last executing test programs:

3m38.407879618s ago: executing program 1 (id=81):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}})
syz_usb_disconnect(r0)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8f, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x4, 0x10, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x8, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5409, 0x1, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x1, 0x80, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x6, 0x9, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x3, 0x9}}}}}}}}]}}, 0x0)

3m35.794995411s ago: executing program 1 (id=102):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
writev(r0, &(0x7f0000001480)=[{&(0x7f0000000140)="a4", 0x1}], 0x1)

3m35.686294127s ago: executing program 1 (id=105):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x3, @remote, 0xc95f}}}, 0x84)

3m35.613919088s ago: executing program 1 (id=106):
socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
write$cgroup_pid(r0, &(0x7f00000002c0), 0x12)

3m35.405097652s ago: executing program 1 (id=112):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd28, 0x255fdbfd, {0x0, 0x0, 0x0, r1, {0xfffd, 0x7}, {0x0, 0xfff3}, {0xfff1, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x8, 0x0, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045005}, 0x0)

3m35.115700724s ago: executing program 1 (id=120):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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")
truncate(&(0x7f0000000040)='./file2\x00', 0xffff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x88000, 0x15)

3m35.033138894s ago: executing program 32 (id=120):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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")
truncate(&(0x7f0000000040)='./file2\x00', 0xffff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x88000, 0x15)

3m32.145904553s ago: executing program 2 (id=167):
r0 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffef, 0x5, 0x1, 0x48, 0x1, 0xfb}]})
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250)
write(r0, &(0x7f0000000180)='p:s/p .', 0x7)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000000)={0x7f, 0xfffffffffffffff9, 0x1a, 0x6, 0x0, 0x0, 0x8})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff)
syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40240, 0x0)
ioctl$RTC_ALM_SET(r2, 0x40247007, 0x0)

3m32.109932592s ago: executing program 2 (id=169):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00', 0x1)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000840)=0x3, 0x9, 0x0)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000ec0)=0x9, 0x7, 0x1)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}})

3m32.046953839s ago: executing program 2 (id=170):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

3m31.998083513s ago: executing program 2 (id=172):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)
open(0x0, 0x400141042, 0x2a)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

3m31.844203695s ago: executing program 2 (id=173):
r0 = fanotify_init(0xf00, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000380)='./file6\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], 0x1, 0x6af, &(0x7f0000003180)="$eJzs3ctrHPcdAPDvjFYrrQuOktiJWwIVMaSlorYeyK16idtD0SGU4B5CSy+LvY6F10qQlCKb0qrvaw/5A9KDDoWcCr0b0tJTm1uuOpVAoZecdFOZ2ZndlVa71trSru18PjA7v5nfc77z2J0RYgL40lqdi8rDSGJ17q3tbHlvd6m5t7s0VWQ3IyJLpxGV1iyS9Yjkk4jr0Zriq9nKonzSr58P11ZufPbF3uetpUox5eXTQfVOZqeYYjYiJop5r8nHau9m3/YGq7dTSXsLs4BdLgMH43bQY2eY6k943gJPg6T1vdljJuJcREwXvwOiuDqkox3d6RvqKgcAAADPqBf2Yz+24/y4xwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPkuL9/0kxpWV6NpLy/f+VYl2mGhE30jGPeXhJO/VwrOMAAAAAAAAAgNPx9f3Yj+04Xy4ftP40Xsk/L+SfX4kPYjMasRFXYjvqsRVbsRELETHT1VB1u761tbEQrz+y5uKxNRdHsbUAAAAAAAAA8Nz6Tax2/v4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPgyRiojXLpwtleibSSkRMR0Q1K7cT8WmZfkYkZaLWtfLheMYCAAAAj236uJWf/mNgnRf2Yz+243y5fJDk9/yv5PfL0/FBrMdWrMVWNKMRt4p76OyuP93bXWru7S7d29tdyjv+2UFLq53v/2+ooectRuvZw/E9X8pL1OJ2rOVrrsTNfDC3Is1rZi4V42lPhzv5dTam2puFE47sVjHPOvtT91OE05YOW2EmrzTZjsh8MbasoRcHR+KRe6cysKeFSNtPfi4M6KncpGTImJ8r60XEH47E/M3//OUnJ2zmDLQjkUYeicWuo++VdhSmjq/8jb99/M6d5vrdO7c3587sMBqVo8fEUlckXh189D3lkagMWX6+faS3NmU1fhg/jrmYjbdjI9bi55EdD40oroxRL8plnzNdUYroidT1Q0tvP2ok1WK/tK6iaVxs5/SOqR5b0YjZmMpT9Xg9r3s+1iKJ9+JWNOJaXGufesuxHCtde/hi3z2cV8ivtOlwZ/3lb3ZCGH888ph2oH+etODwWl+pWVxf7Ipr9zV3Js/rXtOJ0ksn+D4a8tpY+VqRyPr4bT7/6VPyEP5oJBa6IvHy4Ej8OT83Npvrdzfu1N/v0/7OkeU3Jjvp35/lN/PQsh3yUkwXV5LDR0eW93L7KnM4XtXiLy6tvLQn72KelyTlmfqjrjP1WizGQnynOFOrxW+43pYW87xXe/MmypFf6so79Hsr3vvXeOIJwJDOfetctfbf2r9rH9V+V7tTe2v6B1PfnXqtGpN/n/xeZX7ijfS15K/xUfyyc/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vs37D+7Wm83GxvGJtH/W6SaS4kU+/cpUohan1VfxwsJfdWVNxllv4P0H1d5N3jn1vmJE++vJEuWbq560nXeuj2DMExGjjGrMHHcWTJ1SxHoT2eaVayaik1V0eOzLRYHnwdWte+9f3bz/4Ntr9+rvNt5trE8uL6/MryxfW7p6e63ZmG99jnuUwFno/B7oV+Lj0Q4IAAAAAAAAAAAAeKRR/FdDV3ezY9xUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bm1OheVyUhiYf7KfLa8t7vUzKYy3SlZiYg0jUh+EZF8EnE9WlPMdDWX9Ovnw7WVG599sfd5p61KWT4dVK9UHZi7U0wxGxETxXxgGwcHJ27vZr/2Tixpb2EWsMtl4GDc/h8AAP//ZlAA0Q==")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0)

3m31.526999675s ago: executing program 2 (id=175):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0)
ftruncate(r1, 0x2022ad)
fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

3m31.459439081s ago: executing program 33 (id=175):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0)
ftruncate(r1, 0x2022ad)
fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1m37.565298075s ago: executing program 0 (id=1219):
setns(0xc9, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="1100"], 0xa)

1m37.441840913s ago: executing program 0 (id=1222):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000010b40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250000000008000100", @ANYRES32, @ANYBLOB="0c00030003000000000000000800020000000000060006"], 0x40}, 0x1, 0x0, 0x0, 0x40081}, 0x4004800)

1m37.317028679s ago: executing program 0 (id=1224):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'proto=tcp'}]})

1m37.187384738s ago: executing program 0 (id=1227):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0)

1m37.066021145s ago: executing program 0 (id=1228):
r0 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5786dd6c370c8900082b0000000000000000000023000000000000fe8000000000000000000000000000aaff"], 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[], 0x0)
clock_gettime(0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000008080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

1m37.042044331s ago: executing program 0 (id=1230):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50)
r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={<r8=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r8}}, 0x48)

1m21.942612642s ago: executing program 34 (id=1230):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50)
r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={<r8=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r8}}, 0x48)

4.086625322s ago: executing program 5 (id=1996):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xfffffffffffffffe})

3.761625019s ago: executing program 3 (id=1998):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./file2\x00', 0x200000, &(0x7f0000000900)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'ascii'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@nobarrier}, {@nobarrier}]}, 0xfe, 0x5ea, &(0x7f0000002f00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

3.533830185s ago: executing program 3 (id=1999):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0xffff, @private1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0)

3.346933666s ago: executing program 3 (id=2000):
syz_emit_ethernet(0x146, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x110, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x21b7, "020000000400000126000400"}, {0x18, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x18, 0x13, "7c5fedeead5d05b87f9a168ce9fa5053c7dba3f0bfbdedf001ccf4f4c7e10fdfa608dbd75df7cd7eeab451ca0a9ee0f0146904f6d1d709ba386b75cb6cb259f3cf09c554b9ca2ceafb4e1735936011a5fb6caedf2de4d3d66ef12adef12a2e51ee8dbcc44a35c94addd32e245f8bb0ef39b811d2b15fbba865ede9c4b62806d93140e62eec2ca5a8c75f5cc4f8ed50c13bb26c028a5c"}]}}}}}}, 0x0)

3.241574341s ago: executing program 3 (id=2001):
r0 = syz_open_dev$vim2m(&(0x7f00000005c0), 0xca0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x2, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0xfe, 0x9, 0x0, "6a77ec24"}, 0x0, 0x1, {0x0}})

3.115670429s ago: executing program 5 (id=2002):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1f, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0x5980]}})
fallocate(r0, 0x11, 0x0, 0x5345)

2.922295329s ago: executing program 3 (id=2003):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x79)
open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000280)='./file0/file0\x00')
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
removexattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='os'])

2.921872169s ago: executing program 5 (id=2004):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './cgroup/../file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
rmdir(&(0x7f0000000140)='./cgroup/../file0\x00')
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, 0xffffffffffffffff, 0xcd2e8000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r4, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
recvmmsg(r5, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x6c2}], 0x3, 0x20, 0x0)

1.976507273s ago: executing program 4 (id=2011):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)={@val={0xa, 0x806}, @void, @eth={@random="000000000400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "e71366", 0x9, 0x11, 0x1, @remote, @loopback, {[], {0x4f19, 0x4e20, 0x9, 0x0, @opaque='\x00'}}}}}}}, 0x43)

1.801162877s ago: executing program 3 (id=2012):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
fcntl$setlease(r1, 0x400, 0x2)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100))
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x20004, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
rmdir(0x0)
syz_clone3(0x0, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x27}, 0x1, "bef35e41cc41c8fb2f439801d1848cb0b46f8926a174b69028ad8b7d8f46f71f", 0x3c, 0x1007, 0xfff, 0x1}, 0x3c)

1.111386373s ago: executing program 4 (id=2013):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000005ad48c0a078d037", @ANYRES32=0x1], 0x50)

1.039691168s ago: executing program 5 (id=2014):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200080d4)
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

896.899557ms ago: executing program 4 (id=2015):
r0 = socket$inet(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1, 0x174, &(0x7f0000000240)="$eJzs281uElEYgOFvAH/iysSdcWfV+lMGCpou9VKadmwap2qsmzYu9Aq8Bq/M3oALb0BMR8BEGCaRyAnyPKsvvEzmsDjM2UwAm6vzPLLIYutyvnP95udbWeoVASsySnz/HyMgnfZF6hUAaXx7EXEREV+/fziI9tbM8/myf5z01r3Z/inidmfcs/vx4I8++hLVZ7/69tzrb0z7w7l9++7k/o/icTyJnehGHr3oj/vh9PrhkqcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZVFt2mvvALrXh5XBa92n6l6v3afrXquw19UNuvVb178KY8XLRMYI7Wkvu/3bD/Ow37H0jn9Oz81X5ZFu8MBoNhOqT+ZwL+tfz9ydv89Ox85/hk/6g4Kl4P+8Nne4PB3tNeXp3s88Xne2B9/X7op14JAAAAAAAAAPC3dqP+3RoAAOD/sorXiVL/RgAAAAAAAAAAAAAAWHc/AwAA//8c7qwa")
socket$inet_sctp(0x2, 0x5, 0x84)
fallocate(0xffffffffffffffff, 0x11, 0x0, 0x6)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x48040, 0x6ab858183a7ef6ba)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

776.989466ms ago: executing program 5 (id=2016):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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")
r0 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x3)

647.003221ms ago: executing program 4 (id=2017):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f00000009c0)="fd", 0x1, 0x20000081, &(0x7f0000000000)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)

586.798103ms ago: executing program 5 (id=2018):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000))
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
munlockall()
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3], 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)

336.715964ms ago: executing program 4 (id=2019):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdb7b, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

0s ago: executing program 4 (id=2020):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x198321, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)

kernel console output (not intermixed with test programs):

