last executing test programs: 2m20.488797139s ago: executing program 3 (id=1409): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x100}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/30], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES64=r3], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2m20.323259463s ago: executing program 3 (id=1410): syz_mount_image$erofs(&(0x7f0000002240), &(0x7f0000002280)='./file2\x00', 0x280400b, &(0x7f00000022c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8, @ANYRES16], 0x41, 0x243, &(0x7f0000002300)="$eJzsmb+LE0EUx7+zm8wmp4jVFVaCBypqctk01wQ9QbCyufNXpcFbjzO5RJIVTED0EMFGOwvBxsJ/wOLAqwTt/AcELVQQLAxoYWOz8nZmdye/NjGcle9TDN+Z92bmvXc7r7iAYZj/li+ff316dHpp9TiAvViAo9e/2YAQSluG/8ent449qZx59vLDi7eNfXd2Bs+jLUHQv5BLuT8D4PWyjbvxTfHu3yQWSL0BVmEpDeA8LBzV+iIEClpfhYULWnsQuKz1DUM3yb9QuL5R9wrXmvU1Eos0lGhwaSgPxtfbEljT8yAIAmHY251urVqvey1DZLRthGkmEV9Wmx+qXxYSvWULFSM+quKlh/e3aB7VZtGoXwkWfugkyhBY0etLcKg20Z/bKxn5H8gk59tD+Y/MllzJMCnJnBKVn7tSLBISXqvtJBGG2cQ+Wapk6jkNSufUsGk/ZokH/buySEx2X2D/QOhMM5O/xZO6XMkKPf+p7jo3bRaP8wB2L8EH40xmFgPCHmGip9CRUe7zvZ13ps/BUHyllbTgAzEx5ldz038/uVQfmWQRPcTZi5lHt2aNr9isAni/rfpH8FzgsNGfMkb/KPqbN4vtTvfExmZ13Vv3Gq5bdvYoW9ibi+E41PeS/pwP+9OccX52jK+0JG5Xfb9VUqMUEnn4fssN567xbFa2m9+v6G0+zgI4pCb0rcj4RNUJHeMOIZWPFfqSOmKPDZ5hGIZhGIZhGIZhGIZhGOZviP65GqQhgHvq55k/AQAA///M31Bn") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f80)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000fc0)=""/4096, 0x1000) 2m20.128151988s ago: executing program 3 (id=1412): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x3214, 0x200) syz_usb_connect(0x0, 0x2d, &(0x7f0000002000)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x32, &(0x7f0000000e40)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 2m14.451257207s ago: executing program 3 (id=1422): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x3, 0x0, 0x0, 0x2, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) unlink(&(0x7f0000000040)='./file1\x00') 2m12.539247963s ago: executing program 3 (id=1426): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2m9.936069837s ago: executing program 3 (id=1432): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file0\x00', 0x810000, &(0x7f0000000380)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@anchor={'anchor', 0x3d, 0xf}}, {@gid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@unhide}, {@uid}, {@uid_forget}, {@uid_ignore}, {@shortad}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x7fffffff}}, {@uid_ignore}, {@fileset}, {@shortad}]}, 0x4, 0xc24, &(0x7f00000043c0)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 2m9.563950796s ago: executing program 32 (id=1432): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file0\x00', 0x810000, &(0x7f0000000380)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@anchor={'anchor', 0x3d, 0xf}}, {@gid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@unhide}, {@uid}, {@uid_forget}, {@uid_ignore}, {@shortad}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x7fffffff}}, {@uid_ignore}, {@fileset}, {@shortad}]}, 0x4, 0xc24, &(0x7f00000043c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 1m23.793929444s ago: executing program 0 (id=1588): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x4000000d20, 0x3, 0x0, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffdfa, 0x81, 0x100, 0x5, 0x933, 0x200000101, 0x3, 0x8001, 0x8000020000000400, 0x7, 0x1, 0x8, 0xa, 0x6, 0x100, 0x40, 0x83, 0x1e13, 0x9, 0xda, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x2c, 0x5bc, 0x4, 0x7fffffff, 0x4, 0x8000, 0x4, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0x1, 0x1fcc, 0x6, 0x0, 0xae4, 0x22, 0x1, 0x7, 0x1, 0x1, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x3ff, 0xfffffffd, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0xffe, 0x8000000000000001, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x8000000000, 0x0, 0x9, 0x4, 0x7, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xc, 0x3]}) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000f40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000f80)=0x6) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r6, &(0x7f0000001000)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000001a000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f000001a040)='./tracing\x00', &(0x7f000001a080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001a0c0)='./tracing/uprobe_events\x00', 0x109e01, 0x0) r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r7, 0x90}, &(0x7f0000001180)=ANY=[], &(0x7f0000000980)="929835a77d8fae0300000000000000a804bfc80349e1f140d6d7fe01e9c88fbc79dc97601bddeea9d91438988e1cee39ee49b5542d47923d8d802603a4e73dde649aacebb145381a46f82747f0db81470d91a84ea4cb1d1c8d6558aaab1171ba3dd7749ccdaa11a46f5c9d716c282058b525774e1af61664d062b5ad5d0f4c61431265373c44d5f91aeb92dfc0f7052f", 0x0) 1m22.537656424s ago: executing program 0 (id=1590): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x40) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000240)={[{@test_dummy_encryption}, {@init_itable_val}, {@dioread_nolock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@quota}, {@minixdf}, {@nouid32}, {@errors_remount}, {@lazytime}, {@test_dummy_encryption}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0xdf, 0x475, &(0x7f0000000780)="$eJzs289vFFUcAPDvTLeAgGxFREGQKpo0/mhpQeVgYjSaeNDERA94rG0hyEINrYmQRqsxeDQk3o1HE/8CT56MejLxikcTQ0KUmIheXDO7M6VddssubNna/XySoe/NvHk/dubNvn2PCaBvDWf/JBHbI+JSRJTr0ZUJhut/rl1dmPr76sJUEtXqG78ntXR/XV2YquaK87bleY6kEeknSV5IDC7Pdu7c+VOTlcrM2Tw+Nn/63bG5c+efOnl68sTMiZkzE0ePHjk8/uwzE083qfWvFztq5ED+d+8Hs/v2vPLWxdemjl18+4evs/ru3l8/lLWjozzbMJw1/I/6Z9N47LFuF9Zj/1avtzMp9bo2tCvrGqW8c16KcgzE9YtXjpc/7mnlgDWVPbM3tz68WAU2sCR6XQOgN4ov+uz3b7HdoaHHunDlhfoPoKzd1/KtfqQUaZ5mcA3LH46IY4v/fJFt0TAPUW0ybwAAcLu+zcY/TzYb/6Wxe1m6Hfna0FBE3BMROyPi3ojYFRH3RdTS3h8RD3RY/nBD/MbxZ3r5lhrWpmz891y+trVy/FeM/mJoII/dXWv/YHL8ZGXmUP6ZjMTg5iw+3izzIouXfv6sVfnLx3/ZlpVfjAXzTC6X6hN0W4o905Pzk90alF75KGJvqVn7k6WVgCQi9kTE3s6y3lEETj7+1b5WiW7e/lV0YZ2p+mWRycJiNLS/kKy+Pjm2JSozh8aKu+JGP/504fVW5d9W+7sgu/5bV97/DSnKfybL12vnlg48324ZF375tOVvylL79/+S7P7flLxZW7PelO97f3J+/ux4xKbk1Vp8xf6J6+cW8SJ91v6Rg837/878nKz9D0ZEdhPvj4iHIuJAfu0ejohHIuLgKu3//sVH32l1bD1c/+mmz7+l+39o5fXvPDBw6rtvWpXf3vPvSC00ku+pPf9uonV1isdotufY3K1+bgAAAPB/kkbE9kjS0aVwmo6O1v8P/67YmlZm5+afOD773pnp+jsCQzGYFjNd5WXzoePJYp5jPT6RzxUXxw/n88afD9xVi49OzVame9x26HfbWvT/zG8Dva4dsOa8rwX9q7H/pz2qB3Dn+f6H/qX/Q/+6of97IEDfaNbdP2yIWwuAjaha7vgUE4SwYRjuQ//S/6F/6f/Ql27nvf61CpRWeXtfoMeBrRFRC0S6LuqzbgIH1lFvKnWhd/f4wQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAl/wUAAP//xgL2dQ==") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m21.542290709s ago: executing program 0 (id=1592): bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) 1m21.298459244s ago: executing program 0 (id=1593): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000a00)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000a40)={r0}, 0x8) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 1m21.187500187s ago: executing program 0 (id=1595): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8414, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/47, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x40) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000200)={[{@noload}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@orlov}, {@norecovery}, {@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x1ec}}, {@delalloc}]}, 0x26, 0x756, &(0x7f0000000300)="$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") chdir(&(0x7f0000000a80)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0xa8442, 0x18) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) setxattr$incfs_id(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), &(0x7f0000000c00)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1) 1m20.65740373s ago: executing program 0 (id=1599): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000480)=[{r0, 0x1102}], 0x1, 0x90b8745) 1m5.058701621s ago: executing program 33 (id=1599): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000480)=[{r0, 0x1102}], 0x1, 0x90b8745) 19.105535363s ago: executing program 5 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x20, 0x4, 0x3be5, 0x1}, 0x1b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x0) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000007c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 15.856515713s ago: executing program 5 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x20, 0x4, 0x3be5, 0x1}, 0x1b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x0) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000007c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 11.86401891s ago: executing program 5 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x20, 0x4, 0x3be5, 0x1}, 0x1b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x0) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000007c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 8.258905798s ago: executing program 4 (id=1770): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000001c0)={0x30, r0}, 0x1) mount_setattr(r1, &(0x7f0000000200)='./file1/file3\x00', 0x8100, &(0x7f0000000240)={0x2, 0x100000, 0x20000, {r1}}, 0x20) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x2080}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000340)={{}, 'port1\x00', 0x1a, 0x420, 0xa1, 0x6, 0x1, 0xb79, 0xe9, 0x0, 0x7, 0x7}) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000b00)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB='allow_utime=00000000000000000162147,uni_xlate=0,shortname=mixed,shortname=winnt,iocharset=macturkish,nonumtail=0,iocharset=cp862,uni_xlate=0,iocharset=utf8,errors=continue,shortname=mixed,shortname=win95,sys_immutable,utf8=0,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0x0, @ANYRES32=r3, @ANYRESDEC=0x0, @ANYBLOB="07000000000000003d73000274656d5f752c666f776e65723cb59ced5ef5e58b121dacc9bf9bd265774d965f1185d2c34130bd0eef55ef6d134d188bb49cf1b330e0890a82ffec58c1959a8f914fb8f600f408d241724b171d83bc08f994a7df6a902d745003", @ANYRESDEC=0x0, @ANYBLOB="ae602c"], 0x1, 0x373, &(0x7f00000006c0)="$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") 8.209008179s ago: executing program 5 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x20, 0x4, 0x3be5, 0x1}, 0x1b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x0) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000007c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 8.182897669s ago: executing program 1 (id=1771): socket(0xa, 0x3, 0xff) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c80)={0x0, &(0x7f0000000700)=[@nested_load_syzos={0x136, 0x130, {0x3, 0x1, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x100000000, 0x9, 0xb61}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x9d8, 0x6}}, @in_dx={0x69, 0x20, {0xcfb2, 0xd}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x1, 0x1, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}]}}, @nested_load_code={0x12e, 0x85, {0x3, "48b80e000000000000000f23d00f21f8350000000d0f23f8b9800000c00f3235004000000f30c401adebfa81199e00000066bad00466b8001066eff3ab66ba2100b8a0000000efc744240000000000c7442402a5000000c7442406000000000f0114240f01f8b90c0400000f32"}}, @nested_vmresume={0x130, 0x18}, @wr_drn={0x68, 0x20, {0x6, 0x7fffffff}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0xe4, 0x1}}, @cpuid={0x64, 0x18, {0x1, 0x80}}, @nested_load_syzos={0x136, 0x78, {0x3, 0x5, [@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xa1, 0x0, 0xa, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0xfc85}}]}}, @set_irq_handler={0xc8, 0x20, {0x17}}, @nested_vmresume={0x130, 0x18}, @wr_drn={0x68, 0x20, {0x6, 0x9}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x55, 0xffffffffffff0c56, 0x0, 0x37a}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x7}}, @set_irq_handler={0xc8, 0x20, {0x25}}, @uexit={0x0, 0x18, 0x5}, @wr_drn={0x68, 0x20, {0x0, 0x3b39d785}}, @enable_nested={0x12c, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x1, 0x9c07}}, @nested_load_syzos={0x136, 0x9e, {0x0, 0x101, [@nested_load_code={0x12e, 0x7e, {0x0, "66b80e010f00d0b96c0b0000b80a000000ba000000000f30660f3801630dc744240089000000c744240200000100c7442406000000000f011c24d9f4b9800000c00f3235000400000f3064360f3802ef460f01f836e70466baf80cb8251f1c8eef66bafc0cec"}}]}}], 0x4e3}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) chdir(&(0x7f0000000080)='./cgroup\x00') syz_read_part_table(0x4074, &(0x7f0000001c40)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005d00)=[{{&(0x7f0000005d40)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x14e174135c0b87af) pwrite64(r1, 0x0, 0x0, 0x3) 5.850551377s ago: executing program 1 (id=1772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000380080001000021"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) 5.850145937s ago: executing program 4 (id=1774): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) 4.92900502s ago: executing program 4 (id=1775): r0 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000004c0)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000003, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x3, 0x1}, {0x400000}, {}, {}, {}, {0x0, 0x9}, {}, {0x8}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f40)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000fc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001000), 0x0, 0x0) read$msr(r4, &(0x7f0000001040)=""/102392, 0x18ff8) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x1000) sched_setaffinity(r3, 0x47, &(0x7f000001a040)=0x7) mount(0x0, &(0x7f000001a080)='./sys\x00', &(0x7f000001a0c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000001a100)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x20080, 0x10) read(r5, &(0x7f000001a140)=""/100, 0x64) 4.771003083s ago: executing program 1 (id=1776): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b00)={0x1, &(0x7f0000000b40)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 4.604876677s ago: executing program 1 (id=1778): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x88, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28581, 0xc000}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @veth={{}, {0x0, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x0, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x810c, 0x200}}}}}}]}, 0x88}}, 0x20000000) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000001340)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001a340)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f000001a3c0)='./file0\x00', 0x0, &(0x7f000001a400)={0x78, 0x100071, 0x40000}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.537162709s ago: executing program 2 (id=1779): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x19, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000dc0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000e40)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000e80)=0x2, 0xf6) 4.442995761s ago: executing program 2 (id=1780): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x7b0e7725a747373) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) sendfile(r0, r0, 0x0, 0x7) 4.425461961s ago: executing program 2 (id=1781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019700)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x40) 4.247249476s ago: executing program 5 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x20, 0x4, 0x3be5, 0x1}, 0x1b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x0) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000007c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 