last executing test programs: 4.867107066s ago: executing program 4 (id=829): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 4.779080369s ago: executing program 4 (id=830): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) 4.302495912s ago: executing program 4 (id=834): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) close_range(r1, 0xffffffffffffffff, 0x0) 4.163671893s ago: executing program 4 (id=837): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f00000010c0)="$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") creat(&(0x7f00000003c0)='./bus\x00', 0x1c1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf251300000028000680080006000500000008000100ff0f000004000200040002008b00020008000600ff0f00000400018080080002000004000400281a77e777d89307fce8f2141c283bed84e5aaa3f85bf4c01616f2cca2b2f3f4ebb38b6cf988459b9a297318c0ef00af14058ec05cb48ba9c49f477f429eb8ecf19acce8677af332d7b07621ae8a3335cd82000000"], 0x58}, 0x1, 0x0, 0x0, 0x24004084}, 0x800) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240), 0xfffffffffffffffe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) write$binfmt_script(r2, &(0x7f00000038c0)={'#! ', './file0'}, 0xb) close(r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100), 0x6) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000240)="299cf37c0300abe7", 0x8}, {&(0x7f0000000280)="b6", 0x1}], 0x2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 3.807296878s ago: executing program 0 (id=844): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) 3.770739883s ago: executing program 0 (id=845): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 3.740298928s ago: executing program 0 (id=846): r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) 3.695440805s ago: executing program 0 (id=847): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) close_range(r1, 0xffffffffffffffff, 0x0) 3.4658s ago: executing program 0 (id=849): socket(0x0, 0x803, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x446, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f0000000080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000003b40), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) 3.150147478s ago: executing program 4 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001200)={0x98, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @val={0x25, 0x3, {0x0, 0xa1, 0x1a}}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0xfffe}}}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x5}, {}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x0) 2.919470484s ago: executing program 0 (id=857): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) rt_sigreturn() 2.8733485s ago: executing program 1 (id=860): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_LK(r0, &(0x7f0000000000)={0x28}, 0xfffffdec) poll(0x0, 0x0, 0x100) rt_sigreturn() pipe2$9p(0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x5414, 0x0) 2.686460219s ago: executing program 2 (id=864): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = socket(0x8000000010, 0x0, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa", 0xae) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f00)=ANY=[@ANYRESDEC, @ANYBLOB="02"], 0x44}}, 0x13) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000008877fbacfe1416e000030a89079f03b18000440c0511e0845013f2325f000702050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2.665279842s ago: executing program 1 (id=865): r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=w=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x80\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = memfd_create(&(0x7f0000000580)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\xf4\b\xe0\xfa\xb1\xd8N\xb2W\x06\xcd\xba{\x99$\xc3\x93u\x86\xfc\xc3\b\x1b\b\x1d\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x05kR\xfc\xcb[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xf5\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\b\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+\x00\x02X\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\vG\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc3\x0e\t&\xbd\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\x8d~\x01\t\x00\x00\xaa\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/\xf2\x1d\xf0`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\xdem\xe3)q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1x\x17/\v0\x9e\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea\x04\xf0\xd0\x00}\xfa}\xf1\x8bz\xca\xad\x8a\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c\x01@JRY\t\x00Pjk\xf7\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xaa\xa4\xb67\x89D\x93L\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a\xf6\xf6\xa6\x88\xfd\xc2\xa9\x14\xf3\xe1}\r.\a\x97\xf1A\x16\xbb1\xe3\xb7-\x96\xc1\x19\x85\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x11, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x800000b) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) 2.520080975s ago: executing program 4 (id=868): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) write$FUSE_WRITE(r2, &(0x7f0000000100)={0xfffffeec}, 0xffffffd1) write$P9_RREADDIR(r2, &(0x7f0000000300)={0xb}, 0xb) close(r2) 2.121558066s ago: executing program 3 (id=873): r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x6c) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_GET_DUMPABLE(0x10) 1.935630504s ago: executing program 3 (id=874): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000340)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000004080)={0x0, 0x1}) close_range(r1, r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f000023f000/0x1000)=nil, 0x1000, 0x0) rt_sigreturn() syz_read_part_table(0x4022, &(0x7f00000047c0)="$eJzsz7GpAkEUBdA7+z8iLraiibFiOZuYCSaC2I1lCCb2oQ1YgckGKwyKsedE7zEzlzvt/bROUubbTbcbZ6gZzKsmKUkW/V7yU25t5c/XZHlOMvkmqRwGS/eo3vl/m7A/9sOocjib1p78vWb3FS6fugIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOJABAAAAEOZvnUf7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4K8AAAD//2ShC30=") 1.749568332s ago: executing program 3 (id=875): r0 = eventfd(0x0) fcntl$setlease(r0, 0x400, 0x0) 1.683784022s ago: executing program 2 (id=876): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000008c0)={0x6, {{0x2, 0x0, @multicast1=0xe0000002}}, {{0x2, 0x0, @broadcast}}}, 0x108) 1.607529454s ago: executing program 3 (id=877): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) 1.557654962s ago: executing program 1 (id=878): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) rt_sigtimedwait(&(0x7f0000000140), 0x0, 0x0, 0x8) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) fallocate(r1, 0x0, 0x0, 0x8020003) utime(&(0x7f0000000180)='./file0\x00', 0x0) 1.506615129s ago: executing program 2 (id=879): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) write$FUSE_WRITE(r2, &(0x7f0000000100)={0xfffffeec}, 0xffffffd1) write$P9_RREADDIR(r2, &(0x7f0000000300)={0xb}, 0xb) close(r2) 1.479347814s ago: executing program 3 (id=880): r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=w=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x80\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = memfd_create(&(0x7f0000000580)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\xf4\b\xe0\xfa\xb1\xd8N\xb2W\x06\xcd\xba{\x99$\xc3\x93u\x86\xfc\xc3\b\x1b\b\x1d\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x05kR\xfc\xcb[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xf5\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\b\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+\x00\x02X\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\vG\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc3\x0e\t&\xbd\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\x8d~\x01\t\x00\x00\xaa\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/\xf2\x1d\xf0`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\xdem\xe3)q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1x\x17/\v0\x9e\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea\x04\xf0\xd0\x00}\xfa}\xf1\x8bz\xca\xad\x8a\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c\x01@JRY\t\x00Pjk\xf7\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xaa\xa4\xb67\x89D\x93L\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a\xf6\xf6\xa6\x88\xfd\xc2\xa9\x14\xf3\xe1}\r.\a\x97\xf1A\x16\xbb1\xe3\xb7-\x96\xc1\x19\x85\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x11, r2, 0x0) mlockall(0x0) fallocate(r2, 0x0, 0x0, 0x800000b) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) 1.402793515s ago: executing program 1 (id=881): memfd_create(0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) poll(0x0, 0x0, 0x64) rt_sigreturn() timer_settime(0x0, 0x0, 0x0, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getresgid(0x0, 0x0, 0x0) 1.387620958s ago: executing program 2 (id=882): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0x0, 0xc34, &(0x7f0000001080)="$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") chdir(&(0x7f0000000040)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d80), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x0) fdatasync(r0) alarm(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) 1.225282443s ago: executing program 1 (id=883): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f00000010c0)="$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") creat(&(0x7f00000003c0)='./bus\x00', 0x1c1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf251300000028000680080006000500000008000100ff0f000004000200040002008b00020008000600ff0f00000400018080080002000004000400281a77e777d89307fce8f2141c283bed84e5aaa3f85bf4c01616f2cca2b2f3f4ebb38b6cf988459b9a297318c0ef00af14058ec05cb48ba9c49f477f429eb8ecf19acce8677af332d7b07621ae8a3335cd82000000"], 0x58}}, 0x800) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240), 0xfffffffffffffffe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) write$binfmt_script(r2, &(0x7f00000038c0)={'#! ', './file0'}, 0xb) close(r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100), 0x6) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000240)="299cf37c0300abe7", 0x8}, {&(0x7f0000000280)="b6", 0x1}], 0x2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 502.230463ms ago: executing program 2 (id=884): mknod(0x0, 0x0, 0x0) rt_sigreturn() syz_open_procfs$namespace(0x0, 0x0) 112.947732ms ago: executing program 2 (id=885): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000180), 0x0, 0x3, r0}, 0x38) 89.807896ms ago: executing program 1 (id=886): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x20000023896) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x614aa976, 0x3, 0x4faf, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x48) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010000000000000000000a800e0000000014000100000000000000349700000000000000000000000054ccad044c862cad98e5a173d289d8bc81ed3828a16b216aa1020000000666f6154ef1"], 0x30}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="680000001000280600000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000300fc00000000000000000000000000000000000000000000000000010400130005000900890000002a0de068835c2a3f80ca7f4ef8fce91341450f624ef683c3a7756a13f89342fdac14686a14ca14e3de1877da7b3ecd06ccde873ebb7d224153b1bd03f475d1cdcdc3f6904823840423e43d73895a48a9ae725a5aafd2dc8b2dc7e216f149098763dff0577f316b543db4e1c6bdec93b62cb0d97e0386a8da45b9f6f4921a264d23d8209ceef6cadb05e5a9eb8565a0f53975c33638a06458471ea0e3091be6476ac3cdc078792568000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000085) timer_create(0x6, &(0x7f0000000140)={0x0, 0x0, 0x2, @thr={&(0x7f0000000280)="dab2a403a28e573528455ca8b20c3eca0fa88a56a41cd3c3ea86d9134ef18d7e2527cc4499438908aaa8c6fb", &(0x7f0000000a40)="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"}}, &(0x7f00000003c0)=0x0) timer_create(0xfffffffd, 0x0, 0x0) timer_settime(r7, 0x0, 0x0, 0x0) unshare(0x40000000) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) kernel console output (not intermixed with test programs): idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 94.232157][ T3553] usb 3-1: Using ep0 maxpacket: 32 [ 94.259999][ T3711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.274274][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 94.297634][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 