last executing test programs: 2m12.999610261s ago: executing program 3 (id=1934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0xbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 2m12.591405051s ago: executing program 3 (id=1937): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000065a12083a4100037040000000000", @ANYRES32=0x0, @ANYBLOB="8305050000000000200012800800010067726500140002800800050008000000080006000a"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e600"], 0x64) 2m12.349610226s ago: executing program 3 (id=1940): syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 2m12.141496631s ago: executing program 3 (id=1943): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x232, &(0x7f0000000640)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f268c2d285d83ec4018000000000000000002009000007000000200700", [0x8]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 2m11.206438664s ago: executing program 3 (id=1954): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 2m10.760379155s ago: executing program 3 (id=1956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e, 0x1100}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m10.229262908s ago: executing program 32 (id=1956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e, 0x1100}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m7.043979115s ago: executing program 2 (id=1976): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000000000000100000008000100020000002c000480050003000200000005000300010000000500030000000000050003000100000005ed0200070000000800020002"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 2m6.765995162s ago: executing program 2 (id=1979): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(0x0, 0x20fffbfffc) setgroups(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2m6.311468303s ago: executing program 2 (id=1982): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 2m5.345305817s ago: executing program 2 (id=1987): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRESOCT=0x0], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f268c2d285d83ec4018000000000000000002009000007000000200700", [0x8]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 2m4.468635778s ago: executing program 2 (id=1988): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) 2m2.893707596s ago: executing program 2 (id=1994): write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 2m2.358397489s ago: executing program 33 (id=1994): write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 1m5.100200919s ago: executing program 4 (id=2384): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000a40)={0x3, 'vlan1\x00', {0x6}, 0xf8}) 1m4.928398883s ago: executing program 4 (id=2386): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000002940)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4041004) 1m4.724688828s ago: executing program 4 (id=2388): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1m4.302266338s ago: executing program 4 (id=2392): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x4, 0x1f5, &(0x7f0000000680)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x88800, 0x1b0) creat(&(0x7f0000000040)='./bus\x00', 0xe0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8007, 0x9, 0x1b) 1m3.954410537s ago: executing program 4 (id=2394): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000000000000100000008000100020000002c000480050003000200000005000300010000000500030000000000050003000100000005ed02000700000008"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 1m3.489806288s ago: executing program 4 (id=2397): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000240)={0x0, 0x1}, 0x1) 1m3.01097781s ago: executing program 34 (id=2397): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000240)={0x0, 0x1}, 0x1) 3.827320897s ago: executing program 6 (id=2768): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0x2a) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r5 = epoll_create(0x2) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_rdma(0x10, 0x3, 0x14) 2.728067494s ago: executing program 6 (id=2773): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000001800)=ANY=[@ANYRES16=0x0], 0x1, 0x384, &(0x7f0000000480)="$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") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x780440d44e0f187e, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2.541062948s ago: executing program 6 (id=2775): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.243338076s ago: executing program 6 (id=2777): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x200000, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x408c, &(0x7f0000008180)="$eJzszz1KA1EUBeAzmcQZRQLaWFiInZXEziW4gRS26QQLCxcgupvgAqxcgAsR3IJNZH6M0dRBke8r3j159+YOL/y6t2Xaac8iw+7nVvL6c/hg0Jan2eNeN/YwniR1kuHNuG0tWhkcJZmcZdQs3U1yu/7l6XxDTwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6c87IPd193dXO8JG2r/DZeJoOMmjQ7XFRJnq/7zn35ftXH49MkF/vLxcXKgs88nW/gMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/3PZ1+HKXZGTVF2sk+31P1UZFU39YHcObQAEgCAILoZ8EPRA6B5Pfyg8CXbGnrg9u7dapo793aZav31ff8IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIcdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBDAAAAIAwf+s82g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBBAQAA//92ExgH") syz_open_procfs(r1, &(0x7f0000000100)='net/vlan/vlan1\x00') 2.130296978s ago: executing program 5 (id=2779): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/260], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1.795029527s ago: executing program 1 (id=2782): socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000380), &(0x7f0000000340)=@tcp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[], 0x0) 1.551441182s ago: executing program 1 (id=2783): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000001800)=ANY=[@ANYRES16=0x0], 0x1, 0x384, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x3, 0x9) 1.376079406s ago: executing program 0 (id=2785): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.254520069s ago: executing program 5 (id=2786): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xaf8, 0xc000, 0x1, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.21519865s ago: executing program 1 (id=2787): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000001800)=ANY=[@ANYRES16=0x0], 0x1, 0x384, &(0x7f0000000480)="$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") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x780440d44e0f187e, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.140135723s ago: executing program 0 (id=2788): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) 1.004040515s ago: executing program 6 (id=2789): epoll_create1(0x80000) r0 = socket$unix(0x1, 0x5, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xfe, 0x305, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)="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", 0x129) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000600)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='6', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xf9, 0x0, 0xfe, 0x1f, 0x0, 0x7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xfea0) close(r0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0xf9c, 0xc, 0x0) socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r4 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r4, &(0x7f0000000880)={&(0x7f0000000140)=@ethernet={0x1, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="487dab6117cb202bedc721224512324eedab6f0af08118caccf919c6c555b869ae3b95da2154736465a7851793898917fe18315750cc9e2de0e0ec7608ef0f141b0b51a76263b856f420a98a0b0c0f7cbb8d1f7915e6fae6c78d7a8706c307e9f008f7c524f7f5a6b30cbb1267b66a3bf5dd82aa5f116a72ac00b5c94093383830ecbb4766d9cbc3b855fd1e0c7aa210f9a97dfb0bfca16c98e6124f572726b3b554b8ec07b208780e3bcdbb", 0xac}, {&(0x7f0000000440)="7ed5cd6d9a8fc911668682d272c29a4efa63d2104dd1c87be245aea701939b60987e11f2c3382f2e3c5ea3d02191655da7ea8aa4ea2b60a81a9287fed98f04705c3f33a79138bd182e9846eb1274644a3dfabea3131cf0d9357234a4094e93463ac6e773ed24aa8e8921812bffcfc4cc6a1a5faac73dd3aa83ad970cae149c18883f8f3f449364c121a8f00068dec3fc38ba4bd62049ee18d164e98a1f94b738d5884a92ec772a631976c70eab90d60a6f56fe3c697ef5ac7d2e7bac99848a604647177a37bd03297353480029c063531b737c8d610546b1b7701bc7c992b6de8d131453e24e3603866a74a75fc46d17fe02", 0xf2}, {&(0x7f0000000540)}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="30000000000000001601000008000000258090805dc64bdafbcfcade41be2e31255cde956cc341521927748dd91fc7eb50000000000000003a00000009000000c2eee1d20e187a53bf43dd3ac1f679b11adcdb1bba40141b5d63805333aba9b8985551e198e953bec224f81ac5092deb96bf7977484272ef3cf40f81dcf20000c80000000000000001010000040000004a7b5234a5d3dd2da37492975d92d0b9a1cbfa9965bcb646068cf7a614feb36bd4ead38c2148a44ef9d436f749d128f69f68d814dd06d337fd8705940961fc29f6ac233ca3b28d4c2e08c2f507ddbc591451458cf4ed17c142d6691ac386cb0a5b78fcfdd093f67f9f4d83f0054b83ca6c62b6052bca900841b0e27c9d9430ff5c9153745e6f5affe9152c667fa52b8bd071506da0911a676ad25a822224b3c1e029fe6fb80f122afe063de58f50c38ab986000000000000a8000000000000000400000007000000cfed9a57f18728be208ddf9dfd3e9cddd4136a8b4f4f0fc0c38fa862972a67c620cf53472177d20c98b9178b2d3f57c48c470095196c1084f6570f07c4339fc12186004d52107fcd413e57af83369e0bc51dcc4674d97b227c2689f17653442c5233e0aa2003bfb5bf8e89764340d1c88bc699fb7603b1a4e355b357e6b0ef8f15c3d76071da4d9532225f7d12209fc904b7d4fee500000070000000000000001401000007000000e0d740254a6841dec2224b3921597acb8c3992e4ed091ccc1338e302b27848f6b46bd1715ac9fe31100f20a12ebab25c"], 0x280}, 0x4000) r5 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r5, r5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") 946.272157ms ago: executing program 5 (id=2790): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r0}]}, 0x44}}, 0x0) 946.001937ms ago: executing program 0 (id=2791): socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000380), &(0x7f0000000340)=@tcp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[], 0x0) 914.021188ms ago: executing program 1 (id=2792): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x120, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 776.513081ms ago: executing program 5 (id=2793): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100000000001049000000000000", @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005"], 0x50}}, 0x4080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x40}}, 0x0) 717.374793ms ago: executing program 0 (id=2794): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/260], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 635.117504ms ago: executing program 5 (id=2795): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000001800)=ANY=[@ANYRES16=0x0], 0x1, 0x384, &(0x7f0000000480)="$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") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x780440d44e0f187e, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fallocate(0xffffffffffffffff, 0x0, 0x3, 0x9) 462.202469ms ago: executing program 1 (id=2796): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 413.56784ms ago: executing program 5 (id=2797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setns(0xc9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x11, 0x9, 0x9, 0x7, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2b, 0x4, 0x10}]}, 0x38}}, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 318.881542ms ago: executing program 1 (id=2798): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x800, 0x8, 0x8, 0x4e}, 0x14) 46.418429ms ago: executing program 0 (id=2799): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpid() mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 27.108799ms ago: executing program 0 (id=2800): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0x2a) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r5 = epoll_create(0x2) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000005c0)="fd9c4aee09a88e2508e37f2cb79e215f6adc234856a53becb85478decc87c288cc48de2f68cd49bbb7", 0x29) 0s ago: executing program 6 (id=2801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c00018008000100000000000c0001"], 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="d92a4fbab27cfa3c000000", @ANYRESDEC=r3, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r4}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x9, r5, 0x4}, 0x38) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000a00)='rd_pa', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) kernel console output (not intermixed with test programs): ses=4294967295 subj=unconfined pid=10415 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe3d9e0d9 code=0x7fc00000 [ 290.180834][ T27] audit: type=1326 audit(1787253263.105:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe3d9e0d9 code=0x7fc00000 [ 290.207914][ T27] audit: type=1326 audit(1787253263.105:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe3d9e0d9 code=0x7fc00000 [ 290.240521][ T27] audit: type=1326 audit(1787253263.105:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe3d9e0d9 code=0x7fc00000 [ 290.673722][T10451] syzkaller0: entered promiscuous mode [ 290.693398][T10451] syzkaller0: entered allmulticast mode [ 291.604143][T10479] syzkaller0: entered promiscuous mode [ 291.664102][T10479] syzkaller0: entered allmulticast mode [ 291.906316][T10492] syzkaller0: entered promiscuous mode [ 291.951915][T10492] syzkaller0: entered allmulticast mode [ 293.486297][T10520] capability: warning: `syz.2.1603' uses 32-bit capabilities (legacy support in use) [ 293.756430][T10523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1604'. [ 295.233723][ T5816] hid-generic 0005:0457:0009.000D: unknown main item tag 0x0 [ 295.260628][ T5816] hid-generic 0005:0457:0009.000D: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 295.778086][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1615'. [ 295.826020][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1615'. [ 296.343600][T10587] syzkaller0: entered promiscuous mode [ 296.362616][T10587] syzkaller0: entered allmulticast mode [ 296.483719][T10589] loop1: detected capacity change from 0 to 2048 [ 296.537140][T10589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.778980][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 296.778994][ T27] audit: type=1800 audit(1787253269.934:292): pid=10589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1623" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 296.919656][T10602] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1626'. [ 297.647730][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.125610][T10615] syzkaller0: entered promiscuous mode [ 298.134621][T10615] syzkaller0: entered allmulticast mode [ 298.415221][T10622] syzkaller0: entered promiscuous mode [ 298.432511][T10622] syzkaller0: entered allmulticast mode [ 298.486059][ T28] hid-generic 0005:0457:0009.000E: unknown main item tag 0x0 [ 298.606421][ T28] hid-generic 0005:0457:0009.000E: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 298.981139][T10645] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1638'. [ 