1.577589111s ago: executing program 1 (id=1782): bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.577165471s ago: executing program 2 (id=1783): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r3 = syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x20010c4c, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB=',uid=', @ANYRESOCT, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) fcntl$getownex(r3, 0x10, &(0x7f00000004c0)) gettid() 1.575716661s ago: executing program 4 (id=1784): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="ea", 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4044841}, 0xc800) recvmmsg(r4, &(0x7f0000000800), 0x700, 0x2, 0x0) 1.21900183s ago: executing program 1 (id=1785): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 1.21884981s ago: executing program 2 (id=1786): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100020a000000000000000000000003000500000000000200000000000000000000000000000002001000d33f19eb9f"], 0x50}}, 0x0) 148.616176ms ago: executing program 34 (id=1785): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 143.839696ms ago: executing program 2 (id=1788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1001}) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) 142.419276ms ago: executing program 4 (id=1789): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x7b0e7725a747373) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x7, 0x100}, 0x0) sendfile(r0, r0, 0x0, 0x7) 19.133189ms ago: executing program 5 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x20, 0x4, 0x3be5, 0x1}, 0x1b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x0) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000007c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 0s ago: executing program 4 (id=1790): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x88, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28581, 0xc000}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @veth={{}, {0x0, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x0, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x810c, 0x200}}}}}}]}, 0x88}}, 0x20000000) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000001340)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001a340)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f000001a3c0)='./file0\x00', 0x0, &(0x7f000001a400)={0x78, 0x100071, 0x40000}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): tbf: burst 19872 is lower than device lo mtu (65550) ! [ 192.281805][ T8484] loop1: detected capacity change from 0 to 128 [ 192.354195][ T8484] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.392054][ T8484] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.060613][ T8489] xt_hashlimit: max too large, truncated to 1048576 [ 193.224930][ T8489] loop3: detected capacity change from 0 to 512 [ 193.238521][ T8489] EXT4-fs: Ignoring removed nobh option [ 193.244463][ T8489] EXT4-fs: user quota file already specified [ 193.677539][ T8484] ip_tables: iptables: counters copy to user failed while replacing table [ 193.734620][ T8463] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.816185][ T8492] loop0: detected capacity change from 0 to 512 [ 193.882352][ T8492] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 193.981856][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.134595][ T8492] EXT4-fs (loop0): failed to open journal device unknown-block(238,156) -6 [ 194.400591][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.407642][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.063595][ T8505] loop2: detected capacity change from 0 to 128 [ 195.257235][ T8507] syzkaller0: entered promiscuous mode [ 195.270352][ T8507] syzkaller0: entered allmulticast mode [ 195.329210][ T8510] loop2: detected capacity change from 0 to 512 [ 196.296364][ T8510] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.1071: inode has both inline data and extents flags [ 196.312173][ T8510] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1071: couldn't read orphan inode 15 (err -117) [ 196.329958][ T8510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.456347][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.486554][ T8520] binder: 8519:8520 ioctl c0306201 2000000001c0 returned -14 [ 196.523750][ T8520] binder: 8519:8520 ioctl c0306201 200000000500 returned -14 [ 196.689564][ T8524] loop1: detected capacity change from 0 to 128 [ 196.749036][ T8524] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 196.833594][ T8524] input: syz1 as /devices/virtual/input/input14 [ 196.846826][ T8528] loop2: detected capacity change from 0 to 8 [ 196.901400][ T8528] SQUASHFS error: Failed to read block 0x8f: -5 [ 196.943784][ T28] audit: type=1800 audit(1791727828.454:266): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1078" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 197.051947][ T28] audit: type=1800 audit(1791727828.564:267): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1078" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 197.271289][ T8533] SQUASHFS error: Failed to read block 0x8f: -5 [ 197.300223][ T8533] SQUASHFS error: Failed to read block 0x8f: -5 [ 197.317845][ T8533] SQUASHFS error: Failed to read block 0x8f: -5 [ 197.350388][ T8533] SQUASHFS error: Failed to read block 0x8f: -5 [ 197.535114][ T8536] loop3: detected capacity change from 0 to 2048 [ 197.563768][ T8536] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 197.594399][ T8536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.891750][ T8544] kvm: MONITOR instruction emulated as NOP! [ 198.167486][ T8552] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 198.582195][ T5814] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 198.962107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 199.022107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 199.932113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 200.022103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 200.475255][ T5814] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 200.489490][ T5814] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 200.514477][ T5814] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 200.540763][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.548940][ T5814] usb 3-1: Product: syz [ 200.562164][ T5814] usb 3-1: Manufacturer: syz [ 200.566834][ T5814] usb 3-1: SerialNumber: syz [ 200.585798][ T8556] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.593708][ T8556] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.613718][ T5814] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 200.637675][ T5814] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 200.650459][ T5814] usbserial_generic 3-1:1.0: generic converter detected [ 200.662012][ T5814] usb 3-1: generic converter now attached to ttyUSB0 [ 200.861752][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 200.893919][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 200.903460][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 200.923192][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 200.948823][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 200.958375][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 200.969345][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 200.993943][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.003513][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.013279][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.022766][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.032618][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.042129][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.052274][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.061809][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.079287][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.088813][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.098736][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.108247][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.125282][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.134811][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 201.146856][ T174] usb 3-1: USB disconnect, device number 5 [ 201.176364][ T174] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 201.190962][ T174] usbserial_generic 3-1:1.0: device disconnected [ 202.541246][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 202.547488][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 202.553651][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 202.750573][ T8580] loop0: detected capacity change from 0 to 256 [ 203.169776][ T8586] loop2: detected capacity change from 0 to 512 [ 203.275261][ T8586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.581547][ T8592] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.1094' sets config #0 [ 204.101399][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.445094][ T8604] syzkaller0: entered promiscuous mode [ 204.463040][ T8604] syzkaller0: entered allmulticast mode [ 205.674513][ T8617] futex_wake_op: syz.2.1103 tries to shift op by 144; fix this program [ 205.684516][ T8617] futex_wake_op: syz.2.1103 tries to shift op by 144; fix this program [ 206.568813][ T8620] loop0: detected capacity change from 0 to 256 [ 207.496649][ T8625] loop2: detected capacity change from 0 to 2048 [ 207.529922][ T8625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.529258][ T8610] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1106'. [ 208.539391][ T8611] syzkaller1: entered promiscuous mode [ 208.545279][ T8611] syzkaller1: entered allmulticast mode [ 208.551714][ T8623] netlink: 'syz.0.1109': attribute type 12 has an invalid length. [ 210.176207][ T8657] loop2: detected capacity change from 0 to 8192 [ 210.191063][ T8655] syzkaller0: entered promiscuous mode [ 210.201941][ T8655] syzkaller0: entered allmulticast mode [ 210.223058][ T8657] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.359897][ T8660] loop0: detected capacity change from 0 to 512 [ 210.456926][ T8660] EXT4-fs (loop0): 1 truncate cleaned up [ 210.493491][ T8660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.425392][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.638359][ T8669] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1123'. [ 212.651010][ T8673] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1118'. [ 212.938750][ T8690] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.1126' sets config #0 [ 213.642486][ T790] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 213.814380][ T8702] loop2: detected capacity change from 0 to 8 [ 213.842442][ T790] usb 1-1: Using ep0 maxpacket: 16 [ 213.867494][ T790] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.916524][ T790] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 213.954497][ T790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.975343][ T790] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 214.001017][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.066124][ T790] usb 1-1: config 0 descriptor?? [ 214.582993][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 214.630501][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 214.660441][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 214.681138][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 214.704600][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 214.740597][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 214.770200][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 214.807691][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 214.842090][ C0] sched: RT throttling activated [ 214.863417][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 214.870875][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 214.879753][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 214.951308][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 215.051044][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 215.126206][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 215.143756][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 215.169011][ T790] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 215.180575][ T790] elan 0003:04F3:074D.000A: hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.0-1/input0 [ 215.338117][ T8714] loop1: detected capacity change from 0 to 1024 [ 215.388841][ T8712] syzkaller0: entered promiscuous mode [ 215.394080][ T8714] hfsplus: invalid length 32517 has been corrected to 255 [ 215.399780][ T8712] syzkaller0: entered allmulticast mode [ 215.514989][ T11] hfsplus: b-tree write err: -5, ino 25 [ 215.521359][ T11] hfsplus: b-tree write err: -5, ino 4 [ 215.535572][ T11] hfsplus: b-tree write err: -5, ino 2 [ 215.791546][ T8724] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.1138' sets config #0 [ 216.429382][ T23] usb 1-1: USB disconnect, device number 7 [ 216.885757][ T790] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 216.933222][ T790] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 217.163986][ T8736] fido_id[8736]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.277321][ T8756] binder: 8754:8756 unknown command 0 [ 218.283232][ T8756] binder: 8754:8756 ioctl c0306201 200000000c00 returned -22 [ 219.043047][ T8759] loop0: detected capacity change from 0 to 256 [ 219.077767][ T8759] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.212150][ T28] audit: type=1800 audit(1791727850.724:268): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1154" name="iso_qlen" dev="configfs" ino=18767 res=0 errno=0 [ 220.635923][ T28] audit: type=1800 audit(1791727852.154:269): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1163" name="iso_qlen" dev="configfs" ino=19689 res=0 errno=0 [ 220.924321][ T8806] Bluetooth: MGMT ver 1.22 [ 221.094750][ T8809] syzkaller0: entered promiscuous mode [ 221.109146][ T8809] syzkaller0: entered allmulticast mode [ 221.122604][ T790] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 221.312449][ T790] usb 4-1: Using ep0 maxpacket: 32 [ 221.328538][ T790] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.349848][ T790] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.373739][ T790] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.414848][ T790] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 221.429820][ T790] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 221.446670][ T790] usb 4-1: Product: syz [ 221.455672][ T790] usb 4-1: Manufacturer: syz [ 221.468295][ T790] usb 4-1: SerialNumber: syz [ 221.518134][ T790] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 221.786784][ T790] usb 4-1: USB disconnect, device number 4 [ 221.856762][ T790] appletouch 4-1:1.0: input: appletouch disconnected [ 223.449605][ T8817] netlink: 'syz.2.1172': attribute type 12 has an invalid length. [ 223.459566][ T8817] netlink: 'syz.2.1172': attribute type 29 has an invalid length. [ 223.467878][ T8817] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1172'. [ 223.943991][ T8848] futex_wake_op: syz.3.1181 tries to shift op by 144; fix this program [ 224.886097][ T8851] loop1: detected capacity change from 0 to 8 [ 224.904524][ T8851] SQUASHFS error: zlib decompression failed, data probably corrupt [ 224.932263][ T8851] SQUASHFS error: Failed to read block 0x9b: -5 [ 224.995267][ T8851] SQUASHFS error: Unable to read metadata cache entry [99] [ 225.022688][ T8851] SQUASHFS error: Unable to read inode 0x127 [ 225.073359][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'. [ 225.157166][ T8851] loop1: detected capacity change from 0 to 16 [ 225.183134][ T8851] erofs: Unexpected value for 'user_xattr' [ 225.331230][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1187'. [ 225.936091][ T8437] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.988469][ T8870] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.1185' sets config #0 [ 226.259069][ T8873] loop3: detected capacity change from 0 to 512 [ 226.313384][ T8873] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 226.353608][ T8873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 226.364712][ T8873] System zones: 1-12 [ 226.382533][ T8873] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.1190: bad orphan inode 131072 [ 226.431096][ T8873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.624428][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.639076][ T8877] syzkaller0: entered promiscuous mode [ 226.660920][ T8877] syzkaller0: entered allmulticast mode [ 227.644123][ T8897] futex_wake_op: syz.2.1192 tries to shift op by 144; fix this program [ 233.056209][ T8923] futex_wake_op: syz.3.1207 tries to shift op by 144; fix this program [ 233.065955][ T8923] futex_wake_op: syz.3.1207 tries to shift op by 144; fix this program [ 236.232790][ T8941] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 236.921376][ T8950] loop0: detected capacity change from 0 to 164 [ 236.983651][ T8950] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 237.722435][ T8954] futex_wake_op: syz.0.1216 tries to shift op by 144; fix this program [ 237.730866][ T8954] futex_wake_op: syz.0.1216 tries to shift op by 144; fix this program [ 240.273190][ T8987] netlink: 5856 bytes leftover after parsing attributes in process `syz.3.1227'. [ 240.623838][ T8993] loop2: detected capacity change from 0 to 512 [ 240.635964][ T8993] ext4: Unknown parameter 'defcontext' [ 240.856173][ T9004] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1232'. [ 240.865506][ T9004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1232'. [ 240.886505][ T9004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1232'. [ 242.299556][ T9011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 242.962312][ T9013] futex_wake_op: syz.0.1225 tries to shift op by 144; fix this program [ 242.970733][ T9013] futex_wake_op: syz.0.1225 tries to shift op by 144; fix this program [ 244.921773][ T9024] syzkaller0: entered promiscuous mode [ 244.952218][ T9024] syzkaller0: entered allmulticast mode [ 246.954081][ T9040] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 247.702324][ T9044] futex_wake_op: syz.2.1246 tries to shift op by 144; fix this program [ 247.710762][ T9044] futex_wake_op: syz.2.1246 tries to shift op by 144; fix this program [ 250.218885][ T9060] process 'syz.0.1252' launched './file0' with NULL argv: empty string added [ 250.453089][ T790] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 250.635645][ T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.653160][ T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.680562][ T790] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.712184][ T790] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 250.733105][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.765698][ T790] usb 3-1: config 0 descriptor?? [ 251.208103][ T790] kye 0003:0458:0153.000C: unbalanced collection at end of report description [ 251.235108][ T790] kye 0003:0458:0153.000C: parse failed [ 251.247935][ T790] kye: probe of 0003:0458:0153.000C failed with error -22 [ 251.426119][ T5812] usb 3-1: USB disconnect, device number 6 [ 252.020183][ T9081] syzkaller1: entered promiscuous mode [ 252.026763][ T9081] syzkaller1: entered allmulticast mode [ 252.251513][ T9103] loop0: detected capacity change from 0 to 8 [ 252.293556][ T9103] SQUASHFS error: Unable to read inode 0x11f [ 252.624016][ T9118] loop0: detected capacity change from 0 to 8 [ 252.709404][ T9118] SQUASHFS error: Failed to read block 0x2d7: -5 [ 252.719501][ T9109] loop2: detected capacity change from 0 to 8192 [ 252.752175][ T9118] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 252.771637][ T9109] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.213279][ T9125] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 254.220724][ T9125] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 254.272923][ T9127] syzkaller1: entered promiscuous mode [ 254.296989][ T9127] syzkaller1: entered allmulticast mode [ 255.076032][ T9134] xt_hashlimit: max too large, truncated to 1048576 [ 255.170984][ T9134] loop0: detected capacity change from 0 to 512 [ 255.183620][ T9134] EXT4-fs: Ignoring removed nobh option [ 255.189336][ T9134] EXT4-fs: user quota file already specified [ 255.812640][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.819053][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.933345][ T9065] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.042912][ T174] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 256.252654][ T174] usb 3-1: Using ep0 maxpacket: 32 [ 256.272585][ T174] usb 3-1: unable to get BOS descriptor or descriptor too short [ 256.302309][ T174] usb 3-1: config 3 has an invalid interface number: 73 but max is 0 [ 256.310443][ T174] usb 3-1: config 3 has no interface number 0 [ 256.322198][ T174] usb 3-1: config 3 interface 73 has no altsetting 0 [ 256.344864][ T174] usb 3-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice= b.8b [ 256.366679][ T174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.397737][ T174] usb 3-1: Product: syz [ 256.401954][ T174] usb 3-1: Manufacturer: syz [ 256.412210][ T174] usb 3-1: SerialNumber: syz [ 256.647947][ T174] cp210x 3-1:3.73: cp210x converter detected [ 256.662719][ T174] cp210x 3-1:3.73: failed to get vendor val 0x370b size 1: -71 [ 256.679157][ T174] cp210x 3-1:3.73: querying part number failed [ 256.769810][ T174] usb 3-1: cp210x converter now attached to ttyUSB0 [ 256.807964][ T174] usb 3-1: USB disconnect, device number 7 [ 256.838709][ T174] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 256.895544][ T174] cp210x 3-1:3.73: device disconnected [ 257.513555][ T9153] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 257.867204][ T9166] loop0: detected capacity change from 0 to 1764 [ 257.881468][ T9163] syzkaller1: entered promiscuous mode [ 257.911770][ T9163] syzkaller1: entered allmulticast mode [ 257.947392][ T9065] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.012664][ T9166] loop0: detected capacity change from 0 to 512 [ 258.029655][ T9065] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.488266][ T9176] loop1: detected capacity change from 0 to 1024 [ 260.624702][ T9089] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.672757][ T9176] loop1: detected capacity change from 0 to 512 [ 260.674275][ T9089] I/O error, dev loop1, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.749220][ T9176] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 264.289075][ T9221] loop2: detected capacity change from 0 to 256 [ 266.131362][ T9232] loop2: detected capacity change from 0 to 8 [ 266.209423][ T9232] SQUASHFS error: Failed to read block 0x8f: -5 [ 266.250573][ T28] audit: type=1800 audit(1791727897.754:270): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1308" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 266.374709][ T9234] loop1: detected capacity change from 0 to 1024 [ 266.931053][ T9234] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 266.986118][ T9234] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 266.995189][ T9234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.056257][ T28] audit: type=1800 audit(1791727898.524:271): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1308" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 267.111478][ T9233] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 267.222728][ T9239] SQUASHFS error: Failed to read block 0x8f: -5 [ 267.229279][ T9239] SQUASHFS error: Failed to read block 0x8f: -5 [ 267.343242][ T9239] SQUASHFS error: Failed to read block 0x8f: -5 [ 267.363731][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.403680][ T9239] SQUASHFS error: Failed to read block 0x8f: -5 [ 267.728334][ T9248] loop1: detected capacity change from 0 to 512 [ 267.828259][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 267.837996][ T9248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.881157][ T9248] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.892481][ T5812] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 267.933602][ T9248] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768304430 [ 267.955644][ T9248] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768304430 [ 267.986454][ T9248] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768304430 [ 268.002565][ T9248] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768304430 [ 268.018389][ T9248] Quota error (device loop1): write_blk: dquota write failed [ 268.027797][ T9248] Quota error (device loop1): qtree_write_dquot: Error -12 occurred while creating quota [ 268.038956][ T9248] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1312: Failed to acquire dquot type 1 [ 268.048062][ T9254] loop2: detected capacity change from 0 to 2048 [ 268.091851][ T9254] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 268.110474][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.120561][ T5812] usb 4-1: unable to get BOS descriptor or descriptor too short [ 268.137902][ T9254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.138843][ T5812] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 268.163657][ T5812] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 268.173060][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.181078][ T5812] usb 4-1: Product: syz [ 268.185560][ T5812] usb 4-1: Manufacturer: syz [ 268.190627][ T5812] usb 4-1: SerialNumber: syz [ 268.425276][ T5812] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 268.446477][ T5812] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 268.496149][ T9266] syz.2.1319 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 268.521233][ T5812] usb 4-1: USB disconnect, device number 5 [ 268.526353][ T9266] CPU: 1 PID: 9266 Comm: syz.2.1319 Not tainted syzkaller #0 [ 268.534469][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 268.544553][ T9266] Call Trace: [ 268.547858][ T9266] [ 268.550814][ T9266] dump_stack_lvl+0x18c/0x250 [ 268.555528][ T9266] ? show_regs_print_info+0x20/0x20 [ 268.560758][ T9266] ? load_image+0x420/0x420 [ 268.565303][ T9266] ? ___ratelimit+0x478/0x610 [ 268.570020][ T9266] ? radix_tree_cpu_dead+0x160/0x160 [ 268.575346][ T9266] dump_header+0xd8/0x820 [ 268.579732][ T9266] oom_kill_process+0x390/0x580 [ 268.579906][ T9065] udevd[9065]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.584611][ T9266] out_of_memory+0xe0e/0x1200 [ 268.584650][ T9266] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 268.610683][ T9266] ? mutex_lock_nested+0x20/0x20 [ 268.615671][ T9266] ? unregister_oom_notifier+0x20/0x20 [ 268.621182][ T9266] mem_cgroup_out_of_memory+0x2c2/0x390 [ 268.626775][ T9266] ? try_charge_memcg+0xc91/0x17c0 [ 268.631930][ T9266] ? drain_local_stock+0x630/0x630 [ 268.637067][ T9266] ? do_raw_spin_unlock+0x121/0x230 [ 268.642272][ T9266] try_charge_memcg+0xca1/0x17c0 [ 268.647264][ T9266] ? folio_flags+0x120/0x120 [ 268.651884][ T9266] ? percpu_ref_tryget+0x15/0x180 [ 268.656935][ T9266] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 268.662694][ T9266] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 268.668714][ T9266] ? percpu_ref_tryget+0x15/0x180 [ 268.673777][ T9266] ? percpu_ref_tryget+0x15/0x180 [ 268.678834][ T9266] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 268.684593][ T9266] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 268.690342][ T9266] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 268.696150][ T9266] obj_cgroup_charge+0x36e/0x630 [ 268.701087][ T9266] ? get_obj_cgroup_from_current+0xd4/0x280 [ 268.706970][ T9266] ? obj_cgroup_charge+0xed/0x630 [ 268.711988][ T9266] ? mod_objcg_mlstate+0x320/0x320 [ 268.717113][ T9266] ? get_obj_cgroup_from_current+0xd4/0x280 [ 268.723007][ T9266] ? get_obj_cgroup_from_current+0xd4/0x280 [ 268.728895][ T9266] slab_pre_alloc_hook+0x2e2/0x300 [ 268.734025][ T9266] kmem_cache_alloc+0x5a/0x2c0 [ 268.738805][ T9266] ? prepare_creds+0x30/0x5d0 [ 268.743475][ T9266] prepare_creds+0x30/0x5d0 [ 268.747975][ T9266] __sys_setresuid+0x62a/0xc40 [ 268.752743][ T9266] do_syscall_64+0x55/0xb0 [ 268.757151][ T9266] ? clear_bhb_loop+0x40/0x90 [ 268.761815][ T9266] ? clear_bhb_loop+0x40/0x90 [ 268.766481][ T9266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.772384][ T9266] RIP: 0033:0x7f2b5939e1d9 [ 268.776814][ T9266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.796415][ T9266] RSP: 002b:00007f2b5a20f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 268.804819][ T9266] RAX: ffffffffffffffda RBX: 00007f2b59625fa0 RCX: 00007f2b5939e1d9 [ 268.812779][ T9266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 268.820773][ T9266] RBP: 00007f2b59435888 R08: 0000000000000000 R09: 0000000000000000 [ 268.828745][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.836706][ T9266] R13: 00007f2b59626038 R14: 00007f2b59625fa0 R15: 00007fffa7a078e8 [ 268.844702][ T9266] [ 268.850151][ T9266] memory: usage 0kB, limit 0kB, failcnt 19 [ 268.856236][ T9266] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 268.863985][ T9266] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 268.870976][ T9266] Memory cgroup stats for /syz2/test: [ 268.871318][ T9266] cache 0 [ 268.879773][ T9266] rss 0 [ 268.882673][ T9266] rss_huge 0 [ 268.885946][ T9266] shmem 0 [ 268.888947][ T9266] mapped_file 0 [ 268.892538][ T9266] dirty 0 [ 268.895550][ T9266] writeback 0 [ 268.898862][ T9266] workingset_refault_anon 0 [ 268.903551][ T9266] workingset_refault_file 0 [ 268.908085][ T9266] swap 0 [ 268.910936][ T9266] pgpgin 0 [ 268.914010][ T9266] pgpgout 0 [ 268.917144][ T9266] pgfault 0 [ 268.920256][ T9266] pgmajfault 0 [ 268.924146][ T9266] inactive_anon 0 [ 268.927791][ T9266] active_anon 0 [ 268.931273][ T9266] inactive_file 0 [ 268.934954][ T9266] active_file 0 [ 268.938590][ T9266] unevictable 0 [ 268.942057][ T9266] hierarchical_memory_limit 0 [ 268.946788][ T9266] hierarchical_memsw_limit 9223372036854771712 [ 268.953160][ T9266] total_cache 0 [ 268.956637][ T9266] total_rss 0 [ 268.959931][ T9266] total_rss_huge 0 [ 268.963711][ T9266] total_shmem 0 [ 268.967178][ T9266] total_mapped_file 0 [ 268.971149][ T9266] total_dirty 0 [ 268.974707][ T9266] total_writeback 0 [ 268.978538][ T9266] total_workingset_refault_anon 0 [ 268.983619][ T9266] total_workingset_refault_file 0 [ 268.988656][ T9266] total_swap 0 [ 268.992035][ T9266] total_pgpgin 0 [ 268.995679][ T9266] total_pgpgout 0 [ 268.999317][ T9266] total_pgfault 0 [ 269.010001][ T9266] total_pgmajfault 0 [ 269.014012][ T9266] total_inactive_anon 0 [ 269.018180][ T9266] total_active_anon 0 [ 269.022246][ T9266] total_inactive_file 0 [ 269.026415][ T9266] total_active_file 0 [ 269.030389][ T9266] total_unevictable 0 [ 269.034456][ T9266] anon_cost 0 [ 269.037759][ T9266] file_cost 0 [ 269.041223][ T9266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1319,pid=9265,uid=0 [ 269.057662][ T9266] Memory cgroup out of memory: Killed process 9265 (syz.2.1319) total-vm:102252kB, anon-rss:1384kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 269.147325][ T9272] loop2: detected capacity change from 0 to 8 [ 269.174723][ T9272] SQUASHFS error: Failed to read block 0x8f: -5 [ 269.196548][ T28] audit: type=1800 audit(1791727900.704:272): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1321" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 269.254321][ T28] audit: type=1800 audit(1791727900.764:273): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1321" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 269.444304][ T9276] SQUASHFS error: Failed to read block 0x8f: -5 [ 269.491383][ T9276] SQUASHFS error: Failed to read block 0x8f: -5 [ 269.516984][ T9276] SQUASHFS error: Failed to read block 0x8f: -5 [ 269.686895][ T9276] SQUASHFS error: Failed to read block 0x8f: -5 [ 270.304687][ T9283] bridge0: entered allmulticast mode [ 270.589364][ T9295] loop3: detected capacity change from 0 to 256 [ 270.644052][ T9295] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 271.272238][ T9302] futex_wake_op: syz.1.1329 tries to shift op by 144; fix this program [ 271.281154][ T9302] futex_wake_op: syz.1.1329 tries to shift op by 144; fix this program [ 271.808887][ T9295] FAT-fs (loop3): Filesystem has been set read-only [ 271.887860][ T9304] binfmt_misc: register: failed to install interpreter file ./file0 [ 271.924691][ T9295] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 271.943350][ T9295] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 271.973652][ T28] audit: type=1800 audit(1791727903.494:274): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1328" name="file1" dev="loop3" ino=1048644 res=0 errno=0 [ 272.343424][ T9319] loop3: detected capacity change from 0 to 8 [ 273.634008][ T9319] SQUASHFS error: Failed to read block 0x8f: -5 [ 273.640661][ T28] audit: type=1800 audit(1791727905.154:275): pid=9319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1334" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 273.830594][ T28] audit: type=1800 audit(1791727905.344:276): pid=9319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1334" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 273.926669][ T9332] loop2: detected capacity change from 0 to 256 [ 273.973158][ T9332] exfat: Deprecated parameter 'utf8' [ 274.048772][ T9332] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 274.063420][ T9333] SQUASHFS error: Failed to read block 0x8f: -5 [ 274.092544][ T9333] SQUASHFS error: Failed to read block 0x8f: -5 [ 274.129406][ T9333] SQUASHFS error: Failed to read block 0x8f: -5 [ 274.142657][ T9333] SQUASHFS error: Failed to read block 0x8f: -5 [ 275.839034][ T9349] loop0: detected capacity change from 0 to 512 [ 275.847369][ T9349] EXT4-fs: Ignoring removed i_version option [ 275.869783][ T9349] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 275.886683][ T9349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.933423][ T9349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.946265][ T9349] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.001049][ T9354] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 276.024989][ T9354] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 276.084840][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.146959][ T9360] loop3: detected capacity change from 0 to 512 [ 276.182339][ T9360] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 276.221283][ T9360] EXT4-fs (loop3): 1 truncate cleaned up [ 276.230496][ T9360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.452321][ T28] audit: type=1800 audit(1791727909.514:277): pid=9373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1347" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 279.465642][ T9372] loop2: detected capacity change from 0 to 1024 [ 279.618846][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.923762][ T9381] loop2: detected capacity change from 0 to 1024 [ 280.096414][ T9381] hfsplus: xattr searching failed [ 280.162367][ T9386] hfsplus: xattr searching failed [ 281.391691][ T9392] loop3: detected capacity change from 0 to 512 [ 281.458725][ T9392] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.1355: iget: bad i_size value: 38620345925642 [ 282.881197][ T9392] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1355: couldn't read orphan inode 15 (err -117) [ 282.943610][ T9392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.060569][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.371189][ T9410] loop1: detected capacity change from 0 to 256 [ 283.767016][ T9413] futex_wake_op: syz.3.1363 tries to shift op by 144; fix this program [ 283.776164][ T9413] futex_wake_op: syz.3.1363 tries to shift op by 144; fix this program [ 284.721863][ T9420] xt_hashlimit: max too large, truncated to 1048576 [ 284.808302][ T9420] loop2: detected capacity change from 0 to 512 [ 284.822750][ T9420] EXT4-fs: Ignoring removed nobh option [ 284.828483][ T9420] EXT4-fs: user quota file already specified [ 285.414148][ T9423] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.482727][ T9065] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 286.020573][ T9431] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1368'. [ 286.063366][ T9431] syzkaller1: entered promiscuous mode [ 286.079141][ T9431] syzkaller1: entered allmulticast mode [ 286.125657][ T9423] loop3: detected capacity change from 0 to 32768 [ 286.218524][ T9423] loop3: p1 p3 < > [ 286.321375][ T9436] loop1: detected capacity change from 0 to 736 [ 286.895832][ T9089] udevd[9089]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 286.939768][ T9065] udevd[9065]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 286.966359][ T9457] loop2: detected capacity change from 0 to 164 [ 289.283250][ T9470] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1377'. [ 289.308851][ T174] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 289.319869][ T9470] syzkaller1: entered promiscuous mode [ 289.339341][ T9470] syzkaller1: entered allmulticast mode [ 289.534197][ T174] usb 1-1: config 0 has no interfaces? [ 289.542574][ T174] usb 1-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 289.553262][ T174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.582166][ T174] usb 1-1: Product: syz [ 289.586476][ T174] usb 1-1: Manufacturer: syz [ 289.588547][ T9483] loop1: detected capacity change from 0 to 16 [ 289.591079][ T174] usb 1-1: SerialNumber: syz [ 289.615622][ T174] usb 1-1: config 0 descriptor?? [ 289.629178][ T9483] erofs: (device loop1): mounted with root inode @ nid 36. [ 290.062246][ T5814] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 290.276806][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 290.325831][ T5814] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.430815][ T5814] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.688414][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.714533][ T5814] usb 2-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.00 [ 290.725496][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.762021][ T5814] usb 2-1: config 0 descriptor?? [ 290.970959][ T174] usb 1-1: USB disconnect, device number 8 [ 291.362905][ T5814] hid-generic 0003:18D1:5050.000D: unknown main item tag 0x0 [ 291.370583][ T5814] hid-generic 0003:18D1:5050.000D: unknown main item tag 0x0 [ 291.378642][ T5814] hid-generic 0003:18D1:5050.000D: unknown main item tag 0x0 [ 291.386399][ T5814] hid-generic 0003:18D1:5050.000D: unknown main item tag 0x0 [ 291.394733][ T5814] hid-generic 0003:18D1:5050.000D: unknown main item tag 0x0 [ 291.448770][ T9500] loop3: detected capacity change from 0 to 16 [ 291.505021][ T9500] erofs: (device loop3): mounted with root inode @ nid 36. [ 291.531890][ T9500] syz.3.1379: attempt to access beyond end of device [ 291.531890][ T9500] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 291.566028][ T9500] syz.3.1379: attempt to access beyond end of device [ 291.566028][ T9500] loop3: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 291.580560][ T9500] syz.3.1379: attempt to access beyond end of device [ 291.580560][ T9500] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 291.793771][ T5814] hid-generic 0003:18D1:5050.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 18d1:5050] on usb-dummy_hcd.1-1/input0 [ 292.136491][ T9504] loop0: detected capacity change from 0 to 512 [ 292.206785][ T9504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.246553][ T9504] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.356032][ T5814] usb 2-1: USB disconnect, device number 5 [ 292.385573][ T9502] fido_id[9502]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:18D1:5050.000D/report_descriptor': No such file or directory [ 293.524611][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.553730][ T9518] loop1: detected capacity change from 0 to 164 [ 293.628774][ T9065] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.722881][ T9520] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1390'. [ 293.794779][ T9520] syzkaller1: entered promiscuous mode [ 293.807821][ T9520] syzkaller1: entered allmulticast mode [ 295.551947][ T9533] loop0: detected capacity change from 0 to 164 [ 295.577131][ T9535] loop3: detected capacity change from 0 to 256 [ 295.595861][ T9535] FAT-fs (loop3): Unrecognized mount option "iochar5¯/ñ¿#]$dµ‘¢}" or missing value [ 295.650303][ T9533] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 295.693932][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1392'. [ 296.448671][ T9543] loop0: detected capacity change from 0 to 512 [ 296.548253][ T9543] EXT4-fs (loop0): first meta block group too large: 4278190080 (group descriptor block count 1) [ 296.905045][ T9554] loop3: detected capacity change from 0 to 512 [ 297.009473][ T9554] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1402: invalid indirect mapped block 10 (level 1) [ 297.081785][ T9554] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1402: invalid indirect mapped block 8 (level 1) [ 297.162742][ T9554] EXT4-fs (loop3): 1 truncate cleaned up [ 297.169701][ T9554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.202759][ T9561] loop1: detected capacity change from 0 to 1764 [ 298.641357][ T9565] loop1: detected capacity change from 0 to 256 [ 298.693581][ T9565] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.720569][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.722440][ T9565] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 298.827611][ T9565] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 298.852192][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 298.883341][ T9565] exFAT-fs (loop1): failed to load alloc-bitmap [ 298.889715][ T9565] exFAT-fs (loop1): failed to recognize exfat type [ 299.057755][ T9565] loop1: detected capacity change from 0 to 1024 [ 299.144481][ T9565] hfsplus: xattr searching failed [ 299.165930][ T9565] hfsplus: xattr searching failed [ 299.289611][ T9572] loop3: detected capacity change from 0 to 16 [ 299.330884][ T9572] erofs: (device loop3): mounted with root inode @ nid 36. [ 299.962893][ T9588] loop1: detected capacity change from 0 to 512 [ 300.094298][ T9588] EXT4-fs (loop1): first meta block group too large: 4278190080 (group descriptor block count 1) [ 301.462249][ T174] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 301.473172][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 301.672284][ T174] usb 1-1: Using ep0 maxpacket: 16 [ 301.677592][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 301.695000][ T174] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 301.704363][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.722221][ T174] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 301.746997][ T174] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 301.756723][ T174] usb 1-1: config 0 has no interface number 0 [ 301.764069][ T9] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 301.773484][ T9] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 301.781582][ T174] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 255, changing to 11 [ 301.792958][ T9] usb 4-1: Manufacturer: syz [ 301.797574][ T9] usb 4-1: SerialNumber: syz [ 301.804901][ T174] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 59391, setting to 1024 [ 301.817895][ T9] usb 4-1: config 0 descriptor?? [ 301.831457][ T174] usb 1-1: config 0 interface 104 has no altsetting 1 [ 301.855971][ T174] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 301.868622][ T174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.879456][ T174] usb 1-1: Product: syz [ 301.891343][ T174] usb 1-1: Manufacturer: syz [ 301.896442][ T174] usb 1-1: SerialNumber: syz [ 301.908290][ T174] usb 1-1: config 0 descriptor?? [ 301.921432][ T174] asix: probe of 1-1:0.104 failed with error -22 [ 302.139915][ T9] usb 1-1: USB disconnect, device number 9 [ 302.261876][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.282513][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.309565][ T5814] usb 4-1: USB disconnect, device number 6 [ 302.349103][ T9605] loop1: detected capacity change from 0 to 128 [ 302.415992][ T9605] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.454731][ T9605] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 303.055853][ T9608] syz.1.1419 (pid 9608) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 303.593375][ T9608] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 303.606280][ T9608] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 305.201507][ T9628] loop3: detected capacity change from 0 to 512 [ 305.768653][ T9628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.852948][ T9628] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.074789][ T9635] loop0: detected capacity change from 0 to 512 [ 306.161524][ T9635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.193533][ T9636] Quota error (device loop3): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 306.243771][ T9635] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.254706][ T9636] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 306.299188][ T9636] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1422: Failed to acquire dquot type 0 [ 306.864788][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.903656][ T9628] loop3: detected capacity change from 512 to 0 [ 307.025746][ T5777] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 307.060557][ T5777] syz-executor: attempt to access beyond end of device [ 307.060557][ T5777] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 307.162538][ T5777] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 307.170851][ T5777] EXT4-fs (loop3): I/O error while writing superblock [ 307.218118][ T5777] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 307.290116][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.387614][ T5777] syz-executor: attempt to access beyond end of device [ 307.387614][ T5777] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 307.578933][ T9644] loop0: detected capacity change from 0 to 512 [ 307.598523][ T5777] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 307.708368][ T9644] EXT4-fs (loop0): first meta block group too large: 4278190080 (group descriptor block count 1) [ 307.781000][ T5777] EXT4-fs (loop3): I/O error while writing superblock [ 308.001732][ T8001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.303776][ T9646] loop2: detected capacity change from 0 to 512 [ 308.342765][ T8001] syz.3.895: attempt to access beyond end of device [ 308.342765][ T8001] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 308.431569][ T8001] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 308.460144][ T8001] EXT4-fs (loop3): I/O error while writing superblock [ 308.480566][ T9631] kmmpd-loop3: attempt to access beyond end of device [ 308.480566][ T9631] loop3: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 308.512203][ T9631] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 310.084899][ T9661] loop2: detected capacity change from 0 to 128 [ 310.136051][ T9661] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 310.197894][ T9661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.046726][ T9673] loop2: detected capacity change from 0 to 512 [ 311.097336][ T9673] EXT4-fs (loop2): first meta block group too large: 4278190080 (group descriptor block count 1) [ 311.160716][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.189222][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.198171][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.212625][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.225352][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 311.234378][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.534287][ T9679] chnl_net:caif_netlink_parms(): no params data found [ 312.783236][ T9679] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.792402][ T9679] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.807538][ T9679] bridge_slave_0: entered allmulticast mode [ 312.815159][ T9679] bridge_slave_0: entered promiscuous mode [ 312.827163][ T9679] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.840957][ T9679] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.857141][ T9679] bridge_slave_1: entered allmulticast mode [ 312.865085][ T9679] bridge_slave_1: entered promiscuous mode [ 312.949817][ T9679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.973556][ T9679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.020145][ T9679] team0: Port device team_slave_0 added [ 313.037437][ T9679] team0: Port device team_slave_1 added [ 313.067454][ T9679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.075241][ T9679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.108486][ T9679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.121901][ T9679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.141480][ T9679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.173748][ T9679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.252046][ T9679] hsr_slave_0: entered promiscuous mode [ 313.261535][ T9679] hsr_slave_1: entered promiscuous mode [ 313.270728][ T9679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.285100][ T9679] Cannot create hsr debugfs directory [ 313.327905][ T5771] Bluetooth: hci2: command tx timeout [ 313.522018][ T9705] loop0: detected capacity change from 0 to 512 [ 313.594453][ T9705] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 313.618651][ T9705] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c800e018, mo2=0003] [ 313.674753][ T9705] EXT4-fs (loop0): orphan cleanup on readonly fs [ 313.680018][ T9679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.696935][ T9679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.706583][ T9705] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1442: bg 0: block 15: invalid block bitmap [ 313.707610][ T9679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.736802][ T9705] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 313.750281][ T9705] EXT4-fs (loop0): 1 truncate cleaned up [ 313.765440][ T9705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 313.777532][ T9679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.785869][ T9713] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.889193][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.902195][ T9679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.958792][ T9679] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.986362][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.994312][ T1315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.026483][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.033710][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.613291][ T9720] loop0: detected capacity change from 0 to 512 [ 314.732481][ T9720] EXT4-fs (loop0): first meta block group too large: 4278190080 (group descriptor block count 1) [ 315.371526][ T9679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.405775][ T5771] Bluetooth: hci2: command tx timeout [ 315.492284][ T9738] Driver unsupported XDP return value 0 on prog (id 73) dev N/A, expect packet loss! [ 315.883904][ T9750] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 315.948967][ T9679] veth0_vlan: entered promiscuous mode [ 315.977601][ T9679] veth1_vlan: entered promiscuous mode [ 316.024766][ T9679] veth0_macvtap: entered promiscuous mode [ 316.036273][ T9679] veth1_macvtap: entered promiscuous mode [ 316.087443][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.098581][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.109054][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.119914][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.130461][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.141399][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.159090][ T9679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.188831][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.211911][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.233450][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.253306][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.272284][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.288377][ T9753] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 316.289560][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.320298][ T9679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.349144][ T9679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.365802][ T9679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.386360][ T9679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.395398][ T9679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.594885][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.628207][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.639102][ T9750] loop2: detected capacity change from 0 to 32768 [ 317.613761][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.620113][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.634662][ T5771] Bluetooth: hci2: command tx timeout [ 317.800730][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.992205][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.239374][ T9764] loop1: detected capacity change from 0 to 512 [ 318.282645][ T9764] EXT4-fs (loop1): first meta block group too large: 4278190080 (group descriptor block count 1) [ 318.661534][ T9778] FAULT_INJECTION: forcing a failure. [ 318.661534][ T9778] name failslab, interval 1, probability 0, space 0, times 0 [ 318.705291][ T9778] CPU: 0 PID: 9778 Comm: syz.4.1433 Not tainted syzkaller #0 [ 318.712723][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.722802][ T9778] Call Trace: [ 318.726091][ T9778] [ 318.729023][ T9778] dump_stack_lvl+0x18c/0x250 [ 318.733708][ T9778] ? show_regs_print_info+0x20/0x20 [ 318.738910][ T9778] ? load_image+0x420/0x420 [ 318.743420][ T9778] ? __might_sleep+0xe0/0xe0 [ 318.748033][ T9778] ? __lock_acquire+0x7eb0/0x7eb0 [ 318.753076][ T9778] should_fail_ex+0x394/0x4c0 [ 318.757776][ T9778] should_failslab+0x9/0x20 [ 318.762292][ T9778] slab_pre_alloc_hook+0x59/0x300 [ 318.767336][ T9778] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 318.773591][ T9778] ? iter_file_splice_write+0x1a4/0xcf0 [ 318.779139][ T9778] ? iter_file_splice_write+0x1a4/0xcf0 [ 318.784685][ T9778] __kmem_cache_alloc_node+0x53/0x250 [ 318.790070][ T9778] ? iter_file_splice_write+0x1a4/0xcf0 [ 318.795614][ T9778] __kmalloc+0xa7/0x240 [ 318.799785][ T9778] iter_file_splice_write+0x1a4/0xcf0 [ 318.805157][ T9778] ? atime_needs_update+0x84f/0x990 [ 318.810374][ T9778] ? splice_folio_into_pipe+0x7bc/0xb40 [ 318.815929][ T9778] ? splice_from_pipe+0x180/0x180 [ 318.820960][ T9778] ? shmem_file_splice_read+0xb0f/0xc70 [ 318.826517][ T9778] ? splice_from_pipe+0x180/0x180 [ 318.831539][ T9778] direct_splice_actor+0xe8/0x130 [ 318.836564][ T9778] splice_direct_to_actor+0x30b/0x8e0 [ 318.841937][ T9778] ? direct_file_splice_eof+0xb0/0xb0 [ 318.847317][ T9778] ? warn_unsupported+0xc0/0xc0 [ 318.852177][ T9778] ? fsnotify_perm+0x5d/0x5e0 [ 318.856859][ T9778] ? security_file_permission+0x79/0xa0 [ 318.862416][ T9778] do_splice_direct+0x1d5/0x2f0 [ 318.867267][ T9778] ? splice_direct_to_actor+0x8e0/0x8e0 [ 318.872810][ T9778] ? rcu_read_lock_any_held+0xb4/0x140 [ 318.878270][ T9778] ? do_splice_direct+0x2f0/0x2f0 [ 318.883299][ T9778] do_sendfile+0x52b/0xe80 [ 318.887720][ T9778] ? __lock_acquire+0x7eb0/0x7eb0 [ 318.892743][ T9778] ? do_pwritev+0x3a0/0x3a0 [ 318.897244][ T9778] ? __might_fault+0xaa/0x120 [ 318.901924][ T9778] ? __might_fault+0xc6/0x120 [ 318.906595][ T9778] ? __might_fault+0xaa/0x120 [ 318.911281][ T9778] __se_sys_sendfile64+0xe0/0x1a0 [ 318.916307][ T9778] ? lock_chain_count+0x20/0x20 [ 318.921158][ T9778] ? __x64_sys_sendfile64+0xb0/0xb0 [ 318.926360][ T9778] ? lockdep_hardirqs_on+0x98/0x150 [ 318.931566][ T9778] do_syscall_64+0x55/0xb0 [ 318.935980][ T9778] ? clear_bhb_loop+0x40/0x90 [ 318.940650][ T9778] ? clear_bhb_loop+0x40/0x90 [ 318.945325][ T9778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.951219][ T9778] RIP: 0033:0x7f6df619e1d9 [ 318.955632][ T9778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.975251][ T9778] RSP: 002b:00007f6df713c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 318.983667][ T9778] RAX: ffffffffffffffda RBX: 00007f6df6425fa0 RCX: 00007f6df619e1d9 [ 318.991636][ T9778] RDX: 0000200000001000 RSI: 0000000000000004 RDI: 0000000000000004 [ 318.999604][ T9778] RBP: 00007f6df6235888 R08: 0000000000000000 R09: 0000000000000000 [ 319.007570][ T9778] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000000 [ 319.015544][ T9778] R13: 00007f6df6426038 R14: 00007f6df6425fa0 R15: 00007fff1e1925a8 [ 319.023534][ T9778] [ 319.304756][ T9789] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 319.306997][ T9787] loop4: detected capacity change from 0 to 1024 [ 319.643334][ T5771] Bluetooth: hci2: command tx timeout [ 319.846138][ T9796] loop4: detected capacity change from 0 to 256 [ 319.905538][ T9789] loop0: detected capacity change from 0 to 32768 [ 319.974681][ T9789] loop0: p1 p3 < > [ 322.508459][ T9809] futex_wake_op: syz.1.1480 tries to shift op by 144; fix this program [ 322.517030][ T9809] futex_wake_op: syz.1.1480 tries to shift op by 144; fix this program [ 322.569648][ T9089] udevd[9089]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 322.583316][ T9065] udevd[9065]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 322.718596][ T9812] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1482'. [ 322.793179][ T9812] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1482'. [ 323.141924][ T9815] loop4: detected capacity change from 0 to 1024 [ 323.229255][ T9065] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.722686][ T9830] netlink: 5856 bytes leftover after parsing attributes in process `syz.0.1489'. [ 323.779537][ T9826] loop2: detected capacity change from 0 to 8192 [ 323.791983][ T9826] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.738618][ T9837] futex_wake_op: syz.0.1491 tries to shift op by 144; fix this program [ 324.747271][ T9837] futex_wake_op: syz.0.1491 tries to shift op by 144; fix this program [ 324.955050][ T9840] loop4: detected capacity change from 0 to 128 [ 324.968516][ T5771] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 325.793975][ T28] audit: type=1326 audit(1791727957.314:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.4.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 325.839260][ T28] audit: type=1326 audit(1791727957.314:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.4.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 325.864303][ T28] audit: type=1326 audit(1791727957.344:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.4.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 325.889574][ T28] audit: type=1326 audit(1791727957.344:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.4.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6df6197f57 code=0x7ffc0000 [ 325.939488][ T28] audit: type=1326 audit(1791727957.344:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.4.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6df613f559 code=0x7ffc0000 [ 325.981352][ T28] audit: type=1326 audit(1791727957.344:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.4.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 326.005944][ T28] audit: type=1326 audit(1791727957.344:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.4.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 326.035566][ T28] audit: type=1326 audit(1791727957.344:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.4.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 326.069265][ T28] audit: type=1326 audit(1791727957.344:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.4.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 326.101360][ T28] audit: type=1326 audit(1791727957.344:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9839 comm="syz.4.