00000000000000
[   84.764895][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.764903][ T6949] R13: 00007fd2b8026038 R14: 00007fd2b8025fa0 R15: 00007ffd1c9dce38
[   84.764922][ T6949]  </TASK>
[   84.764928][ T6949] Mem-Info:
[   84.911511][ T6949] active_anon:23093 inactive_anon:0 isolated_anon:0
[   84.911511][ T6949]  active_file:0 inactive_file:57838 isolated_file:0
[   84.911511][ T6949]  unevictable:1000 dirty:395 writeback:0
[   84.911511][ T6949]  slab_reclaimable:10464 slab_unreclaimable:81746
[   84.911511][ T6949]  mapped:21935 shmem:18205 pagetables:1217
[   84.911511][ T6949]  sec_pagetables:0 bounce:0
[   84.911511][ T6949]  kernel_misc_reclaimable:0
[   84.911511][ T6949]  free:1105224 free_pcp:21011 free_cma:0
[   84.930170][ T6949] Node 0 active_anon:67248kB inactive_anon:0kB active_file:0kB inactive_file:71108kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:69876kB dirty:276kB writeback:0kB shmem:57628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4032kB pagetables:3068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   84.941548][ T6949] Node 1 active_anon:25124kB inactive_anon:0kB active_file:0kB inactive_file:160244kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:17864kB dirty:1304kB writeback:0kB shmem:15192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8288kB pagetables:1800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   84.955179][ T6949] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.967049][ T6949] lowmem_reserve[]: 0 1582 2112 2112 2112
[   84.969427][ T6949] Node 0 DMA32 free:1461336kB boost:0kB min:24976kB low:31220kB high:37464kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49724kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1620928kB mlocked:0kB bounce:0kB free_pcp:36132kB local_pcp:26208kB free_cma:0kB
[   84.982107][ T6949] lowmem_reserve[]: 0 0 530 530 530
[   84.984381][ T6949] Node 0 Normal free:16076kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17524kB inactive_anon:0kB active_file:0kB inactive_file:71108kB unevictable:2000kB writepending:276kB zspages:0kB present:1572868kB managed:542748kB mlocked:0kB bounce:0kB free_pcp:6424kB local_pcp:6352kB free_cma:0kB
[   84.997393][ T6949] lowmem_reserve[]: 0 0 0 0 0
[   84.999388][ T6949] Node 1 Normal free:2928124kB boost:0kB min:56380kB low:70472kB high:84564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25124kB inactive_anon:0kB active_file:0kB inactive_file:160244kB unevictable:2000kB writepending:1304kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:41776kB local_pcp:29476kB free_cma:0kB
[   85.013820][ T6949] lowmem_reserve[]: 0 0 0 0 0
[   85.015926][ T6949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   85.021022][ T6949] Node 0 DMA32: 0*4kB 3*8kB (U) 2*16kB (U) 1*32kB (U) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 1*2048kB (M) 356*4096kB (M) = 1461336kB
[   85.027584][ T6949] Node 0 Normal: 119*4kB (UME) 120*8kB (U) 11*16kB (UE) 88*32kB (UE) 4*64kB (UE) 35*128kB (U) 7*256kB (U) 6*512kB (UE) 2*1024kB (UE) 0*2048kB 0*4096kB = 16076kB
[   85.044053][ T6949] Node 1 Normal: 673*4kB (UM) 333*8kB (UM) 241*16kB (UME) 592*32kB (UME) 168*64kB (UME) 68*128kB (UME) 28*256kB (UM) 10*512kB (UME) 5*1024kB (ME) 4*2048kB (UM) 697*4096kB (UM) = 2928124kB
[   85.054212][ T6949] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   85.065971][ T6949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   85.069726][ T6949] 76032 total pagecache pages
[   85.071647][ T6949] 0 pages in swap cache
[   85.073326][ T6949] Free swap  = 124996kB
[   85.074992][ T6949] Total swap = 124996kB
[   85.085939][ T6949] 1834877 pages RAM
[   85.087537][ T6949] 0 pages HighMem/MovableOnly
[   85.089413][ T6949] 391447 pages reserved
[   85.091023][ T6949] 0 pages cma reserved
[   85.275618][ T6962] loop0: detected capacity change from 0 to 512
[   85.296664][ T6962] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   85.317926][ T6962] EXT4-fs (loop0): 1 truncate cleaned up
[   85.324928][ T6962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.372964][ T5596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.668297][ T6991] loop0: detected capacity change from 0 to 8
[   85.679566][ T6991] SQUASHFS error: lzo decompression failed, data probably corrupt
[   85.682173][ T6991] SQUASHFS error: Failed to read block 0x91: -5
[   85.684737][ T6991] SQUASHFS error: Unable to read metadata cache entry [8f]
[   85.690671][ T6991] SQUASHFS error: Unable to read inode 0x11f
[   86.266001][ T7017] hugetlbfs: syz.0.460 (7017): Using mlock ulimits for SHM_HUGETLB is obsolete
[   86.509337][ T7025] process 'syz.3.463' launched './file2' with NULL argv: empty string added
[   87.224852][ T7031] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[   87.453720][ T7042] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0
[   87.815367][ T7039] loop0: detected capacity change from 0 to 32768
[   87.903063][ T7039] jfs_lookup: iget failed on inum 4
[   87.912732][ T7039] jfs_lookup: iget failed on inum 4
[   87.930476][ T7048] sctp: [Deprecated]: syz.3.474 (pid 7048) Use of int in maxseg socket option.
[   87.930476][ T7048] Use struct sctp_assoc_value instead
[   88.535952][ T6490] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   88.695917][ T6490] usb 1-1: Using ep0 maxpacket: 32
[   88.703294][ T6490] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[   88.710927][ T6490] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[   88.716140][ T6490] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 3
[   88.727839][ T6490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.730451][ T6490] usb 1-1: Product: syz
[   88.731755][ T6490] usb 1-1: Manufacturer: syz
[   88.735912][ T6490] usb 1-1: SerialNumber: syz
[   88.745817][ T6490] usb 1-1: Fast Track Pro config OK
[   88.752323][ T6490] usb 1-1: cannot find UAC_HEADER
[   88.839708][ T6490] snd-usb-audio 1-1:6.0: probe with driver snd-usb-audio failed with error -22
[   88.848000][ T7070] loop3: detected capacity change from 0 to 1764
[   88.905213][ T5592] udevd[5592]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   88.951258][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.485'.
[   88.971153][ T6490] usb 1-1: USB disconnect, device number 7
[   89.232585][ T7082] loop3: detected capacity change from 0 to 4096
[   89.250685][ T7082] ntfs3(loop3): Failed to load $Extend (-22).
[   89.252945][ T7082] ntfs3(loop3): Failed to initialize $Extend.
[   89.263080][   T34] audit: type=1800 audit(1789580282.336:5): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.489" name="file2" dev="loop3" ino=31 res=0 errno=0
[   89.275269][ T5667] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   89.460317][ T5667] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[   89.468545][ T5667] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   89.477914][ T5667] usb 5-1: config 0 has no interface number 0
[   89.483773][ T5667] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   89.497948][ T5667] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.504296][ T5667] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   89.514994][ T5667] usb 5-1: config 0 interface 1 has no altsetting 0
[   89.526708][ T5667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.538585][ T5667] usb 5-1: config 0 descriptor??
[   89.857416][ T7102] ip_tables: iptables: counters copy to user failed while replacing table
[   89.911820][ T7106] netlink: 'syz.0.501': attribute type 2 has an invalid length.
[   89.927645][ T7106] netlink: 'syz.0.501': attribute type 1 has an invalid length.
[   89.943855][ T7106] loop0: detected capacity change from 0 to 1024
[   89.947666][ T7106] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   89.950962][ T7106] EXT4-fs (loop0): can't mount with both data=journal and delalloc
[   90.026843][ T7109] tmpfs: Bad value for 'mpol'
[   90.029728][ T7110] loop0: detected capacity change from 0 to 256
[   90.039207][ T7110] exfat: Deprecated parameter 'namecase'
[   90.048947][ T7110] exfat: Deprecated parameter 'utf8'
[   90.069744][ T7110] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[   90.093395][   T34] audit: type=1800 audit(1789580283.166:6): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.503" name="file1" dev="loop0" ino=1048612 res=0 errno=0
[   90.160035][ T5667] uclogic 0003:145F:0212.0001: pen parameters not found
[   90.173679][ T5667] uclogic 0003:145F:0212.0001: interface is invalid, ignoring
[   90.297457][ T7118] loop0: detected capacity change from 0 to 512
[   90.307767][ T7118] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   90.338756][ T7118] EXT4-fs (loop0): 1 truncate cleaned up
[   90.342277][ T7118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.373563][   T31] usb 5-1: USB disconnect, device number 5
[   90.403152][ T5596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.421094][ T1282] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   90.589047][ T1282] usb 4-1: Using ep0 maxpacket: 16
[   90.591987][ T1282] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   90.603550][ T1282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.611825][ T1282] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   90.621528][ T1282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.635705][ T1282] usb 4-1: Product: syz
[   90.642373][ T1282] usb 4-1: Manufacturer: syz
[   90.649479][ T1282] usb 4-1: SerialNumber: syz
[   90.692957][ T1282] usb 4-1: 0:2 : does not exist
[   90.695472][ T1282] usb 4-1: unit 6 not found!
[   90.762353][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'.
[   90.950155][ T1282] usb 4-1: USB disconnect, device number 4
[   91.061320][ T7148] loop4: detected capacity change from 0 to 128
[   91.104569][   T34] audit: type=1800 audit(1789580284.176:7): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.520" name="bus" dev="loop4" ino=1048613 res=0 errno=0
[   91.113347][ T7148] syz.4.520: attempt to access beyond end of device
[   91.113347][ T7148] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128
[   91.182964][ T7152] netlink: 'syz.0.523': attribute type 10 has an invalid length.
[   91.204671][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.208076][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.235978][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.238307][ T7152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.240718][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.242945][ T7152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.252857][ T7157] netlink: 'syz.0.523': attribute type 10 has an invalid length.
[   91.259888][ T7156] input: syz0 as /devices/virtual/input/input7
[   91.282045][ T7152] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   91.286039][ T5592] udevd[5592]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[   91.304911][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.314386][ T7157] team0: Port device bond0 added
[   91.344897][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'.
[   91.814608][ T5598] Bluetooth: hci0: Unknown advertising packet type: 0x11
[   91.814647][ T5598] Bluetooth: hci0: Unknown advertising packet type: 0x17
[   91.827662][ T5930] IPVS: starting estimator thread 0...
[   91.859854][ T7202] IPVS: sed: FWM 3 0x00000003 - no destination available
[   91.898939][    C0] IPVS: sed: FWM 3 0x00000003 - no destination available
[   91.965940][ T7201] IPVS: using max 83 ests per chain, 199200 per kthread
[   92.197802][ T7232] IPVS: length: 4096 != 24
[   92.404056][ T7251] loop4: detected capacity change from 0 to 64
[   92.499760][ T7252] Trying to free block not in datazone
[   92.682460][ T7263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'.
[   92.692598][ T7263] openvswitch: netlink: Missing key (keys=c0, expected=10000000)
[   92.729311][ T7265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.570'.
[   92.761549][ T7267] FAULT_INJECTION: forcing a failure.
[   92.761549][ T7267] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   92.767662][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: syz.3.571 Not tainted syzkaller #0 PREEMPT(full) 
[   92.767679][ T7267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.767686][ T7267] Call Trace:
[   92.767691][ T7267]  <TASK>
[   92.767696][ T7267]  dump_stack_lvl+0xe8/0x150
[   92.767717][ T7267]  should_fail_ex+0x410/0x560
[   92.767757][ T7267]  prepare_alloc_pages+0x230/0x650
[   92.767781][ T7267]  __alloc_frozen_pages_noprof+0x12f/0x380
[   92.767801][ T7267]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   92.767818][ T7267]  ? __pfx_policy_nodemask+0x10/0x10
[   92.767828][ T7267]  ? __pfx_policy_nodemask+0x10/0x10
[   92.767842][ T7267]  alloc_pages_mpol+0x212/0x390
[   92.767856][ T7267]  alloc_pages_noprof+0xb1/0x2b0
[   92.767868][ T7267]  kimage_alloc_pages+0xbe/0x3c0
[   92.767885][ T7267]  kimage_alloc_page+0xa6/0x880
[   92.767904][ T7267]  kimage_load_segment+0xbf6/0x1230
[   92.767924][ T7267]  do_kexec_load+0x637/0x7c0
[   92.767943][ T7267]  ? __pfx_do_kexec_load+0x10/0x10
[   92.767960][ T7267]  ? _copy_from_user+0x94/0xb0
[   92.767976][ T7267]  __se_sys_kexec_load+0x134/0x160
[   92.767994][ T7267]  do_syscall_64+0x166/0x520
[   92.768010][ T7267]  ? trace_irq_disable+0x3b/0x140
[   92.768025][ T7267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.768040][ T7267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.768052][ T7267] RIP: 0033:0x7f5b6559e159
[   92.768060][ T7267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.768067][ T7267] RSP: 002b:00007f5b66434028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[   92.768077][ T7267] RAX: ffffffffffffffda RBX: 00007f5b65825fa0 RCX: 00007f5b6559e159
[   92.768083][ T7267] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002
[   92.768088][ T7267] RBP: 00007f5b6563506b R08: 0000000000000000 R09: 0000000000000000
[   92.768093][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.768099][ T7267] R13: 00007f5b65826038 R14: 00007f5b65825fa0 R15: 00007ffcdd518938
[   92.768150][ T7267]  </TASK>
[   93.231215][ T7290] loop3: detected capacity change from 0 to 128
[   93.235550][ T7290] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   93.244431][ T7290] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   93.388234][ T7300] loop0: detected capacity change from 0 to 1024
[   93.405961][ T7300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.433367][ T7300] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   93.450338][ T7305] loop4: detected capacity change from 0 to 2048
[   93.458547][ T7300] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   93.477255][ T7306] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28
[   93.486896][ T7300] EXT4-fs (loop0): This should not happen!! Data will be lost
[   93.486896][ T7300] 
[   93.499074][ T7300] EXT4-fs (loop0): Total free blocks count 0
[   93.504271][ T7306] EXT4-fs (loop0): This should not happen!! Data will be lost
[   93.504271][ T7306] 
[   93.507568][ T7300] EXT4-fs (loop0): Free/Dirty block details
[   93.507619][ T7300] EXT4-fs (loop0): free_blocks=20480
[   93.507636][ T7300] EXT4-fs (loop0): dirty_blocks=80
[   93.507642][ T7300] EXT4-fs (loop0): Block reservation details
[   93.518601][ T7307] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   93.602253][ T5596] EXT4-fs warning (device loop0): ext4_evict_inode:197: inode #15: comm syz-executor: data will be lost
[   93.651340][ T7309] loop3: detected capacity change from 0 to 2048
[   93.710545][ T7315] jffs2: notice: (7315) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   93.772679][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'.
[   93.790847][ T7318] netlink: 'syz.4.594': attribute type 13 has an invalid length.
[   93.798712][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.594'.
[   94.126654][ T7347] loop4: detected capacity change from 0 to 1024
[   94.134752][ T7347] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   94.140787][ T7347] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[   94.145747][ T7347] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled
[   94.153508][ T7347] EXT4-fs (loop4): invalid journal inode
[   94.464710][ T7358] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   94.478037][ T7358] (syz.0.614,7358,0):ocfs2_read_blocks_sync:110 ERROR: status = -12
[   94.482865][ T7358] (syz.0.614,7358,0):ocfs2_get_suballoc_slot_bit:3160 ERROR: read block 8589934603 failed -12
[   94.487473][ T7358] (syz.0.614,7358,0):ocfs2_get_suballoc_slot_bit:3192 ERROR: status = -12
[   94.496648][ T7358] (syz.0.614,7358,0):ocfs2_test_inode_bit:3278 ERROR: get alloc slot and bit failed -12
[   94.501030][ T7358] (syz.0.614,7358,0):ocfs2_test_inode_bit:3323 ERROR: status = -12
[   94.503759][ T7358] (syz.0.614,7358,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[   94.543701][ T5596] ocfs2: Unmounting device (7,0) on (node local)
[   94.595963][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   94.659400][ T7376] ipt_REJECT: ECHOREPLY no longer supported.
[   94.756061][   T10] usb 5-1: Using ep0 maxpacket: 16