300.275058][T10661] syzkaller0: entered promiscuous mode [ 300.296649][T10661] syzkaller0: entered allmulticast mode [ 300.785453][T10681] loop3: detected capacity change from 0 to 2048 [ 300.882387][T10681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.078717][ T27] audit: type=1800 audit(1787253274.234:293): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1649" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 301.200559][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.496511][T10710] batadv_slave_1: entered promiscuous mode [ 301.551647][T10710] batadv_slave_1: left promiscuous mode [ 301.769636][T10714] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 301.883028][T10716] syzkaller0: entered promiscuous mode [ 301.889741][T10716] syzkaller0: entered allmulticast mode [ 302.025998][ T28] hid-generic 0005:0457:0009.000F: unknown main item tag 0x0 [ 302.056265][T10727] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 302.090689][ T28] hid-generic 0005:0457:0009.000F: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 302.526578][T10737] loop0: detected capacity change from 0 to 2048 [ 302.591382][T10737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.632968][ T27] audit: type=1800 audit(1787253275.783:294): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1665" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 302.740484][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.120882][T10749] loop2: detected capacity change from 0 to 1024 [ 303.129462][T10749] EXT4-fs: Ignoring removed nobh option [ 303.135914][T10749] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 303.161394][T10749] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 303.189445][T10749] EXT4-fs (loop2): invalid journal inode [ 303.208114][T10749] EXT4-fs (loop2): can't get journal size [ 303.232906][T10749] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 17104912: comm syz.2.1669: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 303.238626][T10753] syzkaller0: entered promiscuous mode [ 303.253856][T10753] syzkaller0: entered allmulticast mode [ 303.271660][T10749] EXT4-fs (loop2): failed to initialize system zone (-117) [ 303.279846][T10749] EXT4-fs (loop2): mount failed [ 303.596142][T10763] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.668574][T10766] loop0: detected capacity change from 0 to 2048 [ 303.742440][T10766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.893777][ T27] audit: type=1800 audit(1787253277.043:295): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1675" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 304.039865][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.249327][ T5816] hid-generic 0005:0457:0009.0010: unknown main item tag 0x0 [ 304.288049][ T5816] hid-generic 0005:0457:0009.0010: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 305.470794][T10815] loop1: detected capacity change from 0 to 512 [ 305.549985][T10815] EXT4-fs (loop1): 1 truncate cleaned up [ 305.568671][T10815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.805450][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.157325][ T27] audit: type=1326 audit(1787253279.303:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.2.1693" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f741819e0d9 code=0x0 [ 307.157140][ T8761] hid-generic 0005:0457:0009.0011: unknown main item tag 0x0 [ 307.168231][ T8761] hid-generic 0005:0457:0009.0011: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 309.742182][T10908] syzkaller0: entered promiscuous mode [ 309.765912][T10908] syzkaller0: entered allmulticast mode [ 309.881679][T10912] loop2: detected capacity change from 0 to 512 [ 309.937530][T10912] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 309.972222][T10912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 310.028984][T10912] EXT4-fs (loop2): 1 truncate cleaned up [ 310.061515][T10912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.249525][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.478278][T10933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1724'. [ 311.742910][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'. [ 311.955277][T10950] veth1_to_hsr: entered allmulticast mode [ 312.402471][T10965] syzkaller0: entered promiscuous mode [ 312.417612][T10965] syzkaller0: entered allmulticast mode [ 312.440408][ T5814] hid-generic 0005:0457:0009.0012: unknown main item tag 0x0 [ 312.503295][ T5814] hid-generic 0005:0457:0009.0012: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 314.006115][T11001] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1738'. [ 314.928062][T11013] syzkaller0: entered promiscuous mode [ 314.947968][T11013] syzkaller0: entered allmulticast mode [ 315.120007][T11017] syzkaller0: entered promiscuous mode [ 315.135109][T11017] syzkaller0: entered allmulticast mode [ 316.836558][T11052] syzkaller0: entered promiscuous mode [ 316.844556][T11052] syzkaller0: entered allmulticast mode [ 317.252463][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.487773][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.533243][T11087] syzkaller0: entered promiscuous mode [ 319.567381][T11087] syzkaller0: entered allmulticast mode [ 320.005439][T11061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.284910][T11097] loop3: detected capacity change from 0 to 512 [ 320.518232][T11097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.990704][T11097] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1777: iget: bad i_size value: 38620345925642 [ 321.061390][T11097] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1777: couldn't read orphan inode 15 (err -117) [ 321.078531][T11097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.163064][ T27] audit: type=1804 audit(1787253294.291:297): pid=11097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1777" name="/newroot/433/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 321.253417][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.432546][T11123] syzkaller0: entered promiscuous mode [ 322.438343][T11123] syzkaller0: entered allmulticast mode [ 322.503854][T11125] syzkaller0: entered promiscuous mode [ 322.510721][T11125] syzkaller0: entered allmulticast mode [ 323.308591][T11146] loop1: detected capacity change from 0 to 2048 [ 323.397495][T11146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.458949][ T27] audit: type=1800 audit(1787253296.601:298): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1795" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 323.471899][T11153] syzkaller0: entered promiscuous mode [ 323.543045][T11153] syzkaller0: entered allmulticast mode [ 323.544243][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.113012][T11177] loop0: detected capacity change from 0 to 512 [ 324.150611][T11177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.177779][T11110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.279487][T11177] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1804: iget: bad i_size value: 38620345925642 [ 324.361783][T11177] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1804: couldn't read orphan inode 15 (err -117) [ 324.420030][T11177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.409412][ T27] audit: type=1804 audit(1787253298.541:299): pid=11177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1804" name="/newroot/451/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 325.503279][T11189] syzkaller0: entered promiscuous mode [ 325.508765][T11189] syzkaller0: entered allmulticast mode [ 325.807407][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.942511][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'. [ 326.058885][T11208] loop0: detected capacity change from 0 to 1024 [ 326.115106][T11208] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 326.143261][T11208] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 326.165428][T11208] EXT4-fs (loop0): orphan cleanup on readonly fs [ 326.178234][T11208] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.1810: Invalid inode table block 0 in block_group 0 [ 326.198962][T11208] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 326.209152][T11208] EXT4-fs error (device loop0): ext4_quota_write:7342: inode #3: comm syz.0.1810: mark_inode_dirty error [ 326.226480][T11208] Quota error (device loop0): write_blk: dquota write failed [ 326.236866][T11208] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 326.249183][T11208] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1810: Failed to acquire dquot type 0 [ 326.288539][T11208] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.1810: Invalid inode table block 0 in block_group 0 [ 326.446674][T11208] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 326.474281][T11208] EXT4-fs error (device loop0): ext4_ext_truncate:4535: inode #15: comm syz.0.1810: mark_inode_dirty error [ 326.505982][T11208] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.1810: Invalid inode table block 0 in block_group 0 [ 326.527505][T11208] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 326.552996][T11208] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 326.557322][T11219] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1815'. [ 326.570240][T11208] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.1810: Invalid inode table block 0 in block_group 0 [ 326.591113][T11208] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 326.591172][T11219] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1815'. [ 326.617933][T11208] EXT4-fs error (device loop0): ext4_truncate:4302: inode #15: comm syz.0.1810: mark_inode_dirty error [ 326.641347][T11208] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 326.666114][T11219] syzkaller0: entered promiscuous mode [ 326.673252][T11219] syzkaller0: entered allmulticast mode [ 326.679001][T11208] EXT4-fs (loop0): 1 truncate cleaned up [ 326.714256][T11208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 326.775272][T11208] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.1810: Invalid inode table block 0 in block_group 0 [ 326.849143][T11227] syzkaller0: entered promiscuous mode [ 326.869122][T11227] syzkaller0: entered allmulticast mode [ 326.925342][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.182123][ T28] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 327.222974][ T28] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 328.402695][T11273] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 328.535260][T11269] syzkaller0: entered promiscuous mode [ 328.555672][T11269] syzkaller0: entered allmulticast mode [ 329.404600][T11300] loop0: detected capacity change from 0 to 512 [ 329.439809][T11300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 329.493054][T11300] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1839: iget: bad i_size value: 38620345925642 [ 329.524994][T11310] syzkaller0: entered promiscuous mode [ 329.530724][T11310] syzkaller0: entered allmulticast mode [ 329.539867][T11300] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1839: couldn't read orphan inode 15 (err -117) [ 329.612099][T11300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.690046][ T27] audit: type=1804 audit(1787253302.840:300): pid=11300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1839" name="/newroot/457/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 329.878741][T11300] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1839: bg 0: block 5: invalid block bitmap [ 329.899261][T11300] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 329.918072][T11300] EXT4-fs (loop0): This should not happen!! Data will be lost [ 329.918072][T11300] [ 329.931701][T11300] EXT4-fs (loop0): Total free blocks count 0 [ 329.937809][T11300] EXT4-fs (loop0): Free/Dirty block details [ 329.944364][T11300] EXT4-fs (loop0): free_blocks=0 [ 329.949445][T11300] EXT4-fs (loop0): dirty_blocks=1 [ 329.955057][T11300] EXT4-fs (loop0): Block reservation details [ 329.969152][T11300] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 330.085346][T11322] loop2: detected capacity change from 0 to 512 [ 330.097626][T11322] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 330.149163][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.206751][T11322] EXT4-fs (loop2): 1 truncate cleaned up [ 330.248578][T11322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.588406][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.606909][T11336] loop3: detected capacity change from 0 to 512 [ 330.657268][T11336] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a81ec018, mo2=0002] [ 330.727255][T11336] System zones: 0-2, 18-18, 34-35 [ 330.761809][T11336] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.1855: pblk 19 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 330.827779][T11336] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.1855: Bad quota inode: 4, type: 1 [ 330.839326][T11336] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 330.862025][T11336] EXT4-fs (loop3): mount failed [ 331.428021][ T27] audit: type=1326 audit(1787253304.580:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.0.1859" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbadb9e0d9 code=0x7ffc0000 [ 331.508475][ T27] audit: type=1326 audit(1787253304.620:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.0.1859" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbadb9e0d9 code=0x7ffc0000 [ 331.607996][ T27] audit: type=1326 audit(1787253304.620:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.0.1859" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbadb9e0d9 code=0x7ffc0000 [ 331.728096][ T27] audit: type=1326 audit(1787253304.620:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.0.1859" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fcbadb9e0d9 code=0x7ffc0000 [ 331.775127][ T27] audit: type=1326 audit(1787253304.620:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.0.1859" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbadb9e0d9 code=0x7ffc0000 [ 331.852251][ T27] audit: type=1326 audit(1787253304.620:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.0.1859" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbadb9e0d9 code=0x7ffc0000 [ 331.909704][ T27] audit: type=1326 audit(1787253304.620:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.0.1859" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbadb9e0d9 code=0x7ffc0000 [ 332.030342][ T27] audit: type=1326 audit(1787253304.620:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.0.1859" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbadb9e0d9 code=0x7ffc0000 [ 332.104669][ T27] audit: type=1326 audit(1787253304.620:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.0.1859" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbadb9e0d9 code=0x7ffc0000 [ 332.196193][ T27] audit: type=1326 audit(1787253304.620:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.0.1859" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fcbadb9e0d9 code=0x7ffc0000 [ 332.523478][T11376] syzkaller0: entered promiscuous mode [ 332.552688][T11376] syzkaller0: entered allmulticast mode [ 332.667908][T11379] syzkaller0: entered promiscuous mode [ 332.678326][T11379] syzkaller0: entered allmulticast mode [ 332.929045][T11383] loop3: detected capacity change from 0 to 512 [ 332.968041][T11383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.051386][T11383] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1877: iget: bad i_size value: 38620345925642 [ 333.077565][T11383] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1877: couldn't read orphan inode 15 (err -117) [ 333.096680][T11383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.211153][T11393] loop0: detected capacity change from 0 to 128 [ 333.371238][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.534021][T11396] loop0: detected capacity change from 0 to 512 [ 333.576210][T11396] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1880: iget: bad extended attribute block 1 [ 333.645655][T11396] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1880: couldn't read orphan inode 15 (err -117) [ 333.676428][T11396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.759784][T11403] syzkaller0: entered promiscuous mode [ 333.765387][T11403] syzkaller0: entered allmulticast mode [ 334.104221][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.078085][T11448] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 336.114089][T11451] loop3: detected capacity change from 0 to 2048 [ 336.219495][T11451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.440199][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.656469][T11468] loop0: detected capacity change from 0 to 764 [ 336.731588][T11468] netlink: 'syz.0.1910': attribute type 9 has an invalid length. [ 336.767832][T11468] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.1910'. [ 336.998948][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 336.998961][ T27] audit: type=1326 audit(1787253310.149:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.2.1907" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f741819e0d9 code=0x0 [ 337.429425][T11485] loop0: detected capacity change from 0 to 512 [ 337.519081][T11485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.709228][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.296339][T11499] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 338.619351][T11522] syzkaller0: entered promiscuous mode [ 338.637175][T11522] syzkaller0: entered allmulticast mode [ 338.998164][ T27] audit: type=1326 audit(1787253312.149:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.2.1929" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f741819e0d9 code=0x0 [ 339.577715][T11544] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1942'. [ 339.628181][T11550] loop3: detected capacity change from 0 to 128 [ 339.698587][T11549] syzkaller0: entered promiscuous mode [ 339.705630][T11549] syzkaller0: entered allmulticast mode [ 339.733438][T11550] loop3: detected capacity change from 128 to 0 [ 339.761628][T11551] syz.3.1943: attempt to access beyond end of device [ 339.761628][T11551] loop3: rw=0, sector=4, nr_sectors = 1 limit=0 [ 339.790618][T11551] FAT-fs (loop3): Directory bread(block 4) failed [ 339.816758][T11551] syz.3.1943: attempt to access beyond end of device [ 339.816758][T11551] loop3: rw=0, sector=5, nr_sectors = 1 limit=0 [ 339.851361][T11551] FAT-fs (loop3): Directory bread(block 5) failed [ 339.871099][T11555] loop0: detected capacity change from 0 to 512 [ 339.882004][T11551] syz.3.1943: attempt to access beyond end of device [ 339.882004][T11551] loop3: rw=0, sector=6, nr_sectors = 1 limit=0 [ 339.897834][T11555] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 339.911331][T11551] FAT-fs (loop3): Directory bread(block 6) failed [ 339.938147][T11551] syz.3.1943: attempt to access beyond end of device [ 339.938147][T11551] loop3: rw=0, sector=4, nr_sectors = 1 limit=0 [ 339.964707][T11551] FAT-fs (loop3): Directory bread(block 4) failed [ 339.972558][T11551] syz.3.1943: attempt to access beyond end of device [ 339.972558][T11551] loop3: rw=0, sector=5, nr_sectors = 1 limit=0 [ 339.972975][T11555] EXT4-fs (loop0): 1 truncate cleaned up [ 339.997181][T11551] FAT-fs (loop3): Directory bread(block 5) failed [ 340.000099][T11560] loop1: detected capacity change from 0 to 512 [ 340.031062][T11551] syz.3.1943: attempt to access beyond end of device [ 340.031062][T11551] loop3: rw=0, sector=6, nr_sectors = 1 limit=0 [ 340.064262][T11560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.075018][T11551] FAT-fs (loop3): Directory bread(block 6) failed [ 340.088596][T11551] syz.3.1943: attempt to access beyond end of device [ 340.088596][T11551] loop3: rw=2049, sector=3, nr_sectors = 1 limit=0 [ 340.097443][T11560] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1949: iget: bad i_size value: 38620345925642 [ 340.118976][T11551] Buffer I/O error on dev loop3, logical block 3, lost sync page write [ 340.132872][T11555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.164406][T11551] syz.3.1943: attempt to access beyond end of device [ 340.164406][T11551] loop3: rw=0, sector=3, nr_sectors = 1 limit=0 [ 340.178622][T11551] FAT-fs (loop3): Directory bread(block 3) failed [ 340.186197][T11551] syz.3.1943: attempt to access beyond end of device [ 340.186197][T11551] loop3: rw=0, sector=4, nr_sectors = 1 limit=0 [ 340.200849][T11560] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1949: couldn't read orphan inode 15 (err -117) [ 340.217657][T11551] FAT-fs (loop3): Directory bread(block 4) failed [ 340.225819][T11560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.238545][T11551] syz.3.1943: attempt to access beyond end of device [ 340.238545][T11551] loop3: rw=0, sector=5, nr_sectors = 1 limit=0 [ 340.271558][T11551] FAT-fs (loop3): Directory bread(block 5) failed [ 340.288644][T11551] FAT-fs (loop3): Directory bread(block 6) failed [ 340.334815][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.337467][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.459957][ T8761] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 340.497093][ T5768] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 340.505657][ T8761] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.009709][T11576] loop0: detected capacity change from 0 to 2048 [ 341.069662][T11576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.215036][ T27] audit: type=1800 audit(1787253314.359:318): pid=11576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1957" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 341.261927][ T7595] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.319306][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.430459][ T7595] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.587804][T11586] loop2: detected capacity change from 0 to 512 [ 341.597984][ T7595] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.663769][T11586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.699809][T11586] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1960: iget: bad i_size value: 38620345925642 [ 341.767451][T11586] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1960: couldn't read orphan inode 15 (err -117) [ 341.806718][T11590] loop1: detected capacity change from 0 to 764 [ 341.862585][ T7595] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.863678][T11590] netlink: 'syz.1.1961': attribute type 9 has an invalid length. [ 341.882968][T11586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.911487][T11590] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.1961'. [ 342.093897][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.110532][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.126983][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.144664][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.197051][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.218290][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.226745][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.349852][T11598] loop2: detected capacity change from 0 to 512 [ 342.358824][T11598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 342.382716][T11598] EXT4-fs (loop2): 1 truncate cleaned up [ 342.389681][T11598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.555917][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.222224][T11624] loop2: detected capacity change from 0 to 2048 [ 343.248199][ T5814] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 343.270002][ T5814] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.358649][T11629] loop0: detected capacity change from 0 to 512 [ 343.359174][T11624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.423866][ T27] audit: type=1800 audit(1787253316.579:319): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1967" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 343.424101][T11629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.577427][T11629] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1970: iget: bad i_size value: 38620345925642 [ 343.620786][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.674281][T11629] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1970: couldn't read orphan inode 15 (err -117) [ 343.728070][T11629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.976894][T11644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 344.003859][T11644] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.023102][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.152159][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 344.292882][ T5785] Bluetooth: hci1: command tx timeout [ 344.325294][T11593] chnl_net:caif_netlink_parms(): no params data found [ 344.418787][T11651] netlink: 'syz.2.1973': attribute type 9 has an invalid length. [ 344.433421][T11651] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.1973'. [ 344.448103][T11653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 344.485879][T11653] EXT4-fs (loop1): 1 truncate cleaned up [ 344.500183][T11653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.690337][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.733294][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 344.996172][T11674] set_capacity_and_notify: 3 callbacks suppressed [ 344.996190][T11674] loop2: detected capacity change from 0 to 2048 [ 345.121617][T11674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.216581][ T27] audit: type=1800 audit(1787253318.358:320): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1979" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 345.337035][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.556814][T11593] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.575492][T11593] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.583856][ T5814] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 345.601020][T11593] bridge_slave_0: entered allmulticast mode [ 345.623535][T11593] bridge_slave_0: entered promiscuous mode [ 345.636544][ T5814] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 345.688810][ T7595] hsr_slave_0: left promiscuous mode [ 345.700121][ T7595] hsr_slave_1: left promiscuous mode [ 345.714185][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.746938][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.758577][T11699] loop1: detected capacity change from 0 to 512 [ 345.782801][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.802649][T11699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 345.812818][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.828830][ T7595] bridge_slave_0: left allmulticast mode [ 345.835963][ T7595] bridge_slave_0: left promiscuous mode [ 345.843615][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.901641][T11699] EXT4-fs (loop1): 1 truncate cleaned up [ 345.943155][T11699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.023349][ T7595] veth1_macvtap: left promiscuous mode [ 346.029523][ T7595] veth0_macvtap: left promiscuous mode [ 346.052474][ T7595] veth1_vlan: left promiscuous mode [ 346.058124][ T7595] veth0_vlan: left promiscuous mode [ 346.156689][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.320588][T11706] loop1: detected capacity change from 0 to 128 [ 346.372704][ T5785] Bluetooth: hci1: command tx timeout [ 346.504640][T11708] loop2: detected capacity change from 0 to 128 [ 346.639264][T11708] loop2: detected capacity change from 128 to 0 [ 346.671352][T11708] bio_check_eod: 6 callbacks suppressed [ 346.671363][T11708] syz.2.1987: attempt to access beyond end of device [ 346.671363][T11708] loop2: rw=0, sector=3, nr_sectors = 1 limit=0 [ 346.723025][T11708] FAT-fs (loop2): Directory bread(block 3) failed [ 346.755179][T11708] syz.2.1987: attempt to access beyond end of device [ 346.755179][T11708] loop2: rw=0, sector=4, nr_sectors = 1 limit=0 [ 346.783854][T11711] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17 [ 346.805221][T11708] FAT-fs (loop2): Directory bread(block 4) failed [ 346.819311][T11708] syz.2.1987: attempt to access beyond end of device [ 346.819311][T11708] loop2: rw=0, sector=5, nr_sectors = 1 limit=0 [ 346.847539][T11708] FAT-fs (loop2): Directory bread(block 5) failed [ 346.864864][T11708] syz.2.1987: attempt to access beyond end of device [ 346.864864][T11708] loop2: rw=0, sector=6, nr_sectors = 1 limit=0 [ 346.902135][T11708] FAT-fs (loop2): Directory bread(block 6) failed [ 346.908935][T11708] syz.2.1987: attempt to access beyond end of device [ 346.908935][T11708] loop2: rw=0, sector=3, nr_sectors = 1 limit=0 [ 346.922504][T11708] FAT-fs (loop2): Directory bread(block 3) failed [ 346.929266][T11708] syz.2.1987: attempt to access beyond end of device [ 346.929266][T11708] loop2: rw=0, sector=4, nr_sectors = 1 limit=0 [ 346.943773][T11708] FAT-fs (loop2): Directory bread(block 4) failed [ 346.950481][T11708] syz.2.1987: attempt to access beyond end of device [ 346.950481][T11708] loop2: rw=0, sector=5, nr_sectors = 1 limit=0 [ 346.964194][T11708] FAT-fs (loop2): Directory bread(block 5) failed [ 346.971440][T11708] syz.2.1987: attempt to access beyond end of device [ 346.971440][T11708] loop2: rw=0, sector=6, nr_sectors = 1 limit=0 [ 346.984602][T11708] FAT-fs (loop2): Directory bread(block 6) failed [ 346.991366][T11708] syz.2.1987: attempt to access beyond end of device [ 346.991366][T11708] loop2: rw=0, sector=3, nr_sectors = 1 limit=0 [ 347.040360][T11708] FAT-fs (loop2): Directory bread(block 3) failed [ 347.047124][T11708] syz.2.1987: attempt to access beyond end of device [ 347.047124][T11708] loop2: rw=0, sector=4, nr_sectors = 1 limit=0 [ 347.060284][T11708] FAT-fs (loop2): Directory bread(block 4) failed [ 347.256769][ T5778] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 347.774787][ T7595] team0 (unregistering): Port device team_slave_1 removed [ 347.814539][ T7595] team0 (unregistering): Port device team_slave_0 removed [ 347.863248][ T7595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.915382][ T7595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.969564][ T7595] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 348.238707][ T7595] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 348.248280][ T7595] bond0 (unregistering): Released all slaves [ 348.357344][T11593] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.365922][T11593] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.373316][T11593] bridge_slave_1: entered allmulticast mode [ 348.380713][T11593] bridge_slave_1: entered promiscuous mode [ 348.462573][ T5785] Bluetooth: hci1: command tx timeout [ 348.544524][T11593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.575896][T11593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.641290][T11593] team0: Port device team_slave_0 added [ 348.681137][T11593] team0: Port device team_slave_1 added [ 348.740837][T11593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.751788][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.823971][T11593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.854877][T11593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.872364][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.913834][T11593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.101522][T11593] hsr_slave_0: entered promiscuous mode [ 349.121315][T11593] hsr_slave_1: entered promiscuous mode [ 349.736259][T11741] loop1: detected capacity change from 0 to 128 [ 349.812705][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 349.994606][T11593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.016355][T11593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.042188][T11593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.085322][T11593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.153523][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.165822][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.179809][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.195625][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.205132][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 350.218629][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.542911][ T5779] Bluetooth: hci1: command tx timeout [ 350.611650][T11593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.814479][T11593] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.914958][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.922106][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.007688][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.014934][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.115830][ T7595] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.208459][T11593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.253380][T11778] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input18 [ 351.269114][T11593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.418249][ T7595] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.459340][T11747] chnl_net:caif_netlink_parms(): no params data found [ 351.570692][ T7595] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.698559][ T7595] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.882906][T11593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.123588][T11747] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.153227][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.161139][T11747] bridge_slave_0: entered allmulticast mode [ 352.199590][T11747] bridge_slave_0: entered promiscuous mode [ 352.237097][T11747] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.255056][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.278807][T11747] bridge_slave_1: entered allmulticast mode [ 352.294425][T11747] bridge_slave_1: entered promiscuous mode [ 352.315741][ T5779] Bluetooth: hci2: command tx timeout [ 352.462048][T11747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.512205][T11747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.666902][T11747] team0: Port device team_slave_0 added [ 352.859409][T11747] team0: Port device team_slave_1 added [ 353.015928][T11819] loop1: detected capacity change from 0 to 128 [ 353.060681][T11819] loop1: detected capacity change from 0 to 512 [ 353.077956][T11747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.080598][T11819] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2008: iget: bad extended attribute block 1 [ 353.085278][T11747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.085306][T11747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.096696][T11747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.142901][T11747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.171048][T11747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.219359][T11819] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2008: couldn't read orphan inode 15 (err -117) [ 353.241962][T11819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.339073][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.592433][T11747] hsr_slave_0: entered promiscuous mode [ 353.606340][T11830] loop0: detected capacity change from 0 to 512 [ 353.623855][T11747] hsr_slave_1: entered promiscuous mode [ 353.638161][T11830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.650526][T11747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.661175][T11747] Cannot create hsr debugfs directory [ 353.678472][T11830] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2011: iget: bad i_size value: 38620345925642 [ 353.786478][T11830] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2011: couldn't read orphan inode 15 (err -117) [ 353.855572][T11830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.001526][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.098397][T11593] veth0_vlan: entered promiscuous mode [ 354.137721][T11593] veth1_vlan: entered promiscuous mode [ 354.241552][T11840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input19 [ 354.383233][ T5779] Bluetooth: hci2: command tx timeout [ 354.426266][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 354.558147][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2014'. [ 354.632054][T11593] veth0_macvtap: entered promiscuous mode [ 354.764947][T11855] loop0: detected capacity change from 0 to 128 [ 354.851062][T11593] veth1_macvtap: entered promiscuous mode [ 354.868316][T11855] loop0: detected capacity change from 0 to 512 [ 354.946799][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.963122][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.973400][T11855] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2015: iget: bad extended attribute block 1 [ 354.993235][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.003820][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.014569][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.033091][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.046263][T11593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.053980][T11855] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2015: couldn't read orphan inode 15 (err -117) [ 355.059400][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.077058][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.093201][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.131103][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.150817][T11855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.152308][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.213301][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.235895][T11593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.349592][ T7595] hsr_slave_0: left promiscuous mode [ 355.369091][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.378692][ T7595] hsr_slave_1: left promiscuous mode [ 355.427508][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.467703][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.484608][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.514416][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.558785][ T7595] bridge_slave_0: left allmulticast mode [ 355.576630][ T7595] bridge_slave_0: left promiscuous mode [ 355.588157][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.687257][ T7595] veth1_macvtap: left promiscuous mode [ 355.692861][ T7595] veth0_macvtap: left promiscuous mode [ 355.713371][ T7595] veth1_vlan: left promiscuous mode [ 355.719197][ T7595] veth0_vlan: left promiscuous mode [ 355.745199][T11872] loop1: detected capacity change from 0 to 512 [ 355.798329][T11872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.832723][T11872] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2018: iget: bad i_size value: 38620345925642 [ 355.874619][T11872] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2018: couldn't read orphan inode 15 (err -117) [ 355.946124][T11872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.093528][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.422260][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2021'. [ 356.463516][ T5779] Bluetooth: hci2: command tx timeout [ 356.508192][T11890] loop1: detected capacity change from 0 to 128 [ 356.576911][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 356.672238][T11890] loop1: detected capacity change from 0 to 512 [ 356.704613][T11890] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2022: iget: bad extended attribute block 1 [ 356.718761][T11890] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2022: couldn't read orphan inode 15 (err -117) [ 356.733965][T11890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.818691][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.977300][ T7595] team0 (unregistering): Port device team_slave_1 removed [ 357.056472][ T7595] team0 (unregistering): Port device team_slave_0 removed [ 357.178831][ T7595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.251031][ T7595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.302223][ T7595] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 357.385284][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 357.758415][ T7595] bond0 (unregistering): Released all slaves [ 357.907092][T11593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.916645][T11593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.929106][T11593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.955125][T11593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.056193][T11913] syzkaller0: entered promiscuous mode [ 358.071832][T11913] syzkaller0: entered allmulticast mode [ 358.080029][T11747] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 358.101334][T11747] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 358.143014][T11913] tipc: Started in network mode [ 358.150978][T11913] tipc: Node identity ea6556f65e2, cluster identity 4711 [ 358.165064][T11913] tipc: Enabled bearer , priority 0 [ 358.173193][T11747] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 358.238959][T11912] tipc: Resetting bearer [ 358.282372][T11912] tipc: Disabling bearer [ 358.300836][T11747] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 358.456579][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.468972][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.534063][ T5779] Bluetooth: hci2: command tx timeout [ 358.656686][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.686163][T11747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.696549][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.762004][T11747] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.803304][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.810533][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.878446][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.885661][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.052268][T11747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.244347][T11945] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2042'. [ 359.265533][T11945] netlink: 316 bytes leftover after parsing attributes in process `syz.1.2042'. [ 359.687401][T11747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.254723][T11747] veth0_vlan: entered promiscuous mode [ 362.318659][T11747] veth1_vlan: entered promiscuous mode [ 362.426872][T11747] veth0_macvtap: entered promiscuous mode [ 362.475737][T11747] veth1_macvtap: entered promiscuous mode [ 362.531710][T11747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.582653][T11747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.623481][T11747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.656445][T11747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.683838][T11747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.713849][T11747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.745381][T11747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.803712][T11747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.834243][T11747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.852258][T11747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.884007][T11747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.928819][T11747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.939735][T11747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.956361][T11747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.042933][T11747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.067747][T11747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.093997][T11747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.117936][T11747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.211439][T12042] loop4: detected capacity change from 0 to 2048 [ 363.228578][T12040] 9pnet: Could not find request transport: fd0x0000000000000003 [ 363.300354][T12042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.313128][T12042] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.415654][T12042] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.2066: bg 0: block 345: padding at end of block bitmap is not set [ 363.446977][T12042] EXT4-fs (loop4): Remounting filesystem read-only [ 363.523375][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.542540][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.566996][T11593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.662133][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.714772][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.661639][T12103] loop4: detected capacity change from 0 to 764 [ 365.740695][T12103] netlink: 'syz.4.2086': attribute type 9 has an invalid length. [ 365.787900][T12103] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2086'. [ 367.533049][T12156] loop0: detected capacity change from 0 to 764 [ 368.032252][T12171] syzkaller0: entered promiscuous mode [ 368.044586][T12171] syzkaller0: entered allmulticast mode [ 368.662046][T12195] loop1: detected capacity change from 0 to 764 [ 369.235378][T12216] loop0: detected capacity change from 0 to 128 [ 369.408335][T12225] loop0: detected capacity change from 0 to 512 [ 369.475630][T12225] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2122: iget: bad extended attribute block 1 [ 369.602879][T12225] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2122: couldn't read orphan inode 15 (err -117) [ 369.612359][T12234] loop4: detected capacity change