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 326.580305][ T9861] loop0: detected capacity change from 0 to 2048 [ 326.603506][ T9861] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 326.631906][ T9861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.654621][ T9861] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 326.675624][ T9861] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 326.853012][ T174] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 327.962472][ T9866] futex_wake_op: syz.2.1502 tries to shift op by 144; fix this program [ 327.970905][ T9866] futex_wake_op: syz.2.1502 tries to shift op by 144; fix this program [ 328.251497][ T174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.261874][ T174] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 328.272646][ T174] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 328.282479][ T174] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 328.296972][ T174] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 328.306318][ T174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.317678][ T9862] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 328.362332][ T9862] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 328.384803][ T174] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 328.427757][ T174] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 328.451454][ T174] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 328.477678][ T174] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 328.501579][ T9870] loop0: detected capacity change from 0 to 1024 [ 328.509769][ T174] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 328.527669][ T174] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 328.589212][ T174] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 330.194371][ T2949] hfsplus: b-tree write err: -5, ino 25 [ 330.201323][ T2949] hfsplus: b-tree write err: -5, ino 4 [ 330.236890][ T2949] hfsplus: b-tree write err: -5, ino 2 [ 330.252505][ T2949] hfsplus: b-tree write err: -5, ino 26 [ 330.326369][ T27] usb 5-1: USB disconnect, device number 2 [ 330.340444][ T2949] hfsplus: b-tree write err: -5, ino 27 [ 330.369424][ T27] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 330.413193][ T27] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 330.463045][ T27] keyspan 5-1:1.0: device disconnected [ 330.565807][ T9888] loop0: detected capacity change from 0 to 16 [ 330.620361][ T9888] erofs: (device loop0): mounted with root inode @ nid 36. [ 331.882377][ T9890] futex_wake_op: syz.4.1511 tries to shift op by 144; fix this program [ 331.890804][ T9890] futex_wake_op: syz.4.1511 tries to shift op by 144; fix this program [ 335.838817][ T9923] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1517'. [ 335.902684][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1517'. [ 336.553719][ T9932] loop0: detected capacity change from 0 to 512 [ 336.604843][ T9932] EXT4-fs (loop0): first meta block group too large: 4278190080 (group descriptor block count 1) [ 339.317763][ T9970] loop1: detected capacity change from 0 to 164 [ 339.808132][ T9987] loop1: detected capacity change from 0 to 512 [ 339.860161][ T9987] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1543: invalid indirect mapped block 10 (level 1) [ 339.928420][ T9987] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1543: invalid indirect mapped block 8 (level 1) [ 339.970816][ T9987] EXT4-fs (loop1): 1 truncate cleaned up [ 339.998362][ T9987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.166223][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.002417][ T5771] Bluetooth: hci0: command 0x0406 tx timeout [ 341.219448][T10020] loop1: detected capacity change from 0 to 512 [ 341.231722][T10020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 341.251218][T10020] EXT4-fs (loop1): 1 truncate cleaned up [ 341.280062][T10020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.364389][T10020] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.497781][T10025] loop1: detected capacity change from 0 to 512 [ 341.536010][T10025] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 341.574583][T10025] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1556: bad orphan inode 13 [ 341.586262][T10025] ext4_test_bit(bit=12, block=18) = 1 [ 341.591821][T10025] is_bad_inode(inode)=0 [ 341.600191][T10025] NEXT_ORPHAN(inode)=0 [ 341.609928][T10025] max_ino=32 [ 341.616002][T10025] i_nlink=1 [ 341.629249][T10025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 341.693971][T10025] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 341.725391][T10025] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1556: bg 0: block 248: padding at end of block bitmap is not set [ 341.748514][T10025] __quota_error: 19 callbacks suppressed [ 341.748531][T10025] Quota error (device loop1): write_blk: dquota write failed [ 341.769736][T10025] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 341.783282][T10028] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 341.822291][T10028] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 131074 [ 341.834303][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.842041][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.859535][T10029] bridge0: entered allmulticast mode [ 341.862169][T10025] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1556: Failed to acquire dquot type 1 [ 341.892945][T10028] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1556: Failed to acquire dquot type 1 [ 341.923349][T10030] bridge_slave_1: left allmulticast mode [ 341.930226][T10030] bridge_slave_1: left promiscuous mode [ 341.943541][T10030] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.984496][T10030] bridge_slave_0: left allmulticast mode [ 341.991379][T10030] bridge_slave_0: left promiscuous mode [ 342.002809][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.268362][T10025] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 343.815479][T10040] loop0: detected capacity change from 0 to 4096 [ 343.905955][T10040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.134241][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.989460][T10060] xt_hashlimit: max too large, truncated to 1048576 [ 345.087445][T10060] loop0: detected capacity change from 0 to 512 [ 345.100393][T10060] EXT4-fs: Ignoring removed nobh option [ 345.106359][T10060] EXT4-fs: user quota file already specified [ 345.700081][T10057] loop4: detected capacity change from 0 to 128 [ 345.739098][T10057] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 345.759735][ T9914] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.883877][T10057] 9pnet_fd: Insufficient options for proto=fd [ 346.835306][T10067] loop2: detected capacity change from 0 to 512 [ 346.910625][T10067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.946735][T10067] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.979742][T10069] loop4: detected capacity change from 0 to 2048 [ 347.038330][T10067] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes [ 347.070175][T10069] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.197840][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.370422][T10074] loop4: detected capacity change from 0 to 512 [ 347.418798][T10074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.437596][T10074] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.442327][ T5771] Bluetooth: Fragment is too long (len 14, expected 2) [ 347.515114][ T9679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.821301][T10083] syzkaller0: entered promiscuous mode [ 347.828642][T10083] syzkaller0: entered allmulticast mode [ 348.567959][T10092] xt_hashlimit: max too large, truncated to 1048576 [ 348.657232][T10092] loop1: detected capacity change from 0 to 512 [ 348.670548][T10092] EXT4-fs: Ignoring removed nobh option [ 348.676497][T10092] EXT4-fs: user quota file already specified [ 349.370866][ T9914] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 349.473030][T10099] loop4: detected capacity change from 0 to 128 [ 349.504457][T10099] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 350.077692][T10100] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 355.007809][T10126] xt_hashlimit: max too large, truncated to 1048576 [ 355.096640][T10126] loop4: detected capacity change from 0 to 512 [ 355.109940][T10126] EXT4-fs: Ignoring removed nobh option [ 355.115833][T10126] EXT4-fs: user quota file already specified [ 355.788808][ T9914] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.384549][T10135] syzkaller0: entered promiscuous mode [ 357.392211][T10135] syzkaller0: entered allmulticast mode [ 357.446701][T10138] loop1: detected capacity change from 0 to 1024 [ 357.563675][T10138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.681084][ T28] audit: type=1800 audit(1791727989.184:307): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1584" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 357.718170][T10143] loop0: detected capacity change from 0 to 512 [ 357.747224][T10143] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 357.760976][ T28] audit: type=1800 audit(1791727989.194:308): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1584" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 357.772182][T10143] EXT4-fs (loop0): Test dummy encryption mode enabled [ 357.818148][T10143] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.915468][T10143] EXT4-fs error (device loop0): ext4_add_entry:2488: inode #2: comm syz.0.1590: Directory hole found for htree leaf block 0 [ 357.941861][T10143] EXT4-fs (loop0): Remounting filesystem read-only [ 358.008231][ T5779] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 358.224130][T10149] loop4: detected capacity change from 0 to 128 [ 358.241373][T10149] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 358.316508][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.646214][T10154] loop0: detected capacity change from 0 to 2048 [ 358.666191][T10154] EXT4-fs: Ignoring removed orlov option [ 358.710758][T10154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.723090][T10154] ext4 filesystem being mounted at /374/mnt/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.972018][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.423898][T10168] futex_wake_op: syz.1.1598 tries to shift op by 144; fix this program [ 359.432447][T10168] futex_wake_op: syz.1.1598 tries to shift op by 144; fix this program [ 361.996186][T10183] loop4: detected capacity change from 0 to 1024 [ 362.033661][T10183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.223999][T10191] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 363.475742][ T9679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.848377][ T28] audit: type=1804 audit(1791727995.364:309): pid=5779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/374/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 364.079535][T10203] futex_wake_op: syz.2.1608 tries to shift op by 144; fix this program [ 364.087971][T10203] futex_wake_op: syz.2.1608 tries to shift op by 144; fix this program [ 364.703168][T10205] loop4: detected capacity change from 0 to 128 [ 364.709934][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 364.721683][T10205] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 364.743650][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 365.162731][T10207] syzkaller0: entered promiscuous mode [ 365.172403][T10207] syzkaller0: entered allmulticast mode [ 368.528854][T10242] xt_hashlimit: max too large, truncated to 1048576 [ 368.625089][T10242] loop1: detected capacity change from 0 to 512 [ 368.638458][T10242] EXT4-fs: Ignoring removed nobh option [ 368.644399][T10242] EXT4-fs: user quota file already specified [ 369.281948][ T9914] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.371112][T10247] loop4: detected capacity change from 0 to 1024 [ 370.413284][T10247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 370.537537][T10247] EXT4-fs warning (device loop4): ext4_multi_mount_protect:329: MMP interval 1666 higher than expected, please wait. [ 370.537537][T10247] [ 370.552577][T10247] EXT4-fs warning (device loop4): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 370.552577][T10247] [ 370.637197][ T9679] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /38/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=16777218, rec_len=15, size=1024 fake=1 [ 370.742858][T10251] futex_wake_op: syz.1.1620 tries to shift op by 144; fix this program [ 370.751349][T10251] futex_wake_op: syz.1.1620 tries to shift op by 144; fix this program [ 370.768193][ T9679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.362380][ T790] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 372.594032][ T790] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 372.605443][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 372.652229][ T790] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 372.682622][ T790] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 372.722760][ T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.763471][ T790] usb 5-1: config 0 descriptor?? [ 372.803635][T10266] loop1: detected capacity change from 0 to 1024 [ 372.990907][T10258] loop4: detected capacity change from 0 to 512 [ 373.070105][T10258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.105764][T10258] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.633971][T10272] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9679] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10272] [ 374.417783][T10276] FAULT_INJECTION: forcing a failure. [ 374.417783][T10276] name failslab, interval 1, probability 0, space 0, times 0 [ 374.511660][T10276] CPU: 1 PID: 10276 Comm: syz.1.1628 Not tainted syzkaller #0 [ 374.519187][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 374.529280][T10276] Call Trace: [ 374.532590][T10276] [ 374.535543][T10276] dump_stack_lvl+0x18c/0x250 [ 374.540268][T10276] ? show_regs_print_info+0x20/0x20 [ 374.545498][T10276] ? load_image+0x420/0x420 [ 374.550035][T10276] ? __might_sleep+0xe0/0xe0 [ 374.554682][T10276] ? __lock_acquire+0x7eb0/0x7eb0 [ 374.559751][T10276] should_fail_ex+0x394/0x4c0 [ 374.564470][T10276] should_failslab+0x9/0x20 [ 374.569005][T10276] slab_pre_alloc_hook+0x59/0x300 [ 374.574058][T10276] kmem_cache_alloc+0x5a/0x2c0 [ 374.578854][T10276] ? fcntl_getlk+0x30/0xb10 [ 374.583395][T10276] fcntl_getlk+0x30/0xb10 [ 374.587756][T10276] ? __might_fault+0xaa/0x120 [ 374.592453][T10276] ? __might_fault+0xc6/0x120 [ 374.597149][T10276] ? __might_fault+0xaa/0x120 [ 374.601853][T10276] do_fcntl+0x926/0x14a0 [ 374.606128][T10276] ? kill_fasync+0x4b0/0x4b0 [ 374.610755][T10276] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 374.616768][T10276] ? tomoyo_file_fcntl+0x7b/0x220 [ 374.621825][T10276] ? bpf_lsm_file_fcntl+0x9/0x10 [ 374.626788][T10276] ? security_file_fcntl+0x80/0xa0 [ 374.631934][T10276] __se_sys_fcntl+0xc9/0x1a0 [ 374.636554][T10276] do_syscall_64+0x55/0xb0 [ 374.641002][T10276] ? clear_bhb_loop+0x40/0x90 [ 374.645699][T10276] ? clear_bhb_loop+0x40/0x90 [ 374.650397][T10276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.656323][T10276] RIP: 0033:0x7f39d8f9e1d9 [ 374.660759][T10276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.680391][T10276] RSP: 002b:00007f39d71f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 374.688833][T10276] RAX: ffffffffffffffda RBX: 00007f39d9225fa0 RCX: 00007f39d8f9e1d9 [ 374.696828][T10276] RDX: 0000200000000780 RSI: 0000000000000024 RDI: 0000000000000007 [ 374.704823][T10276] RBP: 00007f39d9035888 R08: 0000000000000000 R09: 0000000000000000 [ 374.712900][T10276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.720893][T10276] R13: 00007f39d9226038 R14: 00007f39d9225fa0 R15: 00007fff327cda38 [ 374.728910][T10276] [ 374.802106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 375.324930][T10279] loop2: detected capacity change from 0 to 512 [ 375.371870][ T790] usbhid 5-1:0.0: can't add hid device: -71 [ 375.402269][ T790] usbhid: probe of 5-1:0.0 failed with error -71 [ 375.423611][T10279] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 375.502853][ T790] usb 5-1: USB disconnect, device number 3 [ 375.541817][T10279] EXT4-fs (loop2): 1 truncate cleaned up [ 375.585841][ T9679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.586922][T10279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.642915][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.645977][T10285] loop1: detected capacity change from 0 to 256 [ 375.662457][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.672819][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.682710][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.692463][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 375.702470][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 376.215242][T10291] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.622200][ T28] audit: type=1326 audit(1791728008.134:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.1.1631" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39d8f9e1d9 code=0x0 [ 376.636433][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.664515][ T790] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 376.932312][ T790] usb 5-1: device descriptor read/64, error -71 [ 376.961541][T10294] loop2: detected capacity change from 0 to 2048 [ 377.001759][T10294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.185114][ T2949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.222327][ T790] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 