[   94.760437][   T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   94.766984][   T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   94.770792][   T10] usb 5-1: config 0 has no interface number 0
[   94.775962][   T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.783646][   T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.793212][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.803578][   T10] usb 5-1: config 0 descriptor??
[   94.907273][ T7387] input: syz1 as /devices/virtual/input/input8
[   94.926244][ T1282] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   95.075965][ T1282] usb 1-1: Using ep0 maxpacket: 8
[   95.079973][ T1282] usb 1-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83
[   95.087273][ T1282] usb 1-1: config 0 has an invalid interface number: 234 but max is 2
[   95.090837][ T1282] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[   95.097144][ T1282] usb 1-1: config 0 has no interface number 1
[   95.106894][ T1282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.110195][ T1282] usb 1-1: Product: syz
[   95.111556][ T1282] usb 1-1: Manufacturer: syz
[   95.116187][ T1282] usb 1-1: SerialNumber: syz
[   95.126951][ T1282] usb 1-1: config 0 descriptor??
[   95.135208][ T1282] usb 1-1: unknown number of interfaces: 2
[   95.339497][ T1282] usb 1-1: USB disconnect, device number 8
[   95.419967][   T10] uclogic 0003:28BD:0071.0002: pen parameters not found
[   95.422345][   T10] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring
[   95.630561][ T5930] usb 5-1: USB disconnect, device number 6
[   96.352593][ T7411] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 340
[   96.473335][ T7419] set_capacity_and_notify: 1 callbacks suppressed
[   96.473344][ T7419] loop4: detected capacity change from 0 to 8
[   96.507023][ T7419] cramfs: bad data blocksize 3959421443
[   96.511946][ T7419] cramfs: bad data blocksize 4294965915
[   96.513742][ T7419] cramfs: bad data blocksize 802397048
[   96.515609][ T7419] cramfs: bad data blocksize 4294742353
[   96.523558][ T7419] cramfs: bad data blocksize 3367320904
[   96.534165][ T7419] cramfs: bad data blocksize 859179931
[   96.544667][ T7419] cramfs: bad data blocksize 3436389781
[   96.549809][ T7419] cramfs: bad data blocksize 4294365136
[   96.553118][ T7419] cramfs: bad data blocksize 4294967040
[   96.554917][ T7419] cramfs: bad data blocksize 3959421443
[   96.557064][   T34] audit: type=1800 audit(1789580289.636:8): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.641" name="file2" dev="loop4" ino=268 res=0 errno=0
[   96.636022][ T7425] loop4: detected capacity change from 0 to 1024
[   96.667203][ T7428] ip_tables: iptables: counters copy to user failed while replacing table
[   96.770923][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.648'.
[   97.115929][   T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   97.266689][   T31] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[   97.272590][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.557831][   T31] usb 5-1: NFC: Reader power on cmd error 0
[   97.563247][   T31] pn533_usb 5-1:1.0: NFC: Couldn't poweron the reader (error -22)
[   97.578495][   T31] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -22
[   97.640771][   T31] usb 5-1: USB disconnect, device number 7
[   98.783706][ T7455] loop3: detected capacity change from 0 to 1024
[   98.880385][ T7457] FAULT_INJECTION: forcing a failure.
[   98.880385][ T7457] name failslab, interval 1, probability 0, space 0, times 0
[   98.897422][ T7457] CPU: 1 UID: 0 PID: 7457 Comm: syz.3.658 Not tainted syzkaller #0 PREEMPT(full) 
[   98.897435][ T7457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.897451][ T7457] Call Trace:
[   98.897455][ T7457]  <TASK>
[   98.897459][ T7457]  dump_stack_lvl+0xe8/0x150
[   98.897474][ T7457]  should_fail_ex+0x410/0x560
[   98.897486][ T7457]  should_failslab+0xa8/0x100
[   98.897500][ T7457]  kmem_cache_alloc_noprof+0xa6/0x5f0
[   98.897511][ T7457]  ? do_getname+0x2e/0x250
[   98.897523][ T7457]  ? do_getname+0x2e/0x250
[   98.897536][ T7457]  do_getname+0x2e/0x250
[   98.897548][ T7457]  __se_sys_renameat2+0x43/0x2c0
[   98.897562][ T7457]  do_syscall_64+0x166/0x520
[   98.897571][ T7457]  ? trace_irq_disable+0x3b/0x140
[   98.897581][ T7457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.897590][ T7457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.897597][ T7457] RIP: 0033:0x7f5b6559e159
[   98.897605][ T7457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.897612][ T7457] RSP: 002b:00007f5b66434028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[   98.897623][ T7457] RAX: ffffffffffffffda RBX: 00007f5b65825fa0 RCX: 00007f5b6559e159
[   98.897629][ T7457] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003
[   98.897633][ T7457] RBP: 00007f5b6563506b R08: 0000000000000005 R09: 0000000000000000
[   98.897637][ T7457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.897641][ T7457] R13: 00007f5b65826038 R14: 00007f5b65825fa0 R15: 00007ffcdd518938
[   98.897652][ T7457]  </TASK>
[   99.095312][ T7463] bond0: (slave bridge0): Releasing backup interface
[   99.100913][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.103181][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.120021][ T7463] team0: Port device bond0 removed
[   99.139651][ T7463] bridge_slave_0: left allmulticast mode
[   99.141738][ T7463] bridge_slave_0: left promiscuous mode
[   99.144491][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.174442][ T7463] bridge_slave_1: left allmulticast mode
[   99.179740][ T7463] bridge_slave_1: left promiscuous mode
[   99.181637][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.192282][ T7463] bond0: (slave bond_slave_0): Releasing backup interface
[   99.199559][ T7463] bond0: (slave bond_slave_1): Releasing backup interface
[   99.216348][ T7463] team0: Port device team_slave_0 removed
[   99.227352][ T7463] team0: Port device team_slave_1 removed
[   99.234898][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.294244][ T7463] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.311001][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.313452][ T7463] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.326373][ T7463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   99.435666][ T7478] loop4: detected capacity change from 0 to 256
[   99.438370][ T7478] exfat: Deprecated parameter 'namecase'
[   99.440185][ T7478] exfat: Deprecated parameter 'namecase'
[   99.441988][ T7478] exfat: Deprecated parameter 'utf8'
[   99.449693][ T7478] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   99.470993][   T34] audit: type=1804 audit(1789580292.546:9): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.666" name=2F6E6577726F6F742F3136322FE91F7189591E9233614B2F66696C6530 dev="loop4" ino=1048615 res=1 errno=0
[   99.538556][ T7482] loop4: detected capacity change from 0 to 512
[   99.545041][ T7482] EXT4-fs (loop4): invalid journal inode
[   99.550452][ T7482] EXT4-fs (loop4): can't get journal size
[   99.557139][ T7482] EXT4-fs (loop4): 1 truncate cleaned up
[   99.559683][ T7482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.593704][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.606022][   T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   99.633488][ T7486] loop4: detected capacity change from 0 to 16
[   99.653955][ T7486] erofs (device loop4): unsupported datalayout 7 of nid 36
[   99.776201][   T31] usb 4-1: Using ep0 maxpacket: 32
[   99.779897][   T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   99.787189][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.795938][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.801100][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.808239][   T31] usb 4-1: config 0 descriptor??
[   99.821687][   T31] hub 4-1:0.0: USB hub found
[   99.835305][ T7497] loop4: detected capacity change from 0 to 128
[  100.034345][   T31] hub 4-1:0.0: 1 port detected
[  100.698912][   T31] hub 4-1:0.0: activate --> -90
[  100.935915][ T1282] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  101.085936][ T1282] usb 1-1: Using ep0 maxpacket: 32
[  101.096175][ T1282] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  101.101204][ T1282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.111660][ T1282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.119662][ T1282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.126812][ T1282] usb 1-1: config 0 descriptor??
[  101.309809][   T31] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  101.314652][ T6490] usb 4-1: USB disconnect, device number 5
[  101.320028][   T31] usb 4-1-port1: attempt power cycle
[  101.569061][ T1282] koneplus 0003:1E7D:2D51.0003: item fetching failed at offset 4/5
[  101.577209][ T1282] koneplus 0003:1E7D:2D51.0003: parse failed
[  101.582192][ T1282] koneplus 0003:1E7D:2D51.0003: probe with driver koneplus failed with error -22
[  101.769114][   T31] usb 1-1: USB disconnect, device number 9
[  101.860661][ T7513] : entered promiscuous mode
[  101.875197][ T7513] openvswitch: : Dropping previously announced user features
[  101.976226][ T1282] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  102.178313][ T1282] usb 5-1: unable to get BOS descriptor or descriptor too short
[  102.186151][ T1282] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  102.197720][ T1282] usb 5-1: unable to read config index 0 descriptor/start: -71
[  102.201841][ T1282] usb 5-1: can't read configurations, error -71
[  103.082361][ T7543] loop4: detected capacity change from 0 to 256
[  103.270408][ T7536] loop3: detected capacity change from 0 to 32768
[  103.305750][ T7536] 
[  103.305750][ T7536]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  103.305750][ T7536] 
[  103.351998][ T7536] ERROR: (device loop3): diWrite: ixpxd invalid
[  103.351998][ T7536] 
[  103.352890][ T7547] loop0: detected capacity change from 0 to 512
[  103.382173][ T7536] ERROR: (device loop3): txCommit: 
[  103.382173][ T7536] 
[  103.390120][ T7547] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  103.411548][ T7547] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended
[  103.434446][ T7547] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.695: inode #15: comm syz.0.695: iget: illegal inode #
[  103.447413][ T6010] 
[  103.447413][ T6010]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  103.447413][ T6010] 
[  103.458192][ T6010] 
[  103.458192][ T6010]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  103.458192][ T6010] 
[  103.468658][ T7547] loop0: lost filesystem error report for type 5 error -117
[  103.473878][ T7547] EXT4-fs (loop0): Remounting filesystem read-only
[  103.479705][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  103.479715][    C0] EXT4-fs (loop0): initial error at time 1789580296: ext4_orphan_get:1399
[  103.479775][    C0] EXT4-fs (loop0): last error at time 1789580296: ext4_orphan_get:1399
[  103.526596][ T7547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.601474][ T5596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.679590][ T5598] Bluetooth: hci2: link tx timeout
[  103.682486][ T5598] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  103.688240][ T5598] Bluetooth: hci2: link tx timeout
[  103.690235][ T5598] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  103.966286][ T7562] loop4: detected capacity change from 0 to 8
[  104.016783][   T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  104.019675][ T1282] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  104.166132][   T31] usb 1-1: Using ep0 maxpacket: 16
[  104.174728][   T31] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  104.179175][   T31] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  104.183026][   T31] usb 1-1: config 1 has no interface number 0
[  104.186943][   T31] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  104.187380][ T1282] usb 4-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01
[  104.193057][   T31] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  104.193090][   T31] usb 1-1: config 1 interface 105 has no altsetting 0
[  104.194864][   T31] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  104.210775][   T31] usb 1-1: Product: syz
[  104.215558][   T31] usb 1-1: Manufacturer: syz
[  104.221003][   T31] usb 1-1: SerialNumber: syz
[  104.229061][ T7560] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  104.229174][ T1282] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  104.231538][ T7560] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  104.244792][ T7567] ip_tables: iptables: counters copy to user failed while replacing table
[  104.245978][ T1282] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0
[  104.282357][ T1282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.284976][ T1282] usb 4-1: Product: syz
[  104.297168][ T1282] usb 4-1: Manufacturer: syz
[  104.299059][ T1282] usb 4-1: SerialNumber: syz
[  104.373459][ T7571] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[  104.559122][ T1282] ipheth 4-1:1.0: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  104.570910][ T1282] ipheth 4-1:1.0: probe with driver ipheth failed with error -22
[  104.725730][ T7573] loop4: detected capacity change from 0 to 16
[  104.730280][ T7573] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  104.748989][ T7560] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  104.761802][ T7560] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  104.803208][ T5930] apple-mfi-fastcharge 4-1: USB disconnect, device number 10
[  104.969459][   T31] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  104.979932][   T31] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71
[  104.992605][   T31] usb 1-1: USB disconnect, device number 10
[  105.065393][ T5598] Bluetooth: Unknown LE signaling command 0x03
[  105.070404][ T5598] Bluetooth: Wrong link type (-22)
[  105.446475][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.719'.
[  105.748748][ T5598] Bluetooth: hci2: command 0x0406 tx timeout
[  105.923873][ T7611] FAULT_INJECTION: forcing a failure.
[  105.923873][ T7611] name failslab, interval 1, probability 0, space 0, times 0
[  105.960421][ T7611] CPU: 1 UID: 0 PID: 7611 Comm: syz.3.725 Not tainted syzkaller #0 PREEMPT(full) 
[  105.960444][ T7611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.960453][ T7611] Call Trace:
[  105.960461][ T7611]  <TASK>
[  105.960467][ T7611]  dump_stack_lvl+0xe8/0x150
[  105.960493][ T7611]  should_fail_ex+0x410/0x560
[  105.960522][ T7611]  should_failslab+0xa8/0x100
[  105.960545][ T7611]  __kmalloc_cache_node_noprof+0xaa/0x630
[  105.960564][ T7611]  ? __kasan_kmalloc+0x93/0xb0
[  105.960585][ T7611]  ? mempool_create_node_noprof+0x95/0x150
[  105.960603][ T7611]  ? mempool_create_node_noprof+0x95/0x150
[  105.960624][ T7611]  ? __pfx_mempool_alloc_slab+0x10/0x10
[  105.960643][ T7611]  mempool_create_node_noprof+0x95/0x150
[  105.960660][ T7611]  ? __pfx_mempool_free_slab+0x10/0x10
[  105.960679][ T7611]  ceph_osdc_init+0x4fa/0x900
[  105.960704][ T7611]  ceph_create_client+0x246/0x310
[  105.960724][ T7611]  ceph_get_tree+0x1ca/0x1a40
[  105.960747][ T7611]  ? apparmor_capable+0x126/0x170
[  105.960768][ T7611]  vfs_get_tree+0x92/0x2a0
[  105.960786][ T7611]  vfs_cmd_create+0xa2/0x200
[  105.960805][ T7611]  __se_sys_fsconfig+0x6b9/0x810
[  105.960826][ T7611]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  105.960841][ T7611]  ? __fget_files+0x2a/0x420
[  105.960855][ T7611]  ? rcu_is_watching+0x16/0xb0
[  105.960872][ T7611]  ? __x64_sys_fsconfig+0x20/0xc0
[  105.960891][ T7611]  do_syscall_64+0x166/0x520
[  105.960907][ T7611]  ? trace_irq_disable+0x3b/0x140
[  105.960924][ T7611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.960941][ T7611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.960955][ T7611] RIP: 0033:0x7f5b6559e159
[  105.960969][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.960980][ T7611] RSP: 002b:00007f5b66434028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  105.960994][ T7611] RAX: ffffffffffffffda RBX: 00007f5b65825fa0 RCX: 00007f5b6559e159
[  105.961002][ T7611] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  105.961009][ T7611] RBP: 00007f5b6563506b R08: 0000000000000000 R09: 0000000000000000
[  105.961018][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.961026][ T7611] R13: 00007f5b65826038 R14: 00007f5b65825fa0 R15: 00007ffcdd518938
[  105.961048][ T7611]  </TASK>
[  106.321726][ T7614] comedi comedi1: fl512: I/O base address not correctly aligned
[  106.990455][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'.
[  107.012645][ T7649] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  107.091125][ T7649] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  107.391671][ T7659] ptrace attach of "/syz-executor exec"[5596] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[  107.752850][ T7656] loop4: detected capacity change from 0 to 32768
[  107.833197][ T5598] Bluetooth: hci2: command 0x0406 tx timeout
[  108.232396][ T7679] netlink: 'syz.3.749': attribute type 29 has an invalid length.
