last executing test programs: 16.482013321s ago: executing program 0 (id=502): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000020850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) 16.409606118s ago: executing program 0 (id=503): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x62) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x6df7984c01f4e88c, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008805}, 0x4004004) 15.106819826s ago: executing program 0 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 12.469483595s ago: executing program 4 (id=519): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)="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", 0x2fb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab4", 0xe6}], 0x1}}], 0x2, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12.346759717s ago: executing program 4 (id=520): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getgroups(0x9, &(0x7f0000001480)=[0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xee00, 0x0, 0xee00, 0xee00, 0xffffffffffffffff]) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000014c0), 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x25, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000000) 12.189485982s ago: executing program 4 (id=521): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) 11.249773475s ago: executing program 3 (id=524): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 11.188385121s ago: executing program 4 (id=525): syz_mount_image$fuse(0x0, 0x0, 0x285a060, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), 0x0, 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) 9.470335319s ago: executing program 3 (id=529): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 9.128652583s ago: executing program 0 (id=530): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) 9.126340853s ago: executing program 4 (id=531): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = io_uring_setup(0x3f81, &(0x7f0000000100)={0x0, 0xc40d, 0x10000, 0x0, 0x33a}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x2c3, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r6 = fanotify_init(0x200, 0x0) writev(r6, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000380)) timer_create(0x5, &(0x7f00000005c0)={0x0, 0x21, 0x0, @tid=r7}, &(0x7f0000000180)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e64, 0x4, @remote, 0x2}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0x9) personality(0xbf0000b) io_setup(0x9, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x14, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x75fa, 0xc9da, 0xa, 0x0, 0x0) syz_usb_connect(0x2, 0x35a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 8.485933746s ago: executing program 3 (id=533): socket$packet(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 7.893749685s ago: executing program 0 (id=534): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f00000004c0)=ANY=[], 0x1, 0x152d, &(0x7f0000001f80)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x4a) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x4000000000001dd, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 6.941055798s ago: executing program 3 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') 6.489214232s ago: executing program 3 (id=537): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000d80)=[{0x810, 0x0, 0x0, 0x0}], 0x1}) 5.439702455s ago: executing program 1 (id=542): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0307000000000000000008000000680004800400"], 0x7c}}, 0x0) 5.345669655s ago: executing program 2 (id=543): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0xf, 0x1ef403) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 5.137824735s ago: executing program 1 (id=544): socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) eventfd(0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r5 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) 4.380750999s ago: executing program 2 (id=545): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f0000000180)=0x10) 4.292760608s ago: executing program 1 (id=546): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi4\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000010", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES16, @ANYRES32], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2'], 0x9) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000240)) 4.213715736s ago: executing program 2 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') 2.751403629s ago: executing program 1 (id=548): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 2.751076489s ago: executing program 2 (id=549): pipe2(&(0x7f0000000040), 0x4080) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x406, &(0x7f0000000140)={[], [], 0x2c}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) 2.696127475s ago: executing program 3 (id=550): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)={0x40, 0x22, 0x8, {0x8, 0xf, "01681a57c695"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 920.979629ms ago: executing program 1 (id=551): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x2000000015, 0x80005, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) 541.530866ms ago: executing program 4 (id=552): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c696e6f646536342c6c6f63616c616c6c6f633d30303030303030303030303030303030313731342c61636c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c00882bb7a63864a19f186813ab5265f313eeeea0cb144b9317f58558f596fa072f9a29c38a293509350482fc7f"], 0x1, 0x4450, &(0x7f0000008900)="$eJzs3c9vHGcZAOB3Jia1Qxvs0EORkFiJSiBAlt0T4Eo4jhPXbkxQIBXislnb28Sw9kb2GnGohLlV4oTEAXGoQOLmU+UD1yLxD3DhWK5UggMXJKSIRbs7a++Md/ESdus6eh4pHs/3a971uzPzzWHypZnG4+390vZ+qbJbqm++vf9a6cf12sFONdKPyUUfn+GMPk9JyP3FuXfrznffei3iD1t//qjZbDajZSL6mu/5/Z//eGezd9uVFvq0xu0/2qj8ICJePhNXy5WI+P7vI5KIuJmVLWXbqYi4Hp26t975+cPSiKJ5/8Pq6+Wn6+8eL7y6dvTe8eDPnkT8uva5rz3a+dsXryz85SsjOjwAAAAAAAAAAAAAAAAAAJfcyv17D74zNx8fJDFxlJx9X3cl2w56P7Y5Ml8Y/4cFAAAAAAAAAAAAAAAAAACAT6jT9/9LyY1kIiLy7/8vZ9vFAf2b3xp/jIzP6rfvLd+em8/Wf0/O1H89K/r7zSsx02fd9+L67zcL/fuv//7CyOLvxtc97nQk6WxuP01nZyN+my38/kpyLa3V9xtffbt+sLs1sjAurXz+O6v3574F2YL+w+Z/qTD++Nf//2wUv7Wt/Ydnv8r0kc//lYHtfvezZKj83yr0+zjyz7PL53+iXTbV22CxcwFo5f8XE+fnf7kw/rjyfz0iSkkr1lLubnIj6ZQPmq+Ql8//p9pluUtn9occdP7/q5D/24XxL+r6f1i8EdFXPv9X22WTuRan5/9Mev75f6cw/kXkvxX/ofv/UPL5z66kE7km7b/ksNf/lcL448r/g7Qd51/jepL7BhwlnfgH/X915OXzP3mm/vT5Lx1q/vdGoX///I/u5OzG1z1u+/mv2Wz+NNv/ctJ5/qO/fP6nBrYb9vxfLfQb9/V/MUpDPwFcHWcgl1Q+/9faZfm583T757D5X+vdeTq+/LdnJZPd/J9eT/79Qqf8Nz3zvwfjCOA5kc//pzuFaW+Lw/bP9vwvOX/+/2Zh/P+S/+RwJJ/g7PyvFf9hOpLBn3v5/L84sF0r/38a4v5/t9Bv/PP/iDlz/WeWz/9LA9u1z//J8/O/Xug37vx/aZyDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwCS9l2OpJ0NrefprOzEbey/VfiWrJR2Spv1OqbP9qPWM7KS3EjeVSrb1Rq5e3d+la1XKnV6psRt7P6l2My2a/VG+WdypM7J2NNJY+rlb3GRrXSiIiVrPzz8VJ3rI3txk7lSUS8cVL3mbS+9+RxZbe8tb33zbm5ublYPYlhJqn+pFHdbXSO3qmNWDvpO530BNeufvMklheTH9YP9nYrtXb53Z4+tfpmpdbTZz2r+2XMJI29g93NSqNartUfdY83yB+vPmNy/geL2XZ59f737t+dP1P/MOlsl8YfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/hw8WvvGriJjo7KURUUqyX5LsX877H1ZfLz9df/d44dW1o/eOP+rXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMByj2/d+2vdRKS42l5G/H7+/R/nz6V+303fvzjDjJzO00t3/1A35d/TKL8tR6s279PN+usjJmrvZ7Anw306GPcZmtu3ufn6vteRchURbclvUs5VtewtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AoAAP//YvMk6w==") open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f000000b6c0)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379befb0dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @desc2}}) 447.612216ms ago: executing program 0 (id=553): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) 248.974905ms ago: executing program 2 (id=554): syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="043e1f1b843c7e144fca668ddabce78f651069f1d82f"], 0x22) 114.051878ms ago: executing program 2 (id=555): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, 0x0, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 1 (id=556): syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) kernel console output (not intermixed with test programs): rface batadv_slave_1 (retrying later): interface not active [ 54.184630][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.191590][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.217810][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.255372][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.262084][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.268644][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.277188][ T4184] Cannot create hsr debugfs directory [ 54.296658][ T4188] device hsr_slave_0 entered promiscuous mode [ 54.303535][ T4188] device hsr_slave_1 entered promiscuous mode [ 54.310184][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.317921][ T4188] Cannot create hsr debugfs directory [ 54.371275][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.378814][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.385537][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.393210][ T4186] Cannot create hsr debugfs directory [ 54.413856][ T4185] device hsr_slave_0 entered promiscuous mode [ 54.420566][ T4185] device hsr_slave_1 entered promiscuous mode [ 54.427238][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.435128][ T4185] Cannot create hsr debugfs directory [ 54.495018][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 54.501798][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 54.506260][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 54.513372][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 54.526306][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 54.710495][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.736064][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.745532][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.755126][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.783756][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.806284][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.825936][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.835999][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.896165][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.905728][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.927266][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.945016][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.002001][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.011341][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.043612][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.056519][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.082699][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.093066][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.102318][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.115291][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.131829][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.166966][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.175504][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.187654][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.196373][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.204211][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.212758][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.222194][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.229607][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.240615][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.257778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.266754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.275596][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.282676][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.291734][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.301154][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.324795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.333486][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.346071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.357373][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.364488][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.372957][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.383922][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.393849][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.403345][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.410453][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.418577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.428650][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.443345][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.452005][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.462179][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.479470][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.495882][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.505051][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.515527][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.526310][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.539499][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.548311][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.558237][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.579600][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.587978][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.596716][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.605808][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.615765][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.635361][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.646352][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.658238][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.683766][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.693568][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.702070][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.711057][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.722148][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.729296][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.738625][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.747743][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.756170][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.765617][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.773886][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.782637][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.791749][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.815113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.830378][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.842018][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.849248][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.865397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.875025][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.888641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.898312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.907939][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