377.811691][T10298] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 378.632271][ T790] usb 5-1: device descriptor read/64, error -71 [ 378.685769][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.692226][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.743769][ T2949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.782382][ T790] usb usb5-port1: attempt power cycle [ 378.929830][ T2949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.965984][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.978496][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.997637][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.007687][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.018448][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 379.032178][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.122487][ T28] audit: type=1326 audit(1791728010.644:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 379.219992][ T2949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.272352][ T28] audit: type=1326 audit(1791728010.674:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 379.347808][ T28] audit: type=1326 audit(1791728010.674:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 379.457448][ T28] audit: type=1326 audit(1791728010.674:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 379.567354][ T28] audit: type=1326 audit(1791728010.674:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39d8f5ea0e code=0x7ffc0000 [ 379.592601][ T28] audit: type=1326 audit(1791728010.674:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39d8f5ea0e code=0x7ffc0000 [ 379.622725][ T28] audit: type=1326 audit(1791728010.674:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 379.735336][ T28] audit: type=1326 audit(1791728010.674:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 379.874579][ T28] audit: type=1326 audit(1791728010.674:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 380.465155][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.477232][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.486034][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.531897][T10328] loop1: detected capacity change from 0 to 128 [ 380.539799][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.560269][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 380.567947][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.673194][T10328] loop1: detected capacity change from 128 to 1 [ 380.883175][T10329] futex_wake_op: syz.2.1635 tries to shift op by 144; fix this program [ 380.900216][T10329] futex_wake_op: syz.2.1635 tries to shift op by 144; fix this program [ 381.651366][T10350] loop2: detected capacity change from 0 to 512 [ 381.665114][T10351] loop1: detected capacity change from 0 to 2048 [ 381.766461][T10350] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 381.793123][T10351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.900149][T10350] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 382.044130][T10350] __quota_error: 23 callbacks suppressed [ 382.044148][T10350] Quota error (device loop2): write_blk: dquota write failed [ 382.122671][T10350] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 382.137457][T10363] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 382.181618][T10363] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 382.195027][T10350] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1644: Failed to acquire dquot type 0 [ 382.232261][T10363] EXT4-fs (loop1): This should not happen!! Data will be lost [ 382.232261][T10363] [ 382.262670][T10350] EXT4-fs (loop2): 1 truncate cleaned up [ 382.269689][T10350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.312622][T10363] EXT4-fs (loop1): Total free blocks count 0 [ 382.327419][T10363] EXT4-fs (loop1): Free/Dirty block details [ 382.382477][T10363] EXT4-fs (loop1): free_blocks=66060288 [ 382.407196][T10363] EXT4-fs (loop1): dirty_blocks=32 [ 382.415202][T10363] EXT4-fs (loop1): Block reservation details [ 382.449385][T10363] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 382.488953][ T2949] hsr_slave_0: left promiscuous mode [ 382.523804][T10350] Quota error (device loop2): write_blk: dquota write failed [ 382.531319][T10350] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 382.577936][T10350] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1644: Failed to acquire dquot type 0 [ 382.589602][ T2949] hsr_slave_1: left promiscuous mode [ 382.599782][ T2949] batman_adv: batadv0: Interface deactivated: dummy0 [ 382.609393][ T2949] batman_adv: batadv0: Removing interface: dummy0 [ 382.633768][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.643287][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.644486][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.660707][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.669494][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.683172][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.690363][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.699394][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.707596][ T2949] bridge_slave_1: left allmulticast mode [ 382.713562][ T2949] bridge_slave_1: left promiscuous mode [ 382.721940][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.730700][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 382.738924][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.750517][ T2949] bridge_slave_0: left allmulticast mode [ 382.756590][ T2949] bridge_slave_0: left promiscuous mode [ 382.762989][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.788491][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.909328][ T2949] veth1_macvtap: left promiscuous mode [ 382.926414][ T2949] veth0_macvtap: left promiscuous mode [ 382.939974][ T2949] veth1_vlan: left promiscuous mode [ 382.958944][ T2949] veth0_vlan: left promiscuous mode [ 383.165700][ T1128] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 384.944558][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.972438][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.012453][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.032009][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.039636][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 385.046930][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.635370][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 385.803221][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.876284][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.604773][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.614004][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.628570][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.652304][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.712466][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 387.741401][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.849830][ T2949] bond0 (unregistering): Released all slaves [ 388.184752][T10381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1649'. [ 390.605081][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 390.616065][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 390.624847][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 390.652323][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 390.664579][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 390.674625][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 391.117708][T10444] loop1: detected capacity change from 0 to 512 [ 391.187016][T10444] EXT4-fs (loop1): orphan cleanup on readonly fs [ 391.228741][T10444] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1667: bad orphan inode 16 [ 391.332215][T10444] ext4_test_bit(bit=15, block=18) = 1 [ 391.355287][T10444] is_bad_inode(inode)=0 [ 391.362161][T10444] NEXT_ORPHAN(inode)=83886080 [ 391.386812][T10444] max_ino=32 [ 391.390060][T10444] i_nlink=0 [ 391.433101][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 391.452259][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 391.493526][T10444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.591808][T10449] loop4: detected capacity change from 0 to 128 [ 391.623688][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.662525][T10449] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 391.716616][T10449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.130350][T10455] loop4: detected capacity change from 0 to 8 [ 392.445323][T10461] loop1: detected capacity change from 0 to 256 [ 392.470295][T10461] exfat: Deprecated parameter 'namecase' [ 392.541347][T10461] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 392.635914][T10464] loop4: detected capacity change from 0 to 16 [ 392.696194][T10464] erofs: (device loop4): mounted with root inode @ nid 36. [ 392.733892][T10464] syz.4.1673: attempt to access beyond end of device [ 392.733892][T10464] loop4: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 392.772792][T10464] syz.4.1673: attempt to access beyond end of device [ 392.772792][T10464] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 392.808542][ T28] audit: type=1800 audit(1791728024.324:343): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1673" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 392.890530][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.901187][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.909328][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.917893][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.928691][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 392.939616][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 393.410935][T10471] futex_wake_op: syz.2.1669 tries to shift op by 144; fix this program [ 393.422457][T10471] futex_wake_op: syz.2.1669 tries to shift op by 144; fix this program [ 395.384233][T10503] xt_hashlimit: max too large, truncated to 1048576 [ 395.485442][T10503] loop1: detected capacity change from 0 to 512 [ 395.502481][T10503] EXT4-fs: Ignoring removed nobh option [ 395.509096][T10503] EXT4-fs: user quota file already specified [ 396.123454][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 396.159347][T10334] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 397.778124][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 397.788419][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 397.797361][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 397.818665][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 397.827109][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 397.834538][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 398.425932][T10514] loop4: detected capacity change from 0 to 32768 [ 398.526865][T10514] loop4: p1 p3 < > [ 398.988756][T10261] udevd[10261]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 399.002690][T10334] udevd[10334]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 399.782494][ T9] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 399.810978][T10531] futex_wake_op: syz.2.1687 tries to shift op by 144; fix this program [ 399.839921][T10531] futex_wake_op: syz.2.1687 tries to shift op by 144; fix this program [ 399.849655][T10537] loop1: detected capacity change from 0 to 1024 [ 399.927846][T10334] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.960630][T10537] syz_tun: entered allmulticast mode [ 399.994154][ T9] usb 5-1: config 6 has an invalid interface number: 38 but max is 0 [ 400.012759][ T9] usb 5-1: config 6 has no interface number 0 [ 400.034263][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.043872][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.053044][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.060744][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.068821][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 400.076097][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.092301][ T9] usb 5-1: config 6 interface 38 has no altsetting 0 [ 400.107180][ T9] usb 5-1: string descriptor 0 read error: -22 [ 400.118884][ T9] usb 5-1: New USB device found, idVendor=7392, idProduct=b811, bcdDevice=ef.15 [ 400.135228][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.583715][ T27] usb 5-1: USB disconnect, device number 7 [ 402.591594][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.601008][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.609061][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.623856][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.631606][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 402.639395][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.865154][T10567] ip_tables: iptables: counters copy to user failed while replacing table [ 403.135665][T10563] loop4: detected capacity change from 0 to 32768 [ 403.194167][T10563] loop4: p1 p3 < > [ 403.334413][T10261] udevd[10261]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 403.335943][T10334] udevd[10334]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 406.012182][T10583] futex_wake_op: syz.1.1700 tries to shift op by 144; fix this program [ 406.042554][T10583] futex_wake_op: syz.1.1700 tries to shift op by 144; fix this program [ 406.135174][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.145076][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.153433][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 406.162030][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 406.183290][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 406.190552][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 406.539995][T10593] loop1: detected capacity change from 0 to 128 [ 406.584411][T10593] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 408.222497][ T28] audit: type=1326 audit(1791728039.734:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 408.240223][T10602] loop2: detected capacity change from 0 to 2048 [ 408.295253][ T28] audit: type=1326 audit(1791728039.734:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 408.327845][T10600] loop1: detected capacity change from 0 to 1024 [ 408.350931][ T28] audit: type=1326 audit(1791728039.774:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 408.356629][T10602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.378554][ T28] audit: type=1326 audit(1791728039.774:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 408.389266][T10600] EXT4-fs: Ignoring removed orlov option [ 408.412706][ T28] audit: type=1326 audit(1791728039.774:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 408.469676][ T28] audit: type=1326 audit(1791728039.784:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f39d8f9e1d9 code=0x7ffc0000 [ 408.512947][ T28] audit: type=1326 audit(1791728039.784:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f39d8f9df42 code=0x7ffc0000 [ 408.567677][ T28] audit: type=1326 audit(1791728039.784:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f39d8f5ea0e code=0x7ffc0000 [ 408.594334][T10608] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 408.612753][T10608] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 408.626617][ T28] audit: type=1326 audit(1791728039.804:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f39d8f9e007 code=0x7ffc0000 [ 408.677059][T10608] EXT4-fs (loop2): This should not happen!! Data will be lost [ 408.677059][T10608] [ 408.693942][T10600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.522678][T10608] EXT4-fs (loop2): Total free blocks count 0 [ 409.528731][T10608] EXT4-fs (loop2): Free/Dirty block details [ 