last executing test programs: 22m2.308561392s ago: executing program 2 (id=20): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f00000010c0)=""/124, 0x7c}) 22m2.054663931s ago: executing program 2 (id=21): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x3051c0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x18, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40004) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f00000052c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x7, 0x4}, {0x8, 0x4}}]}}, 0x11) 22m1.648512484s ago: executing program 2 (id=23): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) 21m59.328151521s ago: executing program 2 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") 21m57.056747787s ago: executing program 2 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 21m55.509646938s ago: executing program 2 (id=36): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1e5) pipe(0x0) socket$inet(0x2, 0x4000000000000001, 0x40000013) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x10) 21m53.748232087s ago: executing program 32 (id=36): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1e5) pipe(0x0) socket$inet(0x2, 0x4000000000000001, 0x40000013) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x10) 21m11.321772379s ago: executing program 1 (id=102): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) fcntl$setlease(r3, 0x400, 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x3) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f00000001c0)=0x9) close_range(r0, 0xffffffffffffffff, 0x0) 21m10.99228062s ago: executing program 1 (id=104): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000030400000000fcdbdf2500007400", @ANYRES32=r1, @ANYBLOB="800c080007500500340012800b000100627269646765000024000280050019000200"], 0x54}}, 0x0) 21m10.08998326s ago: executing program 1 (id=105): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000b00)=0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000b40)={0x0, 0xffff, 0x0, 0x0, r0}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000010000100020000edffffff0000000800c5ce540d7ab2dba034d5dc86e7d0c1fa4a6b5bd2b1bc2384d3b32c3dc781af77c4f986c6bcfc479755bd36b7b4578ba3b2d89f1b2c46b8885b8ee390433731b3e11ff9370ea99b630cee47bb19ae76cc4ac22bfb385177166db232738c18c7d67cb72152191bb0c28eaad4ddaec1e0d6d5c46b3c09989c240b1cc438742f4c3185be", @ANYRES32=0x0, @ANYBLOB="000000000101040008001b00"], 0x28}}, 0x0) recvmmsg$unix(r6, &(0x7f0000000240)=[{{0x0, 0xd00, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x62) 21m8.775479194s ago: executing program 1 (id=109): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4bfa, 0x10000000000004) r0 = syz_open_procfs(0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 21m7.067954761s ago: executing program 1 (id=115): syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) 21m4.36857372s ago: executing program 1 (id=120): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/90, 0x5a}], 0x1, 0x1f1, 0x1) 21m3.831256908s ago: executing program 33 (id=120): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/90, 0x5a}], 0x1, 0x1f1, 0x1) 17m39.748470911s ago: executing program 3 (id=456): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @local, @val={@void, {0x8100, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="51b0883d2522", @private=0xa010100, @random="8528d5915819", @multicast1}}}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @mcast1, 0x5}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440), 0x1000a) sendfile(r1, r2, &(0x7f0000000080)=0x5, 0xffff) 17m39.308239475s ago: executing program 3 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) 17m37.032064711s ago: executing program 3 (id=459): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0xfffd, r0, &(0x7f0000000040)='p', 0x1, 0x600}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f000000cffc)=0x4000002, 0x5, 0x1f, 0x0, &(0x7f0000048000)=0xffffffff, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x70bd2c, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x4000000) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) 17m33.990815742s ago: executing program 3 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) 17m31.424068678s ago: executing program 3 (id=472): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, 0xffffffffffffffff, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f00000000c0)='./file0/file0/..\x00', 0x0) 17m29.664301876s ago: executing program 3 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xba020008) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x22020400) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000840, &(0x7f0000000000)=ANY=[], 0x5, 0x1ce, &(0x7f00000002c0)="$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") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$sock(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, 0x0, 0x60) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, &(0x7f0000000380)=0x8) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x18102, 0x2, 0x7}, 0x18) 17m14.211011061s ago: executing program 34 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xba020008) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x22020400) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000840, &(0x7f0000000000)=ANY=[], 0x5, 0x1ce, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motY2dgaPXUlgeJ/WeGiMml9hi5SbJCTVlUXFmVnZjzI7WoeCFDxa3kpIrTJxhYrttfU2mW4HT4I8/hkKTpoMN0xMcja0ZjCeckKU0xNrZMhbNnPsivY9M4wvBoBfPGOs+8xrrC1Kl5aXlJVVlVWfMmTtw4s7GzsXHlxLqoNL9VjC0pLpuaOhmZHLaoCWxmNlSfZKM94V37qodJDqw9Hn7Np4yVXqcyXzJeWCR1akXVzAlflGYzGn5nuMNTtkJCQ8NJ4oqERYMJw5E62wZXkBNTGhjSFMIYk9TYxNq2nJkTwszP5rZAoSX5BFPoUY6lMyUsDghVnfxpqfnWIdFtxranDmxneA4f51lT0CdodFyCwWmh4H8ZkDEJDQ1lGmuZltou+FKk8VfCa7WxUwaDuz3TMliAsjSAyJVQnixYT0LyCg8dTU2jlOSEhk0SCUluBYbKDFv3cK4WaGBAijYVBgaG7YywuIXga7B4HQWjYBSMglEwCkbBKBgFo2AUjIJRMCIAIAAA//+1fJaQ") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$sock(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, 0x0, 0x60) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, &(0x7f0000000380)=0x8) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x18102, 0x2, 0x7}, 0x18) 16m43.389907987s ago: executing program 6 (id=498): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, 0xffffffffffffffff, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f00000000c0)='./file0/file0/..\x00', 0x0) 16m42.145588468s ago: executing program 6 (id=542): syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x840000000002, 0x3, 0x100) syz_emit_ethernet(0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x4, 0xd6, &(0x7f0000000500)=""/214}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000080)=0x1) mremap(&(0x7f0000cb2000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x8, 0x0, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x7c5a, 0x84001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r3}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) 16m40.436161345s ago: executing program 6 (id=545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x40, 0x5, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 16m24.445525137s ago: executing program 35 (id=545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x40, 0x5, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2m10.829478974s ago: executing program 4 (id=1879): keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000002c0)='key_or_keyring:\xd6\x7f\x91\xf0\x86\xf2z\xcd\xf5X\xe1VW:\x8f/pe\xc4\xcc\xfb%m\xeaA\xde\xbf\x89*\x14\x90I\xab[\xf8\xec\xd3=\xf2\x8b\xfb\xe1\xa7\xa1\r6\x81\xd7\n\xacY\xcf\x13/\xd6\xa1r.}\x05(\xab\xaf\'\xc83\xef\xac\x02D\x050xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x40}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x1000}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0xb, 0x80000000003}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m9.819154488s ago: executing program 4 (id=1880): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x3c, r3, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m9.703510291s ago: executing program 4 (id=1881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sync() r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) r6 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsmount(r6, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x94, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffec3, 0xb, 0xf8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c890}, 0x20004080) 2m5.545522233s ago: executing program 4 (id=1887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89", 0xf}], 0x1}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000019140)={{0x2, 0x4e22, @local}, {0x6, @link_local}, 0x1c, {0x2, 0x4e24, @remote}, 'dvmrp0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fremovexattr(0xffffffffffffffff, &(0x7f0000019080)=@random={'user.', '-\\\x00'}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x3}, {0xfd}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x7fff, 0xffffffff}, {0x0, 0x8}, {0x0, 0x1}, @note={0x0, 0x44, 0x3}}], 0x38) readv(r4, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m3.593939879s ago: executing program 4 (id=1890): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r5, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x3000000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) shutdown(r0, 0x1) 2m2.525852785s ago: executing program 4 (id=1892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r6, 0x15}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000001c0)='s', 0x1}], 0x1}, 0x0) 1m47.267250122s ago: executing program 36 (id=1892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r6, 0x15}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000001c0)='s', 0x1}], 0x1}, 0x0) 13.125054945s ago: executing program 0 (id=2063): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000001440)=""/134, &(0x7f0000001500)=0x86) pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000400)="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", 0x5b4}], 0x1, 0xa) 11.351721235s ago: executing program 0 (id=2065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000019140)={{0x2, 0x4e22, @local}, {0x6, @link_local}, 0x1c, {0x2, 0x4e24, @remote}, 'dvmrp0\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fremovexattr(r1, &(0x7f0000019080)=@random={'user.', '-\\\x00'}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x3}, {0xfd}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x7fff, 0xffffffff}, {0x0, 0x8}, {0x0, 0x1}, @note={0x0, 0x44, 0x3}}], 0x38) readv(r6, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.246015822s ago: executing program 0 (id=2067): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e23, @rand_addr=0xc8000000}}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 9.885004604s ago: executing program 5 (id=2068): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x68c03, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETS(r0, 0x404c4701, 0x0) 8.505370821s ago: executing program 5 (id=2069): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0x400, r0, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0086202, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 8.443426593s ago: executing program 0 (id=2071): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 8.042957157s ago: executing program 7 (id=2072): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000001500)) pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000400)="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", 0x5b4}], 0x1, 0xa) 6.976241423s ago: executing program 7 (id=2073): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb0024000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000100)="0100", 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 5.904068379s ago: executing program 7 (id=2074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000019140)={{0x2, 0x4e22, @local}, {0x6, @link_local}, 0x1c, {0x2, 0x4e24, @remote}, 'dvmrp0\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fremovexattr(r1, &(0x7f0000019080)=@random={'user.', '-\\\x00'}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x3}, {0xfd}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x7fff, 0xffffffff}, {0x0, 0x8}, {0x0, 0x1}, @note={0x0, 0x44, 0x3}}], 0x38) readv(r6, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.3045767s ago: executing program 5 (id=2075): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) syz_emit_ethernet(0x44, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0xb, 0xf, 0x0, {0x5, 0x4, 0x3, 0x1f, 0x5df, 0x68, 0x3, 0xf5, 0x84, 0x0, @multicast1, @empty}, "7ada1f382d21"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 5.29769512s ago: executing program 0 (id=2076): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/uts\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x18c, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0xc, "1542", 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x28020500) close(0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000f100000007ecac1c9e5349606f57d3d48fddc8f263c3aeb7861ae0c3afff22ab4114e0ca66043e09a756f7df52b2b084427811f60717fda9ad25ad5c221d729142cf464f8e1078f2e9071bbeeca187a92e90b3e0961a4b29529bba8457d4a4c3073bce7c7367fb5b3833d009898ff0382425947126baba281b75d91526ac699564fb8acc306ce5ba56543c43515f64841d7f44a4d0132a0d0e0bbf5f952ff20f26"], 0xf0) 4.575725915s ago: executing program 8 (id=1915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sync() r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsmount(r6, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x94, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffec3, 0xb, 0xf8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c890}, 0x20004080) 3.377070925s ago: executing program 7 (id=2077): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) connect$inet6(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000340), 0x0) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) write$binfmt_aout(r3, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x1ff, 0x9, 0x0, 0x8, 0xb, "0062ba7d820000000000000000e4f6fffeff00"}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0xfffffffffffffce2) syz_open_pts(r3, 0x8182) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f00000000c0), 0x10) sendto$l2tp(r7, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet6(r2, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 3.294051528s ago: executing program 5 (id=2078): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e23, @rand_addr=0xc8000000}}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 3.131156944s ago: executing program 8 (id=2079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) 2.870556722s ago: executing program 8 (id=2080): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xb0}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.4724938s ago: executing program 8 (id=2081): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb0024000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000100)="0100", 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.115355982s ago: executing program 7 (id=2082): socket$kcm(0x2, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f0000000180)={0x0, 0x629f79e74f0c9cd0, 0x20000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) kcmp(r2, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$hpfs(&(0x7f0000000000), &(0x7f0000009ec0)='./file1\x00', 0x3210441, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0x1, 0x9e36, &(0x7f000000a040)="$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") 1.104141692s ago: executing program 5 (id=2083): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0x400, r0, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0xc0086202, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 1.072709573s ago: executing program 0 (id=2084): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r1, &(0x7f0000000080), 0x0, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 65.229538ms ago: executing program 7 (id=2085): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@md0, 