94.388108][ T26] audit: type=1800 audit(1719424754.447:16): pid=4338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.203" name="bus" dev="sda1" ino=1976 res=0 errno=0 [ 94.874029][ T3711] usb 2-1: config 0 descriptor?? [ 94.879155][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.891256][ T1280] usb 4-1: USB disconnect, device number 5 [ 94.898510][ T7] usb 1-1: config 0 descriptor?? [ 94.925616][ T4325] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.943591][ T3553] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 94.951818][ T3553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 94.964087][ T7] hub 1-1:0.0: USB hub found [ 95.173722][ T3553] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 95.209696][ T3553] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 95.253533][ T7] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 95.273305][ T3553] usb 3-1: Product: syz [ 95.277503][ T3553] usb 3-1: Manufacturer: syz [ 95.282108][ T3553] usb 3-1: SerialNumber: syz [ 95.439016][ T26] audit: type=1800 audit(1719424755.507:17): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.206" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 95.842272][ T3553] usb 3-1: config 0 descriptor?? [ 96.644527][ T7] hid-generic 0003:046D:C314.0002: item fetching failed at offset 0/1 [ 96.653177][ T7] hid-generic: probe of 0003:046D:C314.0002 failed with error -22 [ 96.679728][ T3553] usb 3-1: can't set config #0, error -71 [ 96.694104][ T3711] usb 2-1: Cannot set autoneg [ 96.698916][ T3711] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 96.742314][ T3553] usb 3-1: USB disconnect, device number 2 [ 96.751499][ T3711] usb 2-1: USB disconnect, device number 3 [ 96.758133][ T7] usb 1-1: USB disconnect, device number 2 [ 97.273303][ T3711] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.373554][ T3553] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.455865][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 97.533646][ T3711] usb 2-1: Using ep0 maxpacket: 32 [ 97.620580][ T3515] Bluetooth: hci1: link tx timeout [ 97.626462][ T3515] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.663462][ T3711] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x14, skipping [ 97.773694][ T3553] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 97.782101][ T3553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 97.863725][ T3711] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.882972][ T3711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.884937][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.893310][ T1280] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.906388][ T3553] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 97.923245][ T3553] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 97.932248][ T3711] usb 2-1: Product: syz [ 97.936871][ T3553] usb 4-1: Manufacturer: syz [ 97.941967][ T3711] usb 2-1: Manufacturer: syz [ 97.947641][ T3711] usb 2-1: SerialNumber: syz [ 97.957046][ T3553] usb 4-1: config 0 descriptor?? [ 97.993661][ T4369] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.995446][ T3553] igorplugusb 4-1:0.0: endpoint incorrect [ 98.133352][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 98.202358][ T4085] usb 4-1: USB disconnect, device number 6 [ 98.209430][ T3552] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.253428][ T21] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 98.261826][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 98.295048][ T1280] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 98.304314][ T1280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.319975][ T1280] usb 5-1: config 0 descriptor?? [ 98.433532][ T21] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 98.442970][ T21] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 98.451712][ T21] usb 3-1: Product: syz [ 98.456043][ T21] usb 3-1: Manufacturer: syz [ 98.460658][ T21] usb 3-1: SerialNumber: syz [ 98.473309][ T3552] usb 1-1: Using ep0 maxpacket: 32 [ 98.479092][ T21] usb 3-1: config 0 descriptor?? [ 98.524975][ T21] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 98.536594][ T21] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 98.593727][ T3552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 98.605169][ T3552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 98.616509][ T3552] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 98.625702][ T3552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.639691][ T3552] usb 1-1: config 0 descriptor?? [ 98.663557][ T4411] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 98.684969][ T3552] hub 1-1:0.0: USB hub found [ 98.983518][ T3552] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 99.159948][ T4427] loop3: detected capacity change from 0 to 256 [ 99.266188][ T3552] hid-generic 0003:046D:C314.0003: item fetching failed at offset 0/1 [ 99.422593][ T3552] hid-generic: probe of 0003:046D:C314.0003 failed with error -22 [ 99.578317][ T26] audit: type=1326 audit(1719424759.657:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.3.232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92ecddaae9 code=0x0 [ 100.073839][ T21] usb 2-1: USB disconnect, device number 4 [ 100.224122][ T1280] usb 5-1: Cannot set autoneg [ 100.230818][ T1280] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 100.241984][ T1280] usb 5-1: USB disconnect, device number 4 [ 100.249673][ T3553] Bluetooth: hci1: command 0x0406 tx timeout [ 100.268575][ T1068] usb 1-1: USB disconnect, device number 3 [ 100.284808][ T3711] usb 3-1: USB disconnect, device number 3 [ 100.334521][ T3711] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 100.793793][ T26] audit: type=1800 audit(1719424760.863:19): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.237" name="bus" dev="sda1" ino=1974 res=0 errno=0 [ 100.928508][ T4442] loop1: detected capacity change from 0 to 2048 [ 101.269752][ T4437] loop2: detected capacity change from 0 to 512 [ 101.335612][ T4442] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 101.393337][ T4437] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.406099][ T4442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.568808][ T4437] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #16: comm syz.2.235: casefold flag without casefold feature [ 101.696024][ T4437] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #3: comm syz.2.235: corrupted inode contents [ 101.786098][ T4437] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #3: comm syz.2.235: mark_inode_dirty error [ 101.979381][ T4437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.235: bg 0: block 64: padding at end of block bitmap is not set [ 102.517876][ T4437] Quota error (device loop2): write_blk: dquota write failed [ 102.531264][ T4437] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 102.590508][ T4437] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.235: Failed to acquire dquot type 0 [ 102.833394][ T4437] Quota error (device loop2): write_blk: dquota write failed [ 102.874831][ T4437] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 103.297069][ T26] audit: type=1800 audit(1719424763.033:20): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.254" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 103.305259][ T4437] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.235: Failed to acquire dquot type 0 [ 103.514976][ T4437] Quota error (device loop2): write_blk: dquota write failed [ 104.433978][ T4437] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 104.493277][ T4437] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.235: Failed to acquire dquot type 0 [ 104.639568][ T4437] EXT4-fs (loop2): 1 orphan inode deleted [ 104.647856][ T4437] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,block_validity,grpid,,errors=continue. Quota mode: writeback. [ 104.764581][ T4437] ext4 filesystem being mounted at /root/syzkaller.NElc0I/44/control supports timestamps until 2038 (0x7fffffff) [ 104.833812][ T4437] syz.2.235 (4437) used greatest stack depth: 19072 bytes left [ 106.669894][ T4549] loop1: detected capacity change from 0 to 2048 [ 106.825158][ T4549] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 106.904857][ T4549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.155137][ T4563] loop4: detected capacity change from 0 to 256 [ 107.263075][ T4563] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3289bd7c, utbl_chksum : 0xe619d30d) [ 110.143432][ T4584] loop4: detected capacity change from 0 to 256 [ 110.577618][ T26] audit: type=1326 audit(1719424770.663:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.4.284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f224cdd1ae9 code=0x0 [ 110.887162][ T4085] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.560533][ T4606] syz.4.291[4606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.560634][ T4606] syz.4.291[4606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.639648][ T4085] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 111.685736][ T4085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.754095][ T4085] usb 3-1: config 0 descriptor?? [ 111.793387][ T1068] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.233916][ T1068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.254044][ T1068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.278789][ T1068] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 112.298455][ T1068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.357094][ T1068] usb 4-1: config 0 descriptor?? [ 113.723570][ T4085] usb 3-1: Cannot set autoneg [ 113.728387][ T4085] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 113.789120][ T4085] usb 3-1: USB disconnect, device number 4 [ 113.853478][ T1068] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 113.871582][ T1068] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 113.894305][ T4616] loop1: detected capacity change from 0 to 32768 [ 113.900338][ T1068] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 113.918777][ T1068] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 113.969180][ T1068] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 114.008182][ T1068] usb 4-1: USB disconnect, device number 7 [ 114.020167][ T4626] loop4: detected capacity change from 0 to 512 [ 114.026498][ T4616] XFS (loop1): Mounting V5 Filesystem [ 114.214029][ T4616] XFS (loop1): Ending clean mount [ 114.303097][ T26] audit: type=1800 audit(1719424774.373:22): pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.296" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 114.353713][ T1280] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 114.420077][ T1280] XFS (loop1): Unmount and run xfs_repair [ 114.608858][ T1280] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 114.648910][ T1280] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 115.396205][ T4626] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.299: casefold flag without casefold feature [ 115.409641][ T1280] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 115.423366][ T1280] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 115.432260][ T1280] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 115.443451][ T1280] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 115.452364][ T1280] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 115.453323][ T4648] loop2: detected capacity change from 0 to 256 [ 115.474117][ T4626] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #3: comm syz.4.299: corrupted inode contents [ 115.491134][ T1280] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 115.520453][ T1280] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 115.534269][ T4626] EXT4-fs error (device loop4): ext4_dirty_inode:5993: inode #3: comm syz.4.299: mark_inode_dirty error [ 115.535894][ T4616] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 115.573672][ T4626] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.299: bg 0: block 64: padding at end of block bitmap is not set [ 115.640150][ T4616] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 115.789724][ T4616] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 115.802099][ T4626] Quota error (device loop4): write_blk: dquota write failed [ 115.812381][ T4626] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 115.824797][ T4626] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.299: Failed to acquire dquot type 0 [ 115.832718][ T26] audit: type=1800 audit(1719424775.903:23): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.296" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 116.698846][ T4626] Quota error (device loop4): write_blk: dquota write failed [ 116.744467][ T26] audit: type=1326 audit(1719424776.003:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.2.302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2bdeecae9 code=0x0 [ 116.767766][ T4626] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 116.782227][ T3900] XFS (loop1): Unmounting Filesystem [ 116.784744][ T4626] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.299: Failed to acquire dquot type 0 [ 116.845519][ T4626] Quota error (device loop4): write_blk: dquota write failed [ 116.903713][ T4626] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 116.921493][ T4626] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.299: Failed to acquire dquot type 0 [ 116.981037][ T4626] EXT4-fs (loop4): 1 orphan inode deleted [ 116.987015][ T4626] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,block_validity,grpid,,errors=continue. Quota mode: writeback. [ 117.002265][ T4626] ext4 filesystem being mounted at /root/syzkaller.Cte8Zp/63/control supports timestamps until 2038 (0x7fffffff) [ 120.081671][ T4693] syz.1.317[4693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.081806][ T4693] syz.1.317[4693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.170084][ T4691] loop0: detected capacity change from 0 to 32768 [ 121.323494][ T3957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.351150][ T4691] XFS (loop0): Mounting V5 Filesystem [ 121.430004][ T3957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.516314][ T3957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.689269][ T4691] XFS (loop0): Ending clean mount [ 121.711334][ T26] audit: type=1800 audit(1719424781.783:25): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.316" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 121.746720][ T4691] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 121.815282][ T4721] loop1: detected capacity change from 0 to 512 [ 121.834844][ T4691] XFS (loop0): Unmount and run xfs_repair [ 121.842077][ T4691] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 122.404542][ T4691] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 122.594373][ T4691] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 122.726531][ T4691] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 122.741622][ T4691] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 122.755216][ T4691] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 122.814399][ T3957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.882426][ T4691] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 122.899607][ T4721] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.322: bg 0: block 248: padding at end of block bitmap is not set [ 122.936429][ T4721] Quota error (device loop1): write_blk: dquota write failed [ 123.006421][ T4691] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 123.015946][ T4691] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 123.025693][ T4691] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 123.040037][ T4721] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 123.057175][ T4691] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 123.085789][ T4721] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.322: Failed to acquire dquot type 1 [ 123.111464][ T4721] EXT4-fs (loop1): 1 truncate cleaned up [ 123.123983][ T4721] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,nojournal_checksum,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 123.148962][ T4721] ext4 filesystem being mounted at /root/syzkaller.Qun27c/20/bus supports timestamps until 2038 (0x7fffffff) [ 123.163407][ T1280] Bluetooth: hci4: command 0x0409 tx timeout [ 123.252591][ T4691] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 123.275189][ T4702] chnl_net:caif_netlink_parms(): no params data found [ 123.286812][ T26] audit: type=1804 audit(1719424783.363:26): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.316" name="/root/syzkaller.stGO9g/82/file0/file1" dev="loop0" ino=9286 res=1 errno=0 [ 123.410757][ T3503] XFS (loop0): Unmounting Filesystem [ 123.484674][ T26] audit: type=1800 audit(1719424783.393:27): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.316" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 123.829972][ T4721] syz.1.322 (4721) used greatest stack depth: 17912 bytes left [ 124.255117][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.272914][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.313267][ T4702] device bridge_slave_0 entered promiscuous mode [ 124.354402][ T4751] syz.2.333[4751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.354517][ T4751] syz.2.333[4751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.421710][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.484690][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.651721][ T4702] device bridge_slave_1 entered promiscuous mode [ 125.253619][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 125.366359][ T4702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.387307][ T4702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.668541][ T4702] team0: Port device team_slave_0 added [ 125.700796][ T4702] team0: Port device team_slave_1 added [ 125.823435][ T4044] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.883867][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.890837][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.943873][ T4702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.964295][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.971490][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.018332][ T4702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.313414][ T4044] usb 1-1: Using ep0 maxpacket: 16 [ 126.435735][ T4044] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 126.587636][ T4044] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 126.803290][ T4044] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.831820][ T4044] usb 1-1: config 0 descriptor?? [ 126.944890][ T4702] device hsr_slave_0 entered promiscuous mode [ 126.958982][ T4702] device hsr_slave_1 entered promiscuous mode [ 126.985342][ T4702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.994956][ T4702] Cannot create hsr debugfs directory [ 127.205817][ T3957] device hsr_slave_0 left promiscuous mode [ 127.212372][ T3957] device hsr_slave_1 left promiscuous mode [ 127.223344][ T3548] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.246906][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.263404][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.274109][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.281650][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.297857][ T4763] udc-core: couldn't find an available UDC or it's busy [ 127.305518][ T3957] device bridge_slave_1 left promiscuous mode [ 127.311767][ T3957] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.323510][ T4763] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 127.334118][ T3711] Bluetooth: hci4: command 0x040f tx timeout [ 127.344740][ T3957] device bridge_slave_0 left promiscuous mode [ 127.355485][ T4044] hid (null): unknown global tag 0xd [ 127.361131][ T4044] hid (null): report_id 0 is invalid [ 127.361223][ T3957] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.383825][ T4044] hid (null): unknown global tag 0xc [ 127.394462][ T3957] device veth1_macvtap left promiscuous mode [ 127.419088][ T4044] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 127.433585][ T3957] device veth0_macvtap left promiscuous mode [ 127.440018][ T3957] device veth1_vlan left promiscuous mode [ 127.463448][ T3548] usb 3-1: Using ep0 maxpacket: 8 [ 127.469594][ T4044] hid-generic 0003:0158:0100.0005: unexpected long global item [ 127.487667][ T3957] device veth0_vlan left promiscuous mode [ 127.497752][ T4044] hid-generic: probe of 0003:0158:0100.0005 failed with error -22 [ 127.590120][ T4047] usb 1-1: USB disconnect, device number 4 [ 127.599775][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.638008][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.659847][ T3548] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.79 [ 127.691433][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.717782][ T3548] usb 3-1: config 0 descriptor?? [ 127.729210][ T4782] loop3: detected capacity change from 0 to 32768 [ 127.836274][ T4782] XFS (loop3): Mounting V5 Filesystem [ 127.908333][ T4782] XFS (loop3): Ending clean mount [ 127.938928][ T26] audit: type=1800 audit(1719424788.013:28): pid=4782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.339" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 127.973019][ T1280] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 127.999803][ T1280] XFS (loop3): Unmount and run xfs_repair [ 128.012762][ T1280] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 128.031003][ T1280] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 128.051992][ T1280] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 128.062923][ T1280] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 128.080096][ T1280] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 128.090357][ T1280] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 128.106767][ T1280] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 128.118614][ T1280] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 128.141585][ T1280] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 128.154860][ T4782] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 128.157755][ T3957] team0 (unregistering): Port device team_slave_1 removed [ 128.187742][ T4782] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 128.205088][ T3957] team0 (unregistering): Port device team_slave_0 removed [ 128.223884][ T3548] hid-generic 0003:17EF:60EE.0006: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 128.239620][ T4782] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 128.243401][ T3957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.263606][ T26] audit: type=1800 audit(1719424788.333:29): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.339" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 128.303702][ T3508] XFS (loop3): Unmounting Filesystem [ 128.365923][ T3957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.464415][ T1280] usb 3-1: USB disconnect, device number 5 [ 128.590127][ T3957] bond0 (unregistering): Released all slaves [ 128.660750][ T4796] Zero length message leads to an empty skb [ 129.403402][ T3711] Bluetooth: hci4: command 0x0419 tx timeout [ 129.450604][ T4702] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.523307][ T1068] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.540765][ T4702] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.556088][ T4855] usb usb9: usbfs: process 4855 (syz.2.358) did not claim interface 0 before use [ 129.578794][ T4702] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.595820][ T4702] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.684790][ T4858] loop3: detected capacity change from 0 to 764 [ 129.791137][ T1068] usb 1-1: Using ep0 maxpacket: 16 [ 129.862959][ T4702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.921036][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.927374][ T1068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 129.931695][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.969072][ T1068] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 129.980511][ T4702] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.012756][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.013385][ T1068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.025429][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.063908][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.071092][ T4047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.105414][ T1068] usb 1-1: config 0 descriptor?? [ 