[  109.742081][ T7733] capability: warning: `syz.0.764' uses 32-bit capabilities (legacy support in use)
[  110.705353][ T7756] loop4: detected capacity change from 0 to 512
[  110.739567][ T7758] netlink: 'syz.0.776': attribute type 10 has an invalid length.
[  110.747994][ T7758] veth0_vlan: entered allmulticast mode
[  110.765004][ T7756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.776093][ T7756] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.867670][ T7758] team0: Device veth0_vlan failed to register rx_handler
[  110.935145][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.485979][   T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  112.635952][   T31] usb 5-1: Using ep0 maxpacket: 16
[  112.642791][   T31] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  112.650258][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.654411][   T31] usb 5-1: Product: syz
[  112.655654][   T31] usb 5-1: Manufacturer: syz
[  112.660657][   T31] usb 5-1: SerialNumber: syz
[  113.990010][ T7799] FAULT_INJECTION: forcing a failure.
[  113.990010][ T7799] name failslab, interval 1, probability 0, space 0, times 0
[  113.995555][ T7799] CPU: 1 UID: 0 PID: 7799 Comm: syz.0.789 Not tainted syzkaller #0 PREEMPT(full) 
[  113.995572][ T7799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.995579][ T7799] Call Trace:
[  113.995585][ T7799]  <TASK>
[  113.995590][ T7799]  dump_stack_lvl+0xe8/0x150
[  113.995613][ T7799]  should_fail_ex+0x410/0x560
[  113.995632][ T7799]  should_failslab+0xa8/0x100
[  113.995653][ T7799]  __kmalloc_cache_noprof+0xa8/0x660
[  113.995669][ T7799]  ? __pfx_tipc_conn_lookup+0x10/0x10
[  113.995686][ T7799]  ? tipc_topsrv_queue_evt+0xeb/0x2a0
[  113.995703][ T7799]  ? tipc_topsrv_queue_evt+0xeb/0x2a0
[  113.995721][ T7799]  tipc_topsrv_queue_evt+0xeb/0x2a0
[  113.995738][ T7799]  tipc_sub_report_overlap+0x4bd/0x8b0
[  113.995752][ T7799]  tipc_nametbl_insert_publ+0xe54/0x13d0
[  113.995772][ T7799]  tipc_nametbl_publish+0xbd/0x1f0
[  113.995785][ T7799]  tipc_sk_publish+0x176/0x380
[  113.995793][ T7799]  ? __pfx_tipc_sk_publish+0x10/0x10
[  113.995823][ T7799]  ? tipc_nametbl_build_group+0x4ce/0x500
[  113.995835][ T7799]  ? tipc_nametbl_build_group+0x2e/0x500
[  113.995852][ T7799]  tipc_sk_join+0x3b3/0x6a0
[  113.995864][ T7799]  ? __pfx_tipc_sk_join+0x10/0x10
[  113.995872][ T7799]  ? tipc_setsockopt+0x731/0x9a0
[  113.995883][ T7799]  ? __local_bh_enable_ip+0xd6/0x140
[  113.995896][ T7799]  tipc_setsockopt+0x73e/0x9a0
[  113.995909][ T7799]  ? __pfx_tipc_setsockopt+0x10/0x10
[  113.995917][ T7799]  ? aa_sock_opt_perm+0x105/0x1b0
[  113.995928][ T7799]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  113.995936][ T7799]  ? __pfx_tipc_setsockopt+0x10/0x10
[  113.995945][ T7799]  do_sock_setsockopt+0x17c/0x1b0
[  113.995956][ T7799]  __x64_sys_setsockopt+0x13d/0x1b0
[  113.995967][ T7799]  do_syscall_64+0x166/0x520
[  113.995977][ T7799]  ? trace_irq_disable+0x3b/0x140
[  113.995987][ T7799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.995996][ T7799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.996004][ T7799] RIP: 0033:0x7fa89279e159
[  113.996013][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.996019][ T7799] RSP: 002b:00007fa893624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  113.996029][ T7799] RAX: ffffffffffffffda RBX: 00007fa892a25fa0 RCX: 00007fa89279e159
[  113.996034][ T7799] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005
[  113.996073][ T7799] RBP: 00007fa89283506b R08: 0000000000000010 R09: 0000000000000000
[  113.996081][ T7799] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  113.996089][ T7799] R13: 00007fa892a26038 R14: 00007fa892a25fa0 R15: 00007ffff8f9f418
[  113.996104][ T7799]  </TASK>
[  114.266085][   T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  114.280614][   T31] usb 5-1: USB disconnect, device number 10
[  114.321284][ T7790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.143697][ T7805] loop4: detected capacity change from 0 to 512
[  115.180604][ T7805] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  115.241877][ T7805] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  115.252950][ T7805] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.792: bad orphan inode 4
[  115.264029][ T7805] loop4: lost filesystem error report for type 5 error -117
[  115.267139][ T7805] EXT4-fs (loop4): 1 orphan inode deleted
[  115.298245][ T7805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.343461][ T7805] EXT4-fs error (device loop4): ext4_map_blocks:793: inode #2: block 4: comm syz.4.792: lblock 0 mapped to illegal pblock 4 (length 1)
[  115.520617][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.654839][ T7817] netlink: 'syz.0.797': attribute type 1 has an invalid length.
[  115.657777][ T7817] netlink: 220 bytes leftover after parsing attributes in process `syz.0.797'.
[  115.669313][ T7818] netlink: 'syz.4.796': attribute type 4 has an invalid length.
[  117.663672][ T7838] FAULT_INJECTION: forcing a failure.
[  117.663672][ T7838] name failslab, interval 1, probability 0, space 0, times 0
[  117.669059][ T7838] CPU: 1 UID: 0 PID: 7838 Comm: syz.4.802 Not tainted syzkaller #0 PREEMPT(full) 
[  117.669072][ T7838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.669078][ T7838] Call Trace:
[  117.669082][ T7838]  <TASK>
[  117.669085][ T7838]  dump_stack_lvl+0xe8/0x150
[  117.669101][ T7838]  should_fail_ex+0x410/0x560
[  117.669113][ T7838]  should_failslab+0xa8/0x100
[  117.669127][ T7838]  __kmalloc_cache_noprof+0xa8/0x660
[  117.669137][ T7838]  ? look_up_lock_class+0x57/0x110
[  117.669148][ T7838]  ? tipc_nametbl_insert_publ+0x64/0x13d0
[  117.669159][ T7838]  ? tipc_nametbl_insert_publ+0x64/0x13d0
[  117.669172][ T7838]  tipc_nametbl_insert_publ+0x64/0x13d0
[  117.669185][ T7838]  ? do_raw_spin_lock+0x12b/0x2f0
[  117.669197][ T7838]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  117.669205][ T7838]  ? tipc_net+0x45/0x270
[  117.669216][ T7838]  ? tipc_net+0x45/0x270
[  117.669228][ T7838]  ? tipc_nametbl_publish+0x74/0x1f0
[  117.669240][ T7838]  tipc_nametbl_publish+0xbd/0x1f0
[  117.669254][ T7838]  tipc_sk_publish+0x176/0x380
[  117.669264][ T7838]  ? __pfx_tipc_sk_publish+0x10/0x10
[  117.669273][ T7838]  ? __local_bh_enable_ip+0xd6/0x140
[  117.669283][ T7838]  tipc_sk_bind+0x1ee/0x300
[  117.669296][ T7838]  __sys_bind+0x2e3/0x410
[  117.669305][ T7838]  ? __pfx___sys_bind+0x10/0x10
[  117.669317][ T7838]  ? rcu_is_watching+0x16/0xb0
[  117.669328][ T7838]  __x64_sys_bind+0x7a/0x90
[  117.669357][ T7838]  do_syscall_64+0x166/0x520
[  117.669368][ T7838]  ? trace_irq_disable+0x3b/0x140
[  117.669378][ T7838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.669389][ T7838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.669398][ T7838] RIP: 0033:0x7fd2b7d9e159
[  117.669407][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.669413][ T7838] RSP: 002b:00007fd2b8d46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  117.669423][ T7838] RAX: ffffffffffffffda RBX: 00007fd2b8025fa0 RCX: 00007fd2b7d9e159
[  117.669429][ T7838] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003
[  117.669434][ T7838] RBP: 00007fd2b7e3506b R08: 0000000000000000 R09: 0000000000000000
[  117.669439][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.669444][ T7838] R13: 00007fd2b8026038 R14: 00007fd2b8025fa0 R15: 00007ffd1c9dce38
[  117.669456][ T7838]  </TASK>
[  118.725427][ T7849] loop0: detected capacity change from 0 to 32768
[  118.792136][ T7849] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.806 (7849)
[  118.978322][ T7849] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  118.999233][ T7849] BTRFS info (device loop0): using crc32c checksum algorithm
[  119.061453][ T7849] BTRFS info (device loop0): enabling ssd optimizations
[  119.070267][ T7849] BTRFS info (device loop0): turning on flush-on-commit
[  119.079510][ T7849] BTRFS info (device loop0): enabling free space tree
[  119.085530][ T7849] BTRFS info (device loop0): enabling auto defrag
[  119.102255][ T7849] BTRFS info (device loop0): use lzo compression, level 1
[  119.136932][ T7849] BTRFS info (device loop0): max_inline set to 4096
[  119.387082][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'.
[  120.132284][ T5596] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.374872][ T7897] loop4: detected capacity change from 0 to 512
[  120.542186][ T7897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.576039][ T7897] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.192749][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.941721][ T7950] loop4: detected capacity change from 0 to 4096
[  123.998227][ T7953] ubi0: attaching mtd0
[  124.038533][ T7954] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.104735][   T34] audit: type=1800 audit(1789580318.177:10): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.845" name="file1" dev="loop4" ino=15 res=0 errno=0
[  124.147350][ T7953] ubi0: scanning is finished
[  124.154378][ T7953] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  124.242819][ T7949] ftl_cs: FTL header not found.
[  124.481457][ T7949] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536]
[  124.631507][ T7953] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  124.901337][ T7979] tipc: Started in network mode
[  124.905554][ T7979] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  124.914708][ T7979] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  125.565982][   T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  125.717355][   T31] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00
[  125.729568][   T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  125.742231][   T31] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024
[  125.752108][   T31] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  125.760216][   T31] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  125.771260][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.783167][ T8002] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  125.794784][   T31] ims_pcu 1-1:1.0: Second endpoint on data interface is not BULK IN
[  125.807399][   T31] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -22
[  125.999626][   T31] usb 1-1: USB disconnect, device number 11
[  126.247289][ T8024] smb3: Unexpected value for 'rdma'
[  126.474216][ T8033] loop4: detected capacity change from 0 to 512
[  126.506532][ T8033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.543283][ T8033] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.693494][   T31] IPVS: starting estimator thread 0...
[  126.817024][ T8041] IPVS: using max 84 ests per chain, 201600 per kthread
[  126.899339][ T6199] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  126.934859][ T6199] EXT4-fs (loop4): Remounting filesystem read-only
[  126.962077][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.102499][ T8047] loop4: detected capacity change from 0 to 4096
[  127.149831][ T8047] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  127.318288][ T8055] comedi comedi0: pcl726: I/O base address not correctly aligned
[  127.572222][ T8061] loop4: detected capacity change from 0 to 512
[  127.600127][ T8061] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  127.610093][ T8061] EXT4-fs (loop4): orphan cleanup on readonly fs
[  127.617993][ T8061] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[  127.632491][ T8061] EXT4-fs warning (device loop4): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  127.655557][ T8061] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  127.685524][ T8061] EXT4-fs (loop4): 1 truncate cleaned up
[  127.691179][ T8061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  127.790781][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.817120][   T31] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  128.155553][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[  128.162479][   T31] usb 1-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.40
[  128.173246][   T31] usb 1-1: unable to read config index 0 descriptor/start: -71
[  128.178747][   T31] usb 1-1: can't read configurations, error -71
[  128.751100][ T8086] loop4: detected capacity change from 0 to 1024
[  128.774492][ T8086] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  128.789741][ T8086] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  128.800440][ T8086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.901655][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.029343][ T8089] loop4: detected capacity change from 0 to 4096
[  129.041783][ T8089] EXT4-fs (loop4): Test dummy encryption mode enabled
[  129.095101][ T8089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.132818][ T8089] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  129.731646][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.915396][ T8104] loop9: detected capacity change from 0 to 7
[  129.930133][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  129.933259][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  129.949339][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  129.952461][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  129.959932][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  129.963098][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  129.970121][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  129.973272][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  129.975948][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  129.979067][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  129.987636][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  129.990723][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  129.993371][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  129.996555][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  129.999592][ T8104] ldm_validate_partition_table(): Disk read failed.
[  130.004507][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  130.007755][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.013356][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  130.017300][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.025929][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  130.029215][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.032838][ T8104] Dev loop9: unable to read RDB block 0
[  130.044453][ T8104]  loop9: unable to read partition table
[  130.056600][ T8104] loop9: partition table beyond EOD, truncated
[  130.068984][ T8104] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X	%`ր{֐ȵ4FLQk݊) failed (rc=-5)
[  130.133281][ T8105] ldm_validate_partition_table(): Disk read failed.
[  130.152401][ T8105] Dev loop9: unable to read RDB block 0
[  130.159087][ T8105]  loop9: unable to read partition table
[  130.172063][ T8105] loop9: partition table beyond EOD, truncated
[  130.667618][ T8122] loop4: detected capacity change from 0 to 512
[  130.676945][ T8122] EXT4-fs: Ignoring removed nobh option
[  130.709049][ T8122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.723209][ T8122] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.753220][ T8122] EXT4-fs warning (device loop4): ext4_empty_dir:3104: inode #12: comm syz.4.910: directory missing '..'
[  130.772552][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.086321][   T33] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  131.236252][   T33] usb 5-1: Using ep0 maxpacket: 8
[  131.243433][   T33] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  131.256205][   T33] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  131.268128][   T33] usb 5-1: config 179 has no interface number 0
[  131.278066][   T33] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  131.294366][   T33] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  131.313253][   T33] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  131.332024][   T33] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  131.349166][   T33] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  131.367585][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.422646][ T8134] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  131.877389][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'.
[  132.014966][   T33] usb 5-1: USB disconnect, device number 11
[  132.015140][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  132.021138][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  132.848703][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  132.853833][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  135.892127][ T8200] loop4: detected capacity change from 0 to 256
[  135.929469][ T8200] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  135.978511][ T8200] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  136.001793][ T8200] FAT-fs (loop4): Filesystem has been set read-only
[  136.356052][   T33] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  136.510002][   T33] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  136.519297][   T33] usb 5-1: config 0 has no interfaces?