0x0, &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r5 = fanotify_init(0x4, 0x101000) fanotify_mark(r5, 0x1, 0x40001019, r4, 0x0) read$FUSE(r4, &(0x7f0000006180)={0x2020}, 0x2020) 0s ago: executing program 5 (id=2086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000019140)={{0x2, 0x4e22, @local}, {0x6, @link_local}, 0x1c, {0x2, 0x4e24, @remote}, 'dvmrp0\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fremovexattr(r1, &(0x7f0000019080)=@random={'user.', '-\\\x00'}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x3}, {0xfd}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x7fff, 0xffffffff}, {0x0, 0x8}, {0x0, 0x1}, @note={0x0, 0x44, 0x3}}], 0x38) readv(r6, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): rectory 'hsr0' with parent 'hsr' already present! [ 428.002168][ T8854] Cannot create hsr debugfs directory [ 428.692441][ T5775] Bluetooth: hci4: command tx timeout [ 428.983040][ T1088] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.282466][ T1088] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.575723][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.572'. [ 430.664525][ T1088] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.779154][ T5775] Bluetooth: hci4: command tx timeout [ 430.792631][ T8919] loop5: detected capacity change from 0 to 2048 [ 430.805706][ T8919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.190533][ T8854] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 431.223626][ T8854] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 431.248897][ T8854] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 431.270000][ T8854] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 431.531542][ T8854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.583764][ T8854] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.621649][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.628846][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.714161][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.721427][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.150315][ T8854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.699846][ T8854] veth0_vlan: entered promiscuous mode [ 439.048232][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.580'. [ 440.152712][ T8854] veth1_vlan: entered promiscuous mode [ 441.356312][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.364598][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.567555][ T8854] veth0_macvtap: entered promiscuous mode [ 441.736664][ T8854] veth1_macvtap: entered promiscuous mode [ 441.931521][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.969290][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.999489][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.039103][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.069104][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.109095][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.118977][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.169110][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.210042][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.252609][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.293375][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.349107][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.386083][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.405094][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.416256][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.432418][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.445859][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.467982][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.676308][ T8854] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.713808][ T8854] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.723635][ T8854] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.732499][ T8854] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.855877][ T1088] hsr_slave_0: left promiscuous mode [ 442.920528][ T9022] loop4: detected capacity change from 0 to 2048 [ 442.956224][ T1088] hsr_slave_1: left promiscuous mode [ 442.991132][ T9022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.007083][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.104444][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.262622][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.367818][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.505210][ T1088] bridge_slave_1: left allmulticast mode [ 443.584399][ T1088] bridge_slave_1: left promiscuous mode [ 443.657904][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.804864][ T1088] bridge_slave_0: left allmulticast mode [ 443.842418][ T1088] bridge_slave_0: left promiscuous mode [ 443.865860][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.900335][ T1088] veth1_macvtap: left promiscuous mode [ 443.905936][ T1088] veth0_macvtap: left promiscuous mode [ 443.912956][ T1088] veth1_vlan: left promiscuous mode [ 443.918354][ T1088] veth0_vlan: left promiscuous mode [ 447.091111][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 447.522547][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 447.825383][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.989752][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.713343][ T1088] bond0 (unregistering): Released all slaves [ 451.451094][ T7378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.459244][ T7378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.505639][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.324707][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.138877][ T9104] loop5: detected capacity change from 0 to 2048 [ 457.220068][ T9104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.913146][ T9122] loop0: detected capacity change from 0 to 1024 [ 457.932039][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 459.291515][ T9122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.262256][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.580235][ T9172] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 465.906117][ T9183] loop0: detected capacity change from 0 to 2048 [ 465.942112][ T9183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.470875][ T9231] loop7: detected capacity change from 0 to 2048 [ 473.138428][ T9231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.891834][ T9248] loop4: detected capacity change from 0 to 1024 [ 475.605328][ T9248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.667650][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.351480][ T9293] loop4: detected capacity change from 0 to 2048 [ 479.372290][ T9293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.093888][ T9306] block device autoloading is deprecated and will be removed. [ 486.142107][ T9378] loop5: detected capacity change from 0 to 256 [ 486.267283][ T9379] loop7: detected capacity change from 0 to 2048 [ 487.233011][ T9379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 487.246589][ T9378] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 488.317119][ T9429] atomic_op ffff8880243ba198 conn xmit_atomic 0000000000000000 [ 490.626860][ T9450] tipc: Started in network mode [ 490.632316][ T9450] tipc: Node identity 4, cluster identity 4711 [ 490.638518][ T9450] tipc: Node number set to 4 [ 491.036572][ T9460] loop4: detected capacity change from 0 to 2048 [ 491.079780][ T9460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.512484][ T9491] cgroup: Unknown subsys name 'pcr' [ 498.421691][ T9519] loop5: detected capacity change from 0 to 2048 [ 499.508635][ T9519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.815663][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.825007][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.476318][ T9533] cgroup: Unknown subsys name 'pcr' [ 506.444751][ T9544] atomic_op ffff88805dd3b998 conn xmit_atomic 0000000000000000 [ 506.822118][ T9555] loop0: detected capacity change from 0 to 2048 [ 506.882259][ T9555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.437026][ T9583] loop0: detected capacity change from 0 to 512 [ 511.542118][ T9583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.569203][ T9583] ext4 filesystem being mounted at /184/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.661057][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.799976][ T9634] cgroup: Unknown subsys name 'pcr' [ 522.108589][ T9645] loop5: detected capacity change from 0 to 16 [ 522.140843][ T9645] erofs: (device loop5): mounted with root inode @ nid 36. [ 522.161321][ T9645] syz.5.685: attempt to access beyond end of device [ 522.161321][ T9645] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 522.235271][ T9645] syz.5.685: attempt to access beyond end of device [ 522.235271][ T9645] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 522.253158][ T9645] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 522.267194][ T28] audit: type=1800 audit(1780484682.380:3): pid=9645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.685" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 526.786367][ T9682] loop0: detected capacity change from 0 to 2048 [ 527.010066][ T9682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.329755][ T9698] loop4: detected capacity change from 0 to 512 [ 528.580814][ T9698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.639563][ T9698] ext4 filesystem being mounted at /172/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.840893][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.287259][ T9748] loop7: detected capacity change from 0 to 2048 [ 533.726980][ T9751] netlink: 24 bytes leftover after parsing attributes in process `syz.5.703'. [ 534.476701][ T9748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.564481][ T9772] loop4: detected capacity change from 0 to 2048 [ 536.629863][ T9772] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 539.300684][ T9786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.712'. [ 543.119624][ T9815] loop0: detected capacity change from 0 to 2048 [ 543.417946][ T9817] loop5: detected capacity change from 0 to 2048 [ 543.593522][ T9817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.183390][ T9815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.782602][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 545.399812][ T9832] loop5: detected capacity change from 0 to 1024 [ 545.574050][ T9832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.361311][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.275162][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.721'. [ 553.295059][ T9892] loop5: detected capacity change from 0 to 1024 [ 553.460453][ T9892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.794279][ T9904] loop4: detected capacity change from 0 to 2048 [ 553.813429][ T9904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.600388][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.848148][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.5.732'. [ 558.399216][ T9948] loop0: detected capacity change from 0 to 2048 [ 558.941173][ T9948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 561.920558][ T9972] loop4: detected capacity change from 0 to 1024 [ 562.081378][ T9972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.465023][ T9982] loop7: detected capacity change from 0 to 2048 [ 562.939545][ T9982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.969741][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.188180][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.199262][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.277469][T10013] loop0: detected capacity change from 0 to 2048 [ 566.797114][T10013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 570.101218][T10024] loop7: detected capacity change from 0 to 1024 [ 570.205996][T10024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.101576][ T8854] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.581365][T10038] loop7: detected capacity change from 0 to 2048 [ 571.663731][T10038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.791775][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.745'. [ 575.937552][T10070] loop7: detected capacity change from 0 to 32768 [ 576.919540][T10081] cgroup: Unknown subsys name 'pcr' [ 578.269648][T10101] loop7: detected capacity change from 0 to 1024 [ 578.460548][T10101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.445554][ T8854] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.894893][T10122] loop4: detected capacity change from 0 to 2048 [ 580.104052][T10122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.453875][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 584.829273][T10165] cgroup: Unknown subsys name 'pcr' [ 586.422357][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 586.711476][T10174] loop0: detected capacity change from 0 to 2048 [ 586.788579][T10174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 594.419742][T10220] loop7: detected capacity change from 0 to 1024 [ 594.493745][T10220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.464290][ T8854] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.509674][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 598.179303][T10238] cgroup: Unknown subsys name 'pcr' [ 600.505656][T10250] loop0: detected capacity change from 0 to 512 [ 600.528414][T10250] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 601.931395][T10256] loop7: detected capacity change from 0 to 2048 [ 602.049754][T10256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 604.993870][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 605.919275][T10277] cgroup: Unknown subsys name 'pcr' [ 606.791623][T10282] loop0: detected capacity change from 0 to 1024 [ 606.980708][T10282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.526711][T10289] loop7: detected capacity change from 0 to 1024 [ 607.573698][T10289] EXT4-fs: Ignoring removed nobh option [ 607.607332][T10289] EXT4-fs: inline encryption not supported [ 607.640909][T10289] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 607.694576][T10289] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 607.694576][T10289] [ 610.143753][T10298] loop7: detected capacity change from 0 to 512 [ 610.741631][ T9894] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 611.250468][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.488177][T10305] loop0: detected capacity change from 0 to 2048 [ 611.502215][T10305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 614.639481][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 616.155447][T10333] loop4: detected capacity change from 0 to 512 [ 616.329423][T10333] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 616.560561][T10338] loop5: detected capacity change from 0 to 1024 [ 618.112959][T10338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.753327][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.063292][T10354] cgroup: Unknown subsys name 'pcr' [ 621.179464][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 621.815894][T10367] loop4: detected capacity change from 0 to 2048 [ 621.838066][T10367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.705861][T10373] loop0: detected capacity change from 0 to 512 [ 622.771053][T10373] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 624.624577][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.637046][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.838839][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 627.956358][T10394] loop0: detected capacity change from 0 to 1024 [ 628.034554][T10394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.979314][T10404] loop4: detected capacity change from 0 to 2048 [ 629.145155][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.261996][T10404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 636.130019][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 636.990545][T10441] cgroup: Unknown subsys name 'pcr' [ 638.640082][T10454] loop4: detected capacity change