.917111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.926120][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.946399][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.955645][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.965323][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.980170][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.999236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.009064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.019755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.028942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.050720][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.066597][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.076943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.087806][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.094994][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.105975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.115766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.125394][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.132449][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.140820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.167011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.176682][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.191897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.210944][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.222716][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.245325][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.256335][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.293374][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.303980][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.313708][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.325275][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.333788][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.343328][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.365167][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.376204][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.402131][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.417031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.442153][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.475049][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.500128][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.513177][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.526820][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.549817][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.567199][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.584750][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 56.604238][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 56.607415][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.616114][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 56.623119][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 56.624383][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.637556][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 56.655860][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.666047][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.675340][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.685478][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.694315][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.734999][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.747140][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.756042][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.766986][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.776129][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.783208][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.791807][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.800611][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.809322][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.816451][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.826932][ T4187] device veth0_vlan entered promiscuous mode [ 56.839965][ T4184] device veth0_vlan entered promiscuous mode [ 56.861449][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.871874][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.880516][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.889357][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.904711][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.912877][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.921541][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.930145][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.938699][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.947825][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.956627][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.964023][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.973032][ T4188] device veth0_vlan entered promiscuous mode [ 56.998436][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.006731][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.015194][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.022975][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.031614][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.040948][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.050398][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.062397][ T4184] device veth1_vlan entered promiscuous mode [ 57.077369][ T4188] device veth1_vlan entered promiscuous mode [ 57.094879][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.103978][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.117744][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.127722][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.139654][ T4187] device veth1_vlan entered promiscuous mode [ 57.185904][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.198796][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.210434][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.219638][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.242981][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.255264][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.265999][ T4187] device veth0_macvtap entered promiscuous mode [ 57.276548][ T4187] device veth1_macvtap entered promiscuous mode [ 57.284012][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.293422][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.302852][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.311366][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.319884][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.328760][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.338463][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.346576][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.354815][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.362604][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.373457][ T4184] device veth0_macvtap entered promiscuous mode [ 57.382191][ T4186] device veth0_vlan entered promiscuous mode [ 57.402749][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.419011][ T4188] device veth0_macvtap entered promiscuous mode [ 57.433600][ T4184] device veth1_macvtap entered promiscuous mode [ 57.442856][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.456351][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.469938][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.479088][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.488403][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.496953][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.508198][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.520308][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.533116][ T4188] device veth1_macvtap entered promiscuous mode [ 57.542937][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.552073][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.563599][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.592951][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.603679][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.616028][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.625332][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.638540][ T4186] device veth1_vlan entered promiscuous mode [ 57.653387][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.666917][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.678453][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.705222][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.717607][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.727784][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.738451][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.750486][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.758796][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.767424][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.777606][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.786646][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.795572][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.802967][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.810995][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.819867][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.830608][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.842473][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.853446][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.889117][ T4186] device veth0_macvtap entered promiscuous mode [ 57.898620][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.908767][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.919677][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.928469][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.944366][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.965072][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.976494][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.987750][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.999882][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.011721][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.026592][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.041976][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.052692][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.063782][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.074912][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.086894][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.096195][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.108098][ T4186] device veth1_macvtap entered promiscuous mode [ 58.165022][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.173918][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.183434][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.192264][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.206044][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.215393][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.251075][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.262924][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.273306][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.285216][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.295639][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.307287][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.319836][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.336550][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.347338][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.357728][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.368301][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.378187][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.388967][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.400880][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.417075][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.426234][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.435699][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.444758][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.465169][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.473167][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.476719][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.497534][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.507135][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.516212][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.543085][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.553905][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.562676][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.571639][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.580288][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.605457][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.610692][ T4185] device veth0_vlan entered promiscuous mode [ 58.613435][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.646637][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.655160][ T1325] Bluetooth: hci4: command 0x040f tx timeout [ 58.666992][ T1325] Bluetooth: hci0: command 0x040f tx timeout [ 58.673464][ T1325] Bluetooth: hci3: command 0x040f tx timeout [ 58.679989][ T1325] Bluetooth: hci2: command 0x040f tx timeout [ 58.686567][ T1325] Bluetooth: hci1: command 0x040f tx timeout [ 58.718138][ T4185] device veth1_vlan entered promiscuous mode [ 58.728240][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.732922][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.757619][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.772026][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.796818][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.806625][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.815687][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.823562][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.849839][ T4185] device veth0_macvtap entered promiscuous mode [ 58.857228][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.860680][ T1444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.870870][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.902741][ T1444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.918688][ T4185] device veth1_macvtap entered promiscuous mode [ 