] Bluetooth: hci5: command tx timeout [ 1212.158386][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.169804][ T5869] bridge_slave_1: left allmulticast mode [ 1212.193488][ T5869] bridge_slave_1: left promiscuous mode [ 1212.203876][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.232427][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.316890][ T5869] bridge_slave_0: left allmulticast mode [ 1212.348930][ T5869] bridge_slave_0: left promiscuous mode [ 1212.378553][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.563800][T10938] loop0: detected capacity change from 0 to 8 [ 1213.573970][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1213.634068][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1213.703354][ T5869] bond0 (unregistering): Released all slaves [ 1214.060908][T10943] loop0: detected capacity change from 0 to 256 [ 1214.181147][ T5869] hsr_slave_0: left promiscuous mode [ 1214.198474][ T5869] hsr_slave_1: left promiscuous mode [ 1214.214623][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.227642][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.284458][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.292753][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.329698][T10943] FAT-fs (loop0): Directory bread(block 64) failed [ 1214.345481][T10943] FAT-fs (loop0): Directory bread(block 65) failed [ 1214.356646][T10943] FAT-fs (loop0): Directory bread(block 66) failed [ 1214.363586][T10943] FAT-fs (loop0): Directory bread(block 67) failed [ 1214.372627][ T5869] veth1_macvtap: left promiscuous mode [ 1214.378968][T10943] FAT-fs (loop0): Directory bread(block 68) failed [ 1214.386842][ T5869] veth0_macvtap: left promiscuous mode [ 1214.406099][ T5869] veth1_vlan: left promiscuous mode [ 1214.411759][T10943] FAT-fs (loop0): Directory bread(block 69) failed [ 1214.420398][ T5869] veth0_vlan: left promiscuous mode [ 1214.426472][T10943] FAT-fs (loop0): Directory bread(block 70) failed [ 1214.435579][T10943] FAT-fs (loop0): Directory bread(block 71) failed [ 1214.442617][T10943] FAT-fs (loop0): Directory bread(block 72) failed [ 1214.483649][T10943] FAT-fs (loop0): Directory bread(block 73) failed [ 1215.221988][T10950] loop0: detected capacity change from 0 to 512 [ 1215.307187][T10950] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1215.371089][T10950] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 1215.435269][T10950] System zones: 1-12 [ 1215.474557][T10950] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1215.529031][T10950] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.659: invalid indirect mapped block 2 (level 2) [ 1215.599342][T10950] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1215.602885][T10950] EXT4-fs (loop0): Remounting filesystem read-only [ 1215.612494][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1215.612599][ C1] EXT4-fs (loop0): initial error at time 1780151343: ext4_free_branches:1023: inode 11 [ 1215.612775][ C1] EXT4-fs (loop0): last error at time 1780151343: ext4_free_branches:1023: inode 11 [ 1215.700513][T10950] EXT4-fs (loop0): 1 truncate cleaned up [ 1215.729410][T10950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1215.854785][T10950] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.659: error -117 reading directory block [ 1215.921213][T10950] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.659: error -117 reading directory block [ 1215.979666][T10956] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.659: error -117 reading directory block [ 1216.052954][T10956] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.659: error -117 reading directory block [ 1216.097104][T10950] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.659: error -117 reading directory block [ 1216.162502][T10956] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.659: error -117 reading directory block [ 1216.177800][T10958] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.659: error -117 reading directory block [ 1216.213396][T10950] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.659: error -117 reading directory block [ 1216.228894][ T5869] team0 (unregistering): Port device team_slave_1 removed [ 1216.266249][T10956] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.659: error -117 reading directory block [ 1216.271127][ T5869] team0 (unregistering): Port device team_slave_0 removed [ 1216.308443][T10950] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.659: error -117 reading directory block [ 1216.512552][ T5574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1217.004219][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.022144][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.046367][T10815] bridge_slave_0: entered allmulticast mode [ 1217.067899][T10815] bridge_slave_0: entered promiscuous mode [ 1217.116937][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.136852][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.146047][T10815] bridge_slave_1: entered allmulticast mode [ 1217.168470][T10815] bridge_slave_1: entered promiscuous mode [ 1217.245694][ T8826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.254774][ T8826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.858880][T10815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.172035][T10815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.654708][T10815] team0: Port device team_slave_0 added [ 1218.655608][ T7746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1218.658872][ T7746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1218.680542][ T7746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1218.697730][ T7746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1218.709945][ T7746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1218.799008][T10815] team0: Port device team_slave_1 added [ 1219.222550][T10815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.260843][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.292436][T10984] loop0: detected capacity change from 0 to 512 [ 1219.343631][T10815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.362459][T10984] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1219.425323][T10984] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1219.594576][T10815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.630977][ T5574] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1219.667299][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.800918][T10815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.651982][ T6264] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1220.671015][ T6264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1220.687386][ T6264] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1220.722219][ T6264] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1220.748787][ T6264] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1220.756623][ T6264] Bluetooth: hci1: command tx timeout [ 1220.917344][T10992] loop0: detected capacity change from 0 to 4096 [ 1221.006545][T10992] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1221.144025][T10815] hsr_slave_0: entered promiscuous mode [ 1221.195087][T10815] hsr_slave_1: entered promiscuous mode [ 1221.261589][T10815] debugfs: 'hsr0' already exists in 'hsr' [ 1221.291487][T10815] Cannot create hsr debugfs directory [ 1221.446420][T10992] ntfs3(loop0): ino=1a, mi_enum_attr [ 1221.452009][T10992] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1222.302496][ T5869] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.814291][ T5869] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.840579][T10998] Bluetooth: hci1: command tx timeout [ 1222.846956][ T7746] Bluetooth: hci6: command tx timeout [ 1223.238348][ T5869] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.285617][T10854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.320530][T10854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.351378][T10854] bridge_slave_0: entered allmulticast mode [ 1223.382788][T10854] bridge_slave_0: entered promiscuous mode [ 1223.507802][ T5869] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.552927][T10854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.580265][T10854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.607624][T10854] bridge_slave_1: entered allmulticast mode [ 1223.630329][T10854] bridge_slave_1: entered promiscuous mode [ 1224.213737][T10854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.473327][T10854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.605483][T11013] loop0: detected capacity change from 0 to 32768 [ 1224.716247][T11013] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1224.915361][T10998] Bluetooth: hci1: command tx timeout [ 1224.921321][ T7746] Bluetooth: hci6: command tx timeout [ 1225.143902][T10854] team0: Port device team_slave_0 added [ 1225.525873][T10854] team0: Port device team_slave_1 added [ 1225.555408][ T5574] ocfs2: Unmounting device (7,0) on (node local) [ 1225.861189][ T5869] bridge_slave_1: left allmulticast mode [ 1225.883895][ T5869] bridge_slave_1: left promiscuous mode [ 1225.907706][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.955132][ T5869] bridge_slave_0: left allmulticast mode [ 1225.971400][ T5869] bridge_slave_0: left promiscuous mode [ 1225.994509][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.288932][T11041] loop0: detected capacity change from 0 to 512 [ 1227.007264][T10998] Bluetooth: hci1: command tx timeout [ 1227.013039][ T7746] Bluetooth: hci6: command tx timeout [ 1227.107528][T11046] loop0: detected capacity change from 0 to 2048 [ 1227.123454][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1227.193668][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1227.231577][ T5869] bond0 (unregistering): Released all slaves [ 1227.240247][T11046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.588386][ T5574] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1227.625241][T10854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.670131][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.734632][ T5574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.744263][T10854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.937394][T10854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.972142][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.037726][T10854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.214546][T11054] loop0: detected capacity change from 0 to 512 [ 1228.250316][T11054] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1228.313741][T11054] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1228.412519][ T5869] hsr_slave_0: left promiscuous mode [ 1228.444001][ T5869] hsr_slave_1: left promiscuous mode [ 1228.462084][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.469946][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.498835][ T5574] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1228.503733][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.523065][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.580529][ T5869] veth1_macvtap: left promiscuous mode [ 1228.598758][ T5869] veth0_macvtap: left promiscuous mode [ 1228.615197][ T5869] veth1_vlan: left promiscuous mode [ 1228.632107][ T5869] veth0_vlan: left promiscuous mode [ 1228.697667][T11057] loop0: detected capacity change from 0 to 128 [ 1228.729286][T11057] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1228.782199][T11057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1228.805739][T11057] System zones: 1-3, 19-19, 35-36 [ 1228.830562][T11057] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1228.869633][T11057] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.081708][T10998] Bluetooth: hci6: command tx timeout [ 1229.439027][T11057] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 1229.702425][ T5574] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1229.899147][T11064] loop0: detected capacity change from 0 to 16 [ 1230.163671][ T5869] team0 (unregistering): Port device team_slave_1 removed [ 1230.209634][ T5869] team0 (unregistering): Port device team_slave_0 removed [ 1231.272019][T10854] hsr_slave_0: entered promiscuous mode [ 1231.290042][T10854] hsr_slave_1: entered promiscuous mode [ 1231.299639][T10854] debugfs: 'hsr0' already exists in 'hsr' [ 1231.305878][T10854] Cannot create hsr debugfs directory [ 1231.902014][ T5868] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.948455][T10815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1231.987394][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1232.216658][T11066] loop0: detected capacity change from 0 to 32768 [ 1232.224712][T10815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1232.241631][T11066] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.671 (11066) [ 