from 0 to 1024 [ 638.695056][T10454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.721570][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.688428][T10474] loop4: detected capacity change from 0 to 2048 [ 640.809914][T10474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.896317][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 643.668457][T10498] loop4: detected capacity change from 0 to 1024 [ 643.790408][T10498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.799710][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.398502][T10519] cgroup: Unknown subsys name 'pcr' [ 648.875851][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 649.010646][T10533] loop7: detected capacity change from 0 to 2048 [ 649.032810][T10533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.082591][T10558] loop0: detected capacity change from 0 to 1024 [ 653.165286][T10560] loop5: detected capacity change from 0 to 512 [ 653.173128][T10558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.287961][T10560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.409177][T10560] ext4 filesystem being mounted at /168/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.973346][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.145408][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.299779][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 656.782168][T10589] cgroup: Unknown subsys name 'pcr' [ 658.580767][T10601] loop5: detected capacity change from 0 to 2048 [ 658.680459][T10601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 659.324555][T10605] loop4: detected capacity change from 0 to 512 [ 660.160158][T10605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.279192][T10605] ext4 filesystem being mounted at /217/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.333854][T10615] loop0: detected capacity change from 0 to 1024 [ 660.600535][T10615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.405291][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.506842][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.043829][T10626] cgroup: Unknown subsys name 'pcr' [ 662.700098][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 666.481305][T10648] loop4: detected capacity change from 0 to 512 [ 666.619045][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 667.404922][T10648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.496545][T10648] ext4 filesystem being mounted at /221/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.540056][T10659] loop5: detected capacity change from 0 to 1024 [ 667.614233][T10659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.690417][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.699882][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.230452][T10678] cgroup: Unknown subsys name 'pcr' [ 670.340211][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 672.027148][T10692] loop0: detected capacity change from 0 to 2048 [ 672.066891][T10692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 672.379285][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 673.501196][T10700] loop4: detected capacity change from 0 to 1024 [ 673.635528][T10700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.540442][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.100823][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 679.249386][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 682.219522][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 685.380150][T10784] loop0: detected capacity change from 0 to 2048 [ 685.463900][T10784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 686.091388][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.097761][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.273747][T10795] loop4: detected capacity change from 0 to 512 [ 686.282999][T10795] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 686.478630][ T9894] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 691.816768][T10820] loop7: detected capacity change from 0 to 512 [ 692.316108][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 692.575898][T10820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.629253][T10820] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.153659][ T8854] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.379654][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 695.445247][T10845] loop7: detected capacity change from 0 to 2048 [ 695.540770][T10845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 699.654915][T10870] loop4: detected capacity change from 0 to 512 [ 699.725195][T10870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.777641][T10870] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.829526][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 701.899057][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 702.106804][T10895] loop0: detected capacity change from 0 to 2048 [ 702.137451][T10895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 703.273208][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.600648][T10922] loop0: detected capacity change from 0 to 512 [ 704.640067][T10922] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 705.739118][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 708.336061][T10938] loop0: detected capacity change from 0 to 512 [ 708.385738][T10938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.417051][T10938] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.043017][T10949] loop5: detected capacity change from 0 to 2048 [ 709.165192][T10949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 710.968560][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 711.234782][T10964] loop5: detected capacity change from 0 to 512 [ 711.256966][T10964] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 713.072568][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 713.637819][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.145697][T11008] loop4: detected capacity change from 0 to 2048 [ 716.223390][T11010] loop5: detected capacity change from 0 to 512 [ 716.234274][T11010] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 716.269560][T11008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 716.320109][ T9894] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 716.333970][T11012] loop0: detected capacity change from 0 to 512 [ 716.618137][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 717.737535][T11012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.859105][T11012] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.233720][T11030] syzkaller0: entered promiscuous mode [ 719.248284][T11030] syzkaller0: entered allmulticast mode [ 720.037311][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.162278][T11043] loop0: detected capacity change from 0 to 512 [ 720.172757][T11043] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 723.150841][T11066] loop0: detected capacity change from 0 to 512 [ 723.186885][T11066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.272578][T11066] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.326771][T11070] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 723.652466][T11070] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 724.145016][T11067] loop7: detected capacity change from 0 to 2048 [ 724.350004][T11067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.645241][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.059018][T11122] loop0: detected capacity change from 0 to 512 [ 728.101757][T11122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.170215][T11122] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.438728][T11138] loop7: detected capacity change from 0 to 2048 [ 730.871119][T11138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 732.235757][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.269076][T11170] loop4: detected capacity change from 0 to 512 [ 734.301701][T11170] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 736.446879][T11189] loop7: detected capacity change from 0 to 2048 [ 736.506206][T11189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 741.649479][T11242] loop5: detected capacity change from 0 to 2048 [ 741.893034][T11242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 743.777498][T11256] loop0: detected capacity change from 0 to 4096 [ 745.784939][T11275] loop0: detected capacity change from 0 to 1024 [ 745.794190][T11273] loop5: detected capacity change from 0 to 1024 [ 745.802253][T11273] EXT4-fs: Ignoring removed nobh option [ 745.807862][T11273] EXT4-fs: inline encryption not supported [ 745.815831][T11273] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 745.833294][T11275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 745.914514][T11273] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 745.914514][T11273] [ 746.430460][T11282] loop7: detected capacity change from 0 to 2048 [ 746.785470][T11287] loop4: detected capacity change from 0 to 256 [ 747.722605][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.729112][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.748035][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.770169][T11282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 747.787063][T11287] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 751.719053][T11311] loop0: detected capacity change from 0 to 1024 [ 751.791565][T11311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.772429][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.871887][T11327] loop5: detected capacity change from 0 to 256 [ 752.952214][T11327] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 753.357574][T11334] loop0: detected capacity change from 0 to 1024 [ 753.374141][T11334] EXT4-fs: Ignoring removed nobh option [ 753.508595][T11334] EXT4-fs: inline encryption not supported [ 753.543092][T11334] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 753.560777][T11335] loop5: detected capacity change from 0 to 2048 [ 753.567916][T11334] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 753.567916][T11334] [ 753.701753][T11335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 755.141549][T11343] loop4: detected capacity change from 0 to 2048 [ 755.376064][T11343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 755.823830][ T9896] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 757.080857][T11345] loop0: detected capacity change from 0 to 512 [ 759.152901][T11357] loop5: detected capacity change from 0 to 1024 [ 759.234755][T11357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.877723][T11364] syzkaller0: entered promiscuous mode [ 759.883881][T11364] syzkaller0: entered allmulticast mode [ 760.075365][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.216737][T11371] loop5: detected capacity change from 0 to 256 [ 760.233745][T11371] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 760.600582][T11374] loop0: detected capacity change from 0 to 2048 [ 760.635184][T11374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 760.831642][ T5881] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 761.983024][T11384] loop4: detected capacity change from 0 to 512 [ 761.995800][T11384] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 762.021628][ T5881] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 762.062001][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.378990][T11385] loop0: detected capacity change from 0 to 2048 [ 763.476188][ T5881] usb 8-1: Product: syz [ 763.480901][ T5881] usb 8-1: Manufacturer: syz [ 763.485526][ T5881] usb 8-1: SerialNumber: syz [ 763.524766][T11385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 763.616617][ T5881] usb 8-1: can't set config #1, error -71 [ 763.708228][ T5881] usb 8-1: USB disconnect, device number 2 [ 763.997427][T11395] loop5: detected capacity change from 0 to 1024 [ 764.123311][T11395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.451709][T11400] cgroup: Unknown subsys name 'pcr' [ 765.489694][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.786587][T11409] loop5: detected capacity change from 0 to 256 [ 765.887790][T11409] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 767.680920][T11423] loop5: detected capacity change from 0 to 512 [ 767.731278][T11423] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 770.800315][T11434] loop0: detected capacity change from 0 to 2048 [ 770.840784][T11434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 772.210138][T11438] cgroup: Unknown subsys name 'pcr' [ 772.743639][T11442] loop7: detected capacity change from 0 to 1024 [ 772.964764][T11442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.401346][T11449] loop5: detected capacity change from 0 to 2048 [ 773.430620][T11449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 773.810194][ T8854] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.212109][T11457] loop7: detected capacity change from 0 to 256 [ 774.391506][T11457] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 774.671971][T11461] loop0: detected capacity change from 0 to 512 [ 774.701266][T11461] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 776.615192][T11469] loop5: detected capacity change from 0 to 2048 [ 776.626146][T11469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 777.824973][T11476] loop7: detected capacity change from 0 to 1024 [ 778.334483][T11478] cgroup: Unknown subsys name 'pcr' [ 779.667315][T11488] loop4: detected capacity change from 0 to 2048 [ 780.281909][T11488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 780.355656][T11476] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.107992][ T8854] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.461448][T11504] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 782.329585][T11510] syzkaller0: entered promiscuous mode [ 782.363951][T11510] syzkaller0: entered allmulticast mode [ 786.164401][T11532] loop7: detected capacity change from 0 to 2048 [ 786.197986][T11538] loop0: detected capacity change from 0 to 2048 [ 786.280037][T11538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.293800][T11532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.443363][T11526] cgroup: Unknown subsys name 'pcr' [ 787.643709][T11542] loop0: detected capacity change from 0 to 1024 [ 787.732660][T11542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.220159][T11550] syzkaller0: entered promiscuous mode [ 788.235742][T11550] syzkaller0: entered allmulticast mode [ 788.249770][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.585009][T11566] loop4: detected capacity change from 0 to 512 [ 790.706669][T11570] loop7: detected capacity change from 0 to 2048 [ 790.722461][T11570] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 791.230710][T11566] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.1116: bad orphan inode 15 [ 791.580168][T11566] ext4_test_bit(bit=14, block=18) = 1 [ 791.585974][T11566] is_bad_inode(inode)=0 [ 791.591978][T11566] NEXT_ORPHAN(inode)=1023 [ 791.596585][T11566] max_ino=32 [ 791.601827][T11566] i_nlink=0 [ 791.613146][T11566] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #15: comm syz.4.1116: corrupted xattr block 19: invalid header [ 791.642470][T11566] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 791.653899][T11566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 791.670884][T11566] ext4 filesystem being mounted at /281/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 792.293270][T11566] EXT4-fs (loop4): shut down requested (1) [ 792.428358][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 792.575338][T11578] loop5: detected capacity change from 0 to 1024 [ 792.779867][T11578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.178651][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.514312][T11590] loop5: detected capacity change from 0 to 512 [ 794.241691][T11590] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 795.711300][T11604] syzkaller0: entered promiscuous mode [ 795.718143][T11604] syzkaller0: entered allmulticast mode [ 798.125797][T11615] loop7: detected