58.927067][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.945232][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.954909][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.965825][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.985175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.993886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.003484][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.012392][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.020682][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.053567][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.071321][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.089208][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.100636][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.112698][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.123198][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.133150][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.145908][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.165872][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.287174][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.297680][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.347568][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.359945][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.466482][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.582273][ T4302] loop4: detected capacity change from 0 to 256 [ 59.680054][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.751299][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.814662][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.862551][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.877103][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.889250][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.970978][ T4302] FAT-fs (loop4): Directory bread(block 64) failed [ 59.978621][ T4302] FAT-fs (loop4): Directory bread(block 65) failed [ 59.986768][ T4302] FAT-fs (loop4): Directory bread(block 66) failed [ 59.993526][ T4302] FAT-fs (loop4): Directory bread(block 67) failed [ 60.000229][ T4302] FAT-fs (loop4): Directory bread(block 68) failed [ 60.007355][ T4302] FAT-fs (loop4): Directory bread(block 69) failed [ 60.013957][ T4302] FAT-fs (loop4): Directory bread(block 70) failed [ 60.020832][ T4302] FAT-fs (loop4): Directory bread(block 71) failed [ 60.027476][ T4302] FAT-fs (loop4): Directory bread(block 72) failed [ 60.034205][ T4302] FAT-fs (loop4): Directory bread(block 73) failed [ 60.049576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.061227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.112504][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.118146][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.131732][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.148632][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.150516][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.164849][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.292067][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.337747][ T4311] loop0: detected capacity change from 0 to 512 [ 60.428349][ T4311] FAT-fs (loop0): count of clusters too big (2147483660) [ 60.454766][ T4311] FAT-fs (loop0): Can't find a valid FAT filesystem [ 60.574770][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.584591][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.616703][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 60.745071][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 60.818007][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 60.940022][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 60.984547][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.993790][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.026164][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.090042][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 61.181229][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 61.304565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.313503][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.322550][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 61.331464][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 61.340484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 61.349475][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 61.377409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.811993][ T4309] loop3: detected capacity change from 0 to 32768 [ 61.872528][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.902350][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.960817][ T4309] ======================================================= [ 61.960817][ T4309] WARNING: The mand mount option has been deprecated and [ 61.960817][ T4309] and is ignored by this kernel. Remove the mand [ 61.960817][ T4309] option from the mount to silence this warning. [ 61.960817][ T4309] ======================================================= [ 62.091866][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.070044][ T4309] (syz.3.6,4309,1):ocfs2_initialize_super:2313 ERROR: status = -12 [ 63.134283][ T4329] loop4: detected capacity change from 0 to 128 [ 63.218233][ T4309] (syz.3.6,4309,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 64.322819][ T4257] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.366316][ T4329] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.392036][ T4329] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.983937][ T26] audit: type=1800 audit(1761240417.636:2): pid=4329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm=77DEA305FF07 name="bus" dev="loop4" ino=1048590 res=0 errno=0 [ 65.078365][ T4343] loop0: detected capacity change from 0 to 512 [ 65.173623][ T4343] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.14: casefold flag without casefold feature [ 65.186725][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.226407][ T4347] loop4: detected capacity change from 0 to 512 [ 65.237228][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.280238][ T4343] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.14: couldn't read orphan inode 15 (err -117) [ 65.292148][ T4257] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 65.315825][ T4342] loop1: detected capacity change from 0 to 32768 [ 65.318297][ T4347] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.336327][ T4347] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.353509][ T4347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 65.360576][ T4343] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.361569][ T4347] System zones: 1-12 [ 65.378896][ T4347] EXT4-fs (loop4): 1 truncate cleaned up [ 65.384626][ T4347] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,quota,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 65.489675][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.540162][ T4342] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 65.550917][ T4340] loop3: detected capacity change from 0 to 32768 [ 65.559955][ T4342] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 65.568760][ T4342] XFS (loop1): DAX and reflink cannot be used together! [ 65.570881][ T4257] usb 3-1: config 0 descriptor?? [ 65.659935][ T4340] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.12 (4340) [ 65.827157][ T4340] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 65.859605][ T4340] BTRFS info (device loop3): force clearing of disk cache [ 66.584285][ T4340] BTRFS info (device loop3): enabling auto defrag [ 66.603089][ T4340] BTRFS info (device loop3): max_inline at 727 [ 66.650295][ T4340] BTRFS info (device loop3): enabling disk space caching [ 66.704389][ T4340] BTRFS info (device loop3): disk space caching is enabled [ 66.711736][ T4340] BTRFS info (device loop3): has skinny extents [ 66.744405][ T4257] usbhid 3-1:0.0: can't add hid device: -71 [ 66.750693][ T4257] usbhid: probe of 3-1:0.0 failed with error -71 [ 66.792278][ T4257] usb 3-1: USB disconnect, device number 2 [ 67.567080][ T4361] loop2: detected capacity change from 0 to 256 [ 67.664144][ T4361] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 67.665568][ T4371] loop1: detected capacity change from 0 to 1024 [ 67.739348][ T4375] loop4: detected capacity change from 0 to 64 [ 67.801683][ T4340] BTRFS info (device loop3): enabling ssd optimizations [ 67.862879][ T4371] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.983748][ T4340] BTRFS info (device loop3): clearing free space tree [ 67.998525][ T4340] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 68.343443][ T26] audit: type=1800 audit(1761240420.986:3): pid=4375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17" name="file2" dev="loop4" ino=21 res=0 errno=0 [ 68.635353][ T4340] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.064064][ C0] sched: RT throttling activated [ 69.222638][ T26] audit: type=1326 audit(1761240421.766:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925c1c0fc9 code=0x7ffc0000 [ 69.372733][ T26] audit: type=1326 audit(1761240421.766:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f925c1c0fc9 code=0x7ffc0000 [ 69.395290][ T26] audit: type=1326 audit(1761240421.766:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925c1c0fc9 code=0x7ffc0000 [ 69.421292][ T4392] loop2: detected capacity change from 0 to 40427 [ 69.504806][ T26] audit: type=1326 audit(1761240421.766:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f925c1c0fc9 code=0x7ffc0000 [ 69.537045][ T4392] F2FS-fs (loop2): invalid crc value [ 69.819339][ T4392] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.203826][ T4407] loop0: detected capacity change from 0 to 32768 [ 71.244826][ T4392] F2FS-fs (loop2): Start checkpoint disabled! [ 71.387991][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.396107][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.550692][ T4392] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 71.615200][ T26] audit: type=1326 audit(1761240421.766:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925c1c0fc9 code=0x7ffc0000 [ 72.481278][ T4407] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.24 (4407) [ 73.506383][ T26] audit: type=1326 audit(1761240421.766:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f925c1c0fc9 code=0x7ffc0000 [ 74.176445][ T26] audit: type=1326 audit(1761240421.766:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925c1c0fc9 code=0x7ffc0000 [ 74.983971][ T4407] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 74.992718][ T4407] BTRFS info (device loop0): using free space tree [ 74.999344][ T4407] BTRFS info (device loop0): has skinny extents [ 75.074088][ T26] audit: type=1326 audit(1761240421.766:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925c1c0fc9 code=0x7ffc0000 [ 75.755013][ T4446] loop4: detected capacity change from 0 to 256 [ 75.784102][ T26] audit: type=1326 audit(1761240421.766:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f925c1c0fc9 code=0x7ffc0000 [ 75.832443][ T4446] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 75.864778][ T26] audit: type=1326 audit(1761240421.766:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f925c1c1003 code=0x7ffc0000 [ 75.876663][ T4407] BTRFS error (device loop0): open_ctree failed: -12 [ 75.895592][ T4357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4357) [ 75.961022][ T4446] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 76.011117][ T4446] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 76.056708][ T26] audit: type=1326 audit(1761240421.856:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f925c1bfa7f code=0x7ffc0000 [ 76.082518][ T26] audit: type=1326 audit(1761240422.016:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f925c1c1057 code=0x7ffc0000 [ 76.107008][ T26] audit: type=1326 audit(1761240422.016:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f925c1bf810 code=0x7ffc0000 [ 76.115741][ T4446] UDF-fs: Scanning with blocksize 512 failed [ 76.129412][ T26] audit: type=1326 audit(1761240422.076:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f925c1c0bcb code=0x7ffc0000 [ 76.294970][ T4446] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 76.315997][ T4446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.029883][ T1111] cfg80211: failed to load regulatory.db [ 78.066053][ T4321] attempt to access beyond end of device [ 78.066053][ T4321] loop2: rw=2049, want=45120, limit=40427 [ 78.205818][ T4475] loop4: detected capacity change from 0 to 128 [ 78.304234][ T4475] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 78.403803][ T4478] ubi0: attaching mtd0 [ 78.432662][ T4478] ubi0: scanning is finished [ 78.457915][ T4478] ubi0: empty MTD device detected [ 78.624638][ T4478] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 78.640907][ T4478] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 78.672456][ T4478] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 78.701979][ T4478] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 78.744279][ T4478] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 78.779534][ T4478] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 78.817238][ T4478] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4165518409 [ 78.857958][ T4478] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 78.889665][ T4482] ubi0: background thread "ubi_bgt0d" started, PID 4482 [ 78.897345][ T4479] ubi0: detaching mtd0 [ 78.963356][ T4479] ubi0: mtd0 is detached [ 79.237459][ T4417] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 79.309252][ T4485] loop2: detected capacity change from 0 to 2048 [ 79.515548][ T4494] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.550605][ T4491] loop4: detected capacity change from 0 to 2048 [ 79.686061][ T4491] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 80.660585][ T4491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.882193][ T4504] loop1: detected capacity change from 0 to 64 [ 82.581383][ T4521] loop0: detected capacity change from 0 to 256 [ 82.645216][ T4521] exfat: Unknown parameter 'fsmagic' [ 82.910918][ T4512] loop1: detected capacity change from 0 to 40427 [ 82.956242][ T4527] loop2: detected capacity change from 0 to 512 [ 82.969512][ T4512] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 82.997359][ T4512] F2FS-fs (loop1): invalid crc value [ 83.022344][ T4529] loop4: detected capacity change from 0 to 1024 [ 83.054224][ T4257] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.075903][ T4512] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.124885][ T4529] EXT4-fs (loop4): inline encryption not supported [ 83.168840][ T4527] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 83.196355][ T4529] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.251658][ T4527] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.313246][ T4529] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,grpid,jqfmt=vfsv1,errors=remount-ro,. Quota mode: writeback. [ 83.324672][ T4257] usb 4-1: Using ep0 maxpacket: 16 [ 83.436743][ T4512] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.544213][ T4257] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.564842][ T4257] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.579222][ T4257] usb 4-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 83.589796][ T4257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.619784][ T4257] usb 4-1: config 0 descriptor?? [ 83.643973][ T4185] attempt to access beyond end of device [ 83.643973][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 83.784139][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.840162][ T4543] loop2: detected capacity change from 0 to 2048 [ 83.959782][ T4545] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.164201][ T21] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.308022][ T21] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 84.318560][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.328713][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 84.340795][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 84.491428][ T4523] loop3: detected capacity change from 0 to 40427 [ 84.545953][ T4523] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 84.553723][ T4523] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.569403][ T4523] F2FS-fs (loop3): invalid crc value [ 84.594443][ T21] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.612621][ T21] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.643459][ T4523] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.652045][ T21] usb 1-1: Product: syz [ 84.662185][ T21] usb 1-1: Manufacturer: syz [ 84.766703][ T21] cdc_wdm 1-1:1.0: skipping garbage [ 84.795654][ T21] cdc_wdm 1-1:1.0: skipping garbage [ 84.840994][ T21] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 84.847155][ T21] cdc_wdm 1-1:1.0: Unknown control protocol [ 84.865147][ T4523] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.872217][ T4523] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.087691][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 86.087707][ T26] audit: type=1800 audit(1761240437.836:41): pid=4562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.50" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 86.467046][ T4565] loop4: detected capacity change from 0 to 64 [ 86.497331][ T4563] usb 1-1: USB disconnect, device number 2 [ 87.434414][ T4257] usbhid 4-1:0.0: can't add hid device: -71 [ 87.440594][ T4257] usbhid: probe of 4-1:0.0 failed with error -71 [ 87.483243][ T4188] attempt to access beyond end of device [ 87.483243][ T4188] loop3: rw=2049, want=40968, limit=40427 [ 87.530520][ T4257] usb 4-1: USB disconnect, device number 2 [ 87.788995][ T4585] loop2: detected capacity change from 0 to 256 [ 88.614874][ T4585] exfat: Unknown parameter 'fsmagic' [ 89.153564][ T4587] loop2: detected capacity change from 0 to 4096 [ 89.199246][ T4587] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 89.612244][ T4583] loop0: detected capacity change from 0 to 32768 [ 89.643843][ T4587] EXT4-fs (loop2): Test dummy encryption mode enabled [ 89.694186][ T4587] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 89.825549][ T4587] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 90.196182][ T4601] loop1: detected capacity change from 0 to 32768 [ 90.298213][ T4601] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 90.308336][ T4601] BTRFS info (device loop1): using free space tree [ 90.315840][ T4601] BTRFS info (device loop1): has skinny extents [ 90.392576][ T4604] loop0: detected capacity change from 0 to 2048 [ 90.653690][ T4601] BTRFS info (device loop1): enabling ssd optimizations [ 90.793237][ T4627] loop4: detected capacity change from 0 to 256 [ 91.350072][ T4629] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.736880][ T4621] loop2: detected capacity change from 0 to 4096 [ 91.825134][ T4627] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 93.448994][ T4648] loop4: detected capacity change from 0 to 4096 [ 94.227276][ T4648] ntfs3: Unknown parameter 'nocase' [ 94.657133][ T4671] loop3: detected capacity change from 0 to 4096 [ 94.737477][ T4671] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 94.741004][ T4671] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.741065][ T4671] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 94.851666][ T4671] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 95.791862][ T4674] loop0: detected capacity change from 0 to 32768 [ 95.865203][ T4674] ERROR: (device loop0): diRead: i_ino != di_number [ 95.865203][ T4674] [ 96.870694][ T4688] loop0: detected capacity change from 0 to 256 [ 97.780303][ T4694] loop2: detected capacity change from 0 to 32768 [ 99.020148][ T4688] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 99.641364][ T4694] ERROR: (device loop2): diRead: i_ino != di_number [ 99.641364][ T4694] [ 100.820904][ T4696] loop4: detected capacity change from 0 to 32768 [ 100.853240][ T4696] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.88 (4696) [ 101.233484][ T4696] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 101.303185][ T4696] BTRFS info (device loop4): using free space tree [ 101.326650][ T4696] BTRFS info (device loop4): has skinny extents [ 101.839148][ T4711] loop0: detected capacity change from 0 to 4096 [ 101.928179][ T4711] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 101.936156][ T4719] loop2: detected capacity change from 0 to 128 [ 101.998390][ T4711] EXT4-fs (loop0): Test dummy encryption mode enabled [ 102.081501][ T4711] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 102.110086][ T4719] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 102.194371][ T4719] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.210108][ T4711] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 102.515814][ T4696] BTRFS error (device loop4): open_ctree failed: -12 [ 102.816523][ T4744] netlink: 72 bytes leftover after parsing attributes in process `syz.1.97'. [ 103.563772][ T4748] loop0: detected capacity change from 0 to 256 [ 103.604748][ T4748] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 106.332936][ T4777] loop3: detected capacity change from 0 to 4096 [ 106.547665][ T4777] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 106.589717][ T4789] loop0: detected capacity change from 0 to 128 [ 106.614774][ T4777] EXT4-fs (loop3): Test dummy encryption mode enabled [ 106.634666][ T4777] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 106.703132][ T4777] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 107.061145][ T4793] netlink: 72 bytes leftover after parsing attributes in process `syz.4.110'. [ 108.355583][ T4789] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 108.398726][ T4799] loop4: detected capacity change from 0 to 256 [ 108.417982][ T4360] udevd[4360]: incorrect ext4 checksum on /dev/loop0 [ 108.729894][ T4799] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 109.411164][ T4450] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 109.418861][ T4447] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.512636][ T4809] loop0: detected capacity change from 0 to 32768 [ 109.548038][ T4812] loop1: detected capacity change from 0 to 256 [ 109.604961][ T4809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.118 (4809) [ 109.644623][ T4812] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 109.676674][ T4809] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 109.685484][ T4809] BTRFS info (device loop0): turning on flush-on-commit [ 109.692578][ T4809] BTRFS info (device loop0): max_inline at 0 [ 109.698700][ T4809] BTRFS info (device loop0): enabling disk space caching [ 109.706048][ T4809] BTRFS info (device loop0): setting nodatasum [ 109.712231][ T4809] BTRFS info (device loop0): turning off barriers [ 109.718813][ T4809] BTRFS info (device loop0): disabling tree log [ 109.725232][ T4809] BTRFS info (device loop0): enabling ssd optimizations [ 109.732333][ T4809] BTRFS info (device loop0): force clearing of disk cache [ 109.739787][ T4809] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.749742][ T4809] BTRFS info (device loop0): use zstd compression, level 3 [ 109.758353][ T4809] BTRFS info (device loop0): max_inline at 0 [ 109.764469][ T4809] BTRFS info (device loop0): disk space caching is enabled [ 109.772512][ T4809] BTRFS info (device loop0): has skinny extents [ 110.134289][ T4827] loop1: detected capacity change from 0 to 1024 [ 110.162386][ T4809] BTRFS info (device loop0): clearing free space tree [ 110.169407][ T4809] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.180065][ T4809] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.203281][ T4809] BTRFS info (device loop0): checking UUID tree [ 110.304175][ T4447] usb 4-1: Using ep0 maxpacket: 32 [ 110.496938][ T4447] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.524620][ T4450] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.065155][ T4842] mmap: syz.4.121 (4842) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 111.131009][ T4447] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.145251][ T4450] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.192778][ T4450] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.200001][ T4450] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 111.249785][ T4450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.274322][ T4447] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 111.303927][ T4447] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 111.344173][ T4450] usb 3-1: config 0 descriptor?? [ 111.350003][ T4447] usb 4-1: Manufacturer: syz [ 111.391826][ T4447] usb 4-1: config 0 descriptor?? [ 111.422764][ T4450] usb 3-1: can't set config #0, error -71 [ 111.433367][ T4450] usb 3-1: USB disconnect, device number 3 [ 111.480931][ T4176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop0 scanned by udevd (4176) [ 112.064805][ T4854] netlink: 72 bytes leftover after parsing attributes in process `syz.2.124'. [ 112.574381][ T4447] usbhid 4-1:0.0: can't add hid device: -71 [ 112.580392][ T4447] usbhid: probe of 4-1:0.0 failed with error -71 [ 113.925971][ T4447] usb 4-1: USB disconnect, device number 3 [ 114.163074][ T4865] loop2: detected capacity change from 0 to 4096 [ 114.574478][ T4875] loop3: detected capacity change from 0 to 40427 [ 114.583794][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.606636][ T4865] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 114.607022][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.628215][ T4875] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 114.636129][ T4875] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.646898][ T4865] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.653910][ T4865] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 114.664398][ T4875] F2FS-fs (loop3): invalid crc value [ 114.675930][ T4865] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 114.748544][ T4877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.769221][ T4875] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.823931][ T4875] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.831471][ T4875] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.513909][ T4870] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 116.264214][ T4870] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0/file1 [ 116.317296][ T4890] loop4: detected capacity change from 0 to 256 [ 116.595648][ T4890] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 118.220637][ T4907] Cannot find add_set index 0 as target [ 119.294207][ T4909] netlink: 72 bytes leftover after parsing attributes in process `syz.1.136'. [ 120.701452][ T4921] loop4: detected capacity change from 0 to 256 [ 121.042789][ T4921] FAT-fs (loop4): Directory bread(block 64) failed [ 121.049602][ T4921] FAT-fs (loop4): Directory bread(block 65) failed [ 121.056833][ T4921] FAT-fs (loop4): Directory bread(block 66) failed [ 121.063504][ T4921] FAT-fs (loop4): Directory bread(block 67) failed [ 121.070591][ T4921] FAT-fs (loop4): Directory bread(block 68) failed [ 121.077298][ T4921] FAT-fs (loop4): Directory bread(block 69) failed [ 121.084122][ T4921] FAT-fs (loop4): Directory bread(block 70) failed [ 121.090762][ T4921] FAT-fs (loop4): Directory bread(block 71) failed [ 121.097747][ T4921] FAT-fs (loop4): Directory bread(block 72) failed [ 121.104426][ T4921] FAT-fs (loop4): Directory bread(block 73) failed [ 121.566056][ T4923] loop0: detected capacity change from 0 to 4096 [ 121.720806][ T4923] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 121.856759][ T4923] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.972269][ T4923] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 122.301200][ T4923] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 126.566027][ T4948] tipc: Started in network mode [ 126.571295][ T4948] tipc: Node identity 321c85e1c22d, cluster identity 4711 [ 126.586492][ T4948] tipc: Enabled bearer , priority 0 [ 126.608974][ T4948] tipc: Disabling bearer [ 126.880797][ T4961] netlink: 72 bytes leftover after parsing attributes in process `syz.1.150'. [ 127.432911][ T4967] netlink: 324 bytes leftover after parsing attributes in process `syz.4.155'. [ 128.276291][ T4975] loop0: detected capacity change from 0 to 256 [ 128.415387][ T4975] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 129.112895][ T4984] loop4: detected capacity change from 0 to 512 [ 129.164134][ T4984] FAT-fs (loop4): count of clusters too big (2147483660) [ 129.244433][ T4984] FAT-fs (loop4): Can't find a valid FAT filesystem [ 132.815676][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.822055][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.429187][ T4330] Bluetooth: hci3: command 0x0409 tx timeout [ 134.633346][ T5002] netlink: 72 bytes leftover after parsing attributes in process `syz.3.165'. [ 134.691146][ T5000] loop4: detected capacity change from 0 to 32768 [ 134.730439][ T5000] ERROR: (device loop4): diRead: i_ino != di_number [ 134.730439][ T5000] [ 135.236366][ T5006] netlink: 324 bytes leftover after parsing attributes in process `syz.0.166'. [ 135.372142][ T5017] loop0: detected capacity change from 0 to 256 [ 135.414181][ T5014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 135.453892][ T5017] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 136.069436][ T5028] loop1: detected capacity change from 0 to 40427 [ 136.247355][ T4176] udevd[4176]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 136.259113][ T5028] F2FS-fs (loop1): invalid crc value [ 136.417126][ T5041] netlink: 72 bytes leftover after parsing attributes in process `syz.4.177'. [ 136.896388][ T5028] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 137.004351][ T5028] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 137.045130][ T26] audit: type=1800 audit(1761240489.686:42): pid=5026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.175" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 137.659927][ T5047] loop4: detected capacity change from 0 to 512 [ 137.953537][ T5047] FAT-fs (loop4): count of clusters too big (2147483660) [ 137.988337][ T5045] loop3: detected capacity change from 0 to 32768 [ 138.065871][ T5047] FAT-fs (loop4): Can't find a valid FAT filesystem [ 138.105894][ T5045] ERROR: (device loop3): diRead: i_ino != di_number [ 138.105894][ T5045] [ 138.290937][ T4185] attempt to access beyond end of device [ 138.290937][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 140.094927][ T5058] netlink: 324 bytes leftover after parsing attributes in process `syz.0.183'. [ 140.289960][ T5060] loop4: detected capacity change from 0 to 1024 [ 140.343802][ T5065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.186'. [ 140.416704][ T5060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.496099][ T5068] Zero length message leads to an empty skb [ 140.587578][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 141.272650][ T5079] loop0: detected