1232.301949][T11066] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1232.309748][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1232.332283][T11066] BTRFS info (device loop0): using crc32c checksum algorithm [ 1232.482388][ T5868] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.529153][T10815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1232.567048][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1232.580390][T10815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1232.613416][T11066] BTRFS info (device loop0): enabling ssd optimizations [ 1232.614412][T10815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1232.670119][T11066] BTRFS info (device loop0): turning on flush-on-commit [ 1232.707794][T11066] BTRFS info (device loop0): enabling free space tree [ 1232.742047][T11066] BTRFS info (device loop0): enabling auto defrag [ 1232.772520][T11066] BTRFS info (device loop0): use lzo compression, level 1 [ 1232.797523][T11066] BTRFS info (device loop0): max_inline set to 4096 [ 1232.888008][ T5868] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.959767][ T29] audit: type=1800 audit(1780151360.551:27): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.671" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 1233.133867][ T5868] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.296338][T10976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.306301][T10976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.336311][T10976] bridge_slave_0: entered allmulticast mode [ 1234.347414][T10976] bridge_slave_0: entered promiscuous mode [ 1234.535799][ T5574] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1234.585365][T10976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.617372][T10976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.634210][T10976] bridge_slave_1: entered allmulticast mode [ 1234.668233][T10976] bridge_slave_1: entered promiscuous mode [ 1235.141577][ T5868] bridge_slave_1: left allmulticast mode [ 1235.183365][ T5868] bridge_slave_1: left promiscuous mode [ 1235.205635][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.243215][ T5868] bridge_slave_0: left allmulticast mode [ 1235.249495][ T5868] bridge_slave_0: left promiscuous mode [ 1235.262792][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.141168][ T5868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.196700][ T5868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.239428][ T5868] bond0 (unregistering): Released all slaves [ 1236.541215][T10976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.595827][T10996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.615671][T10996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.640306][T10996] bridge_slave_0: entered allmulticast mode [ 1236.650947][T10996] bridge_slave_0: entered promiscuous mode [ 1236.694099][T10976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.920742][T11107] loop0: detected capacity change from 0 to 4096 [ 1237.005982][T10996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.026821][T10996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.049218][T10996] bridge_slave_1: entered allmulticast mode [ 1237.094036][T10996] bridge_slave_1: entered promiscuous mode [ 1237.546170][T10996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.599747][T10976] team0: Port device team_slave_0 added [ 1237.772828][T10996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.938604][T10976] team0: Port device team_slave_1 added [ 1238.062937][T10996] team0: Port device team_slave_0 added [ 1238.089042][T11111] loop0: detected capacity change from 0 to 8192 [ 1238.243983][ T5868] hsr_slave_0: left promiscuous mode [ 1238.250225][T11111] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1238.250359][T11111] FAT-fs (loop0): Filesystem has been set read-only [ 1238.291855][ T5868] hsr_slave_1: left promiscuous mode [ 1238.319357][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1238.336962][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.358256][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1238.375371][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.430372][ T5868] veth1_macvtap: left promiscuous mode [ 1238.447333][ T5868] veth0_macvtap: left promiscuous mode [ 1238.464179][ T5868] veth1_vlan: left promiscuous mode [ 1238.484884][ T5868] veth0_vlan: left promiscuous mode [ 1239.549805][ T5868] team0 (unregistering): Port device team_slave_1 removed [ 1239.593931][ T5868] team0 (unregistering): Port device team_slave_0 removed [ 1240.000427][T10996] team0: Port device team_slave_1 added [ 1240.203016][T11113] loop0: detected capacity change from 0 to 32768 [ 1240.321598][ T29] audit: type=1800 audit(1780151367.911:28): pid=11113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.679" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 1240.424288][T10976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.443769][T10976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.477236][T10976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.502045][T11114] ialloc: diAlloc returned -5! [ 1240.557928][T10996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.576103][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.648404][T10996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.749028][T10976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.760849][T10976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.792253][T10976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.839587][T10996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.846963][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.878232][T10996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.085900][T10854] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1241.127321][T10854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1241.137473][T11116] loop0: detected capacity change from 0 to 64 [ 1241.268234][T10854] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1241.323878][T10854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1241.511228][T10976] hsr_slave_0: entered promiscuous mode [ 1241.534216][T10976] hsr_slave_1: entered promiscuous mode [ 1241.544151][T10976] debugfs: 'hsr0' already exists in 'hsr' [ 1241.550893][T10976] Cannot create hsr debugfs directory [ 