capacity change from 0 to 1024 [ 798.337948][T11615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.886831][ T8854] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.981048][T11630] loop5: detected capacity change from 0 to 2048 [ 799.619160][T11630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 801.099874][T11643] syzkaller0: entered promiscuous mode [ 801.105542][T11643] syzkaller0: entered allmulticast mode [ 801.276341][T11647] loop5: detected capacity change from 0 to 512 [ 801.317656][T11647] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 803.534889][T11664] loop0: detected capacity change from 0 to 1024 [ 803.617787][T11664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.341106][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.899860][ T788] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 805.289873][ T788] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 806.272733][T11687] loop0: detected capacity change from 0 to 2048 [ 806.529816][ T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.538065][ T788] usb 6-1: Product: syz [ 806.557313][ T788] usb 6-1: Manufacturer: syz [ 806.570424][ T788] usb 6-1: SerialNumber: syz [ 806.950940][T11687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 806.965460][T11691] loop4: detected capacity change from 0 to 512 [ 806.994526][T11691] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 809.791588][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.797963][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.875867][ T788] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 810.018983][ T788] usb 6-1: USB disconnect, device number 2 [ 810.043024][ T788] usblp0: removed [ 810.883523][T11706] loop5: detected capacity change from 0 to 1024 [ 810.956279][T11706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.979708][T11708] syzkaller0: entered promiscuous mode [ 810.985232][T11708] syzkaller0: entered allmulticast mode [ 812.179208][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.820258][T11726] loop0: detected capacity change from 0 to 2048 [ 814.478214][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 814.559984][T11726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 815.585418][T11734] loop5: detected capacity change from 0 to 512 [ 815.636029][T11734] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 817.339567][ T788] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 817.549848][ T788] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 817.747838][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.757434][ T788] usb 1-1: Product: syz [ 817.761985][ T788] usb 1-1: Manufacturer: syz [ 817.766722][ T788] usb 1-1: SerialNumber: syz [ 818.536641][ T788] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 818.636238][T11747] syzkaller0: entered promiscuous mode [ 818.646904][T11747] syzkaller0: entered allmulticast mode [ 818.703306][T11749] loop4: detected capacity change from 0 to 1024 [ 818.764156][T11749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.554728][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.228684][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d52f000: rx timeout, send abort [ 820.241466][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d52f000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 820.666887][ T788] usb 1-1: USB disconnect, device number 4 [ 820.726046][ T788] usblp0: removed [ 821.266592][T11775] loop4: detected capacity change from 0 to 2048 [ 821.287046][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 821.302573][T11775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 821.364939][T11774] loop0: detected capacity change from 0 to 512 [ 821.435278][T11774] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 823.517611][T11788] loop4: detected capacity change from 0 to 1024 [ 823.592304][T11788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.804821][T11818] loop5: detected capacity change from 0 to 512 [ 826.907529][T11818] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 828.209991][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 829.844076][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.299016][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 832.898594][T11845] loop7: detected capacity change from 0 to 4096 [ 834.489192][T11857] overlayfs: missing 'lowerdir' [ 834.627582][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dffb800: rx timeout, send abort [ 834.638701][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dffb800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 834.720138][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 836.779210][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 836.891108][T11869] loop0: detected capacity change from 0 to 1024 [ 837.029664][T11869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.881606][T11888] loop4: detected capacity change from 0 to 4096 [ 840.648305][T11896] loop4: detected capacity change from 0 to 1024 [ 840.690135][T11896] EXT4-fs: inline encryption not supported [ 840.710768][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.735327][T11896] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 840.777471][T11896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.993631][ T5775] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 842.131942][ T5997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.632004][ T8923] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 842.698914][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 843.521905][ T8923] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 843.632298][ T8923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.656678][ T8923] usb 6-1: Product: syz [ 843.677575][ T8923] usb 6-1: Manufacturer: syz [ 843.699095][ T8923] usb 6-1: SerialNumber: syz [ 844.212743][ T8923] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 844.594803][T11934] loop0: detected capacity change from 0 to 1024 [ 844.681825][T11934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.098805][T11942] loop4: detected capacity change from 0 to 4096 [ 846.439224][ T5810] usb 6-1: USB disconnect, device number 3 [ 846.464884][ T5810] usblp0: removed [ 846.563429][T11952] loop5: detected capacity change from 0 to 512 [ 846.592375][T11952] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 848.161192][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.486209][T11973] loop4: detected capacity change from 0 to 4096 [ 850.344607][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 850.786174][T11984] loop7: detected capacity change from 0 to 512 [ 850.869208][T11984] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 850.954560][ T5157] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 851.028465][ T9894] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 851.331231][ T5157] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 851.366373][ T5157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.401961][ T5157] usb 5-1: Product: syz [ 851.408996][ T5157] usb 5-1: Manufacturer: syz [ 851.413753][ T5157] usb 5-1: SerialNumber: syz [ 851.846816][T11987] loop7: detected capacity change from 0 to 1024 [ 851.885109][ T5157] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 851.991967][T11987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 853.431225][ T8854] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.842727][ T8923] usb 5-1: USB disconnect, device number 2 [ 853.891311][ T8923] usblp0: removed [ 854.991690][T12016] loop5: detected capacity change from 0 to 1024 [ 855.019114][T12016] EXT4-fs: Ignoring removed nobh option [ 855.059968][T12016] EXT4-fs: inline encryption not supported [ 855.091507][T12016] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 855.119502][T12016] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 855.119502][T12016] [ 855.814764][T12018] loop5: detected capacity change from 0 to 512 [ 856.378720][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 856.519841][ T9894] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 857.227557][T12024] loop0: detected capacity change from 0 to 512 [ 857.394048][T12024] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 859.071579][T12032] loop5: detected capacity change from 0 to 512 [ 859.083718][T12032] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 862.398918][ T5157] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 862.560190][T12047] loop4: detected capacity change from 0 to 1024 [ 862.602835][ T5157] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 862.628940][ T5157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.642202][T12047] EXT4-fs: Ignoring removed nobh option [ 862.647825][T12047] EXT4-fs: inline encryption not supported [ 862.658960][ T5157] usb 6-1: Product: syz [ 862.663188][ T5157] usb 6-1: Manufacturer: syz [ 862.679600][ T5157] usb 6-1: SerialNumber: syz [ 862.729097][T12047] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 862.809536][T12047] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 862.809536][T12047] [ 863.450525][T12050] loop4: detected capacity change from 0 to 512 [ 864.480020][T12049] loop0: detected capacity change from 0 to 1024 [ 864.528563][ T5157] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 864.557596][ T5157] usb 6-1: USB disconnect, device number 4 [ 864.612641][ T9894] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 864.704638][ T5157] usblp0: removed [ 864.728571][T12049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.904556][T12075] NILFS (nullb0): couldn't find nilfs on the device [ 867.659385][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 867.977731][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.398105][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.408944][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.536612][T12101] loop5: detected capacity change from 0 to 1024 [ 871.556105][T12101] EXT4-fs: Ignoring removed nobh option [ 871.593560][T12101] EXT4-fs: inline encryption not supported [ 871.603964][T12101] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 871.642210][T12101] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 871.642210][T12101] [ 873.678685][T12106] loop5: detected capacity change from 0 to 512 [ 874.433026][ T9894] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 874.698450][T12112] loop7: detected capacity change from 0 to 32768 [ 875.314459][T12117] read_mapping_page failed! [ 875.319518][T12117] diRead: read_metapage failed [ 875.324563][T12117] jfs_lookup: iget failed on inum 32 [ 876.941504][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 879.513015][T12139] loop5: detected capacity change from 0 to 512 [ 879.533979][T12139] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 880.829175][ T5881] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 881.077127][ T5881] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 881.092949][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.118976][ T5881] usb 5-1: Product: syz [ 881.123200][ T5881] usb 5-1: Manufacturer: syz [ 881.148474][ T5881] usb 5-1: SerialNumber: syz [ 883.790184][ T5881] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 884.850991][ T5881] usb 5-1: USB disconnect, device number 3 [ 884.899524][ T5881] usblp0: removed [ 887.922482][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880315c0800: rx timeout, send abort [ 887.933024][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880315c0800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 888.699848][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 889.236160][T12179] loop0: detected capacity change from 0 to 512 [ 890.421772][T12179] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 893.029046][ T23] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 894.444435][ T23] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 894.471079][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.481694][ T23] usb 1-1: Product: syz [ 894.485918][ T23] usb 1-1: Manufacturer: syz [ 894.508864][ T23] usb 1-1: SerialNumber: syz [ 894.958276][ T23] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 896.798947][ T23] usb 1-1: USB disconnect, device number 5 [ 896.824703][ T23] usblp0: removed [ 902.398940][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 903.222107][T12242] loop0: detected capacity change from 0 to 512 [ 903.279211][T12242] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 903.289387][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 903.370544][T12246] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 903.511562][ T9] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 904.166366][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.211487][ T9] usb 5-1: Product: syz [ 904.228910][ T9] usb 5-1: Manufacturer: syz [ 904.233584][ T9] usb 5-1: SerialNumber: syz [ 906.180774][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 906.283412][ T9] usb 5-1: USB disconnect, device number 4 [ 906.318757][ T9] usblp0: removed [ 908.357149][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 908.507871][T12272] overlayfs: overlapping lowerdir path [ 909.859207][T12283] loop4: detected capacity change from 0 to 32768 [ 913.759514][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e03d400: rx timeout, send abort [ 913.768898][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802e03d400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 914.469033][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 914.585475][T12310] loop0: detected capacity change from 0 to 4096 [ 915.825603][T12314] loop7: detected capacity change from 0 to 512 [ 915.870421][T12314] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 916.595721][T12321] overlayfs: overlapping lowerdir path [ 917.991319][T12328] loop5: detected capacity change from 0 to 32768 [ 918.745289][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 918.959518][ T23] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 918.981465][ T23] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 919.036937][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 919.060721][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.100356][T12326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 919.145826][ T23] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 921.854592][ T8923] usb 5-1: USB disconnect, device number 5 [ 924.573125][T12354] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 925.252917][T12346] loop7: detected capacity change from 0 to 4096 [ 926.108888][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 926.811853][T12359] overlayfs: overlapping lowerdir path [ 931.011119][T12392] loop0: detected capacity change from 0 to 512 [ 931.092526][T12392] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 932.478212][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 932.516246][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.666576][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.961791][T12410] loop4: detected capacity change from 0 to 4096 [ 937.330566][T12437] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 938.309051][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 938.387220][T12443] loop0: detected capacity change from 0 to 512 [ 938.427252][T12443] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 943.908951][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 946.807695][T12487] loop4: detected capacity change from 0 to 32768 [ 948.132033][T12491] loop7: detected capacity change from 0 to 512 [ 948.197514][T12491] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 952.496326][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 952.638943][ T5881] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 952.757741][T12521] loop5: detected capacity change from 0 to 512 [ 952.800406][T12521] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 953.188301][ T5881] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 953.228616][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.252828][ T5881] usb 5-1: Product: syz [ 953.257066][ T5881] usb 