from 0 to 764 [ 369.662476][T12225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.891397][ T27] audit: type=1326 audit(1787253343.035:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.5.2118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff80ad9e0d9 code=0x0 [ 370.107529][T12247] loop4: detected capacity change from 0 to 128 [ 370.175682][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.203510][ T6859] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.241217][T12252] loop1: detected capacity change from 0 to 512 [ 370.289520][T12253] loop4: detected capacity change from 0 to 512 [ 370.294875][ T6859] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.323386][ T6859] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.342836][T12252] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2133: iget: bad i_size value: 38620345925642 [ 370.394113][ T6859] Buffer I/O error on dev loop4, logical block 0, async page read [ 370.449119][T12252] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2133: couldn't read orphan inode 15 (err -117) [ 370.464028][T12253] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2132: iget: bad extended attribute block 1 [ 370.489337][T12252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.626821][T12253] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2132: couldn't read orphan inode 15 (err -117) [ 370.668830][T12253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.732401][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.769815][T12267] X25: received unknown 00 with LCI 000 [ 370.886292][T12270] loop5: detected capacity change from 0 to 764 [ 371.023355][T11593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.231549][T12281] loop5: detected capacity change from 0 to 128 [ 371.372312][T12285] loop5: detected capacity change from 0 to 512 [ 371.424780][T12285] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2142: iget: bad extended attribute block 1 [ 371.458252][T12290] syzkaller0: entered promiscuous mode [ 371.463924][T12290] syzkaller0: entered allmulticast mode [ 371.555579][T12285] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2142: couldn't read orphan inode 15 (err -117) [ 371.624258][T12285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.903830][T12304] X25: received unknown 00 with LCI 000 [ 372.170301][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.098657][T12352] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 373.161765][T12352] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 373.232090][T12352] EXT4-fs (loop5): invalid journal inode [ 373.270933][T12352] EXT4-fs (loop5): can't get journal size [ 373.292299][T12352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 373.473526][T12365] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2162: iget: bad extended attribute block 1 [ 373.547882][T12365] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2162: couldn't read orphan inode 15 (err -117) [ 373.610814][T12365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.761373][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.134031][T11593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.271176][T12397] set_capacity_and_notify: 5 callbacks suppressed [ 374.271218][T12397] loop5: detected capacity change from 0 to 128 [ 374.348226][T12399] X25: received unknown 00 with LCI 000 [ 374.579589][T12404] loop5: detected capacity change from 0 to 512 [ 374.632260][T12404] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2173: iget: bad extended attribute block 1 [ 374.686185][T12404] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2173: couldn't read orphan inode 15 (err -117) [ 374.749552][T12404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.880795][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 375.039414][T12422] loop1: detected capacity change from 0 to 128 [ 375.170628][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.208689][T12429] loop1: detected capacity change from 0 to 512 [ 375.339566][T12429] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2180: iget: bad extended attribute block 1 [ 375.405888][T12429] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2180: couldn't read orphan inode 15 (err -117) [ 375.442137][T12429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.896518][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 375.940790][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.998876][T12460] loop5: detected capacity change from 0 to 128 [ 376.866978][T12469] loop5: detected capacity change from 0 to 512 [ 376.951630][T12469] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2191: iget: bad extended attribute block 1 [ 376.965846][T12474] loop0: detected capacity change from 0 to 764 [ 377.045977][T12469] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2191: couldn't read orphan inode 15 (err -117) [ 377.119665][T12469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.369953][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.572085][T12495] loop5: detected capacity change from 0 to 128 [ 377.687106][ T5783] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 377.792570][T12506] loop5: detected capacity change from 0 to 512 [ 377.793135][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 377.874000][T12506] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2200: iget: bad extended attribute block 1 [ 377.927792][T12506] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2200: couldn't read orphan inode 15 (err -117) [ 377.963688][T12506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.334886][T12525] loop1: detected capacity change from 0 to 128 [ 378.430640][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.509518][T12531] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2208: iget: bad extended attribute block 1 [ 378.575868][T12531] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2208: couldn't read orphan inode 15 (err -117) [ 378.648918][T12531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.714753][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.725803][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.973963][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'. [ 379.252462][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.419243][T12566] set_capacity_and_notify: 1 callbacks suppressed [ 379.419259][T12566] loop0: detected capacity change from 0 to 128 [ 379.671045][T12578] loop0: detected capacity change from 0 to 512 [ 379.750854][T12578] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2218: iget: bad extended attribute block 1 [ 379.838155][T12578] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2218: couldn't read orphan inode 15 (err -117) [ 379.853241][T12578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.862922][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2223'. [ 380.285391][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.128718][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 381.863114][T12650] loop1: detected capacity change from 0 to 764 [ 382.073583][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 383.250123][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2256'. [ 383.665132][T12716] loop1: detected capacity change from 0 to 128 [ 383.833696][T12723] loop1: detected capacity change from 0 to 512 [ 383.881917][T12723] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2259: iget: bad extended attribute block 1 [ 383.933291][T12723] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2259: couldn't read orphan inode 15 (err -117) [ 384.002845][T12723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.518453][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2265'. [ 384.521989][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.927770][T12766] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(14) [ 385.053369][T12769] loop0: detected capacity change from 0 to 764 [ 385.370316][T12780] loop1: detected capacity change from 0 to 128 [ 385.388716][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2276'. [ 385.557669][T12787] loop1: detected capacity change from 0 to 512 [ 385.618986][T12787] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2275: iget: bad extended attribute block 1 [ 385.644823][T12787] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2275: couldn't read orphan inode 15 (err -117) [ 385.775698][T12787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.080514][T12807] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(14) [ 386.104770][T12809] loop0: detected capacity change from 0 to 764 [ 386.284274][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.549539][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'. [ 386.633036][T12823] random: crng reseeded on system resumption [ 387.219166][T12839] loop1: detected capacity change from 0 to 764 [ 387.356877][T12841] loop0: detected capacity change from 0 to 128 [ 387.465547][ T6859] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 387.581280][T12852] loop0: detected capacity change from 0 to 512 [ 387.588046][ T6859] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 387.658183][T12852] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2293: iget: bad extended attribute block 1 [ 387.711432][T12852] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2293: couldn't read orphan inode 15 (err -117) [ 387.770736][T12852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.684989][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.930826][T12870] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 389.012452][T12873] loop4: detected capacity change from 0 to 764 [ 389.494361][T12885] loop5: detected capacity change from 0 to 128 [ 389.654475][T12886] loop5: detected capacity change from 0 to 512 [ 389.710026][T12886] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2307: iget: bad extended attribute block 1 [ 389.816895][T12886] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2307: couldn't read orphan inode 15 (err -117) [ 389.909626][T12886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.933311][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.944968][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.957381][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.984151][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 390.012025][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 390.023934][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 390.384837][ T2955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.387275][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.585773][T12904] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 390.805068][ T2955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.426185][ T2955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.583977][ T2955] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.023519][T12889] chnl_net:caif_netlink_parms(): no params data found [ 392.061052][ T5779] Bluetooth: hci0: command tx timeout [ 392.151847][T12932] loop4: detected capacity change from 0 to 128 [ 392.205126][ T2955] tipc: Left network mode [ 392.346817][T12942] loop4: detected capacity change from 0 to 512 [ 392.464655][T12942] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2317: iget: bad extended attribute block 1 [ 392.532317][T12942] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2317: couldn't read orphan inode 15 (err -117) [ 392.593231][T12942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.631403][T12950] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 392.633685][T12889] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.678605][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.682196][T12953] loop0: detected capacity change from 0 to 128 [ 392.685844][T12889] bridge_slave_0: entered allmulticast mode [ 392.723967][T12889] bridge_slave_0: entered promiscuous mode [ 392.732058][T12953] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 392.749210][T12889] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.756385][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.779339][T12889] bridge_slave_1: entered allmulticast mode [ 392.796351][T12953] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 392.841903][T12889] bridge_slave_1: entered promiscuous mode [ 392.947998][T12889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.063904][T12889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.064681][T11593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.237156][T12889] team0: Port device team_slave_0 added [ 393.261208][T12889] team0: Port device team_slave_1 added [ 393.548317][T12889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.575491][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.673028][T12889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.708315][T12984] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 393.711831][T12983] loop5: detected capacity change from 0 to 764 [ 393.729193][T12889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.758975][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.868237][T12889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.118256][T12991] loop5: detected capacity change from 0 to 128 [ 394.137834][ T5779] Bluetooth: hci0: command tx timeout [ 394.256405][T12996] loop5: detected capacity change from 0 to 512 [ 394.331869][T12996] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2331: iget: bad extended attribute block 1 [ 394.369534][T12996] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2331: couldn't read orphan inode 15 (err -117) [ 394.402632][T12889] hsr_slave_0: entered promiscuous mode [ 394.426730][T12996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.449726][T12889] hsr_slave_1: entered promiscuous mode [ 394.482322][T12889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.516201][T12889] Cannot create hsr debugfs directory [ 394.525644][T13003] netlink: 'syz.4.2333': attribute type 3 has an invalid length. [ 394.561298][T13003] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.2333'. [ 394.635745][T13000] PF_CAN: dropped non conform CAN XL skbuff: dev type 1, len 40 [ 394.924465][ T2955] hsr_slave_0: left promiscuous mode [ 394.944013][ T2955] hsr_slave_1: left promiscuous mode [ 394.967123][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.978210][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.992723][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.040906][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.075025][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.094305][ T2955] bridge_slave_0: left allmulticast mode [ 395.117827][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.507145][ T2955] veth1_macvtap: left promiscuous mode [ 395.563893][ T2955] veth0_macvtap: left promiscuous mode [ 395.635548][ T2955] veth1_vlan: left promiscuous mode [ 395.690208][ T2955] veth0_vlan: left promiscuous mode [ 396.211379][T13029] loop5: detected capacity change from 0 to 764 [ 396.218091][ T5779] Bluetooth: hci0: command tx timeout [ 397.132187][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 