capacity change from 0 to 1024 [ 141.492839][ T5085] loop1: detected capacity change from 0 to 256 [ 141.548386][ T5087] loop4: detected capacity change from 0 to 512 [ 141.599674][ T5085] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 141.649768][ T5087] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.952653][ T5087] EXT4-fs (loop4): 1 truncate cleaned up [ 142.068594][ T5087] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 142.669335][ T5090] loop2: detected capacity change from 0 to 32768 [ 143.981347][ T5094] loop3: detected capacity change from 0 to 256 [ 144.054734][ T5094] exfat: Unknown parameter 'fsmagic' [ 144.203702][ T5090] ERROR: (device loop2): diRead: i_ino != di_number [ 144.203702][ T5090] [ 144.388329][ T5101] netlink: 324 bytes leftover after parsing attributes in process `syz.3.195'. [ 145.933341][ T5107] loop3: detected capacity change from 0 to 32768 [ 146.593582][ T5107] ERROR: (device loop3): diRead: i_ino != di_number [ 146.593582][ T5107] [ 147.999939][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 148.024173][ T5117] device bridge_slave_1 left promiscuous mode [ 148.032333][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.509906][ T5117] device bridge_slave_0 left promiscuous mode [ 148.582526][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.620486][ T5119] loop2: detected capacity change from 0 to 32768 [ 148.632819][ T5125] loop0: detected capacity change from 0 to 512 [ 148.667403][ T5119] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.199 (5119) [ 148.699766][ T5125] EXT4-fs (loop0): Test dummy encryption mode enabled [ 148.713133][ T5119] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 148.729197][ T5119] BTRFS info (device loop2): using free space tree [ 148.736628][ T5119] BTRFS info (device loop2): has skinny extents [ 148.743882][ T5125] EXT4-fs (loop0): Test dummy encryption mode enabled [ 148.803907][ T5125] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 148.933425][ T5125] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.202: Directory hole found for htree leaf block 0 [ 148.983510][ T5125] EXT4-fs (loop0): Remounting filesystem read-only [ 149.030764][ T5133] loop4: detected capacity change from 0 to 32768 [ 149.087541][ T5133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.204 (5133) [ 149.209791][ T5148] netlink: 324 bytes leftover after parsing attributes in process `syz.0.206'. [ 149.300945][ T5133] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 149.309968][ T5133] BTRFS info (device loop4): using free space tree [ 149.316665][ T5133] BTRFS info (device loop4): has skinny extents [ 149.948513][ T5137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.965699][ T5119] BTRFS info (device loop2): enabling ssd optimizations [ 150.276914][ T5133] BTRFS info (device loop4): enabling ssd optimizations [ 150.454867][ T5169] loop3: detected capacity change from 0 to 32768 [ 152.891221][ T5188] loop0: detected capacity change from 0 to 32768 [ 153.023672][ T5188] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.211 (5188) [ 154.282647][ T4178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4178) [ 155.042739][ T5210] loop1: detected capacity change from 0 to 256 [ 156.391677][ T5210] FAT-fs (loop1): Directory bread(block 64) failed [ 156.398551][ T5210] FAT-fs (loop1): Directory bread(block 65) failed [ 156.405639][ T5210] FAT-fs (loop1): Directory bread(block 66) failed [ 156.412283][ T5210] FAT-fs (loop1): Directory bread(block 67) failed [ 156.419372][ T5210] FAT-fs (loop1): Directory bread(block 68) failed [ 156.426077][ T5210] FAT-fs (loop1): Directory bread(block 69) failed [ 156.433342][ T5210] FAT-fs (loop1): Directory bread(block 70) failed [ 156.440045][ T5210] FAT-fs (loop1): Directory bread(block 71) failed [ 156.447118][ T5210] FAT-fs (loop1): Directory bread(block 72) failed [ 156.453766][ T5210] FAT-fs (loop1): Directory bread(block 73) failed [ 156.576167][ T5219] loop2: detected capacity change from 0 to 512 [ 156.639381][ T5219] EXT4-fs (loop2): filesystem is read-only [ 156.703023][ T5219] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 156.791570][ T5219] EXT4-fs (loop2): filesystem is read-only [ 156.798951][ T5219] EXT4-fs (loop2): orphan cleanup on readonly fs [ 156.807808][ T5219] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #16: comm syz.2.217: iget: bad i_size value: -504403158265486552 [ 156.837677][ T5219] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.217: couldn't read orphan inode 16 (err -117) [ 156.929112][ T5219] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000004000000,max_batch_time=0x0000000000000003,noblock_validity,noinit_itable,nolazytime,grpid,noauto_da_alloc,,errors=continue. Quota mode: none. [ 156.958466][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.396441][ T5235] netlink: 324 bytes leftover after parsing attributes in process `syz.1.221'. [ 157.697849][ T5239] loop4: detected capacity change from 0 to 32768 [ 157.786892][ T5241] loop3: detected capacity change from 0 to 32768 [ 157.820507][ T5215] loop0: detected capacity change from 0 to 32768 [ 157.854286][ T5241] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.223 (5241) [ 157.855334][ T5239] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 157.865293][ T5197] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 157.873489][ T5239] BTRFS info (device loop4): using free space tree [ 157.887579][ T5239] BTRFS info (device loop4): has skinny extents [ 157.994567][ T4360] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4360) [ 158.694361][ T5197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.708243][ T5215] XFS (loop0): Mounting V5 Filesystem [ 158.763485][ T5197] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 158.895287][ T5197] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 159.122410][ T5197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.155603][ T5239] BTRFS info (device loop4): enabling ssd optimizations [ 159.401404][ T5197] usb 3-1: config 0 descriptor?? [ 159.540281][ T5252] loop1: detected capacity change from 0 to 32768 [ 159.617007][ T5252] ERROR: (device loop1): diRead: i_ino != di_number [ 159.617007][ T5252] [ 159.702179][ T5215] XFS (loop0): Ending clean mount [ 160.294238][ T5197] usb 3-1: can't set config #0, error -71 [ 160.305256][ T5215] XFS (loop0): Quotacheck needed: Please wait. [ 160.390972][ T5276] netlink: 72 bytes leftover after parsing attributes in process `syz.3.225'. [ 161.457132][ T5197] usb 3-1: USB disconnect, device number 4 [ 161.647562][ T5282] loop2: detected capacity change from 0 to 64 [ 161.725222][ T5215] XFS (loop0): Quotacheck: Done. [ 162.079134][ T5293] loop3: detected capacity change from 0 to 256 [ 162.295325][ T4184] XFS (loop0): Unmounting Filesystem [ 162.326023][ T5293] FAT-fs (loop3): Directory bread(block 64) failed [ 162.332739][ T5293] FAT-fs (loop3): Directory bread(block 65) failed [ 162.339869][ T5293] FAT-fs (loop3): Directory bread(block 66) failed [ 162.346673][ T5293] FAT-fs (loop3): Directory bread(block 67) failed [ 162.353665][ T5293] FAT-fs (loop3): Directory bread(block 68) failed [ 162.360453][ T5293] FAT-fs (loop3): Directory bread(block 69) failed [ 162.367467][ T5293] FAT-fs (loop3): Directory bread(block 70) failed [ 162.374167][ T5293] FAT-fs (loop3): Directory bread(block 71) failed [ 162.381182][ T5293] FAT-fs (loop3): Directory bread(block 72) failed [ 162.387892][ T5293] FAT-fs (loop3): Directory bread(block 73) failed [ 162.815793][ T4176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop4 scanned by udevd (4176) [ 164.085619][ T5305] loop1: detected capacity change from 0 to 32768 [ 164.129515][ T5309] loop4: detected capacity change from 0 to 512 [ 164.279860][ T5309] EXT4-fs (loop4): filesystem is read-only [ 164.286548][ T5309] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 164.374300][ T5313] netlink: 72 bytes leftover after parsing attributes in process `syz.3.237'. [ 164.532595][ T5309] EXT4-fs (loop4): filesystem is read-only [ 164.961531][ T5309] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.077860][ T5309] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #16: comm syz.4.236: iget: bad i_size value: -504403158265486552 [ 165.095839][ T5309] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.236: couldn't read orphan inode 16 (err -117) [ 166.153117][ T5325] loop2: detected capacity change from 0 to 256 [ 166.174682][ T5309] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000004000000,max_batch_time=0x0000000000000003,noblock_validity,noinit_itable,nolazytime,grpid,noauto_da_alloc,,errors=continue. Quota mode: none. [ 166.203812][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.273122][ T5325] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 166.395441][ T5322] loop3: detected capacity change from 0 to 32768 [ 166.564096][ T5197] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 167.418400][ T5331] loop1: detected capacity change from 0 to 32768 [ 167.671649][ T5331] ERROR: (device loop1): diRead: i_ino != di_number [ 167.671649][ T5331] [ 168.205026][ T5349] loop2: detected capacity change from 0 to 512 [ 168.246827][ T5345] loop0: detected capacity change from 0 to 4096 [ 168.260548][ T5349] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 168.283870][ T5349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 168.291979][ T5349] System zones: 1-12 [ 168.317856][ T5345] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 168.342300][ T5349] EXT4-fs (loop2): 1 truncate cleaned up [ 168.348894][ T5349] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,quota,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 168.357089][ T5345] EXT4-fs (loop0): Test dummy encryption mode enabled [ 168.504117][ T5345] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 168.579526][ T5345] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 168.604875][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.194619][ T5361] loop4: detected capacity change from 0 to 32768 [ 171.469647][ T5369] fuse: Bad value for 'fd' [ 171.834220][ T5361] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 171.843093][ T5361] BTRFS info (device loop4): using free space tree [ 171.849973][ T5361] BTRFS info (device loop4): has skinny extents [ 171.963648][ T5375] loop2: detected capacity change from 0 to 256 [ 172.389336][ T5375] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 173.022064][ T5391] loop0: detected capacity change from 0 to 512 [ 173.077119][ T5361] BTRFS info (device loop4): enabling ssd optimizations [ 173.605589][ T5391] EXT4-fs (loop0): filesystem is read-only [ 173.635505][ T5391] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 175.275181][ T5391] EXT4-fs (loop0): filesystem is read-only [ 175.281182][ T5391] EXT4-fs (loop0): orphan cleanup on readonly fs [ 175.341334][ T5391] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #16: comm syz.0.255: iget: bad i_size value: -504403158265486552 [ 175.419050][ T5391] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.255: couldn't read orphan inode 16 (err -117) [ 175.507345][ T5409] loop2: detected capacity change from 0 to 164 [ 175.550236][ T5391] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000004000000,max_batch_time=0x0000000000000003,noblock_validity,noinit_itable,nolazytime,grpid,noauto_da_alloc,,errors=continue. Quota mode: none. [ 175.582007][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.934209][ T4334] Bluetooth: hci1: command 0x0406 tx timeout [ 175.942903][ T4334] Bluetooth: hci0: command 0x0406 tx timeout [ 175.993637][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 176.034564][ T4334] Bluetooth: hci4: command 0x0406 tx timeout [ 176.054866][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 176.056625][ T4449] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 176.074528][ T5409] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.154331][ T5413] loop1: detected capacity change from 0 to 512 [ 176.189075][ T5409] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.199095][ T5413] FAT-fs (loop1): count of clusters too big (2147483660) [ 176.250569][ T5409] Symlink component flag not implemented [ 176.264201][ T5413] FAT-fs (loop1): Can't find a valid FAT filesystem [ 176.307381][ T5409] Symlink component flag not implemented [ 176.333661][ T5409] Symlink component flag not implemented (7) [ 176.664284][ T4449] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.688207][ T4449] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 177.785697][ T5409] Symlink component flag not implemented (116) [ 177.873745][ T4449] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 178.029925][ T4449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.233391][ T4449] usb 1-1: config 0 descriptor?? [ 178.334832][ T4449] usb 1-1: can't set config #0, error -71 [ 178.493721][ T4449] usb 1-1: USB disconnect, device number 3 [ 178.983103][ T5419] loop4: detected capacity change from 0 to 4096 [ 179.201580][ T5422] loop2: detected capacity change from 0 to 32768 [ 179.975367][ T4846] Process accounting resumed [ 180.108407][ T5422] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.263 (5422) [ 180.230787][ T5422] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 180.240008][ T5422] BTRFS info (device loop2): using free space tree [ 180.246605][ T5422] BTRFS info (device loop2): has skinny extents [ 180.254356][ T5419] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 180.274428][ T5419] EXT4-fs (loop4): Test dummy encryption mode enabled [ 180.291650][ T5419] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 180.323721][ T5419] EXT4-fs: failed to create workqueue [ 180.335842][ T5424] Process accounting resumed [ 180.348925][ T5436] loop1: detected capacity change from 0 to 256 [ 180.356954][ T5419] EXT4-fs (loop4): mount failed [ 180.433192][ T5436] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 180.509100][ T5422] BTRFS info (device loop2): enabling ssd optimizations [ 182.761433][ T5476] loop0: detected capacity change from 0 to 2048 [ 182.964928][ T5476] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 184.164706][ T5485] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 184.368003][ T5485] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 185.262079][ T5500] loop2: detected capacity change from 0 to 32768 [ 185.944788][ T5485] EXT4-fs (loop0): This should not happen!! Data will be lost [ 185.944788][ T5485] [ 186.025228][ T5500] ERROR: (device loop2): diRead: i_ino != di_number [ 186.025228][ T5500] [ 186.474389][ T5485] EXT4-fs (loop0): Total free blocks count 0 [ 186.574444][ T5485] EXT4-fs (loop0): Free/Dirty block details [ 186.580466][ T5485] EXT4-fs (loop0): free_blocks=2415919504 [ 186.654246][ T5485] EXT4-fs (loop0): dirty_blocks=32 [ 186.659439][ T5485] EXT4-fs (loop0): Block reservation details [ 186.844284][ T5485] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 187.171086][ T5504] loop4: detected capacity change from 0 to 512 [ 187.295727][ T4451] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 187.403782][ T4451] Bluetooth: hci1: Injecting HCI hardware