1241.571179][T10854] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1241.637796][T10854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1241.658363][T10854] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1241.701202][T10854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1241.839327][T10996] hsr_slave_0: entered promiscuous mode [ 1241.870353][T10996] hsr_slave_1: entered promiscuous mode [ 1241.891665][T10996] debugfs: 'hsr0' already exists in 'hsr' [ 1241.909431][T10996] Cannot create hsr debugfs directory [ 1241.918212][T11118] loop0: detected capacity change from 0 to 4096 [ 1243.214789][T10815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.374198][T10815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.593625][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.601425][ T5869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.824814][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.832582][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.072380][T11124] loop0: detected capacity change from 0 to 40427 [ 1245.131041][T11124] F2FS-fs: heap/no_heap options were deprecated [ 1245.157896][T11124] F2FS-fs (loop0): build fault injection rate: 19 [ 1245.183579][T11124] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 1245.201836][T11124] F2FS-fs (loop0): invalid crc value [ 1245.272479][T11124] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80 [ 1245.631404][T10854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.886987][T10996] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1245.952984][T10996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1246.034433][T10996] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1246.080201][T11124] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0 [ 1246.108392][T10996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1246.134533][T11124] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1246.148203][T10996] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1246.166674][T11124] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1246.189908][T10996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1246.297808][T10996] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1246.352639][T10996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1246.560437][T10854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.782838][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.790561][ T8826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.855577][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.863171][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.714804][T10976] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1247.808406][T10976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1247.832437][T10976] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1247.868046][T10976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1247.931093][T10976] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1247.991121][T10976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1248.044472][T10976] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1248.098219][T10976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1248.531019][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.540143][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.210468][T10996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.629686][T10996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.758753][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.766422][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.834174][T11166] loop0: detected capacity change from 0 to 2048 [ 1249.953332][T11166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1250.026095][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.033706][ T5873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.532470][T10976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.773753][T10976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.848862][T10815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.104307][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.111959][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.362549][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.370312][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.717579][T10854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.267681][T11197] loop0: detected capacity change from 0 to 8 [ 1253.414790][T11197] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1253.450524][T11197] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1253.484794][T11197] SQUASHFS error: Failed to read block 0x85: -5 [ 1253.500683][T11197] SQUASHFS error: Failed to read block 0x85: -5 [ 1253.539851][ T29] audit: type=1800 audit(1780151381.131:29): pid=11197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.687" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1254.148144][T10815] veth0_vlan: entered promiscuous mode [ 1254.407822][T10815] veth1_vlan: entered promiscuous mode [ 1254.963024][T11205] loop0: detected capacity change from 0 to 4096 [ 1255.232372][T10815] veth0_macvtap: entered promiscuous mode [ 1255.405686][T10815] veth1_macvtap: entered promiscuous mode [ 1255.974525][T10815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1256.181949][T10815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.403976][ T5868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.429690][ T5868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.539591][ T5868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.574135][ T5868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.708256][T10996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.124638][T10854] veth0_vlan: entered promiscuous mode [ 1257.290638][T10854] veth1_vlan: entered promiscuous mode [ 1257.917540][T10854] veth0_macvtap: entered promiscuous mode [ 1257.986516][T10854] veth1_macvtap: entered promiscuous mode [ 1258.040975][T10976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1258.385440][T10854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.591711][T10854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1258.782975][ T5700] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.839137][ T5700] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.899284][ T5700] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.945839][ T5700] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.576258][T10996] veth0_vlan: entered promiscuous mode [ 1260.731162][T10996] veth1_vlan: entered promiscuous mode [ 1261.431770][T10996] veth0_macvtap: entered promiscuous mode [ 1261.500878][ T7746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1261.512072][ T7746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1261.523825][ T7746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1261.546550][ T7746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1261.560018][ T7746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1261.784472][T10996] veth1_macvtap: entered promiscuous mode [ 1262.640530][T10976] veth0_vlan: entered promiscuous mode [ 1262.840106][ T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.958299][T10996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1263.069072][T10976] veth1_vlan: entered promiscuous mode [ 1263.191307][ T78] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.310454][T10996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1263.514707][ T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.635838][T10998] Bluetooth: hci3: command tx timeout [ 1263.787058][ T5868] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.817308][ T5868] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.938809][ T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.051523][ T5868] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.104036][ T5868] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.414235][T11278] loop0: detected capacity change from 0 to 8192 [ 1264.423317][ T7746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1264.436832][ T7746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1264.449124][ T7746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1264.469368][ T7746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1264.483515][ T7746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1264.926513][T11278] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1264.998077][T11278] FAT-fs (loop0): Filesystem has been set read-only [ 1265.346217][ T78] bridge_slave_1: left allmulticast mode [ 1265.377750][ T78] bridge_slave_1: left promiscuous mode [ 1265.413848][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.489676][ T78] bridge_slave_0: left allmulticast mode [ 1265.518515][ T78] bridge_slave_0: left promiscuous mode [ 1265.557636][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.722641][ T7746] Bluetooth: hci3: command tx timeout [ 1266.361983][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.386179][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.408421][ T78] bond0 (unregistering): Released all slaves [ 1266.516512][ T7746] Bluetooth: hci2: command tx timeout [ 1266.650590][T10976] veth0_macvtap: entered promiscuous mode [ 1266.834356][ T78] hsr_slave_0: left promiscuous mode [ 1266.875337][ T78] hsr_slave_1: left promiscuous mode [ 1266.890542][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1266.913516][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1266.945546][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1266.960423][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.012622][ T78] veth1_macvtap: left promiscuous mode [ 1267.026262][ T78] veth0_macvtap: left promiscuous mode [ 1267.039458][ T78] veth1_vlan: left promiscuous mode [ 1267.056077][ T78] veth0_vlan: left promiscuous mode [ 1267.271934][T11303] loop0: detected capacity change from 0 to 128 [ 1267.341817][T11303] loop0: detected capacity change from 0 to 8 [ 1267.383479][T11303] unable to read xattr id index table [ 1267.774850][T11305] loop0: detected capacity change from 0 to 256 [ 1267.798333][ T7746] Bluetooth: hci3: command tx timeout [ 1267.823130][T11305] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1268.101544][ T29] audit: type=1800 audit(1780151395.691:30): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.694" name="file1" dev="loop0" ino=1048654 res=0 errno=0 [ 1268.163160][T11305] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2048) [ 1268.171776][T11305] FAT-fs (loop0): Filesystem has been set read-only [ 1268.180765][T11305] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2048) [ 1268.375349][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1268.408767][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1268.595648][ T7746] Bluetooth: hci2: command tx timeout [ 1268.975769][T11310] loop0: detected capacity change from 0 to 2048 [ 1268.994237][T11310] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1269.041001][T11310] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1269.070761][T11310] UDF-fs: Scanning with blocksize 512 failed [ 1269.172868][T11310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1269.314387][ T29] audit: type=1800 audit(1780151396.901:31): pid=11310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.696" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 1269.343680][T10976] veth1_macvtap: entered promiscuous mode [ 1269.875437][ T7746] Bluetooth: hci3: command tx timeout [ 1270.550359][T10976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.675801][ T7746] Bluetooth: hci2: command tx timeout [ 1270.872812][ T78] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.033221][T10976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.260385][ T78] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.454116][ T5706] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.480514][ T5706] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.600291][ T5706] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.664425][ T78] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.898498][ T1042] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.103159][ T78] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.756316][ T7746] Bluetooth: hci2: command tx timeout [ 1272.819486][T11319] loop0: detected capacity change from 0 to 32768 [ 1272.892283][T11319] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1273.424779][T11319] XFS (loop0): Ending clean mount [ 1273.532031][ T78] bridge_slave_1: left allmulticast mode [ 1273.576913][ T78] bridge_slave_1: left promiscuous mode [ 1273.609887][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.680312][ T78] bridge_slave_0: left allmulticast mode [ 1273.709692][ T78] bridge_slave_0: left promiscuous mode [ 1273.737978][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.883219][ T5574] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1274.698416][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1274.769180][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1274.810756][ T78] bond0 (unregistering): Released all slaves [ 1275.297260][ T78] hsr_slave_0: left promiscuous mode [ 1275.343854][ T78] hsr_slave_1: left promiscuous mode [ 1275.372280][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.407741][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.423428][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.460535][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.583836][ T78] veth1_macvtap: left promiscuous mode [ 1275.589849][ T78] veth0_macvtap: left promiscuous mode [ 1275.597627][ T78] veth1_vlan: left promiscuous mode [ 1275.603472][ T78] veth0_vlan: left promiscuous mode [ 1275.730052][T11373] loop0: detected capacity change from 0 to 512 [ 1275.772162][T11373] EXT4-fs: Ignoring removed oldalloc option [ 1275.821083][T11373] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1275.915538][T11373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.952649][ T29] audit: type=1800 audit(1780151403.541:32): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.699" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1276.117538][ T5574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.815194][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1276.850273][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1277.299444][ T5229] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1278.142758][ T5873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.175560][ T5873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.325479][T11261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.349858][T11261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.360703][T11261] bridge_slave_0: entered allmulticast mode [ 1278.394756][T11261] bridge_slave_0: entered promiscuous mode [ 1278.425263][T11261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.432915][T11261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.443309][T11261] bridge_slave_1: entered allmulticast mode [ 1278.458970][T11261] bridge_slave_1: entered promiscuous mode [ 1278.842562][T11380] loop0: detected capacity change from 0 to 32768 [ 1278.927985][T11380] [ 1278.927985][T11380] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1278.927985][T11380] [ 1279.011182][T11380] ERROR: (device loop0): xtSearch: xt_getpage: xtree page corrupt [ 1279.011182][T11380] [ 1279.052968][T11380] xtLookup: xtSearch returned -5 [ 1279.060852][T11261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.075527][T11380] ERROR: (device loop0): xtTruncate: xt_getpage: xtree page corrupt [ 1279.075527][T11380] [ 1279.124389][T11261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.273261][ T12] [ 1279.273261][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1279.273261][ T12] [ 1279.330322][ T12] [ 1279.330322][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1279.330322][ T12] [ 1279.364429][ T117] [ 1279.364429][ T117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1279.364429][ T117] [ 1279.416492][ T5574] [ 1279.416492][ T5574] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1279.416492][ T5574] [ 1279.451320][ T5574] [ 1279.451320][ T5574] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1279.451320][ T5574] [ 1279.720714][T11261] team0: Port device team_slave_0 added [ 1279.809032][T11261] team0: Port device team_slave_1 added [ 1279.877871][ T5873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.900375][ T5873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.383829][T11261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1280.421669][T11261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.511184][T11261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1280.596648][T11261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.603832][T11261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.688491][T11261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1280.799754][T10998] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1280.810166][T10998] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1280.824235][T10998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1280.848888][T10998] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1280.868553][T10998] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1281.734156][ T5699] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.875723][T11261] hsr_slave_0: entered promiscuous mode [ 1281.909335][T11261] hsr_slave_1: entered promiscuous mode [ 1281.942011][T11261] debugfs: 'hsr0' already exists in 'hsr' [ 1281.960992][T11261] Cannot create hsr debugfs directory [ 1281.987379][T11407] loop0: detected capacity change from 0 to 256 [ 1282.124561][T11407] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1282.287908][ T5699] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.409611][T11284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.458528][T11284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.505320][T11284] bridge_slave_0: entered allmulticast mode [ 1282.562089][T11284] bridge_slave_0: entered promiscuous mode [ 1282.592919][T10998] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1282.605976][T10998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1282.621789][T10998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1282.645620][T10998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1282.664510][T10998] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1282.917952][T10998] Bluetooth: hci1: command tx timeout [ 1282.997884][ T5699] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.061346][T11284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.104297][T11284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.133093][T11284] bridge_slave_1: entered allmulticast mode [ 1283.144188][T11284] bridge_slave_1: entered promiscuous mode [ 1283.186379][T11416] loop0: detected capacity change from 0 to 64 [ 1283.226245][T11416] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1283.806263][ T5699] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.086783][T11284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.133602][T11284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.757155][T10998] Bluetooth: hci4: command tx timeout [ 1284.917709][T11284] team0: Port device team_slave_0 added [ 1285.009539][T10998] Bluetooth: hci1: command tx timeout [ 1285.052657][T11284] team0: Port device team_slave_1 added [ 1285.353689][T11437] loop0: detected capacity change from 0 to 512 [ 1285.379250][T11437] EXT4-fs: Ignoring removed oldalloc option [ 1285.400770][ T5229] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1285.427876][T11437] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1285.544662][T11437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1285.613993][ T29] audit: type=1800 audit(1780151413.191:33): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.706" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1285.912947][ T5574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.930906][ T5699] bridge_slave_1: left allmulticast mode [ 1285.944218][ T5699] bridge_slave_1: left promiscuous mode [ 1285.960354][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.988040][ T5699] bridge_slave_0: left allmulticast mode [ 1285.998187][ T5699] bridge_slave_0: left promiscuous mode [ 1286.013103][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.717149][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.741001][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.769880][ T5699] bond0 (unregistering): Released all slaves [ 1286.811141][T11284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.818663][T11284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.855325][T10998] Bluetooth: hci4: command tx timeout [ 1286.864002][T11284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.075298][T10998] Bluetooth: hci1: command tx timeout [ 1287.123160][T11284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.142454][T11284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.184443][T11284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.225803][ T5699] hsr_slave_0: left promiscuous mode [ 1287.234475][ T5699] hsr_slave_1: left promiscuous mode [ 1287.261383][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.270893][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.299716][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.308498][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.336899][ T5699] veth1_macvtap: left promiscuous mode [ 1287.342854][ T5699] veth0_macvtap: left promiscuous mode [ 1287.350829][ T5699] veth1_vlan: left promiscuous mode [ 1287.363568][ T5699] veth0_vlan: left promiscuous mode [ 1288.391219][ T5699] team0 (unregistering): Port device team_slave_1 removed [ 1288.443411][ T5699] team0 (unregistering): Port device team_slave_0 removed [ 1288.647551][T11446] loop0: detected capacity change from 0 to 65536 [ 1288.674810][T11446] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1288.877963][T11446] XFS (loop0): Ending clean mount [ 1288.915303][T10998] Bluetooth: hci4: command tx timeout [ 1288.985135][T11446] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x1b9/0x300, xfs_agf block 0x8001 [ 1289.007205][T11446] XFS (loop0): Unmount and run xfs_repair [ 1289.043564][T11446] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1289.087117][T11446] 00000000: 58 41 47 46 00 00 00 01 00 00 00 01 00 00 40 00 XAGF..........@. [ 1289.108821][T11446] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1289.152267][T11446] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1289.169710][T10998] Bluetooth: hci1: command tx timeout [ 1289.185235][T11446] 00000030: 00 00 00 04 00 00 3b 5f 00 00 3b 5c 00 00 00 00 ......;_..;\.... [ 1289.203371][T11446] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1289.215848][T11446] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1289.225550][T11446] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1289.262227][T11446] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1289.306421][T11446] XFS (loop0): metadata I/O error in "xfs_read_agf+0x23b/0x570" at daddr 0x8001 len 1 error 74 [ 1289.523664][ T5574] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1289.543644][ T5574] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 1290.194579][T11284] hsr_slave_0: entered promiscuous mode [ 1290.213397][T11284] hsr_slave_1: entered promiscuous mode [ 1290.224521][T11284] debugfs: 'hsr0' already exists in 'hsr' [ 1290.231325][T11284] Cannot create hsr debugfs directory [ 1290.379406][ T5699] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.734512][ T5699] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.996725][T10998] Bluetooth: hci4: command tx timeout [ 1291.091339][ T5699] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.365670][ T5699] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.480230][T11261] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1291.540715][T11261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1291.585754][T11261] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1291.636268][T11261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1291.799342][T11261] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1291.856340][T11261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1291.880039][T11261] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1291.928858][T11261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1292.508382][T11459] loop0: detected capacity change from 0 to 32768 [ 1292.611123][T11459] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1292.853496][ T5574] ocfs2: Unmounting device (7,0) on (node local) [ 1293.164639][T11472] loop0: detected capacity change from 0 to 256 [ 1293.275970][ T5699] bridge_slave_1: left allmulticast mode [ 1293.298249][ T5699] bridge_slave_1: left promiscuous mode [ 1293.324806][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.346817][T11472] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1293.380617][ T5699] bridge_slave_0: left allmulticast mode [ 1293.401000][ T5699] bridge_slave_0: left promiscuous mode [ 1293.426589][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.199213][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1294.238732][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1294.273574][ T5699] bond0 (unregistering): Released all slaves [ 1294.870921][T11396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.893543][T11396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.916332][T11396] bridge_slave_0: entered allmulticast mode [ 1294.937035][T11396] bridge_slave_0: entered promiscuous mode [ 1295.003079][T11396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.034133][T11396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.048424][T11396] bridge_slave_1: entered allmulticast mode [ 