397.190934][ T2955] team0 (unregistering): Port device team_slave_0 removed [ 397.264806][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.350567][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.431021][ T2955] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 397.693372][T13051] loop5: detected capacity change from 0 to 128 [ 397.805185][T13052] loop5: detected capacity change from 0 to 512 [ 397.833426][T13052] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2342: iget: bad extended attribute block 1 [ 397.848565][T13052] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2342: couldn't read orphan inode 15 (err -117) [ 397.862993][T13052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.879998][ T2955] bond0 (unregistering): Released all slaves [ 398.304527][ T5779] Bluetooth: hci0: command tx timeout [ 399.369417][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.501830][T13073] loop0: detected capacity change from 0 to 764 [ 399.567980][T12889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 399.653861][T12889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 399.684906][T12889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 399.749609][T12889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 399.965172][T13085] syzkaller0: entered promiscuous mode [ 399.993225][T13085] syzkaller0: entered allmulticast mode [ 400.383014][T12889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.402594][T13097] loop0: detected capacity change from 0 to 128 [ 400.439955][T12889] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.475681][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.482935][ T7595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.506626][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.513868][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.523382][T13097] loop0: detected capacity change from 0 to 512 [ 400.573196][T13097] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2354: iget: bad extended attribute block 1 [ 400.633065][T13097] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2354: couldn't read orphan inode 15 (err -117) [ 400.664006][T13097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.038847][T13105] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 401.488777][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.886364][T13125] loop5: detected capacity change from 0 to 512 [ 401.947946][T13125] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start ffffffff) [ 401.960066][T13127] syzkaller0: entered promiscuous mode [ 401.965587][T13127] syzkaller0: entered allmulticast mode [ 401.985574][T13125] FAT-fs (loop5): Filesystem has been set read-only [ 402.205017][T13137] loop5: detected capacity change from 0 to 128 [ 402.279844][T12889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.352584][T13137] loop5: detected capacity change from 0 to 512 [ 402.396726][T13137] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2363: iget: bad extended attribute block 1 [ 402.469015][T13137] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2363: couldn't read orphan inode 15 (err -117) [ 402.689819][T13137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.727817][T12889] veth0_vlan: entered promiscuous mode [ 403.074968][T12889] veth1_vlan: entered promiscuous mode [ 403.172807][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.477252][T12889] veth0_macvtap: entered promiscuous mode [ 403.534326][T12889] veth1_macvtap: entered promiscuous mode [ 403.628837][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.653252][T13160] loop4: detected capacity change from 0 to 512 [ 403.662160][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.686709][T13160] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 403.708627][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.731791][T13160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 403.748702][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.782613][T13160] System zones: 1-12 [ 403.786879][T13160] EXT4-fs (loop4): orphan cleanup on readonly fs [ 403.802079][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.888680][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.909478][T13160] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.2368: attempt to clear invalid blocks 1024 len 1 [ 403.944819][T12889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.967104][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.984319][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.998804][T13160] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.2368: bg 0: block 361: padding at end of block bitmap is not set [ 404.003237][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.024218][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.034605][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.049923][T13160] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 404.068780][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.088695][T13160] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2368: invalid indirect mapped block 1811939328 (level 0) [ 404.090418][T12889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.142461][T13160] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2368: invalid indirect mapped block 2 (level 2) [ 404.164704][T12889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.196807][T13160] EXT4-fs (loop4): 1 truncate cleaned up [ 404.199192][T12889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.209874][T13160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 404.226788][T12889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.255671][T12889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.424004][ T27] audit: type=1326 audit(1787253377.561:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz.5.2370" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff80ad9e0d9 code=0x0 [ 404.450451][T11593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 404.555223][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.590372][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.664341][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.681344][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.747546][T13190] loop0: detected capacity change from 0 to 128 [ 404.841700][ T5783] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 404.928227][T13190] loop0: detected capacity change from 0 to 512 [ 404.928513][ T5783] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 405.323998][T13190] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2373: iget: bad extended attribute block 1 [ 405.504262][T13190] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2373: couldn't read orphan inode 15 (err -117) [ 405.727708][T13190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.953296][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.307005][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.324298][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.338896][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.369493][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.384134][T13250] loop4: detected capacity change from 0 to 256 [ 407.390755][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 407.400111][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.510954][ T8] kernel write not supported for file /keys (pid: 8 comm: kworker/0:0) [ 407.611436][T13258] loop5: detected capacity change from 0 to 128 [ 407.682972][ T6859] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 407.795903][T13261] loop5: detected capacity change from 0 to 512 [ 407.796434][ T6859] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 407.847150][ T6859] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.861642][ T6859] Buffer I/O error on dev loop5, logical block 0, async page read [ 407.920547][T13261] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2393: iget: bad extended attribute block 1 [ 407.951726][T13261] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2393: couldn't read orphan inode 15 (err -117) [ 407.988200][T13261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.185345][ T4890] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.377368][ T4890] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.443603][T13246] chnl_net:caif_netlink_parms(): no params data found [ 408.473124][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.555569][ T4890] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.726222][ T4890] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.874336][T13284] netlink: 'syz.1.2400': attribute type 3 has an invalid length. [ 408.907449][T13284] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.2400'. [ 408.936288][T13246] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.944552][T13246] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.951958][T13246] bridge_slave_0: entered allmulticast mode [ 408.959335][T13246] bridge_slave_0: entered promiscuous mode [ 408.968415][T13246] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.975733][T13246] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.983096][T13246] bridge_slave_1: entered allmulticast mode [ 408.991066][T13246] bridge_slave_1: entered promiscuous mode [ 409.028232][T13246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.082718][T13246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.172328][T13246] team0: Port device team_slave_0 added [ 409.254094][T13246] team0: Port device team_slave_1 added [ 409.321508][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.330565][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.355007][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.370549][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.380685][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.389083][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.450525][T13246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.495586][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.539385][ T5779] Bluetooth: hci4: command tx timeout [ 409.570862][T13246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.587232][ T27] audit: type=1326 audit(1787253382.721:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.5.2406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff80ad9e0d9 code=0x0 [ 409.621030][T13246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.628013][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.680842][T13246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.883705][T13246] hsr_slave_0: entered promiscuous mode [ 409.908755][T13246] hsr_slave_1: entered promiscuous mode [ 409.927049][T13246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.934878][T13246] Cannot create hsr debugfs directory [ 410.101131][T13324] loop1: detected capacity change from 0 to 128 [ 410.224553][T13328] loop1: detected capacity change from 0 to 512 [ 410.246804][T13328] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2408: iget: bad extended attribute block 1 [ 410.271825][T13328] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2408: couldn't read orphan inode 15 (err -117) [ 410.294090][T13328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.788584][T13246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.987594][T12889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.041831][T13246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.252305][T13352] netlink: 'syz.1.2413': attribute type 3 has an invalid length. [ 411.268715][T13246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.279852][T13352] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.2413'. [ 411.424997][ T5779] Bluetooth: hci1: command tx timeout [ 411.583248][ T5779] Bluetooth: hci4: command tx timeout [ 411.605106][T13246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.685606][T13367] syzkaller0: entered promiscuous mode [ 411.691396][T13367] syzkaller0: entered allmulticast mode [ 411.698403][T13301] chnl_net:caif_netlink_parms(): no params data found [ 411.716338][ T4890] hsr_slave_0: left promiscuous mode [ 411.723713][ T4890] hsr_slave_1: left promiscuous mode [ 411.729741][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.737164][ T4890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.748080][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.755718][ T4890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.765014][ T4890] bridge_slave_1: left allmulticast mode [ 411.770802][ T4890] bridge_slave_1: left promiscuous mode [ 411.776481][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.787483][ T4890] bridge_slave_0: left allmulticast mode [ 411.793325][ T4890] bridge_slave_0: left promiscuous mode [ 411.798992][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.823670][ T4890] veth1_macvtap: left promiscuous mode [ 411.829345][ T4890] veth0_macvtap: left promiscuous mode [ 411.835099][ T4890] veth1_vlan: left promiscuous mode [ 411.840600][ T4890] veth0_vlan: left promiscuous mode [ 412.407834][ T4890] team0 (unregistering): Port device team_slave_1 removed [ 412.455940][ T4890] team0 (unregistering): Port device team_slave_0 removed [ 412.502393][ T4890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.547389][ T4890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.871411][ T4890] bond0 (unregistering): Released all slaves [ 413.267456][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'. [ 413.461211][T13301] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.486275][T13301] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.499995][ T5779] Bluetooth: hci1: command tx timeout [ 413.510225][T13301] bridge_slave_0: entered allmulticast mode [ 413.517541][T13301] bridge_slave_0: entered promiscuous mode [ 413.560696][T13301] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.593001][T13301] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.630294][T13301] bridge_slave_1: entered allmulticast mode [ 413.637584][T13301] bridge_slave_1: entered promiscuous mode [ 413.648471][T13246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 413.661737][ T5779] Bluetooth: hci4: command tx timeout [ 413.713315][T13301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.725905][T13301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.760925][T13246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 413.805459][T13246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 413.917182][T13301] team0: Port device team_slave_0 added [ 413.935564][T13246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 413.996561][T13301] team0: Port device team_slave_1 added [ 414.091339][T13301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.104527][T13301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.138609][T13301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.188789][T13301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.199073][T13301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.227825][T13301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.432474][T13301] hsr_slave_0: entered promiscuous mode [ 