error event [ 187.499815][ T5504] FAT-fs (loop4): count of clusters too big (2147483660) [ 187.541700][ T4189] Bluetooth: hci1: hardware error 0x00 [ 187.625793][ T5504] FAT-fs (loop4): Can't find a valid FAT filesystem [ 187.784676][ T5505] loop2: detected capacity change from 0 to 32768 [ 187.822363][ T5505] ERROR: (device loop2): diRead: i_ino != di_number [ 187.822363][ T5505] [ 190.992375][ T5510] loop2: detected capacity change from 0 to 4096 [ 191.076009][ T5510] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 191.083808][ T5510] EXT4-fs (loop2): Test dummy encryption mode enabled [ 191.228047][ T5512] loop1: detected capacity change from 0 to 32768 [ 191.268719][ T5512] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.281 (5512) [ 191.276375][ T5510] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 191.380145][ T5510] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 191.435237][ T5517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 191.447349][ T5512] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 191.457192][ T5512] BTRFS info (device loop1): using free space tree [ 191.464168][ T5512] BTRFS info (device loop1): has skinny extents [ 191.735616][ T5517] device hsr_slave_1 left promiscuous mode [ 193.004747][ T5550] loop4: detected capacity change from 0 to 256 [ 194.265907][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.274327][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.289984][ T5550] FAT-fs (loop4): Directory bread(block 64) failed [ 194.297250][ T5550] FAT-fs (loop4): Directory bread(block 65) failed [ 194.304595][ T5550] FAT-fs (loop4): Directory bread(block 66) failed [ 194.311555][ T5550] FAT-fs (loop4): Directory bread(block 67) failed [ 194.318328][ T5550] FAT-fs (loop4): Directory bread(block 68) failed [ 194.324885][ T5550] FAT-fs (loop4): Directory bread(block 69) failed [ 194.331473][ T5550] FAT-fs (loop4): Directory bread(block 70) failed [ 194.338549][ T5550] FAT-fs (loop4): Directory bread(block 71) failed [ 194.345166][ T5550] FAT-fs (loop4): Directory bread(block 72) failed [ 194.352198][ T5550] FAT-fs (loop4): Directory bread(block 73) failed [ 195.292834][ T5566] loop3: detected capacity change from 0 to 1024 [ 195.294733][ T5512] BTRFS error (device loop1): open_ctree failed: -22 [ 196.385836][ T5569] loop2: detected capacity change from 0 to 32768 [ 197.077511][ T5569] ERROR: (device loop2): diRead: i_ino != di_number [ 197.077511][ T5569] [ 198.706009][ T5576] loop2: detected capacity change from 0 to 40427 [ 198.751858][ T5575] loop1: detected capacity change from 0 to 2048 [ 198.791206][ T5576] F2FS-fs (loop2): invalid crc value [ 198.952708][ T5576] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 199.036845][ T5585] netlink: 72 bytes leftover after parsing attributes in process `syz.4.294'. [ 199.092972][ T5576] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 199.714417][ T26] audit: type=1800 audit(1761240551.816:43): pid=5576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.293" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 199.757495][ T4186] attempt to access beyond end of device [ 199.757495][ T4186] loop2: rw=2049, want=45104, limit=40427 [ 199.807771][ T5575] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 200.152382][ T5593] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 200.616943][ T5597] loop0: detected capacity change from 0 to 512 [ 200.708712][ T5595] loop2: detected capacity change from 0 to 4096 [ 200.714361][ T5597] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 200.747598][ T5597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 200.757055][ T5597] System zones: 1-12 [ 200.763884][ T5597] EXT4-fs (loop0): 1 truncate cleaned up [ 200.770237][ T5597] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,quota,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 200.971080][ T5595] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 200.994441][ T5595] EXT4-fs (loop2): Test dummy encryption mode enabled [ 201.106378][ T5595] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 201.826980][ T5595] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 202.129039][ T5612] loop1: detected capacity change from 0 to 32768 [ 202.307790][ T5612] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.302 (5612) [ 202.651840][ T5620] loop0: detected capacity change from 0 to 16 [ 202.894663][ T5620] erofs: (device loop0): mounted with root inode @ nid 36. [ 202.916638][ T5612] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 202.926708][ T5612] BTRFS info (device loop1): using free space tree [ 202.934183][ T5612] BTRFS info (device loop1): has skinny extents [ 203.041147][ T5625] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown compression format 5 for nid 36, please upgrade kernel [ 203.056706][ T5625] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 203.723657][ T5631] loop4: detected capacity change from 0 to 40427 [ 204.054087][ T1325] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 204.063494][ T1325] Bluetooth: hci0: Injecting HCI hardware error event [ 204.075381][ T4197] Bluetooth: hci0: hardware error 0x00 [ 204.094753][ T5625] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 204.590289][ T5631] F2FS-fs (loop4): invalid crc value [ 204.799021][ T5631] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 205.109298][ T5612] BTRFS error (device loop1): open_ctree failed: -12 [ 205.173333][ T5631] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 205.234662][ T26] audit: type=1800 audit(1761240557.896:44): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.307" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 205.432617][ T4178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4178) [ 205.480126][ T5658] loop3: detected capacity change from 0 to 2048 [ 205.615224][ T5658] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 205.654246][ T4334] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 205.894146][ T4334] usb 3-1: Using ep0 maxpacket: 32 [ 206.046576][ T5665] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 206.114055][ T4187] attempt to access beyond end of device [ 206.114055][ T4187] loop4: rw=2049, want=45104, limit=40427 [ 206.544229][ T4334] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 206.553076][ T4334] usb 3-1: config 0 has no interface number 0 [ 206.661779][ T5673] loop0: detected capacity change from 0 to 512 [ 206.757460][ T5673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.769750][ T4334] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 206.803049][ T4334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.813323][ T5673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 206.822318][ T5673] System zones: 1-12 [ 206.858017][ T5673] EXT4-fs (loop0): 1 truncate cleaned up [ 206.864857][ T5673] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,quota,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 207.027389][ T5680] loop4: detected capacity change from 0 to 64 [ 207.057765][ T4334] usb 3-1: Product: syz [ 207.063292][ T4334] usb 3-1: Manufacturer: syz [ 207.069262][ T4334] usb 3-1: SerialNumber: syz [ 207.076396][ T4334] usb 3-1: config 0 descriptor?? [ 207.116346][ T4334] smsc95xx v2.0.0 [ 207.808236][ T5688] loop1: detected capacity change from 0 to 1024 [ 208.045342][ T5656] udc-core: couldn't find an available UDC or it's busy [ 208.052524][ T5656] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 208.912666][ T5696] loop0: detected capacity change from 0 to 4096 [ 209.050147][ T4334] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 209.119088][ T5698] loop3: detected capacity change from 0 to 40427 [ 209.203811][ T5696] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 209.235924][ T5698] F2FS-fs (loop3): invalid crc value [ 209.264783][ T4334] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 209.304206][ T5696] EXT4-fs (loop0): Test dummy encryption mode enabled [ 209.350550][ T5696] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 209.358181][ T4334] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 209.468518][ T4334] usb 3-1: USB disconnect, device number 5 [ 209.748766][ T5698] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 209.775925][ T5480] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 209.786263][ T5480] Bluetooth: hci3: Injecting HCI hardware error event [ 209.794258][ T4189] Bluetooth: hci3: hardware error 0x00 [ 209.837179][ T5698] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 209.852806][ T26] audit: type=1800 audit(1761240562.506:45): pid=5698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.320" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 209.911323][ T5696] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 209.965760][ T4188] attempt to access beyond end of device [ 209.965760][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 210.193057][ T5712] loop1: detected capacity change from 0 to 32768 [ 210.751964][ T5712] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 210.761169][ T5712] BTRFS info (device loop1): using free space tree [ 210.768869][ T5712] BTRFS info (device loop1): has skinny extents [ 211.237741][ T5712] BTRFS info (device loop1): enabling ssd optimizations [ 212.816635][ T5719] loop2: detected capacity change from 0 to 32768 [ 212.905651][ T5719] ERROR: (device loop2): diRead: i_ino != di_number [ 212.905651][ T5719] [ 213.613647][ T5743] loop0: detected capacity change from 0 to 2048 [ 213.725767][ T5743] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 214.093892][ T5754] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 214.969203][ T5756] loop2: detected capacity change from 0 to 1024 [ 217.101372][ T5777] loop2: detected capacity change from 0 to 40427 [ 217.112458][ T5774] loop3: detected capacity change from 0 to 4096 [ 217.150433][ T5780] loop1: detected capacity change from 0 to 512 [ 217.177357][ T5774] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 217.195024][ T4256] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 217.205182][ T5777] F2FS-fs (loop2): invalid crc value [ 217.213261][ T5780] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.220409][ T5774] EXT4-fs (loop3): Test dummy encryption mode enabled [ 217.233827][ T5774] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 217.240041][ T5780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 217.252924][ T5780] System zones: 1-12 [ 217.293606][ T5780] EXT4-fs (loop1): 1 truncate cleaned up [ 217.299835][ T5780] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,quota,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 217.330691][ T5774] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 217.428492][ T5777] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 217.538306][ T5777] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 217.560455][ T26] audit: type=1800 audit(1761240570.216:46): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.333" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 217.583085][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.136119][ T4186] attempt to access beyond end of device [ 219.136119][ T4186] loop2: rw=2049, want=45104, limit=40427 [ 219.544334][ T4256] usb 5-1: device descriptor read/all, error -71 [ 219.553624][ T5802] loop0: detected capacity change from 0 to 64 [ 220.534974][ T5814] loop4: detected capacity change from 0 to 1024 [ 220.737294][ T5820] loop3: detected capacity change from 0 to 256 [ 220.828696][ T5822] loop4: detected capacity change from 0 to 512 [ 220.830943][ T5820] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 220.908171][ T5822] EXT4-fs (loop4): Ignoring removed nobh option [ 221.056321][ T5822] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.348: iget: bad i_size value: 38620345925642 [ 221.351275][ T5822] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.348: couldn't read orphan inode 15 (err -117) [ 221.394256][ T5822] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 221.602931][ T5833] trusted_key: encrypted_key: insufficient parameters specified [ 224.202440][ T5849] loop4: detected capacity change from 0 to 8 [ 224.894263][ T5856] loop2: detected capacity change from 0 to 40427 [ 225.089461][ T5856] F2FS-fs (loop2): invalid crc value [ 225.359431][ T5870] loop3: detected capacity change from 0 to 4096 [ 225.468531][ T5856] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 225.776364][ T5870] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 225.802837][ T5856] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 225.830005][ T26] audit: type=1800 audit(1761240578.486:47): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.355" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 225.869372][ T5870] EXT4-fs (loop3): Test dummy encryption mode enabled [ 225.897728][ T5873] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.994255][ T5870] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 226.075576][ T4186] attempt to access beyond end of device [ 226.075576][ T4186] loop2: rw=2049, want=45104, limit=40427 [ 226.554846][ T5870] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 226.810539][ T5879] loop0: detected capacity change from 0 to 32768 [ 227.097093][ T5879] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.358 (5879) [ 227.287615][ T5886] loop1: detected capacity change from 0 to 256 [ 227.365815][ T5879] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 227.376420][ T5879] BTRFS info (device loop0): using free space tree [ 227.383655][ T5879] BTRFS info (device loop0): has skinny extents [ 227.402576][ T5886] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 227.690308][ T5905] loop3: detected capacity change from 0 to 64 [ 228.076818][ T5916] loop2: detected capacity change from 0 to 1024 [ 229.760143][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.024655][ T5879] BTRFS error (device loop0): open_ctree failed: -12 [ 230.025174][ T4176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4176) [ 231.997196][ T5946] loop2: detected capacity change from 0 to 256 [ 234.814441][ T5961] loop2: detected capacity change from 0 to 256 [ 234.976227][ T5962] loop4: detected capacity change from 0 to 256 [ 235.886260][ T5962] FAT-fs (loop4): Directory bread(block 64) failed [ 235.893876][ T5962] FAT-fs (loop4): Directory bread(block 65) failed [ 235.901350][ T5962] FAT-fs (loop4): Directory bread(block 66) failed [ 235.908783][ T5962] FAT-fs (loop4): Directory bread(block 67) failed [ 235.916641][ T5962] FAT-fs (loop4): Directory bread(block 68) failed [ 235.924229][ T5962] FAT-fs (loop4): Directory bread(block 69) failed [ 235.931997][ T5962] FAT-fs (loop4): Directory bread(block 70) failed [ 235.939417][ T5962] FAT-fs (loop4): Directory bread(block 71) failed [ 235.946759][ T5962] FAT-fs (loop4): Directory bread(block 72) failed [ 235.954419][ T5962] FAT-fs (loop4): Directory bread(block 73) failed [ 236.212640][ T5961] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 236.651068][ T5969] loop1: detected capacity change from 0 to 32768 [ 236.670598][ T5972] loop3: detected capacity change from 0 to 1024 [ 237.072779][ T5969] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 237.082015][ T5969] BTRFS info (device loop1): using free space tree [ 237.089816][ T5969] BTRFS info (device loop1): has skinny extents [ 238.527161][ T5969] BTRFS info (device loop1): enabling ssd optimizations [ 238.761873][ T6001] loop2: detected capacity change from 0 to 4096 [ 241.663180][ T6008] loop3: detected capacity change from 0 to 40427 [ 241.726959][ T6012] loop4: detected capacity change from 0 to 512 [ 241.747801][ T6008] F2FS-fs (loop3): invalid crc value [ 241.759679][ T6012] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 241.791545][ T6012] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 241.801157][ T6012] System zones: 1-12 [ 241.845857][ T6012] EXT4-fs (loop4): 1 truncate cleaned up [ 241.851980][ T6012] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,quota,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 241.980993][ T6008] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 242.063304][ T6008] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 242.093386][ T26] audit: type=1800 audit(1761240594.756:48): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.383" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 242.467956][ T5285] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop1 scanned by udevd (5285) [ 242.697104][ T6010] loop0: detected capacity change from 0 to 32768 [ 242.824495][ T4188] attempt to access beyond end of device [ 242.824495][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 242.896499][ T6010] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 243.918375][ T6038] loop2: detected capacity change from 0 to 1024 [ 244.435586][ T6042] loop4: detected capacity change from 0 to 256 [ 244.670013][ T6042] FAT-fs (loop4): Directory bread(block 64) failed [ 244.677877][ T6042] FAT-fs (loop4): Directory bread(block 65) failed [ 244.687040][ T6042] FAT-fs (loop4): Directory bread(block 66) failed [ 244.694747][ T6042] FAT-fs (loop4): Directory bread(block 67) failed [ 244.704906][ T6042] FAT-fs (loop4): Directory bread(block 68) failed [ 244.713438][ T6042] FAT-fs (loop4): Directory bread(block 69) failed [ 244.726045][ T6042] FAT-fs (loop4): Directory bread(block 70) failed [ 244.737644][ T6042] FAT-fs (loop4): Directory bread(block 71) failed [ 244.746736][ T6042] FAT-fs (loop4): Directory bread(block 72) failed [ 244.754278][ T6042] FAT-fs (loop4): Directory bread(block 73) failed [ 244.976334][ T6041] loop1: detected capacity change from 0 to 512 [ 245.112089][ T6041] FAT-fs (loop1): count of clusters too big (2147483660) [ 245.245317][ T6041] FAT-fs (loop1): Can't find a valid FAT filesystem [ 245.711967][ T6055] netlink: 72 bytes leftover after parsing attributes in process `syz.4.397'. [ 247.082836][ T6056] loop2: detected capacity change from 0 to 32768 [ 248.906930][ T6058] loop3: detected capacity change from 0 to 4096 [ 249.104762][ T6058] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 249.171148][ T6058] EXT4-fs (loop3): Test dummy encryption mode enabled [ 249.247250][ T6058] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 249.250650][ T6065] loop2: detected capacity change from 0 to 40427 [ 249.334896][ T6058] EXT4-fs: failed to create workqueue [ 249.362047][ T6058] EXT4-fs (loop3): mount failed [ 249.709836][ T6065] F2FS-fs (loop2): invalid crc value [ 249.922066][ T6065] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 250.191091][ T6065] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 250.209241][ T26] audit: type=1800 audit(1761240602.866:49): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.401" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 250.236117][ T6077] input: syz1 as /devices/virtual/input/input5 [ 250.246613][ T4197] Bluetooth: Frame is too long (len 16, expected len 4) [ 250.482640][ T4186] attempt to access beyond end of device [ 250.482640][ T4186] loop2: rw=2049, want=45104, limit=40427 [ 251.261496][ T6090] loop4: detected capacity change from 0 to 1024 [ 252.166285][ T6095] netlink: 72 bytes leftover after parsing attributes in process `syz.1.410'. [ 252.854551][ T6092] loop3: detected capacity change from 0 to 32768 [ 253.451635][ T6092] ERROR: (device loop3): diRead: i_ino != di_number [ 253.451635][ T6092] [ 254.130590][ T6099] loop0: detected capacity change from 0 to 32768 [ 254.149235][ T6101] overlayfs: failed to resolve './file0': -2 [ 255.018915][ T6106] loop1: detected capacity change from 0 to 512 [ 255.228331][ T6106] FAT-fs (loop1): count of clusters too big (2147483660) [ 255.326408][ T6106] FAT-fs (loop1): Can't find a valid FAT filesystem [ 256.111117][ T6113] loop0: detected capacity change from 0 to 4096 [ 256.245422][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.251755][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.331090][ T6113] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 256.388277][ T6113] EXT4-fs (loop0): Test dummy encryption mode enabled [ 256.402655][ T6122] loop2: detected capacity change from 0 to 256 [ 257.478608][ T6113] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 257.611444][ T6122] FAT-fs (loop2): Directory bread(block 64) failed [ 257.618267][ T6122] FAT-fs (loop2): Directory bread(block 65) failed [ 257.624996][ T6122] FAT-fs (loop2): Directory bread(block 66) failed [ 257.631582][ T6122] FAT-fs (loop2): Directory bread(block 67) failed [ 257.639948][ T6122] FAT-fs (loop2): Directory bread(block 68) failed [ 257.646831][ T6122] FAT-fs (loop2): Directory bread(block 69) failed [ 257.655438][ T6122] FAT-fs (loop2): Directory bread(block 70) failed [ 257.662287][ T6122] FAT-fs (loop2): Directory bread(block 71) failed [ 257.668990][ T6122] FAT-fs (loop2): Directory bread(block 72) failed [ 257.676206][ T6122] FAT-fs (loop2): Directory bread(block 73) failed [ 258.004177][ T6133] loop1: detected capacity change from 0 to 2048 [ 258.603325][ T6131] loop4: detected capacity change from 0 to 40427 [ 258.614219][ T6113] EXT4-fs: error -4 creating inode table initialization thread [ 258.659742][ T6113] EXT4-fs (loop0): mount failed [ 258.728959][ T6131] F2FS-fs (loop4): invalid crc value [ 258.735292][ T6133] NILFS (loop1): invalid segment: Magic number mismatch [ 258.742829][ T6133] NILFS (loop1): trying rollback from an earlier position [ 258.754184][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 258.793405][ T6133] NILFS (loop1): recovery complete [ 258.842899][ T6139] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.021482][ T6131] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 259.060220][ T6141] loop2: detected capacity change from 0 to 1024 [ 259.073465][ T6131] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 259.087160][ T26] audit: type=1800 audit(1761240611.746:50): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.418" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 259.198498][ T4187] attempt to access beyond end of device [ 259.198498][ T4187] loop4: rw=2049, want=45104, limit=40427 [ 260.292659][ T6150] loop2: detected capacity change from 0 to 32768 [ 262.632543][ T6157] loop0: detected capacity change from 0 to 32768 [ 265.956564][ T6179] loop2: detected capacity change from 0 to 256 [ 267.296661][ T6179] FAT-fs (loop2): Directory bread(block 64) failed [ 267.303540][ T6179] FAT-fs (loop2): Directory bread(block 65) failed [ 267.310634][ T6179] FAT-fs (loop2): Directory bread(block 66) failed [ 267.317509][ T6179] FAT-fs (loop2): Directory bread(block 67) failed [ 267.324191][ T6179] FAT-fs (loop2): Directory bread(block 68) failed [ 267.330741][ T6179] FAT-fs (loop2): Directory bread(block 69) failed [ 267.337444][ T6179] FAT-fs (loop2): Directory bread(block 70) failed [ 267.344024][ T6179] FAT-fs (loop2): Directory bread(block 71) failed [ 267.350604][ T6179] FAT-fs (loop2): Directory bread(block 72) failed [ 267.357263][ T6179] FAT-fs (loop2): Directory bread(block 73) failed [ 267.620919][ T6181] loop4: detected capacity change from 0 to 4096 [ 267.669933][ T6183] loop0: detected capacity change from 0 to 512 [ 267.680861][ T6183] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 267.701323][ T6183] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 267.709794][ T6183] System zones: 1-12 [ 267.755313][ T6183] EXT4-fs (loop0): 1 truncate cleaned up [ 267.761321][ T6183] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,quota,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 267.823767][ T6181] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 267.852153][ T6181] EXT4-fs (loop4): Test dummy encryption mode enabled [ 267.907645][ T6181] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 268.143352][ T6181] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 268.989795][ T6191] loop0: detected capacity change from 0 to 32768 [ 269.025352][ T6191] ERROR: (device loop0): diRead: i_ino != di_number [ 269.025352][ T6191] [ 269.617611][ T6199] loop1: detected capacity change from 0 to 32768 [ 270.531270][ T6199] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 270.542948][ T6199] BTRFS info (device loop1): using free space tree [ 270.550693][ T6199] BTRFS info (device loop1): has skinny extents [ 271.014181][ T4330] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 271.214862][ T6199] BTRFS info (device loop1): enabling ssd optimizations [ 271.304262][ T4330] usb 5-1: Using ep0 maxpacket: 8 [ 271.377905][ T6204] loop0: detected capacity change from 0 to 32768 [ 271.491221][ T4330] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.929886][ T4330] usb 5-1: config 0 has no interface number 0 [ 271.960282][ T4330] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.023080][ T4330] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 272.072952][ T4330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.138494][ T4330] usb 5-1: config 0 descriptor?? [ 272.239671][ T4330] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 272.311149][ T6204] ERROR: (device loop0): diRead: i_ino != di_number [ 272.311149][ T6204] [ 272.495768][ T4330] usb 5-1: USB disconnect, device number 5 [ 272.619881][ T6233] loop3: detected capacity change from 0 to 512 [ 272.644292][ T6235] loop2: detected capacity change from 0 to 512 [ 272.672105][ T6235] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 272.699709][ T6235] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 272.708053][ T6235] System zones: 1-12 [ 272.749875][ T6233] FAT-fs (loop3): count of clusters too big (2147483660) [ 272.766920][ T6235] EXT4-fs (loop2): 1 truncate cleaned up [ 272.772737][ T6235] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,quota,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 272.854250][ T6233] FAT-fs (loop3): Can't find a valid FAT filesystem [ 273.756041][ T6244] loop0: detected capacity change from 0 to 32768 [ 273.819445][ T6244] ERROR: (device loop0): diRead: i_ino != di_number [ 273.819445][ T6244] [ 274.337299][ T6250] loop2: detected capacity change from 0 to 256 [ 274.403731][ T6250] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 275.996048][ T21] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 276.480971][ T6266] loop4: detected capacity change from 0 to 32768 [ 276.587569][ T6266] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.455 (6266) [ 276.626351][ T6247] loop0: detected capacity change from 0 to 40427 [ 276.649329][ T21] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 276.658985][ T21] usb 4-1: config 0 has no interface number 0 [ 276.679301][ T6266] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 276.689187][ T6266] BTRFS info (device loop4): using free space tree [ 276.695780][ T6266] BTRFS info (device loop4): has skinny extents [ 276.713155][ T6247] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 276.808901][ T6272] loop1: detected capacity change from 0 to 256 [ 277.039624][ T6272] FAT-fs (loop1): Directory bread(block 64) failed [ 277.046608][ T6272] FAT-fs (loop1): Directory bread(block 65) failed [ 277.053889][ T6272] FAT-fs (loop1): Directory bread(block 66) failed [ 277.061158][ T6272] FAT-fs (loop1): Directory bread(block 67) failed [ 277.068309][ T6272] FAT-fs (loop1): Directory bread(block 68) failed [ 277.075245][ T6272] FAT-fs (loop1): Directory bread(block 69) failed [ 277.082346][ T6272] FAT-fs (loop1): Directory bread(block 70) failed [ 277.089219][ T6272] FAT-fs (loop1): Directory bread(block 71) failed [ 277.096859][ T6272] FAT-fs (loop1): Directory bread(block 72) failed [ 277.103612][ T6272] FAT-fs (loop1): Directory bread(block 73) failed [ 277.504346][ T21] usb 4-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 277.513520][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.578534][ T21] usb 4-1: Product: syz [ 277.583827][ T21] usb 4-1: Manufacturer: syz [ 277.592356][ T21] usb 4-1: SerialNumber: syz [ 277.766222][ T21] usb 4-1: config 0 descriptor?? [ 277.943350][ T6266] BTRFS info (device loop4): enabling ssd optimizations [ 277.971578][ T21] qmi_wwan 4-1:0.172: bogus CDC Union: master=0, slave=0 [ 278.295682][ T21] qmi_wwan: probe of 4-1:0.172 failed with error -22 [ 279.090762][ T6293] loop1: detected capacity change from 0 to 32768 [ 279.159819][ T6293] ERROR: (device loop1): diRead: i_ino != di_number [ 279.159819][ T6293] [ 279.871130][ T6302] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.972510][ T6307] device batadv1 entered promiscuous mode [ 280.002734][ T6302] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 281.267906][ T6328] loop0: detected capacity change from 0 to 256 [ 281.892803][ T7] usb 4-1: USB disconnect, device number 4 [ 281.941461][ T6329] loop2: detected capacity change from 0 to 1024 [ 281.970646][ T6328] FAT-fs (loop0): Directory bread(block 64) failed [ 281.977330][ T6328] FAT-fs (loop0): Directory bread(block 65) failed [ 281.983909][ T6328] FAT-fs (loop0): Directory bread(block 66) failed [ 281.990779][ T6328] FAT-fs (loop0): Directory bread(block 67) failed [ 281.997469][ T6328] FAT-fs (loop0): Directory bread(block 68) failed [ 282.004052][ T6328] FAT-fs (loop0): Directory bread(block 69) failed [ 282.010990][ T6328] FAT-fs (loop0): Directory bread(block 70) failed [ 282.017920][ T6328] FAT-fs (loop0): Directory bread(block 71) failed [ 282.024685][ T6328] FAT-fs (loop0): Directory bread(block 72) failed [ 282.031260][ T6328] FAT-fs (loop0): Directory bread(block 73) failed [ 282.207159][ T6333] loop4: detected capacity change from 0 to 32768 [ 282.270050][ T6329] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,jqfmt=vfsv1,nouid32,grpquota,,errors=continue. Quota mode: writeback. [ 282.297681][ T6333] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.470 (6333) [ 282.428166][ T6333] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 282.437125][ T6333] BTRFS info (device loop4): using free space tree [ 282.443777][ T6333] BTRFS info (device loop4): has skinny extents [ 282.565508][ T6345] loop2: detected capacity change from 0 to 256 [ 282.594604][ T6345] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 283.109848][ T6333] BTRFS info (device loop4): enabling ssd optimizations [ 284.579549][ T6346] loop0: detected capacity change from 0 to 32768 [ 