5-1: Manufacturer: syz [ 953.267259][ T5881] usb 5-1: SerialNumber: syz [ 954.637254][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d984000: rx timeout, send abort [ 954.646437][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d984000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 955.550087][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 955.673797][ T5881] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 955.698702][ T5881] usb 5-1: USB disconnect, device number 6 [ 955.740173][ T5881] usblp0: removed [ 956.030219][T12534] loop7: detected capacity change from 0 to 32768 [ 958.074250][T12546] loop7: detected capacity change from 0 to 32768 [ 960.470441][T12571] loop5: detected capacity change from 0 to 512 [ 960.677505][T12571] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 964.303456][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 966.516604][T12596] loop4: detected capacity change from 0 to 32768 [ 968.064878][T12616] loop5: detected capacity change from 0 to 512 [ 968.209414][T12616] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 969.553238][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e58f000: rx timeout, send abort [ 969.568948][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e58f000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 971.027594][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 973.832233][T12646] loop0: detected capacity change from 0 to 40427 [ 973.900466][T12646] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 973.908719][T12646] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 973.923229][T12646] F2FS-fs (loop0): invalid crc value [ 974.220216][T12646] F2FS-fs (loop0): Found nat_bits in checkpoint [ 974.574587][T12646] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 974.582692][T12646] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 977.231928][T12678] loop4: detected capacity change from 0 to 32768 [ 978.328844][T12684] read_mapping_page failed! [ 978.333421][T12684] diRead: read_metapage failed [ 978.338268][T12684] jfs_lookup: iget failed on inum 32 [ 982.007420][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 982.175751][T12713] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1405'. [ 986.063478][T12742] loop7: detected capacity change from 0 to 32768 [ 986.804229][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 988.703858][T12765] NILFS (nullb0): couldn't find nilfs on the device [ 990.182105][T12779] loop0: detected capacity change from 0 to 512 [ 990.209026][T12779] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 991.419161][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 991.439192][ T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 991.871568][ T9] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 991.888844][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.597650][ T9] usb 8-1: Product: syz [ 992.602892][ T9] usb 8-1: Manufacturer: syz [ 992.607515][ T9] usb 8-1: SerialNumber: syz [ 993.321530][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.328022][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.465351][ T9] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 995.493214][ T9] usb 8-1: USB disconnect, device number 3 [ 995.523859][ T9] usblp0: removed [ 995.938224][T12820] loop7: detected capacity change from 0 to 512 [ 995.972555][T12820] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 998.862833][T12840] NILFS (nullb0): couldn't find nilfs on the device [ 1001.419609][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 1001.783456][ T23] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1002.013046][ T23] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1002.038951][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.064496][ T23] usb 5-1: Product: syz [ 1002.080664][ T23] usb 5-1: Manufacturer: syz [ 1002.085329][ T23] usb 5-1: SerialNumber: syz [ 1004.394728][T12880] NILFS (nullb0): couldn't find nilfs on the device [ 1004.942101][ T23] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1005.047468][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 1005.072307][ T23] usb 5-1: USB disconnect, device number 7 [ 1005.109569][ T23] usblp0: removed [ 1008.388931][ T788] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1008.566301][T12917] NILFS (nullb0): couldn't find nilfs on the device [ 1008.689721][ T788] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1008.833544][ T788] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.012597][ T788] usb 8-1: Product: syz [ 1009.073704][ T788] usb 8-1: Manufacturer: syz [ 1009.106332][ T788] usb 8-1: SerialNumber: syz [ 1009.252103][T12923] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1009.749061][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 1010.023911][T12929] loop5: detected capacity change from 0 to 512 [ 1010.042555][T12929] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 1011.515297][ T788] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1011.552063][ T788] usb 8-1: USB disconnect, device number 4 [ 1011.679803][ T788] usblp0: removed [ 1015.630900][T12954] NILFS (nullb0): couldn't find nilfs on the device [ 1017.179021][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 1017.247356][T12973] loop0: detected capacity change from 0 to 512 [ 1017.258446][T12973] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1017.318831][ T9894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1018.959151][ T5157] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1020.632646][ T5157] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1021.378808][ T5157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.423967][ T5157] usb 6-1: Product: syz [ 1021.483138][ T5157] usb 6-1: Manufacturer: syz [ 1021.523775][ T5157] usb 6-1: SerialNumber: syz [ 1021.728198][ T5157] usb 6-1: can't set config #1, error -71 [ 1021.762154][ T5157] usb 6-1: USB disconnect, device number 5 [ 1021.950194][T12999] loop5: detected capacity change from 0 to 512 [ 1022.019945][T13000] NILFS (nullb0): couldn't find nilfs on the device [ 1022.730850][T13006] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1480'. [ 1022.760238][T12999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.788971][T12999] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.913001][T13008] loop7: detected capacity change from 0 to 512 [ 1022.995251][T13008] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 1023.670007][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 1025.229937][T13024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1485'. [ 1025.269248][T13024] unsupported nlmsg_type 40 [ 1027.086462][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.567536][T13047] NILFS (nullb0): couldn't find nilfs on the device [ 1028.438871][ T5881] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1028.532742][T13053] loop5: detected capacity change from 0 to 512 [ 1028.544511][T13053] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 1028.633337][ T5881] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1028.656230][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.420718][ T5881] usb 1-1: Product: syz [ 1029.424929][ T5881] usb 1-1: Manufacturer: syz [ 1029.488860][ T5881] usb 1-1: SerialNumber: syz [ 1030.688871][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 1030.917020][T13065] loop7: detected capacity change from 0 to 512 [ 1031.005738][T13065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.069514][T13065] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.225942][ T5881] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1031.244525][ T5881] usb 1-1: USB disconnect, device number 6 [ 1031.257656][ T5881] usblp0: removed [ 1031.603299][T13074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1498'. [ 1034.555856][T13088] loop0: detected capacity change from 0 to 512 [ 1034.589297][T13088] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1035.418868][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 1035.486693][ T8854] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.077968][T13105] NILFS (nullb0): couldn't find nilfs on the device [ 1039.365541][T13137] loop5: detected capacity change from 0 to 512 [ 1039.382564][T13136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1511'. [ 1039.397540][T13137] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 1039.544524][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1039.838962][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 1039.857791][ T27] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1039.899374][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1039.910592][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1039.921290][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1039.931244][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1039.941314][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.954896][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1040.019467][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.158685][ T27] usbtmc: probe of 5-1:16.0 failed with error -22 [ 1040.459077][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 1041.200430][T13150] NILFS (nullb0): couldn't find nilfs on the device [ 1045.142381][ T8923] usb 5-1: USB disconnect, device number 8 [ 1046.949494][T13172] loop4: detected capacity change from 0 to 512 [ 1046.960031][T13172] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1047.277307][T13181] NILFS (nullb0): couldn't find nilfs on the device [ 1051.290062][T13200] loop4: detected capacity change from 0 to 1024 [ 1051.303334][T13200] EXT4-fs: Ignoring removed nobh option [ 1051.309640][T13200] EXT4-fs: inline encryption not supported [ 1051.328623][T13200] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1051.386244][T13200] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 1051.386244][T13200] [ 1052.748613][T13216] loop0: detected capacity change from 0 to 512 [ 1052.833019][T13217] NILFS (nullb0): couldn't find nilfs on the device [ 1053.051691][T13216] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1053.348878][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 1054.713857][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.729015][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.975679][T13224] loop5: detected capacity change from 0 to 512 [ 1055.004191][T13224] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1055.062108][T13224] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1055.132526][T13224] EXT4-fs (loop5): 1 truncate cleaned up [ 1055.169867][T13224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.375978][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'. [ 1056.464506][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.716756][T13235] loop5: detected capacity change from 0 to 1024 [ 1056.740443][T13235] EXT4-fs: Ignoring removed nobh option [ 1056.758980][T13235] EXT4-fs: inline encryption not supported [ 1056.766182][T13235] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1056.786095][T13235] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1056.786095][T13235] [ 1059.381156][T13252] loop4: detected capacity change from 0 to 512 [ 1059.423405][T13252] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1060.431027][T13265] NILFS (nullb0): couldn't find nilfs on the device [ 1060.504825][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 1061.363786][T13272] loop5: detected capacity change from 0 to 1024 [ 1061.390737][T13272] EXT4-fs: Ignoring removed nobh option [ 1061.406722][T13272] EXT4-fs: inline encryption not supported [ 1061.428257][T13272] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1061.468507][T13272] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1061.468507][T13272] [ 1064.050678][T13282] loop5: detected capacity change from 0 to 512 [ 1065.933420][T13301] NILFS (nullb0): couldn't find nilfs on the device [ 1066.458809][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 1066.756216][T13304] loop0: detected capacity change from 0 to 512 [ 1066.800022][T13304] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1067.059157][ T9894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1073.087718][T13343] NILFS (nullb0): couldn't find nilfs on the device [ 1073.802224][T13348] loop4: detected capacity change from 0 to 512 [ 1073.811419][T13348] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1073.989103][ T9894] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1075.470090][ T5776] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1075.693917][T13357] loop0: detected capacity change from 0 to 1024 [ 1075.697026][ T5776] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1075.712085][T13357] EXT4-fs: Ignoring removed nobh option [ 1075.717698][T13357] EXT4-fs: inline encryption not supported [ 1075.750299][T13357] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1075.759143][ T5776] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.779132][T13357] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1075.779132][T13357] [ 1075.779323][ T5776] usb 8-1: Product: syz [ 1076.411780][ T5776] usb 8-1: Manufacturer: syz [ 1076.468013][ T5776] usb 8-1: SerialNumber: syz [ 1078.320492][ T5776] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1078.371451][ T5776] usb 8-1: USB disconnect, device number 5 [ 1078.380724][ T5776] usblp0: removed [ 1080.372030][T13380] NILFS (nullb0): couldn't find nilfs on the device [ 1082.177951][T13394] loop5: detected capacity change from 0 to 512 [ 1082.206821][T13394] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 1084.981928][T13402] loop4: detected capacity change from 0 to 1024 [ 1085.016743][T13402] EXT4-fs: Ignoring removed nobh option [ 1085.058019][T13402] EXT4-fs: inline encryption not supported [ 1085.079341][T13402] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1085.110411][T13402] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 1085.110411][T13402] [ 1086.144992][T13402] loop4: detected capacity change from 0 to 512 [ 1086.256637][ T9894] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1086.918978][T12153] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1087.246235][T12153] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1087.668762][T12153] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.683676][T12153] usb 8-1: Product: syz [ 1087.804501][T12153] usb 8-1: Manufacturer: syz [ 1087.829018][T12153] usb 8-1: SerialNumber: syz [ 1091.242478][T12153] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1092.634016][T12153] usb 8-1: USB disconnect, device number 6 [ 1092.651493][T12153] usblp0: removed [ 1092.674789][T13441] loop5: detected capacity change from 0 to 512 [ 1092.759239][T13441] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 1096.635775][T13462] NILFS (nullb0): couldn't find nilfs on the device [ 1097.698787][ T5881] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1098.543563][ T5881] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1098.766805][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.809635][ T5881] usb 6-1: Product: syz [ 1098.813873][ T5881] usb 6-1: Manufacturer: syz [ 1098.834750][ T5881] usb 6-1: SerialNumber: syz [ 1100.066194][T13485] loop0: detected capacity change from 0 to 512 [ 1100.104711][T13485] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1101.378225][ T5881] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1101.441684][ T5881] usb 6-1: USB disconnect, device number 6 [ 1101.489259][ T5881] usblp0: removed [ 1103.653835][T13507] NILFS (nullb0): couldn't find nilfs on the device [ 1105.539685][T13519] loop7: detected capacity change from 0 to 512 [ 1105.577750][T13519] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 1108.068822][ T8923] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1108.253613][ T8923] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1108.271907][ T8923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.292024][ T8923] usb 5-1: Product: syz [ 1108.302166][ T8923] usb 5-1: Manufacturer: syz [ 1108.313515][ T8923] usb 