[  136.528659][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.537141][   T33] usb 5-1: Product: syz
[  136.538488][   T33] usb 5-1: Manufacturer: syz
[  136.545563][   T33] usb 5-1: SerialNumber: syz
[  136.557220][   T33] usb 5-1: config 0 descriptor??
[  136.780497][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'.
[  136.808606][ T8202] dummy0: entered promiscuous mode
[  136.856531][   T33] usb 5-1: USB disconnect, device number 12
[  138.543575][ T8241] 9pnet_fd: p9_fd_create_unix (8241): problem connecting socket: ./file0: -111
[  139.608744][ T8259] netlink: 180 bytes leftover after parsing attributes in process `syz.0.975'.
[  139.665929][    C0] sched: DL replenish lagged too much
[  139.904432][ T8272] sd 0:0:0:0: PR command failed: 1026
[  139.911519][ T8272] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  139.918009][ T8272] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  141.187556][ T8327] syzkaller0: entered promiscuous mode
[  141.192984][ T8327] syzkaller0: entered allmulticast mode
[  141.208832][ T8330] netlink: 'syz.3.1001': attribute type 10 has an invalid length.
[  141.214710][ T8330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1001'.
[  141.261452][ T8332] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  141.272617][ T8332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.060686][ T8347] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1008'.
[  142.069902][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'.
[  142.084520][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'.
[  142.462723][ T8356] loop4: detected capacity change from 0 to 4096
[  142.474510][ T8356] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  143.436313][ T8356] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  143.452580][ T8356] ntfs3(loop4): Inode r=b is not in use!
[  143.462695][ T8356] ntfs3(loop4): Failed to load $Extend (-116).
[  143.468213][ T8356] ntfs3(loop4): Failed to initialize $Extend.
[  143.497579][ T8356] ntfs3(loop4): ino=5, "/" fiemap is not supported for directories
[  144.940113][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'.
[  146.551435][ T8379] loop4: detected capacity change from 0 to 2048
[  146.560426][ T8379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.691308][ T8385] fuse: Bad value for 'fd'
[  147.927796][ T8398] loop0: detected capacity change from 0 to 4096
[  148.657800][ T8421] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1040'.
[  148.949377][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1047'.
[  148.961897][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1047'.
[  149.146569][ T8432] loop0: detected capacity change from 0 to 32768
[  149.372010][ T8441] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  149.519124][ T8443] loop4: detected capacity change from 0 to 512
[  149.558679][ T8443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.567770][ T8443] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  149.595709][ T8443] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes
[  149.999903][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.591572][ T8457] xt_time: unknown flags 0x50
[  151.205432][ T8451] loop0: detected capacity change from 0 to 131072
[  151.218411][ T8451] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24)
[  151.229587][ T8451] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  151.238290][ T8451] F2FS-fs (loop0): Test dummy encryption mode enabled
[  151.249545][ T8451] F2FS-fs (loop0): invalid crc value
[  151.314444][ T8451] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  151.345434][ T8451] loop0: lost filesystem error report for type 5 error -117
[  151.351648][ T8451] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  151.363024][ T8451] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  151.365514][ T8451] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  151.370521][ T8451] F2FS-fs (loop0): Start checkpoint disabled!
[  151.379013][ T8451] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  151.383847][ T8451] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  151.389003][ T8451] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  151.879485][ T8486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.161313][ T8507] FAULT_INJECTION: forcing a failure.
[  153.161313][ T8507] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  153.175534][ T8507] CPU: 1 UID: 0 PID: 8507 Comm: syz.0.1075 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  153.175550][ T8507] Tainted: [L]=SOFTLOCKUP
[  153.175553][ T8507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.175558][ T8507] Call Trace:
[  153.175562][ T8507]  <TASK>
[  153.175566][ T8507]  dump_stack_lvl+0xe8/0x150
[  153.175590][ T8507]  should_fail_ex+0x410/0x560
[  153.175602][ T8507]  prepare_alloc_pages+0x230/0x650
[  153.175618][ T8507]  __alloc_frozen_pages_noprof+0x12f/0x380
[  153.175632][ T8507]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  153.175643][ T8507]  ? __alloc_frozen_pages_noprof+0x1db/0x380
[  153.175656][ T8507]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  153.175668][ T8507]  ? __pfx_policy_nodemask+0x10/0x10
[  153.175675][ T8507]  ? __get_vm_area_node+0x155/0x2f0
[  153.175685][ T8507]  ? vmap+0x162/0x310
[  153.175693][ T8507]  ? bpf_ringbuf_alloc+0x322/0x5b0
[  153.175704][ T8507]  __alloc_pages_noprof+0x10/0x100
[  153.175716][ T8507]  alloc_pages_bulk_noprof+0x5f7/0x7c0
[  153.175730][ T8507]  ? alloc_pages_noprof+0x140/0x2b0
[  153.175739][ T8507]  __kasan_populate_vmalloc+0xb7/0x1c0
[  153.175751][ T8507]  alloc_vmap_area+0xd1a/0x1420
[  153.175765][ T8507]  ? __pfx_alloc_vmap_area+0x10/0x10
[  153.175773][ T8507]  ? __kmalloc_cache_node_noprof+0x3d2/0x630
[  153.175784][ T8507]  ? __kmalloc_cache_node_noprof+0x1f4/0x630
[  153.175794][ T8507]  ? __get_vm_area_node+0x155/0x2f0
[  153.175801][ T8507]  ? __get_vm_area_node+0x155/0x2f0
[  153.175829][ T8507]  __get_vm_area_node+0x200/0x2f0
[  153.175839][ T8507]  ? bpf_ringbuf_alloc+0x322/0x5b0
[  153.175848][ T8507]  vmap+0x162/0x310
[  153.175857][ T8507]  ? bpf_ringbuf_alloc+0x322/0x5b0
[  153.175866][ T8507]  bpf_ringbuf_alloc+0x322/0x5b0
[  153.175878][ T8507]  ringbuf_map_alloc+0x1f1/0x330
[  153.175888][ T8507]  map_create+0xf2a/0x1b90
[  153.175902][ T8507]  ? __pfx_map_create+0x10/0x10
[  153.175938][ T8507]  ? bpf_lsm_bpf+0x9/0x20
[  153.175950][ T8507]  ? security_bpf+0x7e/0x2d0
[  153.175960][ T8507]  __sys_bpf+0xaea/0xd90
[  153.175974][ T8507]  ? __pfx___sys_bpf+0x10/0x10
[  153.175986][ T8507]  ? do_futex+0x3e7/0x4e0
[  153.176003][ T8507]  ? ksys_write+0x242/0x270
[  153.176013][ T8507]  ? rcu_is_watching+0x16/0xb0
[  153.176024][ T8507]  __x64_sys_bpf+0xba/0xd0
[  153.176036][ T8507]  do_syscall_64+0x166/0x520
[  153.176047][ T8507]  ? trace_irq_disable+0x3b/0x140
[  153.176057][ T8507]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.176066][ T8507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.176077][ T8507] RIP: 0033:0x7fa89279e159
[  153.176085][ T8507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.176092][ T8507] RSP: 002b:00007fa893624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  153.176101][ T8507] RAX: ffffffffffffffda RBX: 00007fa892a25fa0 RCX: 00007fa89279e159
[  153.176106][ T8507] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 0000000000000000
[  153.176111][ T8507] RBP: 00007fa89283506b R08: 0000000000000000 R09: 0000000000000000
[  153.176116][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.176120][ T8507] R13: 00007fa892a26038 R14: 00007fa892a25fa0 R15: 00007ffff8f9f418
[  153.176131][ T8507]  </TASK>
[  153.482225][ T8509] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  153.484739][ T8509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  153.518707][ T8509] vhci_hcd vhci_hcd.0: Device attached
[  153.528196][ T8510] vhci_hcd: connection closed
[  153.532593][   T13] vhci_hcd vhci_hcd.3: stop threads
[  153.536766][   T13] vhci_hcd vhci_hcd.3: release socket
[  153.538576][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  153.806071][ T8514] use of bytesused == 0 is deprecated and will be removed in the future,
[  153.823047][ T8514] use the actual size instead.
[  154.216018][   T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  154.366614][   T31] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[  154.378266][   T31] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[  154.389200][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.392973][   T31] usb 1-1: Product: syz
[  154.400897][   T31] usb 1-1: Manufacturer: syz
[  154.404720][   T31] usb 1-1: SerialNumber: syz
[  154.420338][   T31] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  154.430269][   T31] dvb-usb: bulk message failed: -22 (3/0)
[  154.500220][   T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  154.512929][   T31] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[  154.526464][   T31] usb 1-1: media controller created
[  154.567652][   T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  154.635421][   T31] DVB: Unable to find symbol mt352_attach()
[  155.075239][   T31] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[  155.104178][   T31] dvb-usb: bulk message failed: -22 (3/0)
[  155.128839][   T31] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[  155.941412][ T8545] ip_tables: iptables: counters copy to user failed while replacing table
[  157.198690][ T6490] usb 1-1: USB disconnect, device number 14
[  157.294856][ T6490] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[  159.308601][ T8583] xt_hashlimit: size too large, truncated to 1048576
[  159.517029][ T8581] loop0: detected capacity change from 0 to 32768
[  159.533618][ T8581] (syz.0.1106,8581,1):ocfs2_verify_volume:2308 ERROR: bad cluster size bit found: 524308
[  159.551553][ T8581] (syz.0.1106,8581,1):ocfs2_verify_volume:2327 ERROR: status = -22
[  159.563214][ T8581] (syz.0.1106,8581,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  159.578723][ T8581] (syz.0.1106,8581,1):ocfs2_fill_super:1177 ERROR: status = -22
[  159.620886][ T8587] loop4: detected capacity change from 0 to 4096
[  159.628723][ T8587] EXT4-fs: Ignoring removed orlov option
[  159.659955][ T8587] EXT4-fs (loop4): Test dummy encryption mode enabled
[  159.683783][ T8587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.735291][ T6199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.674404][ T8612] CIFS mount error: No usable UNC path provided in device string!
[  161.674404][ T8612] 
[  161.708135][ T8612] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  161.837743][ T8614] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1119'.
[  162.416131][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'.
[  163.746080][   T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  163.896592][   T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  163.907390][   T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  163.917800][   T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  163.925829][   T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  163.943109][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.950967][   T31] usb 5-1: Product: syz
[  163.952277][   T31] usb 5-1: Manufacturer: syz
[  163.963056][   T31] usb 5-1: SerialNumber: syz
[  163.977958][   T31] hub 5-1:1.0: bad descriptor, ignoring hub
[  163.985436][   T31] hub 5-1:1.0: probe with driver hub failed with error -5
[  164.236459][   T31] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  164.503353][   T31] usb 5-1: reset high-speed USB device number 13 using dummy_hcd
[  164.892444][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'.
[  164.903835][ T8649] nbd: socks must be embedded in a SOCK_ITEM attr
[  165.016154][   T31] usb 5-1: USB disconnect, device number 13
[  165.032931][   T31] usblp0: removed
[  165.058064][ T8659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1141'.
[  165.076615][ T8659] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  165.870376][ T8681] loop0: detected capacity change from 0 to 256
[  165.954929][ T8668] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.114354][ T8688] nvme_tcp: malformed address passed: 127.0.0.1:44.0
[  166.159615][ T8668] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.414141][ T8668] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.494627][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1159'.
[  166.626323][ T8668] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.776385][ T7206] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.876072][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.886646][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.899492][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.256643][ T5667] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  170.447896][ T8738] netlink: 15143 bytes leftover after parsing attributes in process `syz.4.1177'.
[  170.902693][ T8756] loop4: detected capacity change from 0 to 128
[  170.920252][ T8756] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  170.946226][ T8756] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  171.249544][   T37] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  171.435565][ T5590] Bluetooth: hci2: unexpected event for opcode 0x1001
[  171.448302][ T8764] loop0: detected capacity change from 0 to 32768
[  172.459595][ T8764] Dev loop0: unable to read RDB block 8
[  172.464568][ T8764]  loop0: unable to read partition table
[  172.475382][ T8764] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  172.487558][ T5039]  loop0: unable to read partition table
[  173.167356][ T8784] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  173.178782][ T8783] nvme_fabrics: no handler found for transport fc-raddrR+0x333:pn-0x0444444444444444+host_traddr?nn-0x11111111111111117x:pn-0x22r222.
[  173.199323][ T8783] bridge0: port 1(bond0) entered blocking state
[  173.204644][ T8783] bridge0: port 1(bond0) entered disabled state
[  173.214562][ T8783] bond0: entered allmulticast mode
[  173.219024][ T8783] bond_slave_0: entered allmulticast mode
[  173.222676][ T8783] bond_slave_1: entered allmulticast mode
[  173.229917][ T8783] bond0: entered promiscuous mode
[  173.233161][ T8783] bond_slave_0: entered promiscuous mode
[  173.237415][ T8783] bond_slave_1: entered promiscuous mode
[  173.242848][ T8783] bridge0: port 1(bond0) entered blocking state
[  173.244829][ T8783] bridge0: port 1(bond0) entered forwarding state
[  173.827917][ T8802] FAULT_INJECTION: forcing a failure.
[  173.827917][ T8802] name failslab, interval 1, probability 0, space 0, times 0
[  173.840132][ T8802] CPU: 1 UID: 0 PID: 8802 Comm: syz.0.1207 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  173.840148][ T8802] Tainted: [L]=SOFTLOCKUP
[  173.840151][ T8802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.840156][ T8802] Call Trace:
[  173.840160][ T8802]  <TASK>
[  173.840165][ T8802]  dump_stack_lvl+0xe8/0x150
[  173.840181][ T8802]  should_fail_ex+0x410/0x560
[  173.840194][ T8802]  should_failslab+0xa8/0x100
[  173.840210][ T8802]  __kmalloc_cache_noprof+0xa8/0x660
[  173.840222][ T8802]  ? landlock_create_ruleset+0x90/0x330
[  173.840235][ T8802]  ? landlock_create_ruleset+0x90/0x330
[  173.840248][ T8802]  landlock_create_ruleset+0x90/0x330
[  173.840260][ T8802]  ? __se_sys_landlock_create_ruleset+0x3c1/0x5e0
[  173.840272][ T8802]  __se_sys_landlock_create_ruleset+0x3d9/0x5e0
[  173.840284][ T8802]  ? __pfx___se_sys_landlock_create_ruleset+0x10/0x10
[  173.840295][ T8802]  ? ksys_write+0x242/0x270
[  173.840308][ T8802]  do_syscall_64+0x166/0x520
[  173.840319][ T8802]  ? trace_irq_disable+0x3b/0x140
[  173.840329][ T8802]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.840339][ T8802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.840347][ T8802] RIP: 0033:0x7fa89279e159
[  173.840356][ T8802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.840364][ T8802] RSP: 002b:00007fa893624028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc
[  173.840374][ T8802] RAX: ffffffffffffffda RBX: 00007fa892a25fa0 RCX: 00007fa89279e159
[  173.840380][ T8802] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000200000000040
[  173.840385][ T8802] RBP: 00007fa89283506b R08: 0000000000000000 R09: 0000000000000000
[  173.840389][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.840394][ T8802] R13: 00007fa892a26038 R14: 00007fa892a25fa0 R15: 00007ffff8f9f418
[  173.840405][ T8802]  </TASK>
[  175.806422][ T8827] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1218'.
[  175.924577][   T34] audit: type=1326 audit(1789580369.997:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.4.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  175.943752][   T34] audit: type=1326 audit(1789580370.007:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.4.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  175.972734][   T34] audit: type=1326 audit(1789580370.017:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.4.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  175.998110][   T34] audit: type=1326 audit(1789580370.017:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.4.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  176.031038][   T34] audit: type=1326 audit(1789580370.017:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.4.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  176.061388][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'.