414.462324][T13301] hsr_slave_1: entered promiscuous mode [ 414.493787][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 414.542495][T13407] netlink: 'syz.5.2424': attribute type 3 has an invalid length. [ 414.560242][T13407] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2424'. [ 414.747039][T13246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.850556][T13246] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.878649][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.885902][ T4890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.992379][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.999594][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.116158][T13301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 415.133594][T13301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 415.199327][T13301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 415.225760][T13301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 415.475066][T13301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.560551][T13301] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.580278][ T5779] Bluetooth: hci1: command tx timeout [ 415.593721][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.600927][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.661920][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.669082][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.740434][ T5779] Bluetooth: hci4: command tx timeout [ 415.894660][T13246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.049166][T13246] veth0_vlan: entered promiscuous mode [ 416.112697][T13246] veth1_vlan: entered promiscuous mode [ 416.244349][T13246] veth0_macvtap: entered promiscuous mode [ 416.296146][T13246] veth1_macvtap: entered promiscuous mode [ 416.376868][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.388889][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.420225][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.465023][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.502029][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.517225][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.552920][T13246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.583485][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.609861][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.622553][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.634374][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.650239][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.662646][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.688801][T13473] netlink: 'syz.5.2437': attribute type 3 has an invalid length. [ 416.691668][T13246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.704293][T13473] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2437'. [ 416.755215][T13301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.776488][T13246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.806036][T13246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.830265][T13246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.854621][T13246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.096550][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.145742][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.237358][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.260666][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.621940][T13301] veth0_vlan: entered promiscuous mode [ 417.652830][T13301] veth1_vlan: entered promiscuous mode [ 417.662860][ T5779] Bluetooth: hci1: command tx timeout [ 417.723577][T13301] veth0_macvtap: entered promiscuous mode [ 417.737601][T13301] veth1_macvtap: entered promiscuous mode [ 417.768426][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.810077][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.854888][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.895927][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.940347][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.961452][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.977224][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.989466][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.042065][T13301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.091448][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.129550][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.150347][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.171683][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.171865][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2446'. [ 418.215758][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.260306][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.270173][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.318429][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.347644][T13301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.407060][T13301] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.439507][T13301] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.461335][T13301] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.495840][T13301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.790002][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.829408][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.972156][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.981956][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.337945][T13545] loop6: detected capacity change from 0 to 512 [ 419.417251][T13545] EXT4-fs error (device loop6): __ext4_iget:5079: inode #11: block 1: comm syz.6.2399: invalid block [ 419.443487][T13545] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2399: couldn't read orphan inode 11 (err -117) [ 419.458730][T13545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.652660][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.991020][ T27] audit: type=1326 audit(1787253393.140:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13538 comm="syz.5.2451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff80ad9e0d9 code=0x0 [ 420.793641][T13586] syzkaller0: entered promiscuous mode [ 420.799178][T13586] syzkaller0: entered allmulticast mode [ 420.861596][T13586] tipc: Started in network mode [ 420.876029][T13586] tipc: Node identity 028fb0fed0b2, cluster identity 4711 [ 420.909801][T13586] tipc: Enabled bearer , priority 0 [ 421.011448][T13586] tipc: Resetting bearer [ 421.035922][T13585] tipc: Resetting bearer [ 421.823879][T13585] tipc: Disabling bearer [ 422.763205][ T27] audit: type=1326 audit(1787253395.909:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.1.2478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e4499e0d9 code=0x0 [ 422.892660][ T27] audit: type=1326 audit(1787253396.039:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.5.2472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff80ad9e0d9 code=0x0 [ 424.332559][T13674] loop1: detected capacity change from 0 to 512 [ 424.370656][T13674] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 424.408247][T13674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 424.452005][T13674] EXT4-fs (loop1): can't mount with commit=1, fs mounted w/o journal [ 425.374642][ T27] audit: type=1326 audit(1787253398.499:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13684 comm="syz.6.2492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1b539e0d9 code=0x0 [ 426.592730][ T27] audit: type=1326 audit(1787253399.729:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13681 comm="syz.5.2491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff80ad9e0d9 code=0x0 [ 427.009359][T13728] syzkaller0: entered promiscuous mode [ 427.027960][T13728] syzkaller0: entered allmulticast mode [ 427.294863][ T27] audit: type=1326 audit(1787253400.439:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.0.2505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3f959e0d9 code=0x0 [ 427.850598][T13764] netlink: 'syz.6.2509': attribute type 3 has an invalid length. [ 427.870818][T13764] netlink: 197344 bytes leftover after parsing attributes in process `syz.6.2509'. [ 428.604359][ T27] audit: type=1326 audit(1787253401.749:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13773 comm="syz.1.2512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e4499e0d9 code=0x0 [ 429.696687][T13826] netlink: 'syz.5.2524': attribute type 3 has an invalid length. [ 429.711604][T13826] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2524'. [ 430.722471][T13864] loop1: detected capacity change from 0 to 512 [ 430.729982][T13864] EXT4-fs: inline encryption not supported [ 430.751905][T13864] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 430.809448][T13864] EXT4-fs (loop1): 1 truncate cleaned up [ 430.866840][T13864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.146052][T12889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.496476][T13890] netlink: 'syz.1.2544': attribute type 3 has an invalid length. [ 431.508881][T13890] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.2544'. [ 433.863134][T13957] netlink: 'syz.0.2559': attribute type 3 has an invalid length. [ 433.870918][T13957] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.2559'. [ 435.179235][ T27] audit: type=1326 audit(1787253408.308:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.5.2561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff80ad9e0d9 code=0x0 [ 436.398587][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2566'. [ 436.880805][ T27] audit: type=1326 audit(1787253410.018:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14001 comm="syz.5.2572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff80ad9e0d9 code=0x0 [ 437.378998][T14006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.086481][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2578'. [ 438.097931][T14029] netlink: 'syz.5.2576': attribute type 3 has an invalid length. [ 438.120055][T14029] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2576'. [ 438.562398][T14043] Illegal XDP return value 14 on prog (id 88) dev N/A, expect packet loss! [ 438.623111][ T27] audit: type=1326 audit(1787253411.758:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.0.2584" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3f959e0d9 code=0x0 [ 438.988027][T14050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.718625][T14062] ieee802154 phy0 wpan0: encryption failed: -126 [ 440.149230][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.160342][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.025803][T14088] loop0: detected capacity change from 0 to 128 [ 441.180569][T14094] loop0: detected capacity change from 0 to 512 [ 441.292500][T14094] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2594: iget: bad extended attribute block 1 [ 441.390313][T14094] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2594: couldn't read orphan inode 15 (err -117) [ 441.487594][T14094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.754276][T14093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.999728][T13246] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.306258][T14127] loop5: detected capacity change from 0 to 128 [ 443.512472][ T5783] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 443.646116][T14136] loop5: detected capacity change from 0 to 512 [ 443.717282][T14136] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2605: iget: bad extended attribute block 1 [ 443.783868][T14136] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2605: couldn't read orphan inode 15 (err -117) [ 443.870146][T14136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.065917][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.725173][T14239] loop6: detected capacity change from 0 to 1024 [ 447.768048][T14239] EXT4-fs: Ignoring removed nobh option [ 447.807683][T14239] EXT4-fs: Ignoring removed bh option [ 447.814070][T14239] EXT4-fs: Ignoring removed nobh option [ 447.830899][T14239] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 447.952781][T14239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.044648][ T27] audit: type=1800 audit(1787253421.166:334): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2633" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 448.346689][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.527770][T14266] loop1: detected capacity change from 0 to 128 [ 448.627272][T11743] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 448.691821][T14272] syzkaller0: entered promiscuous mode [ 448.710247][T14272] syzkaller0: entered allmulticast mode [ 448.757683][T14273] loop1: detected capacity change from 0 to 512 [ 448.808362][T14273] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2641: iget: bad extended attribute block 1 [ 448.889682][T14273] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2641: couldn't read orphan inode 15 (err -117) [ 448.971136][T14273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.421202][T12889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.684626][T14306] syzkaller0: entered promiscuous mode [ 449.690148][T14306] syzkaller0: entered allmulticast mode [ 449.963461][T14316] loop5: detected capacity change from 0 to 128 [ 450.052484][T14319] loop1: detected capacity change from 0 to 128 [ 450.092678][T14319] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 450.123246][T14322] loop5: detected capacity change from 0 to 512 [ 450.173328][T14319] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 450.199190][T14322] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2659: iget: bad extended attribute block 1 [ 450.298561][T14322] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2659: couldn't read orphan inode 15 (err -117) [ 450.334882][T14322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.361315][T14334] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2662'. [ 451.225162][ T59] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 451.265220][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.975807][T14366] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 452.164251][T14374] loop5: detected capacity change from 0 to 128 [ 452.268583][ T5783] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 452.353166][T14378] loop1: detected capacity change from 0 to 512 [ 452.392032][T14380] loop5: detected capacity change from 0 to 512 [ 452.490676][T14380] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2674: iget: bad extended attribute block 1 [ 452.544991][ T8] logitech-hidpp-device 0003:046D:C082.0017: item fetching failed at offset 0/2 [ 452.556060][ T8] logitech-hidpp-device 0003:046D:C082.0017: hidpp_probe:parse failed [ 452.565015][ T8] logitech-hidpp-device: probe of 0003:046D:C082.0017 failed with error -22 [ 452.603412][T14380] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2674: couldn't read orphan inode 15 (err -117) [ 452.626093][T14378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2676'. [ 452.660905][T14380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.022390][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.493932][T14413] loop5: detected capacity change from 0 to 512 [ 453.552894][T14413] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 453.594031][T14413] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 453.634521][T14413] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 454.302621][T14428] loop6: detected capacity change from 0 to 128 [ 454.447209][T14431] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.510393][T14434] loop6: detected capacity change from 0 to 512 [ 454.655214][T14434] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2691: iget: bad extended attribute block 1 [ 454.693717][T14434] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2691: couldn't read orphan inode 15 (err -117) [ 454.709793][T14434] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.805275][T14444] syzkaller0: entered promiscuous mode [ 454.814576][T14444] syzkaller0: entered allmulticast mode [ 454.933479][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.192945][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2698'. [ 455.398102][T14465] loop1: detected capacity change from 0 to 128 [ 455.462830][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 455.578755][T14474] loop1: detected capacity change from 0 to 512 [ 455.594936][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 455.654852][T14474] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2700: iget: bad extended attribute block 1 [ 455.749770][T14474] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2700: couldn't read orphan inode 15 (err -117) [ 455.810414][T14482] loop0: detected capacity change from 0 to 512 [ 455.820260][T14474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.860070][T14482] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 455.899491][T14482] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 455.944873][T14482] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 455.972040][T14462] loop6: detected capacity change from 0 to 32768 [ 456.647856][T12889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.907238][T14492] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.048188][T14499] loop1: detected capacity change from 0 to 128 [ 457.049553][T14496] syzkaller0: entered promiscuous mode [ 457.111046][T14496] syzkaller0: entered allmulticast mode [ 457.139276][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 457.238174][T14505] loop1: detected capacity change from 0 to 512 [ 457.245139][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 457.265182][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.274351][ T5783] Buffer I/O error on dev loop1, logical block 0, async page read [ 457.326721][T14505] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2705: iget: bad extended attribute block 1 [ 457.424898][T14505] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2705: couldn't read orphan inode 15 (err -117) [ 457.473789][T14505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.792078][T14520] loop0: detected capacity change from 0 to 128 [ 457.877907][T14520] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 457.939463][T14520] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 457.962287][T12889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.985163][ T6859] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 458.428545][T14530] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2714: iget: bad extended attribute block 1 [ 458.703654][T14530] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2714: couldn't read orphan inode 15 (err -117) [ 458.807368][T14530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.897721][ T3465] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 459.138599][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.330017][T14550] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.181410][T14572] set_capacity_and_notify: 2 callbacks suppressed [ 460.181426][T14572] loop6: detected capacity change from 0 to 128 [ 460.274053][T14574] loop0: detected capacity change from 0 to 512 [ 460.353093][T14576] loop6: detected capacity change from 0 to 512 [ 460.459384][T14576] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2724: iget: bad extended attribute block 1 [ 460.561187][T14576] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2724: couldn't read orphan inode 15 (err -117) [ 460.629757][T14576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.796287][T14585] loop0: detected capacity change from 0 to 128 [ 460.964707][T14588] loop0: detected capacity change from 0 to 512 [ 461.030708][T14588] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2726: iget: bad extended attribute block 1 [ 461.072478][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.131342][T14588] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2726: couldn't read orphan inode 15 (err -117) [ 461.180201][T14588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.680140][T13246] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.884785][T14614] loop0: detected capacity change from 0 to 512 [ 463.022153][T14642] loop5: detected capacity change from 0 to 128 [ 463.244478][T14650] loop5: detected capacity change from 0 to 512 [ 463.330240][T14650] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2738: iget: bad extended attribute block 1 [ 463.350460][T14650] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2738: couldn't read orphan inode 15 (err -117) [ 463.363440][T14654] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.421221][T14650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.955329][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.007062][T14703] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.341928][T14711] loop5: detected capacity change from 0 to 128 [ 465.472074][T14716] loop5: detected capacity change from 0 to 512 [ 465.705856][T14716] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2753: iget: bad extended attribute block 1 [ 465.764826][T14716] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2753: couldn't read orphan inode 15 (err -117) [ 465.986963][T14728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.410880][T14716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.709862][T11747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.875456][T14763] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.2767'. [ 468.371363][T14773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.931047][T14778] loop6: detected capacity change from 0 to 512 [ 468.978424][T14776] loop0: detected capacity change from 0 to 128 [ 469.168403][T14786] loop0: detected capacity change from 0 to 512 [ 469.238258][T14786] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2770: iget: bad extended attribute block 1 [ 469.293122][T14786] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2770: couldn't read orphan inode 15 (err -117) [ 469.348215][T14786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.821585][T13246] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.185612][T14817] loop1: detected capacity change from 0 to 512 [ 470.532683][T14825] loop1: detected capacity change from 0 to 512 [ 470.782800][T14830] loop6: detected capacity change from 0 to 128 [ 470.940806][T14837] loop6: detected capacity change from 0 to 512 [ 470.975479][T14837] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2789: iget: bad extended attribute block 1 [ 471.026030][T14837] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2789: couldn't read orphan inode 15 (err -117) [ 471.029962][T14842] loop5: detected capacity change from 0 to 512 [ 471.061494][T14837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.428242][T14851] netlink: 'syz.5.2797': attribute type 3 has an invalid length. [ 471.436022][T14851] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2797'. [ 471.641443][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.238288][T14861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.468652][T14863] [ 472.471026][T14863] ====================================================== [ 472.478057][T14863] WARNING: possible circular locking dependency detected [ 472.485101][T14863] syzkaller #0 Not tainted [ 472.489529][T14863] ------------------------------------------------------ [ 472.496566][T14863] syz.6.2801/14863 is trying to acquire lock: [ 472.502637][T14863] ffff888148c58160 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 472.514238][T14863] [ 472.514238][T14863] but task is already holding lock: [ 472.521599][T14863] ffff88801ff43120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 472.530818][T14863] [ 472.530818][T14863] which lock already depends on the new lock. [ 472.530818][T14863] [ 472.541223][T14863] [ 472.541223][T14863] the existing dependency chain (in reverse order) is: [ 472.550240][T14863] [ 472.550240][T14863] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 472.557885][T14863] __mutex_lock+0x135/0xc80 [ 472.563013][T14863] tcm_set_name+0x2a/0x90 [ 472.567872][T14863] function_make+0x199/0x350 [ 472.572990][T14863] configfs_mkdir+0x515/0x9e0 [ 472.578215][T14863] vfs_mkdir+0x2a5/0x470 [ 472.583002][T14863] do_mkdirat+0x1dc/0x450 [ 472.587852][T14863] __x64_sys_mkdir+0x6e/0x80 [ 472.592953][T14863] do_syscall_64+0x55/0xb0 [ 472.597922][T14863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.604398][T14863] [ 472.604398][T14863] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 472.612652][T14863] __mutex_lock+0x135/0xc80 [ 472.617671][T14863] configfs_rmdir+0x63c/0x980 [ 472.622863][T14863] vfs_rmdir+0x352/0x4b0 [ 472.627618][T14863] do_rmdir+0x29f/0x590 [ 472.632288][T14863] __x64_sys_rmdir+0x49/0x50 [ 472.637388][T14863] do_syscall_64+0x55/0xb0 [ 472.642318][T14863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.648730][T14863] [ 472.648730][T14863] -> #0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 472.657416][T14863] __lock_acquire+0x37ef/0x7d80 [ 472.662812][T14863] lock_acquire+0x19e/0x420 [ 472.667830][T14863] down_write+0x97/0x200 [ 472.672603][T14863] configfs_depend_item_unlocked+0x157/0x430 [ 472.679116][T14863] usbg_make_tpg+0x1f7/0x580 [ 472.684323][T14863] target_fabric_make_tpg+0xa4/0x6d0 [ 472.690177][T14863] configfs_mkdir+0x515/0x9e0 [ 472.695372][T14863] vfs_mkdir+0x2a5/0x470 [ 472.700132][T14863] do_mkdirat+0x1dc/0x450 [ 472.704976][T14863] __x64_sys_mkdir+0x6e/0x80 [ 472.710079][T14863] do_syscall_64+0x55/0xb0 [ 472.715011][T14863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.721419][T14863] [ 472.721419][T14863] other info that might help us debug this: [ 472.721419][T14863] [ 472.731638][T14863] Chain exists of: [ 472.731638][T14863] &sb->s_type->i_mutex_key#22 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 472.731638][T14863] [ 472.746331][T14863] Possible unsafe locking scenario: [ 472.746331][T14863] [ 472.753774][T14863] CPU0 CPU1 [ 472.759129][T14863] ---- ---- [ 472.764478][T14863] lock(&opts->dep_lock); [ 472.768888][T14863] lock(gadget_subsys.su_mutex); [ 472.776420][T14863] lock(&opts->dep_lock); [ 472.783351][T14863] lock(&sb->s_type->i_mutex_key#22); [ 472.788808][T14863] [ 472.788808][T14863] *** DEADLOCK *** [ 472.788808][T14863] [ 472.796942][T14863] 5 locks held by syz.6.2801/14863: [ 472.802140][T14863] #0: ffff888142aaa418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 472.811406][T14863] #1: ffff88805ca329e0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 472.822211][T14863] #2: ffffffff8db2ae10 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 472.831974][T14863] #3: ffffffff8de586e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 472.841644][T14863] #4: ffff88801ff43120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 472.851130][T14863] [ 472.851130][T14863] stack backtrace: [ 472.857004][T14863] CPU: 0 PID: 14863 Comm: syz.6.2801 Not tainted syzkaller #0 [ 472.864453][T14863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.874510][T14863] Call Trace: [ 472.877843][T14863] [ 472.880808][T14863] dump_stack_lvl+0x18c/0x250 [ 472.885542][T14863] ? load_image+0x420/0x420 [ 472.890082][T14863] ? show_regs_print_info+0x20/0x20 [ 472.895276][T14863] ? print_circular_bug+0x12b/0x1a0 [ 472.900478][T14863] check_noncircular+0x2fc/0x400 [ 472.905413][T14863] ? print_deadlock_bug+0x5d0/0x5d0 [ 472.910607][T14863] ? lockdep_lock+0xf5/0x230 [ 472.915189][T14863] ? __lock_acquire+0x357f/0x7d80 [ 472.920208][T14863] ? _find_first_zero_bit+0xd6/0x100 [ 472.925523][T14863] __lock_acquire+0x37ef/0x7d80 [ 472.930377][T14863] ? is_bpf_text_address+0x28f/0x2a0 [ 472.935673][T14863] ? verify_lock_unused+0x140/0x140 [ 472.940874][T14863] lock_acquire+0x19e/0x420 [ 472.945370][T14863] ? configfs_depend_item_unlocked+0x157/0x430 [ 472.951532][T14863] ? trace_raw_output_contention_end+0xd0/0xd0 [ 472.957695][T14863] ? __might_sleep+0xe0/0xe0 [ 472.962300][T14863] ? rcu_is_watching+0x15/0xb0 [ 472.967057][T14863] ? read_lock_is_recursive+0x20/0x20 [ 472.972422][T14863] ? trace_contention_end+0x39/0xe0 [ 472.977611][T14863] ? __mutex_lock+0x30d/0xc80 [ 472.982285][T14863] ? do_syscall_64+0x55/0xb0 [ 472.986867][T14863] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.992932][T14863] down_write+0x97/0x200 [ 472.997179][T14863] ? configfs_depend_item_unlocked+0x157/0x430 [ 473.003327][T14863] ? down_read_killable+0x340/0x340 [ 473.008528][T14863] configfs_depend_item_unlocked+0x157/0x430 [ 473.014503][T14863] usbg_make_tpg+0x1f7/0x580 [ 473.019092][T14863] ? usbg_drop_tport+0x20/0x20 [ 473.023849][T14863] ? vscnprintf+0x80/0x80 [ 473.028204][T14863] target_fabric_make_tpg+0xa4/0x6d0 [ 473.033528][T14863] ? target_fabric_release_wwn+0xb0/0xb0 [ 473.039154][T14863] configfs_mkdir+0x515/0x9e0 [ 473.043829][T14863] vfs_mkdir+0x2a5/0x470 [ 473.048067][T14863] do_mkdirat+0x1dc/0x450 [ 473.052388][T14863] ? vfs_mkdir+0x470/0x470 [ 473.056796][T14863] ? getname_flags+0x20a/0x500 [ 473.061557][T14863] __x64_sys_mkdir+0x6e/0x80 [ 473.066137][T14863] do_syscall_64+0x55/0xb0 [ 473.070548][T14863] ? clear_bhb_loop+0x40/0x90 [ 473.075273][T14863] ? clear_bhb_loop+0x40/0x90 [ 473.079953][T14863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.085843][T14863] RIP: 0033:0x7ff1b539e0d9 [ 473.090291][T14863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.109935][T14863] RSP: 002b:00007ff1b6324028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 473.118392][T14863] RAX: ffffffffffffffda RBX: 00007ff1b5626090 RCX: 00007ff1b539e0d9 [ 473.126355][T14863] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 473.134318][T14863] RBP: 00007ff1b5435024 R08: 0000000000000000 R09: 0000000000000000 [ 473.142281][T14863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.150244][T14863] R13: 00007ff1b5626128 R14: 00007ff1b5626090 R15: 00007ffdc4785d08 [ 473.158213][T14863] [ 473.243724][T14866] loop1: detected capacity change from 0 to 512 [ 473.257500][T14866] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 473.311776][T14866] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 473.331184][T14866] EXT4-fs (loop1): can't mount with commit=1, fs mounted w/o journal [ 478.067216][ T5785] Bluetooth: hci2: command 0x0406 tx timeout