284.705911][ T6346] ERROR: (device loop0): diRead: i_ino != di_number [ 284.705911][ T6346] [ 286.936371][ T6397] loop4: detected capacity change from 0 to 32768 [ 286.974186][ T4663] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 286.985438][ T6397] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.477 (6397) [ 287.058581][ T6397] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 287.067501][ T6397] BTRFS info (device loop4): using free space tree [ 287.074082][ T6397] BTRFS info (device loop4): has skinny extents [ 287.211736][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 287.250239][ T6391] loop0: detected capacity change from 0 to 40427 [ 287.276874][ T6391] F2FS-fs (loop0): quotafile must be on filesystem root [ 287.353244][ T6397] BTRFS info (device loop4): enabling ssd optimizations [ 287.928987][ T4663] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 287.978667][ T4663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.037222][ T4663] usb 2-1: Product: syz [ 288.062970][ T4663] usb 2-1: Manufacturer: syz [ 288.083406][ T4663] usb 2-1: SerialNumber: syz [ 288.561043][ T6434] loop3: detected capacity change from 0 to 32768 [ 288.636809][ T6434] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.487 (6434) [ 288.919463][ T6434] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 288.930414][ T6434] BTRFS info (device loop3): using free space tree [ 288.937019][ T6434] BTRFS info (device loop3): has skinny extents [ 288.974768][ T4663] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 288.992098][ T4663] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 289.016645][ T4663] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 289.035060][ T4663] lan78xx: probe of 2-1:1.0 failed with error -32 [ 289.447351][ T151] block nbd2: Attempted send on invalid socket [ 289.457460][ T151] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 289.498394][ T6462] SQUASHFS error: Failed to read block 0x0: -5 [ 289.534015][ T6462] unable to read squashfs_super_block [ 289.774159][ T6434] BTRFS info (device loop3): enabling ssd optimizations [ 290.276770][ T4663] usb 2-1: USB disconnect, device number 2 [ 290.357472][ T6437] loop0: detected capacity change from 0 to 40427 [ 290.386474][ T6437] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 290.624453][ T26] audit: type=1326 audit(1761240643.286:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.2.492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f925c1c0fc9 code=0x0 [ 290.700796][ T6458] loop4: detected capacity change from 0 to 32768 [ 290.931049][ T6480] loop1: detected capacity change from 0 to 1024 [ 291.496347][ T6487] loop2: detected capacity change from 0 to 47 [ 292.229217][ T6497] syz.1.500 uses obsolete (PF_INET,SOCK_PACKET) [ 292.313129][ T6503] loop3: detected capacity change from 0 to 256 [ 292.356902][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'. [ 292.394349][ T6503] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 294.060277][ T6522] loop1: detected capacity change from 0 to 32768 [ 294.131680][ T6522] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.505 (6522) [ 294.196889][ T6522] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 294.206201][ T6522] BTRFS info (device loop1): using free space tree [ 294.213204][ T6522] BTRFS info (device loop1): has skinny extents [ 294.527471][ T6522] BTRFS info (device loop1): enabling ssd optimizations [ 296.321384][ T4176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop1 scanned by udevd (4176) [ 298.689930][ T6596] loop4: detected capacity change from 0 to 32768 [ 301.136292][ T6632] loop0: detected capacity change from 0 to 256 [ 301.223996][ T6636] Cannot find add_set index 0 as target [ 302.152203][ T6632] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 302.794138][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 303.484018][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 303.487089][ T6664] netlink: 96 bytes leftover after parsing attributes in process `syz.1.542'. [ 303.702328][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 304.545677][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 304.559023][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.567853][ T7] usb 4-1: Product: syz [ 304.572579][ T7] usb 4-1: Manufacturer: syz [ 304.577625][ T7] usb 4-1: SerialNumber: syz [ 304.591641][ T7] usb 4-1: config 0 descriptor?? [ 304.759394][ T7] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 304.769559][ T7] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 306.244102][ T7] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 308.174408][ T7] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 308.183391][ T7] em28xx 4-1:0.0: board has no eeprom [ 308.405388][ T7] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 308.413509][ T7] em28xx 4-1:0.0: dvb set to bulk mode. [ 308.458775][ T4449] em28xx 4-1:0.0: Binding DVB extension [ 308.524995][ T7] usb 4-1: USB disconnect, device number 5 [ 308.531873][ T7] em28xx 4-1:0.0: Disconnecting em28xx [ 308.693788][ T4449] em28xx 4-1:0.0: Registering input extension [ 308.733384][ T7] em28xx 4-1:0.0: Closing input extension [ 308.815802][ T7] em28xx 4-1:0.0: Freeing device [ 309.062116][ T6704] [ 309.064481][ T6704] ====================================================== [ 309.071617][ T6704] WARNING: possible circular locking dependency detected [ 309.078654][ T6704] syzkaller #0 Not tainted [ 309.083072][ T6704] ------------------------------------------------------ [ 309.090206][ T6704] syz.2.555/6704 is trying to acquire lock: [ 309.096105][ T6704] ffff88801f9ecc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 309.107168][ T6704] [ 309.107168][ T6704] but task is already holding lock: [ 309.114539][ T6704] ffffffff8d4c0c68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 309.124237][ T6704] [ 309.124237][ T6704] which lock already depends on the new lock. [ 309.124237][ T6704] [ 309.134661][ T6704] [ 309.134661][ T6704] the existing dependency chain (in reverse order) is: [ 309.143682][ T6704] [ 309.143682][ T6704] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 309.151810][ T6704] __mutex_lock_common+0x1eb/0x2390 [ 309.157549][ T6704] mutex_lock_nested+0x17/0x20 [ 309.162853][ T6704] rfkill_register+0x33/0x8a0 [ 309.168177][ T6704] hci_register_dev+0x452/0x970 [ 309.173578][ T6704] vhci_create_device+0x32c/0x5c0 [ 309.179137][ T6704] vhci_write+0x391/0x450 [ 309.184040][ T6704] vfs_write+0x712/0xd00 [ 309.188977][ T6704] ksys_write+0x14d/0x250 [ 309.193844][ T6704] do_syscall_64+0x4c/0xa0 [ 309.198895][ T6704] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.205335][ T6704] [ 309.205335][ T6704] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 309.213596][ T6704] __mutex_lock_common+0x1eb/0x2390 [ 309.219441][ T6704] mutex_lock_nested+0x17/0x20 [ 309.224758][ T6704] vhci_send_frame+0x88/0x100 [ 309.229961][ T6704] hci_send_frame+0x1a9/0x2e0 [ 309.235148][ T6704] hci_tx_work+0x9f9/0x1710 [ 309.240164][ T6704] process_one_work+0x863/0x1000 [ 309.245610][ T6704] worker_thread+0xaa8/0x12a0 [ 309.250918][ T6704] kthread+0x436/0x520 [ 309.255508][ T6704] ret_from_fork+0x1f/0x30 [ 309.260445][ T6704] [ 309.260445][ T6704] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 309.269642][ T6704] __flush_work+0xdd/0x1b0 [ 309.274568][ T6704] hci_dev_do_close+0x1e7/0x1030 [ 309.280017][ T6704] hci_error_reset+0x101/0x2c0 [ 309.285378][ T6704] process_one_work+0x863/0x1000 [ 309.290945][ T6704] worker_thread+0xaa8/0x12a0 [ 309.296344][ T6704] kthread+0x436/0x520 [ 309.300927][ T6704] ret_from_fork+0x1f/0x30 [ 309.306238][ T6704] [ 309.306238][ T6704] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 309.314145][ T6704] __mutex_lock_common+0x1eb/0x2390 [ 309.319868][ T6704] mutex_lock_nested+0x17/0x20 [ 309.325231][ T6704] bg_scan_update+0x44/0x3b0 [ 309.330535][ T6704] process_one_work+0x863/0x1000 [ 309.335987][ T6704] worker_thread+0xaa8/0x12a0 [ 309.341173][ T6704] kthread+0x436/0x520 [ 309.345846][ T6704] ret_from_fork+0x1f/0x30 [ 309.350778][ T6704] [ 309.350778][ T6704] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 309.360677][ T6704] __lock_acquire+0x2c33/0x7c60 [ 309.366129][ T6704] lock_acquire+0x197/0x3f0 [ 309.371156][ T6704] __flush_work+0xdd/0x1b0 [ 309.376179][ T6704] __cancel_work_timer+0x3ac/0x520 [ 309.381889][ T6704] hci_request_cancel_all+0xcc/0x300 [ 309.387746][ T6704] hci_dev_do_close+0x4e/0x1030 [ 309.393105][ T6704] hci_rfkill_set_block+0x10a/0x190 [ 309.398826][ T6704] rfkill_set_block+0x1c6/0x420 [ 309.404187][ T6704] rfkill_fop_write+0x458/0x560 [ 309.409722][ T6704] vfs_write+0x300/0xd00 [ 309.414561][ T6704] ksys_write+0x14d/0x250 [ 309.419392][ T6704] do_syscall_64+0x4c/0xa0 [ 309.424334][ T6704] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.430733][ T6704] [ 309.430733][ T6704] other info that might help us debug this: [ 309.430733][ T6704] [ 309.440955][ T6704] Chain exists of: [ 309.440955][ T6704] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 309.440955][ T6704] [ 309.457402][ T6704] Possible unsafe locking scenario: [ 309.457402][ T6704] [ 309.464848][ T6704] CPU0 CPU1 [ 309.470193][ T6704] ---- ---- [ 309.475537][ T6704] lock(rfkill_global_mutex); [ 309.480290][ T6704] lock(&data->open_mutex); [ 309.487378][ T6704] lock(rfkill_global_mutex); [ 309.494727][ T6704] lock((work_completion)(&hdev->bg_scan_update)); [ 309.501299][ T6704] [ 309.501299][ T6704] *** DEADLOCK *** [ 309.501299][ T6704] [ 309.509437][ T6704] 1 lock held by syz.2.555/6704: [ 309.514354][ T6704] #0: ffffffff8d4c0c68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 309.524521][ T6704] [ 309.524521][ T6704] stack backtrace: [ 309.530498][ T6704] CPU: 1 PID: 6704 Comm: syz.2.555 Not tainted syzkaller #0 [ 309.537764][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.548006][ T6704] Call Trace: [ 309.551284][ T6704] [ 309.554203][ T6704] dump_stack_lvl+0x168/0x230 [ 309.558870][ T6704] ? load_image+0x3b0/0x3b0 [ 309.563361][ T6704] ? show_regs_print_info+0x20/0x20 [ 309.568550][ T6704] ? print_circular_bug+0x12b/0x1a0 [ 309.573745][ T6704] check_noncircular+0x274/0x310 [ 309.578765][ T6704] ? add_chain_block+0x940/0x940 [ 309.583689][ T6704] ? lockdep_lock+0xdc/0x1e0 [ 309.588264][ T6704] ? __lock_acquire+0x12d9/0x7c60 [ 309.593401][ T6704] ? lockdep_lock+0x1e0/0x1e0 [ 309.598345][ T6704] ? mark_lock+0x94/0x320 [ 309.603116][ T6704] __lock_acquire+0x2c33/0x7c60 [ 309.608011][ T6704] ? verify_lock_unused+0x140/0x140 [ 309.613381][ T6704] ? verify_lock_unused+0x140/0x140 [ 309.618598][ T6704] lock_acquire+0x197/0x3f0 [ 309.623213][ T6704] ? __flush_work+0xc1/0x1b0 [ 309.627839][ T6704] ? __lock_acquire+0x7c60/0x7c60 [ 309.632999][ T6704] ? read_lock_is_recursive+0x10/0x10 [ 309.638557][ T6704] ? start_flush_work+0x776/0x820 [ 309.643589][ T6704] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 309.649500][ T6704] ? _raw_spin_unlock+0x40/0x40 [ 309.654359][ T6704] __flush_work+0xdd/0x1b0 [ 309.658772][ T6704] ? __flush_work+0xc1/0x1b0 [ 309.663625][ T6704] ? flush_work+0x20/0x20 [ 309.667964][ T6704] ? try_to_grab_pending+0xf3/0x7e0 [ 309.673170][ T6704] ? lockdep_hardirqs_off+0x70/0x100 [ 309.678462][ T6704] ? mark_lock+0x94/0x320 [ 309.682798][ T6704] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 309.688932][ T6704] ? lock_chain_count+0x20/0x20 [ 309.694322][ T6704] ? mark_lock+0x94/0x320 [ 309.698836][ T6704] ? __cancel_work_timer+0x331/0x520 [ 309.704207][ T6704] __cancel_work_timer+0x3ac/0x520 [ 309.709328][ T6704] ? cancel_work_sync+0x20/0x20 [ 309.714212][ T6704] ? __cancel_work+0x1f4/0x2d0 [ 309.718999][ T6704] ? lockdep_hardirqs_on+0x94/0x140 [ 309.724201][ T6704] ? __cancel_work+0x26f/0x2d0 [ 309.728986][ T6704] ? cancel_work+0x20/0x20 [ 309.733411][ T6704] ? lock_chain_count+0x20/0x20 [ 309.738393][ T6704] hci_request_cancel_all+0xcc/0x300 [ 309.743690][ T6704] hci_dev_do_close+0x4e/0x1030 [ 309.748534][ T6704] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 309.754427][ T6704] ? _raw_spin_unlock+0x40/0x40 [ 309.759416][ T6704] hci_rfkill_set_block+0x10a/0x190 [ 309.764696][ T6704] ? rcu_lock_release+0x20/0x20 [ 309.769560][ T6704] rfkill_set_block+0x1c6/0x420 [ 309.774417][ T6704] rfkill_fop_write+0x458/0x560 [ 309.779278][ T6704] ? rfkill_fop_read+0x4b0/0x4b0 [ 309.784214][ T6704] ? common_file_perm+0x90/0x1c0 [ 309.789313][ T6704] ? fsnotify_perm+0x5d/0x560 [ 309.794036][ T6704] ? security_file_permission+0x75/0xa0 [ 309.799746][ T6704] ? rfkill_fop_read+0x4b0/0x4b0 [ 309.804682][ T6704] vfs_write+0x300/0xd00 [ 309.808922][ T6704] ? file_end_write+0x250/0x250 [ 309.813767][ T6704] ? __fget_files+0x40f/0x480 [ 309.818436][ T6704] ? __fdget_pos+0x1e2/0x370 [ 309.823014][ T6704] ? ksys_write+0x71/0x250 [ 309.827429][ T6704] ksys_write+0x14d/0x250 [ 309.831774][ T6704] ? __ia32_sys_read+0x80/0x80 [ 309.836546][ T6704] ? lockdep_hardirqs_on+0x94/0x140 [ 309.841762][ T6704] do_syscall_64+0x4c/0xa0 [ 309.846175][ T6704] ? clear_bhb_loop+0x30/0x80 [ 309.851058][ T6704] ? clear_bhb_loop+0x30/0x80 [ 309.856175][ T6704] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.862302][ T6704] RIP: 0033:0x7f925c1c0fc9 [ 309.866727][ T6704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.886527][ T6704] RSP: 002b:00007f925a428038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 309.895234][ T6704] RAX: ffffffffffffffda RBX: 00007f925c417fa0 RCX: 00007f925c1c0fc9 [ 309.903208][ T6704] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 309.911172][ T6704] RBP: 00007f925c243f91 R08: 0000000000000000 R09: 0000000000000000 [ 309.919144][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.927113][ T6704] R13: 00007f925c418038 R14: 00007f925c417fa0 R15: 00007ffdec7af278 [ 309.935144][ T6704] [ 309.938304][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.944131][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 310.002301][ T6695] loop4: detected capacity change from 0 to 32768 [ 310.061962][ T6695] JBD2: Ignoring recovery information on journal [ 310.116513][ T6695] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 310.193992][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 310.224081][ T6695] loop_set_status: loop4 () has still dirty pages (nrpages=13) [ 310.233160][ T6722] (syz.4.552,6722,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option " Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔" or missing value [ 310.334087][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.346799][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.357021][ T7] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 310.366785][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.383238][ T4187] ocfs2: Unmounting device (7,4) on (node local) [ 310.391905][ T7] usb 4-1: config 0 descriptor?? [ 310.895697][ T7] hid-multitouch 0003:1FD2:6007.0001: item fetching failed at offset 1/5 [ 310.904768][ T7] hid-multitouch: probe of 0003:1FD2:6007.0001 failed with error -22 [ 311.116599][ T7] usb 4-1: USB disconnect, device number 6 [ 317.136469][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.143049][ T1422] ieee802154 phy1 wpan1: encryption failed: -22