[  176.297831][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1227'.
[  177.983866][ T8889] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1246'.
[  179.047233][ T8925] netlink: 'syz.3.1261': attribute type 1 has an invalid length.
[  179.054351][ T8925] netlink: 'syz.3.1261': attribute type 2 has an invalid length.
[  179.413191][ T8941] bond1: option arp_all_targets: invalid value (2097152)
[  179.455818][ T8941] bond1 (unregistering): Released all slaves
[  179.523440][ T5590] Bluetooth: hci0: unexpected event for opcode 0x0803
[  182.129866][ T8978] netlink: 'syz.3.1284': attribute type 1 has an invalid length.
[  182.141851][ T8978] nbd: illegal input index 393222
[  182.415360][   T34] audit: type=1800 audit(1789580376.487:16): pid=8991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1290" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  182.497854][ T8992] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1289'.
[  182.516891][ T8992] unsupported nlmsg_type 40
[  182.894719][ T8999] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1293'.
[  183.825381][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'.
[  184.019015][ T9034] netlink: 'syz.3.1308': attribute type 2 has an invalid length.
[  184.024808][ T9034] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1308'.
[  184.035930][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1308'.
[  184.103752][ T9039] /dev/nullb0: Can't lookup blockdev
[  185.301287][ T9061] xt_hashlimit: size too large, truncated to 1048576
[  185.317384][ T9062] xt_hashlimit: size too large, truncated to 1048576
[  186.071976][ T5598] Bluetooth: hci1: command 0x0406 tx timeout
[  188.557704][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'.
[  189.599616][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'.
[  190.040068][ T9170] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  190.072994][ T9170] batman_adv: batadv0: Adding interface: macsec1
[  190.079007][ T9170] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  190.111857][ T9170] batman_adv: batadv0: Interface activated: macsec1
[  191.936476][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.948746][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.953638][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.958491][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.964355][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.120375][ T9193] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.130756][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.140847][ T9193] bridge_slave_0: entered allmulticast mode
[  193.152871][ T9193] bridge_slave_0: entered promiscuous mode
[  193.168245][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.181220][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.191868][ T9193] bridge_slave_1: entered allmulticast mode
[  193.204885][ T9193] bridge_slave_1: entered promiscuous mode
[  193.328073][ T9193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.351014][ T9193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.376882][ T9230] netlink: Unknown NAT attribute (type=16383, max=9)
[  193.391244][ T9230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.473481][ T9193] team0: Port device team_slave_0 added
[  193.497215][ T9193] team0: Port device team_slave_1 added
[  193.579279][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.592696][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.640893][ T9193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.700345][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.711566][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.737050][ T9193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.810409][ T9234] vlan2: entered promiscuous mode
[  193.821682][ T9234] macvlan0: entered promiscuous mode
[  193.947969][ T9193] hsr_slave_0: entered promiscuous mode
[  193.963228][ T9193] hsr_slave_1: entered promiscuous mode
[  193.974851][ T9193] debugfs: 'hsr0' already exists in 'hsr'
[  193.979859][ T9240] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1392'.
[  193.985651][ T9193] Cannot create hsr debugfs directory
[  193.987618][ T5590] Bluetooth: hci4: command tx timeout
[  194.369699][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  194.372027][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  194.814478][ T9193] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  194.852875][ T9193] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  194.861936][ T9193] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  194.888754][ T9193] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  194.909812][ T9193] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  194.939627][ T9193] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  194.951211][ T9193] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  195.064562][ T9193] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  195.194258][ T9255] bond1: entered allmulticast mode
[  195.216311][ T9255] ip6gretap3: entered allmulticast mode
[  195.218310][ T9255] bond1: (slave ip6gretap3): Enslaving as an active interface with an up link
[  195.350259][ T9193] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.430169][ T9193] 8021q: adding VLAN 0 to HW filter on device team0
[  195.456993][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.459668][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.534391][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.536970][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.569275][ T9265] netlink: 'syz.3.1400': attribute type 4 has an invalid length.
[  195.766663][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'.
[  195.907605][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'.
[  196.005674][ T9280] netlink: 'syz.3.1405': attribute type 13 has an invalid length.
[  196.067477][ T5590] Bluetooth: hci4: command tx timeout
[  196.793689][ T9193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.201701][ T9193] veth0_vlan: entered promiscuous mode
[  197.222358][ T9193] veth1_vlan: entered promiscuous mode
[  197.272670][ T9193] veth0_macvtap: entered promiscuous mode
[  197.287853][ T9193] veth1_macvtap: entered promiscuous mode
[  197.319750][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.343214][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.461885][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.473101][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.527202][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.544980][ T9303] netlink: 1988 bytes leftover after parsing attributes in process `syz.4.1410'.
[  197.578347][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.592119][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.616023][ T6248] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.676422][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.684484][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.917081][ T9315] fuse: Bad value for 'fd'
[  197.978560][ T9317] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1416'.
[  198.146711][ T5590] Bluetooth: hci4: command tx timeout
[  198.155644][ T9325] loop5: detected capacity change from 0 to 128
[  198.175800][ T9325] EXT4-fs (loop5): Test dummy encryption mode enabled
[  198.210848][ T9325] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  198.232933][ T9325] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  200.285824][ T5590] Bluetooth: hci4: command tx timeout
[  200.319912][ T9193] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  201.687390][ T9356] netlink: 'syz.5.1432': attribute type 1 has an invalid length.
[  201.698673][ T9356] netlink: 5120 bytes leftover after parsing attributes in process `syz.5.1432'.
[  201.705382][ T9357] netlink: 'syz.4.1433': attribute type 1 has an invalid length.
[  202.245755][   T34] audit: type=1326 audit(1789580396.317:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.4.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  202.277750][   T34] audit: type=1326 audit(1789580396.317:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.4.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  202.306477][   T34] audit: type=1326 audit(1789580396.317:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.4.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  202.329575][   T34] audit: type=1326 audit(1789580396.317:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.4.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  202.357284][   T34] audit: type=1326 audit(1789580396.317:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.4.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  202.384758][   T34] audit: type=1326 audit(1789580396.317:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.4.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  202.392984][ T9370] loop5: detected capacity change from 0 to 4096
[  202.423669][   T34] audit: type=1326 audit(1789580396.317:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.4.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  202.471265][   T34] audit: type=1326 audit(1789580396.317:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.4.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  202.483722][ T9370] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  202.524399][   T34] audit: type=1326 audit(1789580396.317:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.4.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  202.566727][   T34] audit: type=1326 audit(1789580396.317:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.4.1438" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  202.979674][ T9388] loop5: detected capacity change from 0 to 512
[  203.049019][ T9388] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 49)
[  203.820617][ T9414] netlink: 'syz.5.1459': attribute type 29 has an invalid length.
[  203.885949][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'.
[  204.037630][ T9418] loop5: detected capacity change from 0 to 40427
[  204.053617][ T9418] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  204.056076][ T9418] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  204.060471][ T9418] F2FS-fs (loop5): invalid crc value
[  204.088010][ T9418] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  204.098176][ T9418] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  204.100435][ T9418] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  204.805042][ T9427] fuse: fd is not a fuse device
[  205.316682][ T9445] tipc: Started in network mode
[  205.322646][ T9445] tipc: Node identity 2000004, cluster identity 4711
[  205.332121][ T9445] tipc: Node number set to 33554436
[  206.316296][ T9470] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1482'.
[  206.366000][ T9470] vlan2: entered promiscuous mode
[  206.371165][ T9470] bridge0: entered promiscuous mode
[  206.381228][ T9470] vlan2: entered allmulticast mode
[  206.394035][ T9470] bridge0: entered allmulticast mode
[  206.550665][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'.
[  206.737643][ T9486] netlink: 'syz.3.1489': attribute type 21 has an invalid length.
[  206.970997][ T9494] 9pnet: p9_errstr2errno: server reported unknown error 0x0000
[  207.166680][ T5590] Bluetooth: hci0: connection err: -111
[  210.854969][ T9556] team0: Device vlan2 is already an upper device of the team interface
[  211.380645][ T9566] bridge0: port 3(syz_tun) entered blocking state
[  211.391333][ T9566] bridge0: port 3(syz_tun) entered disabled state
[  211.397962][ T9566] syz_tun: entered allmulticast mode
[  211.408139][ T9566] syz_tun: entered promiscuous mode
[  211.417475][ T9566] bridge0: port 3(syz_tun) entered blocking state
[  211.419572][ T9566] bridge0: port 3(syz_tun) entered forwarding state
[  211.437226][ T9567] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  212.637343][ T9603] loop5: detected capacity change from 0 to 1024
[  212.648345][ T9603] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.685814][ T9603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.766953][ T9609] FAULT_INJECTION: forcing a failure.
[  212.766953][ T9609] name failslab, interval 1, probability 0, space 0, times 0
[  212.779407][ T9609] CPU: 1 UID: 0 PID: 9609 Comm: syz.3.1541 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  212.779421][ T9609] Tainted: [L]=SOFTLOCKUP
[  212.779424][ T9609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.779429][ T9609] Call Trace:
[  212.779433][ T9609]  <TASK>
[  212.779437][ T9609]  dump_stack_lvl+0xe8/0x150
[  212.779454][ T9609]  should_fail_ex+0x410/0x560
[  212.779466][ T9609]  should_failslab+0xa8/0x100
[  212.779481][ T9609]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  212.779492][ T9609]  ? alloc_empty_file+0x5b/0x1d0
[  212.779519][ T9609]  ? alloc_empty_file+0x5b/0x1d0
[  212.779533][ T9609]  alloc_empty_file+0x5b/0x1d0
[  212.779544][ T9609]  alloc_file_pseudo+0x115/0x1e0
[  212.779555][ T9609]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  212.779569][ T9609]  anon_inode_getfile+0xc5/0x1a0
[  212.779581][ T9609]  bpf_link_prime+0xfc/0x220
[  212.779592][ T9609]  tcx_link_attach+0x1ec/0x860
[  212.779606][ T9609]  ? __pfx_tcx_link_attach+0x10/0x10
[  212.779615][ T9609]  ? __fget_files+0x2a/0x420
[  212.779624][ T9609]  ? __fget_files+0x3a2/0x420
[  212.779630][ T9609]  ? __fget_files+0x2a/0x420
[  212.779638][ T9609]  ? bpf_prog_attach_check_attach_type+0x1e5/0x540
[  212.779647][ T9609]  link_create+0x51a/0x850
[  212.779660][ T9609]  __sys_bpf+0x760/0xd90
[  212.779674][ T9609]  ? __pfx___sys_bpf+0x10/0x10
[  212.779685][ T9609]  ? do_futex+0x458/0x4e0
[  212.779702][ T9609]  ? ksys_write+0x242/0x270
[  212.779710][ T9609]  ? rcu_is_watching+0x16/0xb0
[  212.779721][ T9609]  __x64_sys_bpf+0xba/0xd0
[  212.779755][ T9609]  do_syscall_64+0x166/0x520
[  212.779768][ T9609]  ? trace_irq_disable+0x3b/0x140
[  212.779778][ T9609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.779789][ T9609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.779797][ T9609] RIP: 0033:0x7f5b6559e159
[  212.779805][ T9609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.779812][ T9609] RSP: 002b:00007f5b66434028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  212.779822][ T9609] RAX: ffffffffffffffda RBX: 00007f5b65825fa0 RCX: 00007f5b6559e159
[  212.779828][ T9609] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c
[  212.779833][ T9609] RBP: 00007f5b6563506b R08: 0000000000000000 R09: 0000000000000000
[  212.779838][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.779842][ T9609] R13: 00007f5b65826038 R14: 00007f5b65825fa0 R15: 00007ffcdd518938
[  212.779854][ T9609]  </TASK>
[  213.389575][ T9193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.437248][ T9649] netlink: 'syz.3.1558': attribute type 6 has an invalid length.
[  218.855581][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'.
[  218.861601][ T9683] netlink: 'syz.3.1572': attribute type 12 has an invalid length.
[  219.007404][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'.
[  219.015639][ T9683] netlink: 'syz.3.1572': attribute type 12 has an invalid length.
[  219.019362][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  219.024699][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  219.032762][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  219.049840][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.615398][   T34] kauditd_printk_skb: 257 callbacks suppressed
[  219.615410][   T34] audit: type=1326 audit(1789580413.687:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  219.640475][   T34] audit: type=1326 audit(1789580413.707:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  219.665765][   T34] audit: type=1326 audit(1789580413.707:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  219.689864][   T34] audit: type=1326 audit(1789580413.707:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  219.705621][   T34] audit: type=1326 audit(1789580413.707:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  219.724155][   T34] audit: type=1326 audit(1789580413.707:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  219.745478][   T34] audit: type=1326 audit(1789580413.707:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  219.770904][   T34] audit: type=1326 audit(1789580413.707:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  219.793785][   T34] audit: type=1326 audit(1789580413.707:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  219.822901][   T34] audit: type=1326 audit(1789580413.707:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2b7d9e159 code=0x7ffc0000
[  220.624860][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'.