409.535040][T10608] EXT4-fs (loop2): free_blocks=66060288 [ 409.540632][T10608] EXT4-fs (loop2): dirty_blocks=32 [ 409.545946][T10608] EXT4-fs (loop2): Block reservation details [ 409.551961][T10608] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 409.558271][ T28] audit: type=1326 audit(1791728039.804:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39d8f5ea0e code=0x7ffc0000 [ 409.653842][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.672372][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.681171][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.690729][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.698718][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 409.706750][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.758771][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.141883][ T1128] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 411.561491][T10627] loop4: detected capacity change from 0 to 128 [ 411.587035][T10627] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 411.823100][T10634] loop2: detected capacity change from 0 to 2048 [ 411.845255][T10634] EXT4-fs: Ignoring removed i_version option [ 412.022916][T10634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.175460][T10634] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.379299][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.463296][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.479395][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.492406][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.545055][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.563113][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 413.570731][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.798021][T10653] loop2: detected capacity change from 0 to 1024 [ 413.824074][T10653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 413.862371][T10653] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 413.965269][T10653] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.1721: lblock 2 mapped to illegal pblock 2 (length 1) [ 414.053686][T10653] __quota_error: 15 callbacks suppressed [ 414.053697][T10653] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 414.172395][T10653] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.1721: lblock 0 mapped to illegal pblock 48 (length 1) [ 414.202616][T10653] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 414.217917][T10653] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1721: Failed to acquire dquot type 0 [ 414.245490][T10653] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 414.279335][T10653] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1721: mark_inode_dirty error [ 414.312552][T10653] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 414.342494][T10653] EXT4-fs (loop2): 1 orphan inode deleted [ 414.350154][T10653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.366084][ T1315] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 414.472347][ T1315] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 414.504015][ T1315] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 414.504044][T10653] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.1721: Invalid inode table block 1 in block_group 0 [ 414.582891][T10653] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 414.756301][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.796900][ T43] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 414.833610][ T43] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 414.862376][ T43] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 414.909505][ T5768] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 414.929167][ T5768] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 414.962320][ T5768] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 415.997195][T10664] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.006784][T10663] loop4: detected capacity change from 0 to 128 [ 416.014378][T10663] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 416.217134][ T28] audit: type=1326 audit(1791728047.724:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.4.1727" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 416.302505][ T28] audit: type=1326 audit(1791728047.724:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.4.1727" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 416.382379][ T28] audit: type=1326 audit(1791728047.734:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.4.1727" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 416.472434][ T28] audit: type=1326 audit(1791728047.734:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.4.1727" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 416.537101][ T28] audit: type=1326 audit(1791728047.734:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.4.1727" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 416.570488][ T28] audit: type=1326 audit(1791728047.734:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.4.1727" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df619e1d9 code=0x7ffc0000 [ 416.648494][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.776517][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.793447][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.806588][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.815756][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 416.824065][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.513656][T10694] loop2: detected capacity change from 0 to 128 [ 419.525168][T10694] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 419.585356][T10694] 9pnet_fd: Insufficient options for proto=fd [ 419.599880][T10697] loop1: detected capacity change from 0 to 512 [ 419.614619][T10697] EXT4-fs: Ignoring removed nomblk_io_submit option [ 419.632286][T10697] EXT4-fs: inline encryption not supported [ 419.662455][T10697] EXT4-fs: Ignoring removed oldalloc option [ 419.688977][T10697] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 419.757947][T10697] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 419.766057][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 419.766070][ T28] audit: type=1800 audit(1791728051.264:377): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1734" name="UDC" dev="configfs" ino=27045 res=0 errno=0 [ 419.807336][T10697] udc dummy_udc.0: failed to start g1: -19 [ 419.839436][T10697] UDC core: g1: couldn't find an available UDC or it's busy [ 419.896190][T10704] xfrm0: left promiscuous mode [ 419.930217][T10707] loop4: detected capacity change from 0 to 2048 [ 419.986855][T10707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.012502][T10707] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.102991][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.106312][T10707] fs-verity: sha512 using implementation "sha512-avx2" [ 420.123631][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.138098][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.146985][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.154753][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 420.164118][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 420.287370][ T9679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.644324][T10726] loop2: detected capacity change from 0 to 32768 [ 421.713309][T10726] loop2: p1 p3 < > [ 422.039655][T10261] udevd[10261]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 422.054369][T10334] udevd[10334]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 423.047837][T10734] loop1: detected capacity change from 0 to 512 [ 423.131715][T10734] EXT4-fs (loop1): 1 orphan inode deleted [ 423.143422][ T1315] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 423.173560][T10734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.186432][ T1315] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 423.199383][T10734] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.244202][ T28] audit: type=1804 audit(1791728054.764:378): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1744" name="/newroot/445/file1/file2" dev="loop1" ino=16 res=1 errno=0 [ 423.324816][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.443851][T10743] loop2: detected capacity change from 0 to 1024 [ 423.461623][T10743] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 423.487963][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 423.501887][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 423.510194][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 423.521154][T10745] loop1: detected capacity change from 0 to 512 [ 423.529955][T10745] ext4: Unknown parameter 'fsmagic' [ 423.532189][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 423.553852][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 423.561636][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.596013][T10743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.620317][T10743] EXT4-fs (loop2): shut down requested (0) Oct 11 14:14:15 syzkaller kern.alert kernel: [ 423.620317][T10743] EXT4-fs (loop2): shut down requested (0) [ 423.773704][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.480821][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.490508][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 427.498882][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 427.509040][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 427.517953][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 427.525722][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 427.868464][T10767] loop4: detected capacity change from 0 to 32768 [ 427.919008][T10767] loop4: p1 p3 < > [ 427.962375][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 428.162387][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 428.170338][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 428.209821][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.230399][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 428.249821][ T9] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 428.267805][T10776] udevd[10776]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 428.274922][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 428.278744][T10773] udevd[10773]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 428.298468][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.319256][ T9] usb 3-1: Product: syz [ 428.333739][ T9] usb 3-1: Manufacturer: syz [ 428.338378][ T9] usb 3-1: SerialNumber: syz [ 428.662418][T10778] loop2: detected capacity change from 0 to 16 [ 428.777052][T10778] erofs: Unknown parameter './sys' [ 429.752356][ T9] usb 3-1: unit 37 not found! [ 429.757099][ T9] usb 3-1: unit 0 not found! [ 429.783583][ T9] usb 3-1: USB disconnect, device number 8 [ 429.820864][T10776] udevd[10776]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.173144][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 431.182429][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 431.191319][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 431.200319][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 431.215728][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 431.223135][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 431.360215][T10816] loop4: detected capacity change from 0 to 512 [ 431.446373][T10776] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.951460][T10818] loop1: detected capacity change from 0 to 32768 [ 431.993961][T10818] loop1: p1 p3 < > [ 432.150623][T10776] udevd[10776]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 432.150925][T10783] udevd[10783]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 433.735598][T10825] netlink: 'syz.1.1772': attribute type 3 has an invalid length. [ 434.603022][T10825] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1772'. [ 434.918815][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 434.934660][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 434.944146][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 434.957934][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 434.966146][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 434.982377][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.050662][T10838] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1778'. [ 437.751899][T10847] batman_adv: batadv0: Interface deactivated: syz_tun [ 437.813897][T10847] syz_tun (unregistering): left allmulticast mode [ 437.821070][T10847] batman_adv: batadv0: Removing interface: syz_tun [ 438.056995][T10855] loop2: detected capacity change from 0 to 256 [ 438.159567][T10855] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 439.314368][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.326771][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.345850][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.355148][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.366563][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 439.374145][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.643670][T10870] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1790'. [ 439.821041][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.829841][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.838119][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.851371][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.862606][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 439.869911][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.127462][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.134219][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=1629 state=3 status=67 (errno 9: Bad file descriptor) [ 440.792390][ T5768] batman_adv: batadv0: Interface deactivated: syz_tun [ 441.093185][ T5768] batman_adv: batadv0: Removing interface: syz_tun [ 441.778908][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.911509][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.021355][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.097715][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.022027][ T11] hsr_slave_0: left promiscuous mode [ 443.028277][ T11] hsr_slave_1: left promiscuous mode [ 443.035495][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.045862][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.053925][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.061324][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.070336][ T11] bridge_slave_1: left allmulticast mode [ 443.076066][ T11] bridge_slave_1: left promiscuous mode [ 443.081727][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.091485][ T11] bridge_slave_0: left allmulticast mode [ 443.097470][ T11] bridge_slave_0: left promiscuous mode [ 443.103380][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.128069][ T11] veth1_macvtap: left promiscuous mode [ 443.133800][ T11] veth0_macvtap: left promiscuous mode [ 443.139377][ T11] veth1_vlan: left promiscuous mode [ 443.145334][ T11] veth0_vlan: left promiscuous mode [ 443.659861][ T11] team0 (unregistering): Port device team_slave_1 removed [ 443.704922][ T11] team0 (unregistering): Port device team_slave_0 removed [ 443.752596][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.804667][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.126988][ T11] bond0 (unregistering): Released all slaves [ 450.416507][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.507440][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.585136][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0