1295.061089][T11396] bridge_slave_1: entered promiscuous mode [ 1295.531314][ T5699] hsr_slave_0: left promiscuous mode [ 1295.540297][ T5699] hsr_slave_1: left promiscuous mode [ 1295.561272][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.572298][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.584815][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1295.594111][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1295.627874][ T5699] veth1_macvtap: left promiscuous mode [ 1295.633781][ T5699] veth0_macvtap: left promiscuous mode [ 1295.652489][ T5699] veth1_vlan: left promiscuous mode [ 1295.658393][ T5699] veth0_vlan: left promiscuous mode [ 1295.782553][T11475] loop0: detected capacity change from 0 to 32768 [ 1295.833514][T11475] [ 1295.833514][T11475] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1295.833514][T11475] [ 1295.903624][T11475] ERROR: (device loop0): diWrite: ixpxd invalid [ 1295.903624][T11475] [ 1295.919343][T11475] ERROR: (device loop0): txAbort: [ 1295.919343][T11475] [ 1295.940327][T11475] [ 1295.940327][T11475] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1295.940327][T11475] [ 1295.984804][T11475] [ 1295.984804][T11475] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1295.984804][T11475] [ 1296.029006][T11478] ERROR: (device loop0): diWrite: ixpxd invalid [ 1296.029006][T11478] [ 1296.064181][T11478] ERROR: (device loop0): txAbort: [ 1296.064181][T11478] [ 1296.087491][T11478] [ 1296.087491][T11478] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1296.087491][T11478] [ 1296.107775][T11475] ERROR: (device loop0): dtSearch: stack overrun! [ 1296.107775][T11475] [ 1296.135595][T11475] btstack dump: [ 1296.139374][T11475] bn = 0, index = 0 [ 1296.143357][T11475] bn = 0, index = 0 [ 1296.164625][T11475] bn = 0, index = 0 [ 1296.178450][T11475] bn = 0, index = 0 [ 1296.207385][T11475] bn = 0, index = 0 [ 1296.226603][T11475] bn = 0, index = 0 [ 1296.253123][T11475] bn = 0, index = 0 [ 1296.281386][T11475] ===================================================== [ 1296.288989][T11475] BUG: KMSAN: uninit-value in BT_STACK_DUMP+0x5e5/0x600 [ 1296.296375][T11475] BT_STACK_DUMP+0x5e5/0x600 [ 1296.301205][T11475] dtSearch+0x37aa/0x3b90 [ 1296.306118][T11475] jfs_lookup+0x179/0x590 [ 1296.310758][T11475] path_openat+0x2c84/0x64c0 [ 1296.315719][T11475] do_file_open+0x2aa/0x680 [ 1296.320446][T11475] do_sys_openat2+0x163/0x370 [ 1296.325495][T11475] __x64_sys_openat+0x240/0x300 [ 1296.330563][T11475] x64_sys_call+0x2445/0x3ea0 [ 1296.339650][T11475] do_syscall_64+0x15d/0x3c0 [ 1296.344604][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.350919][T11475] [ 1296.353347][T11475] Local variable btstack created at: [ 1296.358924][T11475] jfs_lookup+0x44/0x590 [ 1296.363419][T11475] path_openat+0x2c84/0x64c0 [ 1296.368767][T11475] [ 1296.371341][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.0.710 Not tainted syzkaller #0 PREEMPT(lazy) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1296.380958][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1296.392974][T11475] ===================================================== [ 1296.400571][T11475] Disabling lock debugging due to kernel taint [ 1296.488552][T11475] Kernel panic - not syncing: kmsan.panic set ... [ 1296.495191][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.0.710 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 1296.506293][T11475] Tainted: [B]=BAD_PAGE [ 1296.510578][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1296.520794][T11475] Call Trace: [ 1296.524207][T11475] [ 1296.527257][T11475] __dump_stack+0x26/0x30 [ 1296.531808][T11475] dump_stack_lvl+0x50/0x1c0 [ 1296.536607][T11475] ? dump_stack+0x12/0x25 [ 1296.541146][T11475] dump_stack+0x1e/0x25 [ 1296.545513][T11475] vpanic+0x7b4/0x1430 [ 1296.549845][T11475] panic+0x15d/0x160 [ 1296.554030][T11475] kmsan_report+0x31a/0x320 [ 1296.558783][T11475] ? __msan_warning+0x1b/0x30 [ 1296.563689][T11475] ? BT_STACK_DUMP+0x5e5/0x600 [ 1296.568681][T11475] ? dtSearch+0x37aa/0x3b90 [ 1296.573410][T11475] ? jfs_lookup+0x179/0x590 [ 1296.578147][T11475] ? path_openat+0x2c84/0x64c0 [ 1296.583131][T11475] ? do_file_open+0x2aa/0x680 [ 1296.588034][T11475] ? do_sys_openat2+0x163/0x370 [ 1296.593096][T11475] ? __x64_sys_openat+0x240/0x300 [ 1296.598329][T11475] ? x64_sys_call+0x2445/0x3ea0 [ 1296.603404][T11475] ? do_syscall_64+0x15d/0x3c0 [ 1296.608426][T11475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.614708][T11475] ? vprintk_emit+0xb60/0xba0 [ 1296.619647][T11475] ? vprintk_default+0x3f/0x50 [ 1296.624614][T11475] ? vprintk+0x36/0x50 [ 1296.629019][T11475] ? _printk+0x17e/0x1b0 [ 1296.633534][T11475] ? kmsan_get_metadata+0xf1/0x160 [ 1296.638912][T11475] __msan_warning+0x1b/0x30 [ 1296.643663][T11475] BT_STACK_DUMP+0x5e5/0x600 [ 1296.648506][T11475] dtSearch+0x37aa/0x3b90 [ 1296.653117][T11475] ? __kmalloc_noprof+0x4e3/0x1660 [ 1296.658527][T11475] jfs_lookup+0x179/0x590 [ 1296.663117][T11475] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1296.669202][T11475] ? security_inode_create+0xd9/0x5b0 [ 1296.674904][T11475] ? __pfx_jfs_lookup+0x10/0x10 [ 1296.680028][T11475] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1296.686129][T11475] ? __pfx_jfs_lookup+0x10/0x10 [ 1296.691235][T11475] path_openat+0x2c84/0x64c0 [ 1296.696173][T11475] do_file_open+0x2aa/0x680 [ 1296.700992][T11475] do_sys_openat2+0x163/0x370 [ 1296.705909][T11475] __x64_sys_openat+0x240/0x300 [ 1296.711019][T11475] x64_sys_call+0x2445/0x3ea0 [ 1296.715948][T11475] do_syscall_64+0x15d/0x3c0 [ 1296.720805][T11475] ? clear_bhb_loop+0x50/0xa0 [ 1296.725713][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.731823][T11475] RIP: 0033:0x7f0b1539ce59 [ 1296.736418][T11475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.756237][T11475] RSP: 002b:00007f0b16341028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1296.764864][T11475] RAX: ffffffffffffffda RBX: 00007f0b15615fa0 RCX: 00007f0b1539ce59 [ 1296.773017][T11475] RDX: 000000000000275a RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1296.781163][T11475] RBP: 00007f0b15432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1296.789315][T11475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1296.797441][T11475] R13: 00007f0b15616038 R14: 00007f0b15615fa0 R15: 00007ffe4969a518 [ 1296.805617][T11475] [ 1296.809432][T11475] Kernel Offset: disabled [ 1296.813837][T11475] Rebooting in 86400 seconds..