[  220.695935][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'.
[  221.485189][ T9756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1603'.
[  222.281479][ T9797] loop5: detected capacity change from 0 to 128
[  222.300256][ T9797] EXT4-fs (loop5): Test dummy encryption mode enabled
[  222.311763][ T9797] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  222.329486][ T9797] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  222.596083][ T5930] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  222.747490][ T5930] usb 6-1: Using ep0 maxpacket: 8
[  222.755555][ T5930] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  222.768951][ T5930] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  222.779009][ T5930] usb 6-1: config 179 has no interface number 0
[  222.782987][ T5930] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  222.793315][ T5930] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  222.800681][ T5930] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  222.810828][ T5930] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  222.819295][ T5930] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  222.829447][ T5930] usb 6-1: config 179 interface 65 has no altsetting 0
[  222.836337][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.873470][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'.
[  222.881811][ T9806] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1623'.
[  222.899263][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'.
[  222.902552][ T5930] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input9
[  222.912415][ T9806] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1623'.
[  223.270988][ T9797] fscrypt: AES-256-XTS using blk-crypto-fallback
[  223.527436][    T9] usb 6-1: USB disconnect, device number 2
[  223.527531][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  223.843871][ T9821] fuse: fd is not a fuse device
[  224.491992][ T9193] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.938433][ T9833] ./file0: Can't open blockdev
[  226.092362][ T9847] syz.5.1640 uses obsolete (PF_INET,SOCK_PACKET)
[  226.439121][ T9853] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  226.443752][ T9853] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  226.449839][ T9853] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  226.457285][ T9853] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  226.464453][ T9853] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  227.076414][   T33] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  227.226844][ T9878] netlink: 'syz.3.1654': attribute type 21 has an invalid length.
[  227.237614][   T33] usb 6-1: Using ep0 maxpacket: 32
[  227.254171][   T33] usb 6-1: unable to get BOS descriptor or descriptor too short
[  227.262276][   T33] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40
[  227.281231][   T33] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.292561][   T33] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  227.303581][   T33] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  227.309895][   T33] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  227.321443][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.326184][   T33] usb 6-1: Product: syz
[  227.327563][   T33] usb 6-1: Manufacturer: syz
[  227.336060][   T33] usb 6-1: SerialNumber: syz
[  227.744261][   T33] usb 6-1: USB disconnect, device number 3
[  227.857407][ T9887] udevd[9887]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  230.707016][ T9949] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1678'.
[  231.131838][ T9956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1683'.
[  231.144483][ T9957] tipc: Started in network mode
[  231.150305][ T9957] tipc: Node identity 7f000001, cluster identity 4711
[  231.162694][ T9957] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  231.223765][ T9957] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  231.254365][ T9957] tipc: Enabled bearer <udp:syz0>, priority 10
[  231.401828][ T9966] loop5: detected capacity change from 0 to 2048
[  231.439785][ T9966] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  231.455623][ T9966] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  231.493609][ T9966] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  231.515469][ T9966] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  231.551776][ T9966] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  231.570853][ T9966] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  231.583146][ T9966] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  231.596117][ T9966] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  231.605225][ T9966] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  232.111990][ T9975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1690'.
[  232.368603][   T31] tipc: Node number set to 2130706433
[  232.676266][   T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  232.837273][   T31] usb 6-1: Using ep0 maxpacket: 32
[  232.841349][   T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  232.848073][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.860558][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.868777][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.894196][   T31] usb 6-1: config 0 descriptor??
[  232.901792][   T31] hub 6-1:0.0: USB hub found
[  236.237300][   T31] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  236.303819][   T31] usbhid 6-1:0.0: can't add hid device: -71
[  236.324723][   T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  236.400650][   T31] usb 6-1: USB disconnect, device number 4
[  237.008954][T10024] netlink: 'syz.3.1712': attribute type 1 has an invalid length.
[  237.055142][T10024] 8021q: adding VLAN 0 to HW filter on device bond2
[  237.160909][T10024] bond2: (slave dummy0): making interface the new active one
[  237.180034][T10024] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  237.196549][T10028] macvlan1: entered allmulticast mode
[  237.222226][T10024] netlink: 'syz.3.1712': attribute type 10 has an invalid length.
[  237.231618][T10024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1712'.
[  237.291057][T10026] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  237.300878][T10028] veth1_vlan: entered allmulticast mode
[  237.311275][T10028] macvlan1: left allmulticast mode
[  237.318390][T10028] veth1_vlan: left allmulticast mode
[  237.329967][T10024] dummy0: entered promiscuous mode
[  237.345489][T10024] bond2: (slave dummy0): Releasing active interface
[  237.363210][T10024] bond2: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  237.408719][T10024] bond2: (slave gretap1): making interface the new active one
[  238.007580][T10022] loop5: detected capacity change from 0 to 32768
[  238.029131][T10022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1711 (10022)
[  238.063993][T10022] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  238.079210][T10022] BTRFS info (device loop5): using crc32c checksum algorithm
[  238.202619][T10022] BTRFS info (device loop5): enabling ssd optimizations
[  238.211478][T10022] BTRFS info (device loop5): turning on flush-on-commit
[  238.220772][T10022] BTRFS info (device loop5): enabling free space tree
[  238.230343][T10022] BTRFS info (device loop5): enabling auto defrag
[  238.239167][T10022] BTRFS info (device loop5): use lzo compression, level 1
[  238.246306][T10022] BTRFS info (device loop5): max_inline set to 4096
[  238.383098][ T9193] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.431051][T10064] overlayfs: failed to clone upperpath
[  239.636753][   T33] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  239.787881][   T33] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0003, bcdDevice=24.43
[  239.795457][   T33] usb 6-1: config 5 has an invalid interface number: 145 but max is 0
[  239.801338][   T33] usb 6-1: config 5 has no interface number 0
[  239.806108][   T33] usb 6-1: config 5 interface 145 has no altsetting 0
[  239.819545][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.823610][   T33] usb 6-1: Product: syz
[  239.826879][   T33] usb 6-1: Manufacturer: syz
[  239.830220][   T33] usb 6-1: SerialNumber: syz
[  240.073237][   T33] kvaser_usb 6-1:5.145: error -ENODEV: Cannot get usb endpoint(s)
[  240.089576][   T33] usb 6-1: USB disconnect, device number 5
[  240.903193][T10085] netlink: 'syz.4.1731': attribute type 1 has an invalid length.
[  240.946145][   T34] kauditd_printk_skb: 20 callbacks suppressed
[  240.946156][   T34] audit: type=1326 audit(1789580435.017:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.5.1732" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dbeb9e159 code=0x0
[  241.336127][T10094] netlink: 'syz.5.1733': attribute type 2 has an invalid length.
[  241.697940][T10107] overlayfs: failed to clone lowerpath
[  241.707817][T10107] overlayfs: failed to clone lowerpath
[  242.315045][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'.
[  242.330718][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'.
[  242.341795][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'.
[  242.350262][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'.
[  243.824812][T10138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1755'.
[  243.846956][T10138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1755'.
[  244.087545][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1757'.
[  245.648475][T10171] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1771'.
[  245.951245][T10159] syz.3.1766 (10159): drop_caches: 2
[  246.471425][T10178] netlink: 'syz.5.1775': attribute type 2 has an invalid length.
[  246.482593][T10178] netlink: 'syz.5.1775': attribute type 2 has an invalid length.
[  247.793320][T10202] loop5: detected capacity change from 0 to 128
[  248.583446][T10233] loop5: detected capacity change from 0 to 256
[  248.644660][T10233] syz.5.1801: attempt to access beyond end of device
[  248.644660][T10233] loop5: rw=8912896, sector=1800, nr_sectors = 20 limit=256
[  248.666140][T10233] syz.5.1801: attempt to access beyond end of device
[  248.666140][T10233] loop5: rw=8388608, sector=1800, nr_sectors = 8 limit=256
[  248.679134][   T34] audit: type=1800 audit(1789580442.757:315): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1801" name="file2" dev="loop5" ino=1048648 res=0 errno=0
[  248.687455][T10233] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  248.710362][T10233] FAT-fs (loop5): Filesystem has been set read-only
[  248.815670][T10237] batadv0: entered promiscuous mode
[  248.827700][T10237] macvtap1: entered promiscuous mode
[  248.830117][T10237] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  248.875747][T10237] batadv0: left promiscuous mode
[  249.126947][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1804'.
[  249.727139][T10252] loop5: detected capacity change from 0 to 512
[  249.802768][T10252] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  249.821316][T10252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  249.836252][T10252] EXT4-fs (loop5): orphan cleanup on readonly fs
[  249.853934][T10252] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.1809: iget: bad i_size value: 12154761577498
[  249.867429][T10252] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  249.867854][T10252] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1809: couldn't read orphan inode 13 (err -117)
[  249.876421][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  249.882210][    C1] EXT4-fs (loop5): initial error at time 1789580443: ext4_orphan_get:1399: inode 13
[  249.886166][    C1] EXT4-fs (loop5): last error at time 1789580443: ext4_orphan_get:1399: inode 13
[  249.923721][T10252] loop5: lost filesystem error report for type 5 error -117
[  249.927802][T10252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  250.174346][T10252] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1809: dx entry: limit 65535 != root limit 120
[  250.195137][T10252] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1809: Corrupt directory, running e2fsck is recommended
[  250.232325][ T9193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.654340][ T5590] Bluetooth: hci1: unexpected event for opcode 0x080c
[  250.872663][T10266] loop5: detected capacity change from 0 to 32768
[  250.888181][T10266] (syz.5.1813,10266,1):ocfs2_find_entry:1112 ERROR: status = -117
[  250.912205][T10266] (syz.5.1813,10266,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  250.932770][T10266] (syz.5.1813,10266,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  250.932796][T10266] (syz.5.1813,10266,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  250.956562][T10266] (syz.5.1813,10266,0):ocfs2_initialize_super:2194 ERROR: status = -22
[  250.960263][T10266] (syz.5.1813,10266,0):ocfs2_fill_super:1177 ERROR: status = -22
[  251.723494][T10287] netlink: 11870 bytes leftover after parsing attributes in process `syz.5.1826'.
[  251.883995][T10294] loop5: detected capacity change from 0 to 512
[  251.947692][T10294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.961063][T10294] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.238697][T10303] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1832'.
[  252.556879][T10306] raw_sendmsg: syz.4.1833 forgot to set AF_INET. Fix it!
[  253.033890][ T9193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.184562][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'.
[  253.410806][T10324] loop5: detected capacity change from 0 to 32768
[  253.563699][T10324] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  253.613458][T10324] XFS (loop5): Ending clean mount
[  253.632749][   T34] audit: type=1800 audit(1789580447.707:316): pid=10324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1842" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  253.651152][T10324] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  254.454026][   T34] audit: type=1800 audit(1789580448.527:317): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1842" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  254.483304][ T9193] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  255.332043][T10368] loop5: detected capacity change from 0 to 256
[  255.369723][T10368] FAT-fs (loop5): Directory bread(block 1285) failed
[  255.372120][T10368] FAT-fs (loop5): Directory bread(block 1286) failed
[  255.374348][T10368] FAT-fs (loop5): Directory bread(block 1287) failed
[  255.378344][T10368] FAT-fs (loop5): Directory bread(block 1288) failed
[  255.420979][T10368] FAT-fs (loop5): Directory bread(block 1285) failed
[  255.473215][T10368] FAT-fs (loop5): Directory bread(block 1286) failed
[  255.488905][T10368] FAT-fs (loop5): Directory bread(block 1287) failed
[  255.499854][T10368] FAT-fs (loop5): Directory bread(block 1288) failed
[  255.517247][T10372] FAT-fs (loop5): Directory bread(block 1285) failed
[  255.541093][T10372] FAT-fs (loop5): Directory bread(block 1286) failed
[  255.677683][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  255.681151][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  257.002026][T10407] FAULT_INJECTION: forcing a failure.
[  257.002026][T10407] name failslab, interval 1, probability 0, space 0, times 0
[  257.015786][T10407] CPU: 1 UID: 0 PID: 10407 Comm: syz.3.1867 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  257.015802][T10407] Tainted: [L]=SOFTLOCKUP
[  257.015805][T10407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  257.015811][T10407] Call Trace:
[  257.015815][T10407]  <TASK>
[  257.015819][T10407]  dump_stack_lvl+0xe8/0x150
[  257.015836][T10407]  should_fail_ex+0x410/0x560
[  257.015867][T10407]  should_failslab+0xa8/0x100
[  257.015881][T10407]  __kmalloc_cache_noprof+0xa8/0x660
[  257.015894][T10407]  ? __kmalloc_cache_noprof+0x152/0x660
[  257.015906][T10407]  ? resv_map_alloc+0x88/0x2c0
[  257.015917][T10407]  ? resv_map_alloc+0x88/0x2c0
[  257.015930][T10407]  resv_map_alloc+0x88/0x2c0
[  257.015941][T10407]  hugetlbfs_get_inode+0x5f/0x660
[  257.015957][T10407]  hugetlb_file_setup+0x28f/0x630
[  257.015971][T10407]  newseg+0x467/0xc70
[  257.015984][T10407]  ? __pfx_newseg+0x10/0x10
[  257.015996][T10407]  ipcget+0x1db/0xf20
[  257.016005][T10407]  ? do_futex+0x3e7/0x4e0
[  257.016015][T10407]  ? __pfx_do_futex+0x10/0x10
[  257.016021][T10407]  ? mntput+0x65/0xc0
[  257.016031][T10407]  ? __pfx_ipcget+0x10/0x10
[  257.016040][T10407]  ? __se_sys_futex+0x3a8/0x450
[  257.016049][T10407]  __x64_sys_shmget+0x140/0x190
[  257.016058][T10407]  ? __pfx___x64_sys_shmget+0x10/0x10
[  257.016071][T10407]  do_syscall_64+0x166/0x520
[  257.016081][T10407]  ? trace_irq_disable+0x3b/0x140
[  257.016091][T10407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.016105][T10407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.016113][T10407] RIP: 0033:0x7f5b6559e159
[  257.016122][T10407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.016129][T10407] RSP: 002b:00007f5b66434028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  257.016138][T10407] RAX: ffffffffffffffda RBX: 00007f5b65825fa0 RCX: 00007f5b6559e159