130.140331][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.152152][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.185959][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.215544][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.222635][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.263391][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.264548][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.329597][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.364571][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.420692][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.443882][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.494062][ T4836] loop1: detected capacity change from 0 to 32768 [ 130.496516][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.525177][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.550182][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.580189][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.612029][ T4841] udc-core: couldn't find an available UDC or it's busy [ 130.612092][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.642902][ T4841] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.665597][ T1068] hid (null): unknown global tag 0xd [ 130.671758][ T1068] hid (null): report_id 0 is invalid [ 130.693866][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.725815][ T1068] hid (null): unknown global tag 0xc [ 130.735431][ T1068] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 130.743003][ T1068] hid-generic 0003:0158:0100.0007: unexpected long global item [ 130.758831][ T1068] hid-generic: probe of 0003:0158:0100.0007 failed with error -22 [ 130.783480][ T4836] XFS (loop1): Mounting V5 Filesystem [ 130.978214][ T1068] usb 1-1: USB disconnect, device number 5 [ 131.082671][ T4836] XFS (loop1): Ending clean mount [ 131.220704][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.241657][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.245059][ T3711] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 131.249315][ T26] audit: type=1800 audit(1719424791.313:30): pid=4836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.354" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 131.293564][ T3711] XFS (loop1): Unmount and run xfs_repair [ 131.306659][ T4702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.319246][ T3711] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 131.403291][ T3711] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 131.412237][ T3711] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 131.442355][ T3711] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 131.482359][ T3711] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 131.527747][ T3711] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 131.571017][ T3711] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 131.613317][ T3711] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 131.622203][ T3711] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 131.688287][ T4836] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 131.726677][ T4836] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 131.773570][ T4836] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 131.790019][ T26] audit: type=1804 audit(1719424791.863:31): pid=4898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.354" name="/root/syzkaller.Qun27c/29/file0/file1" dev="loop1" ino=9286 res=1 errno=0 [ 131.868557][ T3900] XFS (loop1): Unmounting Filesystem [ 131.913925][ T26] audit: type=1800 audit(1719424791.863:32): pid=4898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.354" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 132.108435][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.144172][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.213422][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.222245][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.259446][ T4702] device veth0_vlan entered promiscuous mode [ 132.275699][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.303698][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.390717][ T4702] device veth1_vlan entered promiscuous mode [ 132.525784][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.544074][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.576405][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.610151][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.610535][ T4953] syz.1.372 uses obsolete (PF_INET,SOCK_PACKET) [ 132.656653][ T4702] device veth0_macvtap entered promiscuous mode [ 132.696273][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.702762][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.718228][ T4958] loop3: detected capacity change from 0 to 512 [ 132.724561][ T4702] device veth1_macvtap entered promiscuous mode [ 132.744680][ T4949] process 'syz.1.372' launched './file0' with NULL argv: empty string added [ 132.792498][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.824177][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.852388][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.882626][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.917058][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.952956][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.977953][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.009360][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.028990][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.048930][ T4958] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.081267][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.101774][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.120649][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.133976][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.146096][ T4958] EXT4-fs (loop3): 1 orphan inode deleted [ 133.147729][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.156665][ T4958] EXT4-fs (loop3): 1 truncate cleaned up [ 133.162832][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.178881][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.189761][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.199638][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.210817][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.220825][ T4702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.223338][ T4958] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 133.231520][ T4702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.267475][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.284209][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.303868][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.327358][ T4702] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.344185][ T4702] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.384147][ T4702] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.398155][ T4702] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.399225][ T4958] EXT4-fs error (device loop3): empty_inline_dir:1836: inode #12: block 7: comm syz.3.378: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 133.509049][ T4958] EXT4-fs (loop3): Remounting filesystem read-only [ 133.536842][ T4958] EXT4-fs warning (device loop3): empty_inline_dir:1843: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 133.585291][ T2595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.624250][ T2595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.657877][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.703014][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.739832][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.772951][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.105559][ T5013] syz.1.395[5013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.105669][ T5013] syz.1.395[5013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.307637][ T5028] device vlan2 entered promiscuous mode [ 134.365705][ T5028] device bond0 entered promiscuous mode [ 134.380619][ T5028] device bond_slave_0 entered promiscuous mode [ 134.393514][ T5028] device bond_slave_1 entered promiscuous mode [ 134.420277][ T5028] device bond0 left promiscuous mode [ 134.425773][ T5028] device bond_slave_0 left promiscuous mode [ 134.442185][ T5028] device bond_slave_1 left promiscuous mode [ 139.335166][ T5131] loop4: detected capacity change from 0 to 128 [ 139.396173][ T5130] device pim6reg1 entered promiscuous mode [ 139.511143][ T5131] attempt to access beyond end of device [ 139.511143][ T5131] loop4: rw=2049, want=937, limit=128 [ 140.526600][ T2595] attempt to access beyond end of device [ 140.526600][ T2595] loop4: rw=1, want=185, limit=128 [ 142.429175][ T3553] Bluetooth: hci2: command 0x0409 tx timeout [ 143.022457][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 143.296741][ T5176] loop1: detected capacity change from 0 to 128 [ 143.436582][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.472896][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.494558][ T5118] device bridge_slave_0 entered promiscuous mode [ 143.525198][ T5171] attempt to access beyond end of device [ 143.525198][ T5171] loop1: rw=2049, want=1041, limit=128 [ 143.584863][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.614945][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.641402][ T5118] device bridge_slave_1 entered promiscuous mode [ 143.651037][ T5176] attempt to access beyond end of device [ 143.651037][ T5176] loop1: rw=524288, want=369, limit=128 [ 143.793662][ T5170] attempt to access beyond end of device [ 143.793662][ T5170] loop1: rw=0, want=185, limit=128 [ 143.806509][ T5170] attempt to access beyond end of device [ 143.806509][ T5170] loop1: rw=0, want=185, limit=128 [ 143.852155][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.462205][ T3553] Bluetooth: hci2: command 0x041b tx timeout [ 144.596700][ T5170] attempt to access beyond end of device [ 144.596700][ T5170] loop1: rw=0, want=185, limit=128 [ 144.645342][ T5170] attempt to access beyond end of device [ 144.645342][ T5170] loop1: rw=0, want=185, limit=128 [ 144.663593][ T5170] attempt to access beyond end of device [ 144.663593][ T5170] loop1: rw=0, want=185, limit=128 [ 144.697376][ T5170] attempt to access beyond end of device [ 144.697376][ T5170] loop1: rw=0, want=185, limit=128 [ 144.713518][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.753555][ T5170] attempt to access beyond end of device [ 144.753555][ T5170] loop1: rw=0, want=185, limit=128 [ 144.794013][ T5170] attempt to access beyond end of device [ 144.794013][ T5170] loop1: rw=0, want=185, limit=128 [ 144.863731][ T5171] attempt to access beyond end of device [ 144.863731][ T5171] loop1: rw=0, want=185, limit=128 [ 144.916638][ T5118] team0: Port device team_slave_0 added [ 144.925047][ T5171] attempt to access beyond end of device [ 144.925047][ T5171] loop1: rw=0, want=185, limit=128 [ 144.987346][ T5171] attempt to access beyond end of device [ 144.987346][ T5171] loop1: rw=0, want=185, limit=128 [ 145.007350][ T5171] attempt to access beyond end of device [ 145.007350][ T5171] loop1: rw=0, want=185, limit=128 [ 145.082395][ T5118] team0: Port device team_slave_1 added [ 145.190024][ T5173] chnl_net:caif_netlink_parms(): no params data found [ 145.209707][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.224858][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.414853][ T3552] Bluetooth: hci5: command 0x0409 tx timeout [ 145.414900][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.407901][ T3553] Bluetooth: hci2: command 0x040f tx timeout [ 147.428784][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.633438][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.832937][ T3552] Bluetooth: hci5: command 0x041b tx timeout [ 147.927447][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.680414][ T3552] Bluetooth: hci2: command 0x0419 tx timeout [ 149.891923][ T4044] Bluetooth: hci5: command 0x040f tx timeout [ 150.073622][ T4044] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.846667][ T5118] device hsr_slave_0 entered promiscuous mode [ 150.933865][ T5118] device hsr_slave_1 entered promiscuous mode [ 151.122382][ T5247] loop0: detected capacity change from 0 to 128 [ 151.176458][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.193696][ T5173] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.202071][ T5173] device bridge_slave_0 entered promiscuous mode [ 151.210972][ T3515] Bluetooth: Unknown BR/EDR signaling command 0x6e [ 151.218385][ T3515] Bluetooth: Wrong link type (-22) [ 151.301131][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.331856][ T5173] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.346967][ T5250] handle_bad_sector: 4 callbacks suppressed [ 151.346987][ T5250] attempt to access beyond end of device [ 151.346987][ T5250] loop0: rw=2049, want=473, limit=128 [ 151.351071][ T5173] device bridge_slave_1 entered promiscuous mode [ 151.408197][ T5247] attempt to access beyond end of device [ 151.408197][ T5247] loop0: rw=524288, want=369, limit=128 [ 151.473811][ T5246] attempt to access beyond end of device [ 151.473811][ T5246] loop0: rw=0, want=185, limit=128 [ 151.495118][ T5246] attempt to access beyond end of device [ 151.495118][ T5246] loop0: rw=0, want=185, limit=128 [ 151.519553][ T5246] attempt to access beyond end of device [ 151.519553][ T5246] loop0: rw=0, want=185, limit=128 [ 151.550830][ T5246] attempt to access beyond end of device [ 151.550830][ T5246] loop0: rw=0, want=185, limit=128 [ 151.565808][ T5173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.597938][ T5173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.609525][ T5246] attempt to access beyond end of device [ 151.609525][ T5246] loop0: rw=0, want=185, limit=128 [ 151.642032][ T5246] attempt to access beyond end of device [ 151.642032][ T5246] loop0: rw=0, want=185, limit=128 [ 151.782342][ T5246] attempt to access beyond end of device [ 151.782342][ T5246] loop0: rw=0, want=185, limit=128 [ 151.802378][ T5118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.828953][ T5246] attempt to access beyond end of device [ 151.828953][ T5246] loop0: rw=0, want=185, limit=128 [ 155.654243][ T3548] Bluetooth: hci5: command 0x0419 tx timeout [ 155.823450][ T4044] usb 5-1: unable to read config index 0 descriptor/all [ 155.830464][ T4044] usb 5-1: can't read configurations, error -71 [ 155.931424][ T5118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.997883][ T5173] team0: Port device team_slave_0 added [ 156.015806][ T5173] team0: Port device team_slave_1 added [ 156.214464][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.221440][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.258324][ T5173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.304554][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.353641][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.812109][ T5173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.981770][ T5118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.133463][ T3553] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 157.137736][ T5118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.185222][ T5173] device hsr_slave_0 entered promiscuous mode [ 157.205205][ T5173] device hsr_slave_1 entered promiscuous mode [ 157.216369][ T5173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.225320][ T5173] Cannot create hsr debugfs directory [ 157.457668][ T5118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.484703][ T5118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.520300][ T5118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.527450][ T3553] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 157.551050][ T3553] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 157.606734][ T3553] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 157.640066][ T3553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.670015][ T5118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 157.677363][ T5272] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 157.714134][ T5173] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.839214][ T5173] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.955252][ T5173] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.111741][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.159454][ T5173] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.217507][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.240120][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.279473][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.365628][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.380224][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.401350][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.409651][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.448997][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.470002][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.491923][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.506817][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.513953][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.525795][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.558547][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.581072][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.589740][ T3553] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 158.615093][ T3553] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input11 [ 158.650620][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.706836][ T3553] usb 2-1: USB disconnect, device number 5 [ 158.713246][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 158.847404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.881818][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.993586][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.055682][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.103725][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.155683][ T5298] loop1: detected capacity change from 0 to 128 [ 159.215717][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.224436][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.260959][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.449542][ T5173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 160.310967][ T5173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.349120][ T5173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.479339][ T5173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.642162][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.659012][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.712264][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.829802][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.864081][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.002983][ T5173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.773409][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.781655][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.836524][ T5118] device veth0_vlan entered promiscuous mode [ 161.864291][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.872371][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.882479][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.891126][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.901829][ T5173] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.940161][ T5118] device veth1_vlan entered promiscuous mode [ 161.953537][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.964210][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.973102][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.980597][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.029430][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.041259][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.063524][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.083956][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.091284][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.104936][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.117790][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.175602][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.207535][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.240423][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.252170][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.260891][ T5329] loop1: detected capacity change from 0 to 128 [ 162.281742][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.309879][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.334326][ T5118] device veth0_macvtap entered promiscuous mode [ 162.538671][ T5319] loop4: detected capacity change from 0 to 32768 [ 162.548323][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.562433][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.575223][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.585558][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.388056][ T5173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.403986][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.417937][ T5118] device veth1_macvtap entered promiscuous mode [ 163.435521][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.455685][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.509200][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.578383][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.602994][ T5319] XFS (loop4): Mounting V5 Filesystem [ 163.629728][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.669309][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.711141][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.734825][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.802243][ T5319] XFS (loop4): Ending clean mount [ 163.821073][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.852983][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.891107][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.911685][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.941401][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.031501][ T4702] XFS (loop4): Unmounting Filesystem [ 164.033859][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.073508][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.091654][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.195413][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.231945][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.257926][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.302512][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.312988][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.325723][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.353972][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.365477][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.381866][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.404822][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.455010][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.490274][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.512568][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.539659][ T5118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.559656][ T5118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.575056][ T5118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.586426][ T5118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.655383][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.676791][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.716580][ T5173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.991596][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.164766][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.214023][ T4000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.222678][ T4000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.322879][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.361268][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.374826][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.392639][ T5173] device veth0_vlan entered promiscuous mode [ 165.421189][ T4000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.457438][ T4000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.470057][ T3999] device hsr_slave_0 left promiscuous mode [ 165.487243][ T3999] device hsr_slave_1 left promiscuous mode [ 165.510606][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.526536][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.537109][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.555491][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.567263][ T3999] device bridge_slave_1 left promiscuous mode [ 165.582827][ T3999] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.596609][ T3999] device bridge_slave_0 left promiscuous mode [ 165.604398][ T3999] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.623936][ T3999] device hsr_slave_0 left promiscuous mode [ 165.652512][ T3999] device hsr_slave_1 left promiscuous mode [ 165.660720][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.671325][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.682256][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.690281][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.700452][ T3999] device bridge_slave_1 left promiscuous mode [ 165.707070][ T3999] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.716454][ T3999] device bridge_slave_0 left promiscuous mode [ 165.722781][ T3999] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.752405][ T3999] device veth1_macvtap left promiscuous mode [ 165.758837][ T3999] device veth0_macvtap left promiscuous mode [ 165.765296][ T3999] device veth1_vlan left promiscuous mode [ 165.772803][ T3999] device veth0_vlan left promiscuous mode [ 165.783781][ T3999] device veth1_macvtap left promiscuous mode [ 165.790953][ T3999] device veth0_macvtap left promiscuous mode [ 165.797516][ T3999] device veth1_vlan left promiscuous mode [ 165.804063][ T3999] device veth0_vlan left promiscuous mode [ 166.792273][ T3999] team0 (unregistering): Port device team_slave_1 removed [ 166.826187][ T3999] team0 (unregistering): Port device team_slave_0 removed [ 166.859331][ T3999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.895578][ T3999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.049393][ T3999] bond0 (unregistering): Released all slaves [ 167.223860][ T3999] team0 (unregistering): Port device team_slave_1 removed [ 167.242428][ T3999] team0 (unregistering): Port device team_slave_0 removed [ 167.256913][ T3999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.271637][ T3999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.323703][ T4044] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 167.356435][ T3999] bond0 (unregistering): Released all slaves [ 167.418030][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.426457][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.434438][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.449762][ T5173] device veth1_vlan entered promiscuous mode [ 167.537069][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.547432][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.613847][ T5173] device veth0_macvtap entered promiscuous mode [ 167.627243][ T5173] device veth1_macvtap entered promiscuous mode [ 167.651684][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.664864][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.682453][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.695213][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.705748][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.717138][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.753579][ T4044] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 167.756838][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.773226][ T4044] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 167.787967][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.805964][ T4044] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 167.821951][ T5395] loop1: detected capacity change from 0 to 2048 [ 167.828667][ T4044] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.835582][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.858601][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.873729][ T5382] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.874241][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.904183][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.913039][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.955258][ T5395] NILFS (loop1): invalid segment: Checksum error in segment payload [ 167.976915][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.012988][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.023086][ T5395] NILFS (loop1): trying rollback from an earlier position [ 168.048799][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.058231][ T5395] NILFS (loop1): recovery complete [ 168.071457][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.101652][ T5410] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.102226][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.191978][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.207629][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.243930][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.277871][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.299886][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.344710][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.387534][ T5173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.432444][ T5173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.459689][ T5173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.489683][ T5173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.515380][ T5411] loop4: detected capacity change from 0 to 4096 [ 168.776320][ T5411] NILFS (loop4): invalid segment: Checksum error in segment payload [ 168.786213][ T5411] NILFS (loop4): trying rollback from an earlier position [ 168.814825][ T4044] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 168.823472][ T4044] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input12 [ 168.899763][ T4044] usb 1-1: USB disconnect, device number 6 [ 168.905841][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 169.191312][ T5411] NILFS (loop4): recovery complete [ 169.377732][ T5413] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.456475][ T2595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.470191][ T2595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.535321][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.609709][ T1433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.655287][ T1433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.731123][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.948920][ T5423] loop0: detected capacity change from 0 to 128 [ 170.124143][ T5432] attempt to access beyond end of device [ 170.124143][ T5432] loop0: rw=2049, want=553, limit=128 [ 170.447588][ T5444] netlink: 'syz.4.521': attribute type 4 has an invalid length. [ 170.613346][ T1066] Bluetooth: hci0: command 0x0406 tx timeout [ 170.944097][ T5455] loop2: detected capacity change from 0 to 2048 [ 171.620322][ T5455] NILFS (loop2): invalid segment: Checksum error in segment payload [ 171.663328][ T5455] NILFS (loop2): trying rollback from an earlier position [ 171.755137][ T5473] loop4: detected capacity change from 0 to 128 [ 171.791557][ T5455] NILFS (loop2): recovery complete [ 171.901251][ T5471] attempt to access beyond end of device [ 171.901251][ T5471] loop4: rw=2049, want=1041, limit=128 [ 172.039080][ T5481] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.633608][ T5498] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.257965][ T5505] loop2: detected capacity change from 0 to 8 [ 174.514861][ T5495] chnl_net:caif_netlink_parms(): no params data found [ 174.529730][ T5515] loop4: detected capacity change from 0 to 128 [ 174.727710][ T5512] attempt to access beyond end of device [ 174.727710][ T5512] loop4: rw=2049, want=401, limit=128 [ 174.930755][ T5495] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.960146][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.572599][ T3548] Bluetooth: hci0: command 0x0409 tx timeout [ 175.722558][ T5495] device bridge_slave_0 entered promiscuous mode [ 175.806844][ T5526] can: request_module (can-proto-0) failed. [ 175.845280][ T5495] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.861638][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.883048][ T5495] device bridge_slave_1 entered promiscuous mode [ 176.000819][ T5495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.065362][ T5495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.217154][ T5495] team0: Port device team_slave_0 added [ 176.714499][ T5495] team0: Port device team_slave_1 added [ 176.762611][ T5557] loop1: detected capacity change from 0 to 8 [ 176.973702][ T5495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.988631][ T5495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.113570][ T5495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.158617][ T5495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.213252][ T5495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.239403][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.324862][ T5495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.537196][ T5495] device hsr_slave_0 entered promiscuous mode [ 177.598353][ T5495] device hsr_slave_1 entered promiscuous mode [ 177.636980][ T5495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.667144][ T5495] Cannot create hsr debugfs directory [ 177.723731][ T3548] Bluetooth: hci0: command 0x041b tx timeout [ 178.494482][ T5495] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.589196][ T5495] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.786316][ T5495] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.896087][ T5495] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.041455][ T5609] loop1: detected capacity change from 0 to 256 [ 179.105171][ T5609] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3289bd7c, utbl_chksum : 0xe619d30d) [ 179.156127][ T26] audit: type=1800 audit(1719424839.233:33): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.576" name="file0" dev="sda1" ino=1985 res=0 errno=0 [ 179.207847][ T26] audit: type=1326 audit(1719424839.233:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa817daae9 code=0x7fc00000 [ 179.267882][ T26] audit: type=1326 audit(1719424839.263:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa817daae9 code=0x7fc00000 [ 179.371419][ T5495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.396627][ T5495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.805926][ T4047] Bluetooth: hci0: command 0x040f tx timeout [ 179.883257][ T26] audit: type=1326 audit(1719424839.953:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa817daae9 code=0x7fc00000 [ 179.905434][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.952744][ T5495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.003925][ T5495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.014715][ T26] audit: type=1326 audit(1719424839.953:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faa817daae9 code=0x7fc00000 [ 180.036736][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.105655][ T26] audit: type=1326 audit(1719424839.953:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa817daae9 code=0x7fc00000 [ 180.128497][ T26] audit: type=1326 audit(1719424839.953:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa817daae9 code=0x7fc00000 [ 180.173313][ T26] audit: type=1326 audit(1719424839.953:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa817daae9 code=0x7fc00000 [ 180.240459][ T26] audit: type=1326 audit(1719424839.953:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa817daae9 code=0x7fc00000 [ 180.578865][ T26] audit: type=1326 audit(1719424839.953:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa817daae9 code=0x7fc00000 [ 181.203640][ T3548] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.254381][ T5495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.303477][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.311583][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.334515][ T5495] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.352899][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.362629][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.379470][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.386633][ T4044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.429626][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.447388][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.461746][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.473011][ T3548] usb 5-1: Using ep0 maxpacket: 8 [ 181.484814][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.491959][ T4047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.507902][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.547790][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.565266][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.582952][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.614644][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.630883][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.646292][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.660462][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.678709][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.691020][ T3548] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 181.707396][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.731044][ T3548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.747251][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.774630][ T3548] usb 5-1: config 0 descriptor?? [ 181.785883][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.813732][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.844656][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.883365][ T4044] Bluetooth: hci0: command 0x0419 tx timeout [ 181.988314][ T3999] device hsr_slave_0 left promiscuous mode [ 182.005886][ T3999] device hsr_slave_1 left promiscuous mode [ 182.040256][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.079559][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.287746][ T3548] steelseries_srws1 0003:1038:1410.0008: unknown main item tag 0x0 [ 182.328890][ T3548] steelseries_srws1 0003:1038:1410.0008: unknown main item tag 0x0 [ 182.356159][ T3548] steelseries_srws1 0003:1038:1410.0008: unknown main item tag 0x0 [ 182.381572][ T3548] steelseries_srws1 0003:1038:1410.0008: unknown main item tag 0x0 [ 182.428473][ T3548] steelseries_srws1 0003:1038:1410.0008: missing HID_OUTPUT_REPORT 0 [ 182.566310][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.574528][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.590741][ T3548] usb 5-1: USB disconnect, device number 7 [ 182.603039][ T3999] device bridge_slave_1 left promiscuous mode [ 183.431288][ T3999] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.456530][ T3999] device bridge_slave_0 left promiscuous mode [ 183.485377][ T3999] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.529185][ T3999] device veth1_macvtap left promiscuous mode [ 183.560522][ T3999] device veth0_macvtap left promiscuous mode [ 183.572356][ T3999] device veth1_vlan left promiscuous mode [ 183.582139][ T3999] device veth0_vlan left promiscuous mode [ 184.922786][ T3999] team0 (unregistering): Port device team_slave_1 removed [ 184.966609][ T3999] team0 (unregistering): Port device team_slave_0 removed [ 185.018609][ T3999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.089569][ T3999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.290803][ T3999] bond0 (unregistering): Released all slaves [ 185.341757][ T5673] netlink: 'syz.2.593': attribute type 10 has an invalid length. [ 185.382401][ T5673] batman_adv: batadv0: Adding interface: team0 [ 185.397382][ T5673] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.422782][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.430399][ T5673] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 185.442197][ T5674] netlink: 'syz.2.593': attribute type 10 has an invalid length. [ 185.460198][ T5674] netlink: 2 bytes leftover after parsing attributes in process `syz.2.593'. [ 185.472658][ T5674] device team0 entered promiscuous mode [ 185.476097][ T5687] loop4: detected capacity change from 0 to 256 [ 185.482109][ T5674] device team_slave_0 entered promiscuous mode [ 185.491319][ T5674] device team_slave_1 entered promiscuous mode [ 185.499330][ T5674] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.506292][ T5674] batman_adv: batadv0: Interface activated: team0 [ 185.512783][ T5674] batman_adv: batadv0: Interface deactivated: team0 [ 185.519476][ T5674] batman_adv: batadv0: Removing interface: team0 [ 185.527950][ T5674] bridge0: port 3(team0) entered blocking state [ 185.534749][ T5674] bridge0: port 3(team0) entered disabled state [ 185.542773][ T5674] bridge0: port 3(team0) entered blocking state [ 185.544582][ T5687] exfat: Deprecated parameter 'utf8' [ 185.549456][ T5674] bridge0: port 3(team0) entered forwarding state [ 185.578767][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.586262][ T5687] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 185.606068][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.622730][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.655679][ T5682] lo speed is unknown, defaulting to 1000 [ 185.660666][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.670667][ T5691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'. [ 185.696279][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.721723][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.762055][ T5695] loop2: detected capacity change from 0 to 128 [ 185.810200][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.822131][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.871608][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.884578][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.893118][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.916424][ T5698] device bridge_slave_0 left promiscuous mode [ 185.926372][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.948419][ T5698] device bridge_slave_1 left promiscuous mode [ 185.963460][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.985769][ T5698] bond0: (slave bond_slave_0): Releasing backup interface [ 186.026887][ T5698] bond0: (slave bond_slave_1): Releasing backup interface [ 186.136332][ T5698] team0: Port device team_slave_0 removed [ 186.171540][ T5698] team0: Port device team_slave_1 removed [ 186.184314][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.197863][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.216072][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.223858][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.251945][ T5682] lo speed is unknown, defaulting to 1000 [ 186.316655][ T5495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.324471][ T5682] lo speed is unknown, defaulting to 1000 [ 186.427796][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.447669][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.507059][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.520139][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.546665][ T5495] device veth0_vlan entered promiscuous mode [ 186.573862][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.592418][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.627008][ T5495] device veth1_vlan entered promiscuous mode [ 186.724082][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.732291][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.792658][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.821547][ T5682] infiniband syz0: set active [ 186.834199][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.863811][ T5682] infiniband syz0: added lo [ 186.875812][ T5722] loop2: detected capacity change from 0 to 16 [ 186.888674][ T5495] device veth0_macvtap entered promiscuous mode [ 186.945862][ T3553] lo speed is unknown, defaulting to 1000 [ 186.964108][ T5722] erofs: (device loop2): mounted with root inode @ nid 36. [ 186.967852][ T5682] infiniband syz0: Couldn't open port 1 [ 186.991054][ T5495] device veth1_macvtap entered promiscuous mode [ 187.076339][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.108257][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.140157][ T5682] RDS/IB: syz0: added [ 187.143553][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.151485][ T5682] smc: adding ib device syz0 with port count 1 [ 187.173338][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.180238][ T5682] smc: ib device syz0 port 1 has pnetid [ 187.203398][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.241646][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.274124][ T5495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.283453][ T4044] lo speed is unknown, defaulting to 1000 [ 187.284213][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.322516][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.343034][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.359056][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.387977][ T5682] lo speed is unknown, defaulting to 1000 [ 187.396353][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.421884][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.442226][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.462143][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.492554][ T5495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.536213][ T5495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.586928][ T5495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.614822][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.632601][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.668218][ T5495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.698142][ T5495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.742747][ T5495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.763044][ T5495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.810315][ T5682] lo speed is unknown, defaulting to 1000 [ 187.979004][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.006477][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.042152][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.069693][ T5736] team0: Port device virt_wifi0 added [ 188.108831][ T2595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.149751][ T2595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.169614][ T5682] lo speed is unknown, defaulting to 1000 [ 188.196277][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.585213][ T5682] lo speed is unknown, defaulting to 1000 [ 188.959211][ T5682] lo speed is unknown, defaulting to 1000 [ 189.288711][ T5758] syz.3.622 (5758): attempted to duplicate a private mapping with mremap. This is not supported. [ 189.403053][ T5682] lo speed is unknown, defaulting to 1000 [ 189.447977][ T5739] loop4: detected capacity change from 0 to 32768 [ 189.517145][ T5739] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.618 (5739) [ 189.597028][ T5739] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 189.610935][ T5763] tipc: Started in network mode [ 189.623114][ T5739] BTRFS info (device loop4): using free space tree [ 189.632573][ T5763] tipc: Node identity 2007ff, cluster identity 4711 [ 189.648393][ T5739] BTRFS info (device loop4): has skinny extents [ 189.660779][ T5763] tipc: Node number set to 2099199 [ 189.683869][ T4000] tipc: Subscription rejected, illegal request [ 189.819600][ T5739] BTRFS info (device loop4): enabling ssd optimizations [ 190.184709][ T5790] loop1: detected capacity change from 0 to 4096 [ 190.513554][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 190.713380][ T13] usb 4-1: device descriptor read/64, error -71 [ 191.003371][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 191.093444][ T1066] Bluetooth: hci3: command 0x0406 tx timeout [ 191.213443][ T13] usb 4-1: device descriptor read/64, error -71 [ 191.333433][ T13] usb usb4-port1: attempt power cycle [ 191.398676][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 191.743407][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 191.843519][ T13] usb 4-1: device descriptor read/8, error -71 [ 192.123676][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 192.223357][ T13] usb 4-1: device descriptor read/8, error -71 [ 192.343424][ T13] usb usb4-port1: unable to enumerate USB device [ 194.128697][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.136423][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.785301][ T5863] lo speed is unknown, defaulting to 1000 [ 194.802356][ T5866] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.817856][ T5866] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.835282][ T5866] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.471834][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 