5-1: SerialNumber: syz [ 1110.259496][ T8923] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1110.341425][T13540] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1110.697669][ T8923] usb 5-1: USB disconnect, device number 9 [ 1110.706192][ T8923] usblp0: removed [ 1112.550436][T13559] netlink: 'syz.7.1618': attribute type 3 has an invalid length. [ 1112.677035][T13559] loop7: detected capacity change from 0 to 256 [ 1114.114478][T13559] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1114.465356][T13566] loop0: detected capacity change from 0 to 512 [ 1115.687726][T13566] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1116.562203][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.568572][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.758957][T13593] binder: 13592:13593 ioctl c0306201 0 returned -14 [ 1120.512054][T13596] binder: 13592:13596 ioctl c0306201 200000000680 returned -14 [ 1120.521730][ T23] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1121.006836][ T23] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1121.067049][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.118534][ T23] usb 6-1: Product: syz [ 1121.140162][ T23] usb 6-1: Manufacturer: syz [ 1121.144822][ T23] usb 6-1: SerialNumber: syz [ 1121.849972][T13606] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1630'. [ 1123.965555][ T23] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1124.019223][ T23] usb 6-1: USB disconnect, device number 7 [ 1124.029786][ T23] usblp0: removed [ 1126.265670][T13631] loop4: detected capacity change from 0 to 512 [ 1126.346274][T13631] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1130.719613][T13655] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1641'. [ 1133.436211][T13665] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1640'. [ 1133.642468][T13664] loop5: detected capacity change from 0 to 32768 [ 1133.898783][ T8923] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1134.142092][ T8923] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1134.164818][ T8923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.193501][ T8923] usb 1-1: Product: syz [ 1134.197745][ T8923] usb 1-1: Manufacturer: syz [ 1134.217041][ T8923] usb 1-1: SerialNumber: syz [ 1135.339917][ T8923] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1136.191208][T13682] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1650'. [ 1136.790225][ T8923] usb 1-1: USB disconnect, device number 7 [ 1136.831288][ T8923] usblp0: removed [ 1136.917209][T13687] netlink: 'syz.0.1652': attribute type 2 has an invalid length. [ 1136.926433][T13687] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1652'. [ 1139.230196][T13698] loop7: detected capacity change from 0 to 2048 [ 1139.591358][T13700] loop4: detected capacity change from 0 to 32768 [ 1139.631164][T13698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1140.572755][T13709] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1658'. [ 1142.407221][T13714] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1659'. [ 1147.191039][T13735] loop7: detected capacity change from 0 to 32768 [ 1147.199362][T12153] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1147.218842][T13737] loop5: detected capacity change from 0 to 128 [ 1147.232786][T13737] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1147.594351][T12153] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1147.609231][T12153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.624284][T12153] usb 5-1: Product: syz [ 1147.648831][T12153] usb 5-1: Manufacturer: syz [ 1147.659210][T12153] usb 5-1: SerialNumber: syz [ 1148.125544][T13747] loop5: detected capacity change from 0 to 2048 [ 1148.266221][T13747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1148.530507][T12153] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1149.568096][T13753] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1668'. [ 1150.261484][T12153] usb 5-1: USB disconnect, device number 10 [ 1150.283647][T12153] usblp0: removed [ 1152.745201][T13772] loop7: detected capacity change from 0 to 16 [ 1152.827956][T13772] erofs: (device loop7): mounted with root inode @ nid 36. [ 1152.856583][T13772] syz.7.1674: attempt to access beyond end of device [ 1152.856583][T13772] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1153.013841][T13772] syz.7.1674: attempt to access beyond end of device [ 1153.013841][T13772] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1153.043420][T13772] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1153.071915][ T28] audit: type=1800 audit(1780485313.170:4): pid=13772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1674" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 1153.452345][T13772] syz.7.1674 (13772) used greatest stack depth: 19048 bytes left [ 1155.183413][T13781] loop7: detected capacity change from 0 to 2048 [ 1155.246031][T13781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1156.348433][T13786] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1677'. [ 1164.290082][T13828] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1687'. [ 1166.931106][T13845] loop7: detected capacity change from 0 to 32768 [ 1170.756651][T13871] loop7: detected capacity change from 0 to 256 [ 1170.819358][T13871] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1171.238543][T13875] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1172.399899][T13880] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1698'. [ 1177.596082][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.615992][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.775583][T13922] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1178.725682][T13929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.749309][T13929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.768496][T13929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.810847][T13929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.338800][ T8923] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1180.624801][ T8923] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1180.634221][ T8923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.642381][ T8923] usb 1-1: Product: syz [ 1181.258904][ T8923] usb 1-1: Manufacturer: syz [ 1181.263564][ T8923] usb 1-1: SerialNumber: syz [ 1181.710934][ T8923] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1181.725025][T13955] loop5: detected capacity change from 0 to 2048 [ 1182.440270][T13955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.635512][T13962] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1183.145674][ T27] usb 1-1: USB disconnect, device number 8 [ 1183.156711][ T27] usblp0: removed [ 1183.642411][ T9403] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1184.467605][ T9403] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1184.467605][ T9403] [ 1184.551492][ T9403] EXT4-fs (loop5): Total free blocks count 0 [ 1184.563511][ T9403] EXT4-fs (loop5): Free/Dirty block details [ 1184.573726][ T9403] EXT4-fs (loop5): free_blocks=4096 [ 1184.580457][ T9403] EXT4-fs (loop5): dirty_blocks=544 [ 1184.587578][ T9403] EXT4-fs (loop5): Block reservation details [ 1184.593818][ T9403] EXT4-fs (loop5): i_reserved_data_blocks=34 [ 1184.605557][ T9403] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 513 with error 28 [ 1188.579520][ T5776] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1189.062906][ T5776] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1189.080638][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.097172][ T5776] usb 5-1: Product: syz [ 1189.106821][ T5776] usb 5-1: Manufacturer: syz [ 1189.120523][ T5776] usb 5-1: SerialNumber: syz [ 1190.754927][ T5776] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1190.774037][ T5776] usb 5-1: USB disconnect, device number 11 [ 1190.819037][ T5776] usblp0: removed [ 1191.219123][T14024] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1197.925150][T14055] loop0: detected capacity change from 0 to 512 [ 1198.003888][T14061] binder: 14060:14061 ioctl c0306201 0 returned -14 [ 1198.119717][T14055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.136644][T14055] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.495406][T14082] loop5: detected capacity change from 0 to 32768 [ 1201.817480][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.900905][T14097] loop0: detected capacity change from 0 to 2048 [ 1203.973182][T14097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.161121][T14105] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1204.179194][T14105] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 1204.192037][T14105] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1204.192037][T14105] [ 1204.206385][T14105] EXT4-fs (loop0): Total free blocks count 0 [ 1204.217548][T14105] EXT4-fs (loop0): Free/Dirty block details [ 1204.228773][T14105] EXT4-fs (loop0): free_blocks=2415919504 [ 1204.243108][T14105] EXT4-fs (loop0): dirty_blocks=48 [ 1204.252740][T14105] EXT4-fs (loop0): Block reservation details [ 1204.260183][T14105] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 1204.932370][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.179100][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1205.368786][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1205.647014][T14121] loop0: detected capacity change from 0 to 32768 [ 1206.041527][ T23] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1206.065569][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.083997][ T23] usb 5-1: Product: syz [ 1206.088224][ T23] usb 5-1: Manufacturer: syz [ 1206.232201][ T23] usb 5-1: SerialNumber: syz [ 1206.306072][ T23] usb 5-1: config 0 descriptor?? [ 1206.357873][ T23] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1206.422202][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 1206.482656][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1206.539348][ T23] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1206.550630][T14111] dvb-usb: bulk message failed: -22 (3/0) [ 1206.601263][ T23] usb 5-1: media controller created [ 1206.768553][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1206.879590][ T23] usb 5-1: selecting invalid altsetting 7 [ 1206.909496][ T23] cxusb: set interface failed [ 1206.914333][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 1207.108801][ T23] DVB: Unable to find symbol lgdt330x_attach() [ 1207.115120][ T23] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1208.479291][ T23] rc_core: IR keymap rc-dvico-portable not found [ 1208.485697][ T23] Registered IR keymap rc-empty [ 1208.522548][ T23] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1208.561361][ T23] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input8 [ 1208.605318][ T23] dvb-usb: schedule remote query interval to 100 msecs. [ 1208.618950][ T23] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1208.681616][ T23] usb 5-1: USB disconnect, device number 12 [ 1208.829552][ T23] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1209.971830][T14142] program syz.7.1771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1209.983231][T14142] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1211.348854][T14151] loop0: detected capacity change from 0 to 32768 [ 1212.869768][T14154] JFS: discard option not supported on device [ 1212.876711][T14154] Mount JFS Failure: -22 [ 1212.912444][T14154] jfs_mount failed w/return code = -22 [ 1213.000760][T14154] syz.5.1775 uses obsolete (PF_INET,SOCK_PACKET) [ 1213.694879][T14164] atomic_op ffff888020f8e198 conn xmit_atomic 0000000000000000 [ 1214.677714][T14168] loop4: detected capacity change from 0 to 32768 [ 1215.540045][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1781'. [ 1215.558942][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1781'. [ 1217.546438][T14193] syzkaller0: entered promiscuous mode [ 1217.552545][T14193] syzkaller0: entered allmulticast mode [ 1218.007071][T14201] atomic_op ffff88802bba1998 conn xmit_atomic 0000000000000000 [ 1218.952312][T14205] loop4: detected capacity change from 0 to 32768 [ 1221.282471][T14227] loop5: detected capacity change from 0 to 32768 [ 1222.531553][T14235] program syz.5.1797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1222.552096][T14235] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1222.734672][T14238] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1225.131156][T14262] loop0: detected capacity change from 0 to 32768 [ 1226.565340][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 1227.022878][T14274] syzkaller0: entered promiscuous mode [ 1227.042032][T14274] syzkaller0: entered allmulticast mode [ 1233.864422][T14321] loop5: detected capacity change from 0 to 32768 [ 1236.185953][T14333] mmap: syz.5.1825 (14333) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1237.090916][T12153] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1237.686457][T12153] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1237.702702][T12153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.711219][T12153] usb 5-1: Product: syz [ 1237.715408][T12153] usb 5-1: Manufacturer: syz [ 1237.720494][T12153] usb 5-1: SerialNumber: syz [ 1238.110774][T14349] loop0: detected capacity change from 0 to 32768 [ 1238.272820][T12153] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1238.786507][T14351] read_mapping_page failed! [ 1238.791148][T14351] diRead: read_metapage failed [ 1238.795993][T14351] jfs_lookup: iget failed on inum 32 [ 1239.750387][T10113] Bluetooth: hci4: command 0x0406 tx timeout [ 1239.759961][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.766323][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.806991][ T5776] usb 5-1: USB disconnect, device number 13 [ 1239.880094][ T5776] usblp0: removed [ 1240.684604][T14347] loop7: detected capacity change from 0 to 32768 [ 1240.710927][T14347] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1824 (14347) [ 1240.725288][T14365] syzkaller0: entered promiscuous mode [ 1240.737034][T14365] syzkaller0: entered allmulticast mode [ 1240.807744][T14347] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1240.839692][T14347] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1240.848584][T14347] BTRFS info (device loop7): force clearing of disk cache [ 1240.879101][T14347] BTRFS info (device loop7): enabling auto defrag [ 1240.885662][T14347] BTRFS info (device loop7): max_inline at 0 [ 1240.936083][T14347] BTRFS info (device loop7): enabling ssd optimizations [ 1240.966777][T14347] BTRFS info (device loop7): using spread ssd allocation scheme [ 1240.988842][T14347] BTRFS info (device loop7): using free space tree [ 1241.006168][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1241.049053][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1241.098992][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1241.123730][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1241.182040][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1241.250990][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1241.302483][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1241.349708][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1241.399289][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1241.439537][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1241.483897][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1241.543895][T14347] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1242.969445][T14347] BTRFS error (device loop7): open_ctree failed: -12 [ 1245.960171][T14401] loop4: detected capacity change from 0 to 32768 [ 1248.454228][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025b40400: rx timeout, send abort [ 1248.463112][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025b40400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1249.798515][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 1249.878869][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1250.540614][ T9] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1250.585940][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.637211][ T9] usb 6-1: Product: syz [ 1250.669897][ T9] usb 6-1: Manufacturer: syz [ 1250.674559][ T9] usb 6-1: SerialNumber: syz [ 1251.062376][ T27] IPVS: starting estimator thread 0... [ 1251.159095][T14430] IPVS: using max 19 ests per chain, 45600 per kthread [ 1251.344949][ T9] usb 6-1: can't set config #1, error -71 [ 1251.405169][ T9] usb 6-1: USB disconnect, device number 8 [ 1251.461588][T14433] loop5: detected capacity change from 0 to 32768 [ 1252.686827][T14447] syzkaller0: entered promiscuous mode [ 1252.709101][T14447] syzkaller0: entered allmulticast mode [ 1254.637919][T14460] binder: 14459:14460 ioctl c0306201 0 returned -14 [ 1256.308831][ T5810] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1256.528424][ T5810] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1256.542134][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.551197][ T5810] usb 6-1: Product: syz [ 1256.555645][ T5810] usb 6-1: Manufacturer: syz [ 1256.564100][ T5810] usb 6-1: SerialNumber: syz [ 1256.647068][T14473] loop7: detected capacity change from 0 to 32768 [ 1256.998809][ T5810] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1257.461968][T14479] read_mapping_page failed! [ 1257.467244][T14479] diRead: read_metapage failed [ 1257.472944][T14479] jfs_lookup: iget failed on inum 32 [ 1259.010815][ T8923] usb 6-1: USB disconnect, device number 9 [ 1259.035715][ T8923] usblp0: removed [ 1261.682514][T14503] cgroup: Unknown subsys name 'pcr' [ 1263.672876][T14509] binder: 14508:14509 ioctl c0306201 0 returned -14 [ 1265.891732][T14524] syzkaller0: entered promiscuous mode [ 1265.904389][T14524] syzkaller0: entered allmulticast mode [ 1269.782904][T14540] cgroup: Unknown subsys name 'pcr' [ 1274.129431][T14554] binder: 14553:14554 ioctl c0306201 0 returned -14 [ 1276.925563][T14570] loop5: detected capacity change from 0 to 512 [ 1277.733126][T14570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1278.406882][T14579] cgroup: Unknown subsys name 'pcr' [ 1279.063454][T14570] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1280.933239][ T6756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.581987][T14598] loop5: detected capacity change from 0 to 32768 [ 1283.538202][T14602] syzkaller0: entered promiscuous mode [ 1283.707445][T14602] syzkaller0: entered allmulticast mode [ 1284.807121][T14619] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1895'. [ 1285.715443][T14609] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.1894'. [ 1285.878977][T14622] binder: 14621:14622 ioctl c0306201 0 returned -14 [ 1290.627955][T14658] binder: 14657:14658 ioctl c0306201 0 returned -14 [ 1290.784521][T14660] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1904'. [ 1291.923134][T14664] loop7: detected capacity change from 0 to 32768 [ 1292.125263][T14664] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1292.794130][T14664] XFS (loop7): Ending clean mount [ 1292.851871][T14664] XFS (loop7): Quotacheck needed: Please wait. [ 1293.097368][T14664] XFS (loop7): Quotacheck: Done. [ 1294.442290][ T8854] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1296.296738][T14715] binder: 14714:14715 ioctl c0306201 0 returned -14 [ 1299.093095][T14722] loop0: detected capacity change from 0 to 1024 [ 1299.129927][T14722] EXT4-fs: Ignoring removed nobh option [ 1299.189324][T14722] EXT4-fs: inline encryption not supported [ 1299.260959][T14722] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1299.303279][T14722] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1299.303279][T14722] [ 1299.956924][T14723] loop0: detected capacity change from 0 to 512 [ 1300.538948][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.545316][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.634949][ T9894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1300.884408][T10113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1300.895807][T14729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1300.904639][T14729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1300.929000][T14729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1300.936889][T14729] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1300.945749][T14729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1301.725125][T14733] loop7: detected capacity change from 0 to 128 [ 1301.836214][T14733] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1301.849578][T14733] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1301.864003][T14733] hpfs: You really don't want any checks? You are crazy... [ 1301.883365][T14733] hpfs: hpfs_map_sector(): read error [ 1301.889512][T14733] hpfs: code page support is disabled [ 1301.896691][T14733] hpfs: hpfs_map_4sectors(): unaligned read [ 1301.918026][T14733] hpfs: hpfs_map_4sectors(): unaligned read [ 1301.942061][T14733] hpfs: filesystem error: unable to find root dir [ 1303.187520][T14729] Bluetooth: hci1: command tx timeout [ 1305.267125][T14729] Bluetooth: hci1: command tx timeout [ 1305.320256][T14761] loop5: detected capacity change from 0 to 1024 [ 1305.340385][T14761] EXT4-fs: Ignoring removed nobh option [ 1305.346004][T14761] EXT4-fs: inline encryption not supported [ 1305.359762][T14761] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1305.409198][T14761] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1305.409198][T14761] [ 1306.627590][T14764] loop5: detected capacity change from 0 to 512 [ 1306.755808][ T9894] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1307.339042][T14729] Bluetooth: hci1: command tx timeout [ 1309.604234][T14729] Bluetooth: hci1: command tx timeout [ 1313.596976][T14815] loop7: detected capacity change from 0 to 1024 [ 1313.759846][T14815] EXT4-fs: Ignoring removed nobh option [ 1313.765474][T14815] EXT4-fs: inline encryption not supported [ 1313.848861][T14815] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1313.901926][T14815] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 1313.901926][T14815] [ 1313.971383][T14819] loop0: detected capacity change from 0 to 1024 [ 1314.924526][T14825] loop7: detected capacity change from 0 to 512 [ 1315.530209][T14819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1315.658848][ T9894] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1315.843805][ T28] audit: type=1800 audit(1780485475.940:5): pid=14819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1942" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 1316.171811][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.765311][T14852] loop0: detected capacity change from 0 to 2048 [ 1317.788891][T14852] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1317.797027][T14852] UDF-fs: Scanning with blocksize 512 failed [ 1317.814770][T14852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1321.902028][T14871] loop7: detected capacity change from 0 to 2048 [ 1321.934651][T14871] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1321.945016][T14871] UDF-fs: Scanning with blocksize 512 failed [ 1321.996658][T14871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1322.287909][T14870] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134745186 lbcount: 134747136 extent 0+133863424 [ 1322.331917][T14726] chnl_net:caif_netlink_parms(): no params data found [ 1322.376082][T14870] UDF-fs: error (device loop7): udf_truncate_tail_extent: Extent after EOF in inode 818 [ 1322.442884][T14726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.510444][T14726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.517724][T14726] bridge_slave_0: entered allmulticast mode [ 1322.559663][T14726] bridge_slave_0: entered promiscuous mode [ 1322.570408][ T6445] kworker/u4:11: attempt to access beyond end of device [ 1322.570408][ T6445] loop7: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 1322.576911][T14726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.592663][ T6445] Buffer I/O error on dev loop7, logical block 1024, lost async page write [ 1322.601547][ T6445] kworker/u4:11: attempt to access beyond end of device [ 1322.601547][ T6445] loop7: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 1322.628785][ T6445] Buffer I/O error on dev loop7, logical block 1024, lost async page write [ 1322.637521][ T6445] kworker/u4:11: attempt to access beyond end of device [ 1322.637521][ T6445] loop7: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 1322.652517][T14726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.660273][T14726] bridge_slave_1: entered allmulticast mode [ 1322.680294][T14726] bridge_slave_1: entered promiscuous mode [ 1322.715664][ T6445] Buffer I/O error on dev loop7, logical block 1024, lost async page write [ 1322.731855][ T6445] kworker/u4:11: attempt to access beyond end of device [ 1322.731855][ T6445] loop7: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 1322.753517][ T6445] Buffer I/O error on dev loop7, logical block 1024, lost async page write [ 1322.763241][ T6445] kworker/u4:11: attempt to access beyond end of device [ 1322.763241][ T6445] loop7: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 1322.796280][ T6445] Buffer I/O error on dev loop7, logical block 1025, lost async page write [ 1322.805921][ T6445] kworker/u4:11: attempt to access beyond end of device [ 1322.805921][ T6445] loop7: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 1322.837676][ T6445] Buffer I/O error on dev loop7, logical block 1025, lost async page write [ 1322.863290][ T6445] kworker/u4:11: attempt to access beyond end of device [ 1322.863290][ T6445] loop7: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 1322.928445][ T6445] Buffer I/O error on dev loop7, logical block 1025, lost async page write [ 1322.941358][T14726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.952031][ T6445] kworker/u4:11: attempt to access beyond end of device [ 1322.952031][ T6445] loop7: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 1322.969180][T14726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.978459][ T6445] Buffer I/O error on dev loop7, logical block 1025, lost async page write [ 1323.009239][ T6445] kworker/u4:11: attempt to access beyond end of device [ 1323.009239][ T6445] loop7: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 1323.698346][T14726] team0: Port device team_slave_0 added [ 1323.727552][T14726] team0: Port device team_slave_1 added [ 1323.937239][T14889] loop5: detected capacity change from 0 to 128 [ 1324.544046][T14889] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1324.555879][T14889] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1324.563631][T14889] hpfs: You really don't want any checks? You are crazy... [ 1324.571098][T14889] hpfs: hpfs_map_sector(): read error [ 1324.576467][T14889] hpfs: code page support is disabled [ 1324.584647][T14889] hpfs: hpfs_map_4sectors(): unaligned read [ 1324.590702][T14889] hpfs: hpfs_map_4sectors(): unaligned read [ 1324.596584][T14889] hpfs: filesystem error: unable to find root dir [ 1324.874348][T14726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.901301][T14726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.929598][T14726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.116295][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.463812][T14726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.537262][T14726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.571575][T14726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.699144][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.771657][T14726] hsr_slave_0: entered promiscuous mode [ 1325.784358][T14726] hsr_slave_1: entered promiscuous mode [ 1325.802699][T14726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1325.828503][T14726] Cannot create hsr debugfs directory [ 1325.914700][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.018511][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.787847][T14906] loop5: detected capacity change from 0 to 4096 [ 1327.669867][ T59] tipc: Left network mode [ 1328.472203][T14726] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1328.645206][T14726] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1329.904538][T14936] loop7: detected capacity change from 0 to 512 [ 1330.201082][T14936] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1330.905659][T14939] loop5: detected capacity change from 0 to 128 [ 1331.470844][T14936] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.1971: invalid indirect mapped block 83886080 (level 1) [ 1331.492871][T14936] EXT4-fs (loop7): Remounting filesystem read-only [ 1331.503011][T14936] EXT4-fs (loop7): 1 orphan inode deleted [ 1331.508909][T14936] EXT4-fs (loop7): 1 truncate cleaned up [ 1331.516403][T14936] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.390144][T14939] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1332.453960][T14939] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1332.461887][T14939] hpfs: You really don't want any checks? You are crazy... [ 1332.469363][T14939] hpfs: hpfs_map_sector(): read error [ 1332.474731][T14939] hpfs: code page support is disabled [ 1332.480620][T14939] hpfs: hpfs_map_4sectors(): unaligned read [ 1332.486588][T14939] hpfs: hpfs_map_4sectors(): unaligned read [ 1332.492525][T14939] hpfs: filesystem error: unable to find root dir [ 1332.581403][ T8854] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.742260][T14726] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1332.804109][T14726] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1333.946490][T14726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.822336][T14726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.030164][T12674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.037354][T12674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.090918][T12674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.098119][T12674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.680721][T14997] loop0: detected capacity change from 0 to 128 [ 1338.691743][T14997] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1338.703539][T14997] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1338.711342][T14997] hpfs: You really don't want any checks? You are crazy... [ 1338.719156][T14997] hpfs: hpfs_map_sector(): read error [ 1338.724554][T14997] hpfs: code page support is disabled [ 1338.739961][T14997] hpfs: hpfs_map_4sectors(): unaligned read [ 1338.745974][T14997] hpfs: hpfs_map_4sectors(): unaligned read [ 1338.751957][T14997] hpfs: filesystem error: unable to find root dir [ 1338.959411][ T59] hsr_slave_0: left promiscuous mode [ 1338.978150][ T59] hsr_slave_1: left promiscuous mode [ 1338.991636][ T59] bridge_slave_1: left allmulticast mode [ 1339.019323][ T59] bridge_slave_1: left promiscuous mode [ 1339.025129][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.084332][ T59] bridge_slave_0: left allmulticast mode [ 1339.119175][ T59] bridge_slave_0: left promiscuous mode [ 1339.139483][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.888756][ T59] veth1_macvtap: left promiscuous mode [ 1339.894362][ T59] veth0_macvtap: left promiscuous mode [ 1339.952284][ T59] veth1_vlan: left promiscuous mode [ 1339.957667][ T59] veth0_vlan: left promiscuous mode [ 1343.649907][T15035] loop7: detected capacity change from 0 to 128 [ 1344.219921][T15035] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1344.231731][T15035] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1344.239484][T15035] hpfs: You really don't want any checks? You are crazy... [ 1344.246911][T15035] hpfs: hpfs_map_sector(): read error [ 1344.252330][T15035] hpfs: code page support is disabled [ 1344.258041][T15035] hpfs: hpfs_map_4sectors(): unaligned read [ 1344.264066][T15035] hpfs: hpfs_map_4sectors(): unaligned read [ 1344.270003][T15035] hpfs: filesystem error: unable to find root dir [ 1349.037235][T15065] loop7: detected capacity change from 0 to 128 [ 1349.596943][T15065] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1349.608901][T15065] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1349.616900][T15065] hpfs: You really don't want any checks? You are crazy... [ 1349.624480][T15065] hpfs: hpfs_map_sector(): read error [ 1349.629913][T15065] hpfs: code page support is disabled [ 1349.635381][T15065] hpfs: hpfs_map_4sectors(): unaligned read [ 1349.642569][T15065] hpfs: hpfs_map_4sectors(): unaligned read [ 1349.648482][T15065] hpfs: filesystem error: unable to find root dir [ 1350.136259][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1350.308474][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1350.653562][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.153810][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.364141][ T8923] infiniband syz1: ib_query_port failed (-19) [ 1356.074021][T15099] loop0: detected capacity change from 0 to 1024 [ 1356.092114][ T59] bond0 (unregistering): Released all slaves [ 1356.123466][T15099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1356.282677][T14726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.312426][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.562953][T15117] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1356.779076][ T59] IPVS: stop unused estimator thread 0... [ 1359.999949][T15141] loop7: detected capacity change from 0 to 128 [ 1360.028931][T15141] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1360.040797][T15141] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1360.048566][T15141] hpfs: You really don't want any checks? You are crazy... [ 1360.058065][T15141] hpfs: hpfs_map_sector(): read error [ 1360.064251][T15141] hpfs: code page support is disabled [ 1360.138901][T15141] hpfs: hpfs_map_4sectors(): unaligned read [ 1360.144987][T15141] hpfs: hpfs_map_4sectors(): unaligned read [ 1360.151008][T15141] hpfs: filesystem error: unable to find root dir [ 1360.462685][T15129] loop0: detected capacity change from 0 to 32768 [ 1360.544349][T15129] read_mapping_page failed! [ 1360.570363][T15129] jfs_mount: Failed to read FILESYSTEM_I [ 1360.598055][T15129] Mount JFS Failure: -5 [ 1360.657057][T15129] jfs_mount failed w/return code = -5 [ 1361.007182][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1361.018289][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1361.040336][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1361.104332][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1361.119990][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1361.127618][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1361.914608][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.921433][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.601583][ T5775] Bluetooth: hci0: command tx timeout [ 1366.318875][ T5775] Bluetooth: hci0: command tx timeout [ 1366.465076][T15187] program syz.0.2023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1366.474587][T15187] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1366.680711][T15156] chnl_net:caif_netlink_parms(): no params data found [ 1367.147625][T15156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.199102][T15156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.206382][T15156] bridge_slave_0: entered allmulticast mode [ 1367.246426][T15156] bridge_slave_0: entered promiscuous mode [ 1367.590341][T15156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.597582][T15156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.619017][T15156] bridge_slave_1: entered allmulticast mode [ 1367.626036][T15156] bridge_slave_1: entered promiscuous mode [ 1367.881055][T15156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.061210][T15156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.691568][T15209] loop0: detected capacity change from 0 to 128 [ 1368.828901][ T5775] Bluetooth: hci0: command tx timeout [ 1368.900022][T15209] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1368.911755][T15209] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1368.919564][T15209] hpfs: You really don't want any checks? You are crazy... [ 1368.926985][T15209] hpfs: hpfs_map_sector(): read error [ 1368.932382][T15209] hpfs: code page support is disabled [ 1368.940466][T15209] hpfs: hpfs_map_4sectors(): unaligned read [ 1368.946467][T15209] hpfs: hpfs_map_4sectors(): unaligned read [ 1368.952387][T15209] hpfs: filesystem error: unable to find root dir [ 1369.101252][T15156] team0: Port device team_slave_0 added [ 1369.314804][T15156] team0: Port device team_slave_1 added [ 1369.572149][T15156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.661965][T15156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.448785][T15156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.484238][T15156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1370.505330][T15156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.648750][T15156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.858943][ T5775] Bluetooth: hci0: command tx timeout [ 1371.083144][T15156] hsr_slave_0: entered promiscuous mode [ 1371.183739][T15156] hsr_slave_1: entered promiscuous mode [ 1373.738998][T15249] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2030'. [ 1375.077480][ T59] hsr_slave_0: left promiscuous mode [ 1375.699304][ T59] hsr_slave_1: left promiscuous mode [ 1375.737536][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.831210][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1375.885519][ T59] bridge_slave_1: left allmulticast mode [ 1375.896401][ T59] bridge_slave_1: left promiscuous mode [ 1375.982902][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.024275][ T59] bridge_slave_0: left allmulticast mode [ 1376.035149][ T59] bridge_slave_0: left promiscuous mode [ 1376.048907][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.550411][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1379.782013][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1380.107222][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.364056][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.514983][T15294] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2041'. [ 1384.941054][ T59] bond0 (unregistering): Released all slaves [ 1386.435321][T15328] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2050'. [ 1390.487009][T15156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1390.533817][T15156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1390.566993][T15156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1391.429142][T15156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1391.622051][T15384] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2061'. [ 1393.447471][T15156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.578485][T15156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.149854][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.157058][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.255782][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.263035][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.934323][T15156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.004128][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056410400: rx timeout, send abort [ 1396.018725][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056410400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1396.669950][T15435] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2070'. [ 1398.767946][T15156] veth0_vlan: entered promiscuous mode [ 1398.805561][T15156] veth1_vlan: entered promiscuous mode [ 1398.829742][T15437] loop0: detected capacity change from 0 to 40427 [ 1398.865174][T15437] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 1398.893731][T15437] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1398.920783][T15156] veth0_macvtap: entered promiscuous mode [ 1398.950794][T15437] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1398.965397][T15156] veth1_macvtap: entered promiscuous mode [ 1399.040507][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.099165][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.136578][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.149667][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.166548][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.181524][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.191616][T15437] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1399.199126][T15437] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1399.218414][T15156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.262393][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.308764][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.349142][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.378718][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.410722][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.448788][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.511385][T15156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.520670][ T5773] syz-executor: attempt to access beyond end of device [ 1399.520670][ T5773] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1399.550040][T15156] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.568756][T15156] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.577429][ T5773] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1399.608772][T15156] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.617523][T15156] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.868822][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.909239][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.999408][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.017791][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.189852][T15475] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1915'. [ 1401.880922][T15488] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.2079'. [ 1403.196032][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805deefc00: rx timeout, send abort [ 1403.208658][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805deefc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1403.760058][ T9] IPVS: starting estimator thread 0... [ 1403.771191][T15503] loop0: detected capacity change from 0 to 128 [ 1404.541707][T15506] loop7: detected capacity change from 0 to 128 [ 1404.613335][T15501] IPVS: using max 36 ests per chain, 86400 per kthread [ 1404.638525][T15506] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1404.650424][T15506] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1404.658136][T15506] hpfs: You really don't want any checks? You are crazy... [ 1404.665618][T15506] hpfs: hpfs_map_sector(): read error [ 1404.671005][T15506] hpfs: code page support is disabled [ 1404.677400][T15506] hpfs: hpfs_map_4sectors(): unaligned read [ 1404.683423][T15506] hpfs: hpfs_map_4sectors(): unaligned read [ 1404.689476][T15506] hpfs: filesystem error: unable to find root dir [ 1404.800350][T15503] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1404.855993][T15503] ext4 filesystem being mounted at /526/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1405.204337][T15503] BUG: unable to handle page fault for address: ffffffffffffffec [ 1405.212114][T15503] #PF: supervisor read access in kernel mode [ 1405.218102][T15503] #PF: error_code(0x0000) - not-present page [ 1405.224098][T15503] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 1405.230129][T15503] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1405.235608][T15503] CPU: 1 PID: 15503 Comm: syz.0.2084 Not tainted syzkaller #0 [ 1405.243082][T15503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1405.253164][T15503] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 1405.259093][T15503] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 1405.278780][T15503] RSP: 0018:ffffc9000469f6f8 EFLAGS: 00010246 [ 1405.284944][T15503] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 1405.292926][T15503] RDX: ffffc9000d1ea000 RSI: 000000000000a4b4 RDI: ffffffffffffffec [ 1405.300912][T15503] RBP: ffffc9000469f810 R08: ffff8880778e201f R09: 1ffff1100ef1c403 [ 1405.308898][T15503] R10: dffffc0000000000 R11: ffffed100ef1c404 R12: ffff8880778e20b0 [ 1405.316880][T15503] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 1405.324866][T15503] FS: 00007f38924e06c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1405.333812][T15503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1405.340402][T15503] CR2: ffffffffffffffec CR3: 000000005c3a2000 CR4: 00000000003506e0 [ 1405.348388][T15503] Call Trace: [ 1405.351767][T15503] [ 1405.354806][T15503] finish_range+0x234/0x340 [ 1405.359383][T15503] ? update_tind_extent_range+0x3f0/0x3f0 [ 1405.365177][T15503] ext4_ext_migrate+0xa3f/0x1080 [ 1405.370147][T15503] ? mb_regenerate_buddy+0x510/0x510 [ 1405.375448][T15503] ? down_read_killable+0x340/0x340 [ 1405.380795][T15503] ? sb_start_write+0x110/0x1c0 [ 1405.385705][T15503] ? mnt_want_write_file+0x16a/0x200 [ 1405.391015][T15503] ext4_ioctl+0x1ee3/0x3b80 [ 1405.395536][T15503] ? ext4_fileattr_set+0x16d0/0x16d0 [ 1405.400840][T15503] ? mark_lock+0x94/0x320 [ 1405.405245][T15503] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1405.411240][T15503] ? do_vfs_ioctl+0x1573/0x1cc0 [ 1405.416108][T15503] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 1405.421762][T15503] ? tomoyo_path_number_perm+0x217/0x620 [ 1405.427465][T15503] ? __lock_acquire+0x7d40/0x7d40 [ 1405.432513][T15503] ? slab_free_freelist_hook+0x130/0x1a0 [ 1405.438199][T15503] ? tomoyo_path_number_perm+0x500/0x620 [ 1405.443947][T15503] ? __kmem_cache_free+0xba/0x1e0 [ 1405.448993][T15503] ? tomoyo_path_number_perm+0x5b4/0x620 [ 1405.454640][T15503] ? tomoyo_path_number_perm+0x217/0x620 [ 1405.460288][T15503] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1405.465780][T15503] ? __fget_files+0x28/0x4b0 [ 1405.470392][T15503] ? __fget_files+0x28/0x4b0 [ 1405.475004][T15503] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1405.479989][T15503] ? security_file_ioctl+0x80/0xa0 [ 1405.485109][T15503] ? ext4_fileattr_set+0x16d0/0x16d0 [ 1405.490408][T15503] __se_sys_ioctl+0xfd/0x170 [ 1405.495013][T15503] do_syscall_64+0x55/0xb0 [ 1405.499544][T15503] ? clear_bhb_loop+0x40/0x90 [ 1405.504301][T15503] ? clear_bhb_loop+0x40/0x90 [ 1405.508992][T15503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1405.514978][T15503] RIP: 0033:0x7f389159ce59 [ 1405.519411][T15503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1405.539043][T15503] RSP: 002b:00007f38924e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1405.547480][T15503] RAX: ffffffffffffffda RBX: 00007f3891815fa0 RCX: 00007f389159ce59 [ 1405.555485][T15503] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 1405.563478][T15503] RBP: 00007f3891632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1405.571479][T15503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1405.579469][T15503] R13: 00007f3891816038 R14: 00007f3891815fa0 R15: 00007ffd64e06df8 [ 1405.587471][T15503] [ 1405.590537][T15503] Modules linked in: [ 1405.594483][T15503] CR2: ffffffffffffffec [ 1405.598661][T15503] ---[ end trace 0000000000000000 ]--- [ 1405.604129][T15503] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 1405.609880][T15503] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 1405.629485][T15503] RSP: 0018:ffffc9000469f6f8 EFLAGS: 00010246 [ 1405.635542][T15503] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 1405.643505][T15503] RDX: ffffc9000d1ea000 RSI: 000000000000a4b4 RDI: ffffffffffffffec [ 1405.651484][T15503] RBP: ffffc9000469f810 R08: ffff8880778e201f R09: 1ffff1100ef1c403 [ 1405.659473][T15503] R10: dffffc0000000000 R11: ffffed100ef1c404 R12: ffff8880778e20b0 [ 1405.667436][T15503] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 1405.675422][T15503] FS: 00007f38924e06c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1405.684344][T15503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1405.690913][T15503] CR2: ffffffffffffffec CR3: 000000005c3a2000 CR4: 00000000003506e0 [ 1405.698970][T15503] Kernel panic - not syncing: Fatal exception [ 1405.705309][T15503] Kernel Offset: disabled [ 1405.709630][T15503] Rebooting in 86400 seconds..