[  257.016144][T10407] RDX: 0000000000000800 RSI: 0000000000002000 RDI: 0000000000000000
[  257.016148][T10407] RBP: 00007f5b6563506b R08: 0000000000000000 R09: 0000000000000000
[  257.016153][T10407] R10: 0000200000b7d000 R11: 0000000000000246 R12: 0000000000000000
[  257.016157][T10407] R13: 00007f5b65826038 R14: 00007f5b65825fa0 R15: 00007ffcdd518938
[  257.016169][T10407]  </TASK>
[  257.935080][T10436] program syz.5.1876 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  258.590578][T10445] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1880'.
[  258.815930][ T6490] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  258.966091][ T6490] usb 6-1: Using ep0 maxpacket: 16
[  258.971445][ T6490] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  258.980619][ T6490] usb 6-1: config index 0 descriptor too short (expected 65, got 36)
[  258.992269][ T6490] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  259.003724][ T6490] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  259.013673][ T6490] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  259.023904][ T6490] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  259.035821][ T6490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.070723][ T6490] usb 6-1: config 0 descriptor??
[  259.077847][T10444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  259.095307][ T6490] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12
[  259.387571][ T6490] usb 6-1: USB disconnect, device number 6
[  259.391570][ T5024] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[  260.785050][T10492] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1088279496/1088279498
[  260.814381][T10492] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1088279496/1088279497
[  260.824882][T10492] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1088279496/1088279498
[  260.843948][T10492] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1088279496/1088279497
[  261.032602][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'.
[  261.042383][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'.
[  261.049622][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'.
[  261.582892][T10519] loop5: detected capacity change from 0 to 512
[  261.595269][T10519] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  261.660028][T10519] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 198:freeing already freed block (bit 197); block bitmap corrupt.
[  261.717050][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  261.719706][    C0] EXT4-fs (loop5): initial error at time 1789580455: mb_free_blocks:2049: inode 11: block 198
[  261.724034][    C0] EXT4-fs (loop5): last error at time 1789580455: mb_free_blocks:2049: inode 11: block 198
[  261.759194][T10519] EXT4-fs (loop5): Remounting filesystem read-only
[  261.770396][T10519] EXT4-fs (loop5): 1 truncate cleaned up
[  261.811923][T10519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.115062][ T9193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.112480][T10563] fuse: Bad value for 'fd'
[  263.734962][T10580] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  263.753355][T10580] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  264.790951][T10593] loop5: detected capacity change from 0 to 32768
[  264.884310][T10593] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1943 (10593)
[  265.042781][T10593] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  265.056394][T10593] BTRFS info (device loop5): using blake2b checksum algorithm
[  265.417112][T10593] BTRFS info (device loop5): enabling ssd optimizations
[  265.428813][T10593] BTRFS info (device loop5): turning on async discard
[  265.448588][T10593] BTRFS info (device loop5): enabling free space tree
[  265.455210][T10593] BTRFS info (device loop5): use zstd compression, level 3
[  265.555099][ T9193] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  265.975719][T10636] netlink: 'syz.5.1956': attribute type 10 has an invalid length.
[  265.980243][T10636] ipvlan0: entered allmulticast mode
[  265.984462][T10636] veth0_vlan: entered allmulticast mode
[  266.012037][T10636] team0: Device ipvlan0 failed to register rx_handler
[  266.105654][T10640] loop5: detected capacity change from 0 to 256
[  266.143268][T10640] exFAT-fs (loop5): error, bad upcase table size (0 bytes). Please run fsck
[  266.416845][T10642] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1958'.
[  266.902924][T10669] CIFS: Witness protocol support is experimental
[  266.908829][T10669] CIFS mount error: No usable UNC path provided in device string!
[  266.908829][T10669] 
[  266.918450][T10669] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  267.496251][T10676] fuse: Bad value for 'fd'
[  267.664831][T10681] loop5: detected capacity change from 0 to 1024
[  268.388189][T10703] loop5: detected capacity change from 0 to 128
[  270.360883][T10736] loop6: detected capacity change from 0 to 6
[  270.375676][T10736] Dev loop6: unable to read RDB block 6
[  270.384166][T10736]  loop6: unable to read partition table
[  270.395949][T10736] loop6: partition table beyond EOD, truncated
[  270.404274][T10736] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5)
[  271.316265][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'.
[  272.697234][T10773] loop5: detected capacity change from 0 to 128
[  272.757123][   T34] audit: type=1800 audit(1789580466.837:318): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2016" name="file1" dev="loop5" ino=1048664 res=0 errno=0
[  273.311440][T10777] loop5: detected capacity change from 0 to 32768
[  273.394495][T10780] netlink: 'syz.4.2019': attribute type 2 has an invalid length.
[  273.414268][T10780] netlink: 'syz.4.2019': attribute type 2 has an invalid length.
[  273.457117][T10777] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  275.796299][T10786] 
[  275.797127][T10786] ======================================================
[  275.799270][T10786] WARNING: possible circular locking dependency detected
[  275.801380][T10786] syzkaller #0 Tainted: G             L     
[  275.803427][T10786] ------------------------------------------------------
[  275.805632][T10786] syz.5.2018/10786 is trying to acquire lock:
[  275.807468][T10786] ffff8881bdf989a0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x170/0x4850
[  275.811714][T10786] 
[  275.811714][T10786] but task is already holding lock:
[  275.813966][T10786] ffff8881177022e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x494/0x13a0
[  275.816750][T10786] 
[  275.816750][T10786] which lock already depends on the new lock.
[  275.816750][T10786] 
[  275.819798][T10786] 
[  275.819798][T10786] the existing dependency chain (in reverse order) is:
[  275.822550][T10786] 
[  275.822550][T10786] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  275.825176][T10786]        down_read+0x4a/0x330
[  275.826666][T10786]        ocfs2_init_acl+0x2fd/0x7e0
[  275.828385][T10786]        ocfs2_mknod+0x166a/0x2240
[  275.830283][T10786]        ocfs2_mkdir+0x180/0x430
[  275.832105][T10786]        vfs_mkdir+0x40c/0x620
[  275.833907][T10786]        filename_mkdirat+0x285/0x510
[  275.835929][T10786]        __se_sys_mkdirat+0x35/0x150
[  275.837918][T10786]        do_syscall_64+0x166/0x520
[  275.839861][T10786]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.842293][T10786] 
[  275.842293][T10786] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  275.844926][T10786]        down_read+0x4a/0x330
[  275.846371][T10786]        ocfs2_start_trans+0x3ae/0x700
[  275.848014][T10786]        ocfs2_mknod+0x116a/0x2240
[  275.849590][T10786]        ocfs2_mkdir+0x180/0x430
[  275.851112][T10786]        vfs_mkdir+0x40c/0x620
[  275.852602][T10786]        filename_mkdirat+0x285/0x510
[  275.854208][T10786]        __se_sys_mkdirat+0x35/0x150
[  275.855804][T10786]        do_syscall_64+0x166/0x520
[  275.857366][T10786]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.859284][T10786] 
[  275.859284][T10786] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  275.861562][T10786]        ocfs2_start_trans+0x2ac/0x700
[  275.863556][T10786]        ocfs2_mknod+0x116a/0x2240
[  275.865150][T10786]        ocfs2_mkdir+0x180/0x430
[  275.866693][T10786]        vfs_mkdir+0x40c/0x620
[  275.868180][T10786]        filename_mkdirat+0x285/0x510
[  275.869936][T10786]        __se_sys_mkdirat+0x35/0x150
[  275.871933][T10786]        do_syscall_64+0x166/0x520
[  275.873696][T10786]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.875685][T10786] 
[  275.875685][T10786] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  275.879375][T10786]        down_write+0x96/0x200
[  275.881265][T10786]        ocfs2_reserve_local_alloc_bits+0x11f/0x2680
[  275.883806][T10786]        ocfs2_reserve_clusters_with_limit+0x1b9/0xc20
[  275.886240][T10786]        ocfs2_mknod+0x110d/0x2240
[  275.888198][T10786]        ocfs2_mkdir+0x180/0x430
[  275.890129][T10786]        vfs_mkdir+0x40c/0x620
[  275.891697][T10786]        filename_mkdirat+0x285/0x510
[  275.893528][T10786]        __se_sys_mkdirat+0x35/0x150
[  275.895495][T10786]        do_syscall_64+0x166/0x520
[  275.897435][T10786]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.899667][T10786] 
[  275.899667][T10786] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  275.903371][T10786]        __lock_acquire+0x1520/0x2cf0
[  275.905395][T10786]        lock_acquire+0x106/0x350
[  275.907302][T10786]        down_write+0x96/0x200
[  275.909102][T10786]        ocfs2_reserve_suballoc_bits+0x170/0x4850
[  275.911160][T10786]        ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  275.913269][T10786]        ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  275.915350][T10786]        ocfs2_xattr_set+0xc78/0x13a0
[  275.917417][T10786]        __vfs_setxattr+0x442/0x480
[  275.919440][T10786]        __vfs_setxattr_noperm+0x12a/0x660
[  275.921689][T10786]        vfs_setxattr+0x163/0x360
[  275.923650][T10786]        filename_setxattr+0x296/0x630
[  275.925713][T10786]        path_setxattrat+0x408/0x450
[  275.927665][T10786]        __x64_sys_setxattr+0xbc/0xe0
[  275.929662][T10786]        do_syscall_64+0x166/0x520
[  275.931581][T10786]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.933991][T10786] 
[  275.933991][T10786] other info that might help us debug this:
[  275.933991][T10786] 
[  275.937828][T10786] Chain exists of:
[  275.937828][T10786]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  275.937828][T10786] 
[  275.943895][T10786]  Possible unsafe locking scenario:
[  275.943895][T10786] 
[  275.946690][T10786]        CPU0                    CPU1
[  275.948664][T10786]        ----                    ----
[  275.950660][T10786]   lock(&oi->ip_xattr_sem);
[  275.952372][T10786]                                lock(&journal->j_trans_barrier);
[  275.955212][T10786]                                lock(&oi->ip_xattr_sem);
[  275.957394][T10786]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  275.959602][T10786] 
[  275.959602][T10786]  *** DEADLOCK ***
[  275.959602][T10786] 
[  275.962502][T10786] locks held by syz.5.2018/10786: 3, last CPU#0:
[  275.964833][T10786]  #0: ffff88816e43e460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  275.968249][T10786]  #1: ffff8881177025a0 (&sb->s_type->i_mutex_key#59){+.+.}-{4:4}, at: vfs_setxattr+0x13e/0x360
[  275.971985][T10786]  #2: ffff8881177022e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x494/0x13a0
[  275.975011][T10786] 
[  275.975011][T10786] stack backtrace:
[  275.976900][T10786] CPU: 0 UID: 0 PID: 10786 Comm: syz.5.2018 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  275.976914][T10786] Tainted: [L]=SOFTLOCKUP
[  275.976917][T10786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  275.976922][T10786] Call Trace:
[  275.976928][T10786]  <TASK>
[  275.976933][T10786]  dump_stack_lvl+0xe8/0x150
[  275.976947][T10786]  print_circular_bug+0x2e1/0x300
[  275.976957][T10786]  check_noncircular+0x12e/0x150
[  275.976965][T10786]  __lock_acquire+0x1520/0x2cf0
[  275.976978][T10786]  ? igrab+0xd4/0x2f0
[  275.976987][T10786]  ? ocfs2_reserve_suballoc_bits+0x170/0x4850
[  275.976999][T10786]  lock_acquire+0x106/0x350
[  275.977009][T10786]  ? ocfs2_reserve_suballoc_bits+0x170/0x4850
[  275.977022][T10786]  down_write+0x96/0x200
[  275.977032][T10786]  ? ocfs2_reserve_suballoc_bits+0x170/0x4850
[  275.977041][T10786]  ? __pfx_down_write+0x10/0x10
[  275.977050][T10786]  ? lockdep_unlock+0x5c/0xd0
[  275.977058][T10786]  ? __lock_acquire+0x13e8/0x2cf0
[  275.977069][T10786]  ocfs2_reserve_suballoc_bits+0x170/0x4850
[  275.977080][T10786]  ? irqentry_exit+0x218/0x910
[  275.977090][T10786]  ? lockdep_hardirqs_on+0x7b/0x110
[  275.977098][T10786]  ? irqentry_exit+0x218/0x910
[  275.977109][T10786]  ? _raw_spin_unlock_irqrestore+0x47/0x80
[  275.977117][T10786]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  275.977126][T10786]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  275.977133][T10786]  ? stack_depot_save_flags+0x404/0x7f0
[  275.977142][T10786]  ? kasan_save_track+0x4f/0x80
[  275.977152][T10786]  ? kasan_save_track+0x3e/0x80
[  275.977160][T10786]  ? __kasan_kmalloc+0x93/0xb0
[  275.977170][T10786]  ? __kmalloc_cache_noprof+0x331/0x660
[  275.977179][T10786]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  275.977189][T10786]  ? ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  275.977199][T10786]  ? ocfs2_xattr_set+0xc78/0x13a0
[  275.977209][T10786]  ? __vfs_setxattr+0x442/0x480
[  275.977219][T10786]  ? __vfs_setxattr_noperm+0x12a/0x660
[  275.977228][T10786]  ? vfs_setxattr+0x163/0x360
[  275.977238][T10786]  ? filename_setxattr+0x296/0x630
[  275.977244][T10786]  ? path_setxattrat+0x408/0x450
[  275.977252][T10786]  ? __x64_sys_setxattr+0xbc/0xe0
[  275.977258][T10786]  ? do_syscall_64+0x166/0x520
[  275.977267][T10786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.977280][T10786]  ? __kasan_kmalloc+0x93/0xb0
[  275.977289][T10786]  ? __kmalloc_cache_noprof+0x331/0x660
[  275.977299][T10786]  ? __kmalloc_cache_noprof+0x152/0x660
[  275.977308][T10786]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  275.977317][T10786]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  275.977327][T10786]  ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  275.977337][T10786]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  275.977346][T10786]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  275.977354][T10786]  ? lockdep_hardirqs_on+0x7b/0x110
[  275.977363][T10786]  ? irqentry_exit+0x218/0x910
[  275.977371][T10786]  ? trace_irq_disable+0x3b/0x140
[  275.977382][T10786]  ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  275.977394][T10786]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  275.977405][T10786]  ? ocfs2_xattr_set+0xc3c/0x13a0
[  275.977416][T10786]  ? up_write+0x19d/0x4a0
[  275.977423][T10786]  ocfs2_xattr_set+0xc78/0x13a0
[  275.977443][T10786]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  275.977453][T10786]  ? do_raw_spin_lock+0x12b/0x2f0
[  275.977463][T10786]  ? do_raw_spin_unlock+0x4d/0x200
[  275.977473][T10786]  ? do_raw_spin_lock+0x12b/0x2f0
[  275.977482][T10786]  ? irqentry_exit+0x218/0x910
[  275.977492][T10786]  ? lockdep_hardirqs_on+0x7b/0x110
[  275.977500][T10786]  ? irqentry_exit+0x218/0x910
[  275.977510][T10786]  ? trace_irq_disable+0x3b/0x140
[  275.977521][T10786]  ? ocfs2_xattr_user_set+0xab/0x100
[  275.977558][T10786]  ? __pfx_ocfs2_xattr_user_set+0x10/0x10
[  275.977569][T10786]  __vfs_setxattr+0x442/0x480
[  275.977582][T10786]  __vfs_setxattr_noperm+0x12a/0x660
[  275.977595][T10786]  vfs_setxattr+0x163/0x360
[  275.977607][T10786]  ? __pfx_vfs_setxattr+0x10/0x10
[  275.977619][T10786]  filename_setxattr+0x296/0x630
[  275.977628][T10786]  ? __pfx_filename_setxattr+0x10/0x10
[  275.977636][T10786]  ? do_getname+0x151/0x250
[  275.977647][T10786]  path_setxattrat+0x408/0x450
[  275.977658][T10786]  ? __pfx_path_setxattrat+0x10/0x10
[  275.977666][T10786]  ? do_futex+0x3e7/0x4e0
[  275.977680][T10786]  ? rcu_is_watching+0x16/0xb0
[  275.977691][T10786]  __x64_sys_setxattr+0xbc/0xe0
[  275.977702][T10786]  do_syscall_64+0x166/0x520
[  275.977716][T10786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.977729][T10786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.977741][T10786] RIP: 0033:0x7f0dbeb9e159
[  275.977755][T10786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.977765][T10786] RSP: 002b:00007f0dbfac8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  275.977780][T10786] RAX: ffffffffffffffda RBX: 00007f0dbee26180 RCX: 00007f0dbeb9e159
[  275.977791][T10786] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000340
[  275.977799][T10786] RBP: 00007f0dbec3506b R08: 0000000000000000 R09: 0000000000000000
[  275.977807][T10786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  275.977814][T10786] R13: 00007f0dbee26218 R14: 00007f0dbee26180 R15: 00007ffc7f5322e8
[  275.977827][T10786]  </TASK>
[  276.331784][T10777] syz.5.2018 (10777) used greatest stack depth: 19720 bytes left
[  277.276698][ T9193] ocfs2: Unmounting device (7,5) on (node local)