195.564669][ T4044] Bluetooth: hci2: command 0x0406 tx timeout [ 195.698885][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.706594][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.717782][ T5883] loop3: detected capacity change from 0 to 128 [ 195.726056][ T5863] device bridge_slave_0 entered promiscuous mode [ 195.735885][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.743132][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.753446][ T5863] device bridge_slave_1 entered promiscuous mode [ 195.800851][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.949732][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.794827][ T4044] Bluetooth: hci1: command 0x0409 tx timeout [ 200.027662][ T5863] team0: Port device team_slave_0 added [ 200.044742][ T5863] team0: Port device team_slave_1 added [ 200.138308][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.151240][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.191743][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.232500][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.252993][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.290991][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.332380][ T3999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.458955][ T5863] device hsr_slave_0 entered promiscuous mode [ 200.482324][ T5863] device hsr_slave_1 entered promiscuous mode [ 200.502783][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.519106][ T5863] Cannot create hsr debugfs directory [ 200.566428][ T3999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.696842][ T3999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.792030][ T3999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.950730][ T3549] Bluetooth: hci1: command 0x041b tx timeout [ 202.376260][ T3999] device hsr_slave_0 left promiscuous mode [ 202.403371][ T3999] device hsr_slave_1 left promiscuous mode [ 202.435367][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.464281][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.495619][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.503098][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.529699][ T3999] bridge0: port 3(team0) entered disabled state [ 202.554417][ T3999] device bridge_slave_1 left promiscuous mode [ 202.560726][ T3999] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.589036][ T3999] device bridge_slave_0 left promiscuous mode [ 202.615826][ T3999] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.664696][ T3999] device veth1_macvtap left promiscuous mode [ 202.671217][ T3999] device veth0_macvtap left promiscuous mode [ 202.687690][ T3999] device veth1_vlan left promiscuous mode [ 202.706990][ T3999] device veth0_vlan left promiscuous mode [ 203.023519][ T5961] loop0: detected capacity change from 0 to 512 [ 203.145293][ T5961] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 203.152843][ T5961] UDF-fs: Scanning with blocksize 512 failed [ 203.160463][ T5961] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 203.168099][ T5961] UDF-fs: Scanning with blocksize 1024 failed [ 203.175609][ T5961] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 203.183006][ T5961] UDF-fs: Scanning with blocksize 2048 failed [ 203.190418][ T5961] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 203.203919][ T5961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.963367][ T3549] Bluetooth: hci1: command 0x040f tx timeout [ 204.403976][ T3999] device team_slave_1 left promiscuous mode [ 204.457081][ T3999] team0 (unregistering): Port device team_slave_1 removed [ 204.478076][ T3999] device team_slave_0 left promiscuous mode [ 204.492333][ T3999] team0 (unregistering): Port device team_slave_0 removed [ 204.524193][ T3999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.572615][ T3999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.714020][ T3999] bond0 (unregistering): Released all slaves [ 204.831974][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.871818][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.914294][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.033355][ T5805] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 205.044719][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.941983][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.957040][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.966215][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.977362][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.989431][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.043317][ T5805] usb 1-1: Using ep0 maxpacket: 8 [ 206.049972][ T4047] Bluetooth: hci1: command 0x0419 tx timeout [ 206.073742][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.130245][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.137421][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.163629][ T5805] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 206.184349][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.202994][ T5805] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 206.223377][ T5805] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.260593][ T5805] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.289897][ T5805] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.349269][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.394687][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.406283][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.597475][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.604644][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.641939][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.643442][ T5805] usb 1-1: usb_control_msg returned -71 [ 206.680911][ T5805] usbtmc 1-1:16.0: can't read capabilities [ 206.692910][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.712235][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.728037][ T5805] usb 1-1: USB disconnect, device number 7 [ 206.734577][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.767602][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.805924][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.842170][ T5863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.883392][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.910646][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.929462][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.939696][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.951831][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.970943][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.002123][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.013332][ T3548] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 207.331042][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.343612][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.369484][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.420132][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.429038][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.444900][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.455269][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.485845][ T3548] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 207.510486][ T5863] device veth0_vlan entered promiscuous mode [ 207.520607][ T3548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.533342][ T4047] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 207.557575][ T5863] device veth1_vlan entered promiscuous mode [ 207.565744][ T3548] usb 5-1: config 0 descriptor?? [ 207.581724][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.594086][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.607183][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.624283][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.632384][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.641066][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.671518][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.689033][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.884008][ T5863] device veth0_macvtap entered promiscuous mode [ 207.894992][ T5863] device veth1_macvtap entered promiscuous mode [ 207.919547][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.930139][ T4047] usb 1-1: Using ep0 maxpacket: 16 [ 207.937748][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.970507][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.981747][ T4047] usb 1-1: too many configurations: 161, using maximum allowed: 8 [ 207.995139][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 207.995156][ T26] audit: type=1800 audit(1719424868.073:100): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.711" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 208.008938][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.063629][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.087345][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.111436][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.133378][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.141632][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.150168][ T3548] hid (null): bogus close delimiter [ 208.174542][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.190360][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.210344][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.229450][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.253756][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.273816][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.293214][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.313208][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.337640][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.353657][ T3548] usb 5-1: language id specifier not provided by device, defaulting to English [ 208.362924][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.384531][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.396662][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.413220][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.421952][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.453210][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.599298][ T2595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.625627][ T2595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.657187][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.689611][ T2595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.709674][ T2595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.739971][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 208.787292][ T3548] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0009/input/input13 [ 208.907575][ T3548] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0009/input/input14 [ 208.940821][ T3548] uclogic 0003:256C:006D.0009: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 209.136275][ T4047] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 209.145967][ T4047] usb 1-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 209.155952][ T3548] usb 5-1: USB disconnect, device number 8 [ 209.163426][ T4047] usb 1-1: Product: syz [ 209.167860][ T4047] usb 1-1: Manufacturer: syz [ 209.173023][ T4047] usb 1-1: SerialNumber: syz [ 209.183824][ T4047] usb 1-1: config 0 descriptor?? [ 210.018785][ T6032] loop0: detected capacity change from 0 to 512 [ 210.121080][ T6032] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.710: inode #1: comm syz.0.710: iget: illegal inode # [ 210.174161][ T6032] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.710: error while reading EA inode 1 err=-117 [ 210.284684][ T6041] loop1: detected capacity change from 0 to 40427 [ 210.303831][ T6032] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 210.343453][ T6032] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.710: inode #1: comm syz.0.710: iget: illegal inode # [ 210.428057][ T6032] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.710: error while reading EA inode 1 err=-117 [ 210.447289][ T6053] loop2: detected capacity change from 0 to 32768 [ 210.470950][ T6032] EXT4-fs (loop0): 1 orphan inode deleted [ 210.477103][ T6032] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 210.514024][ T6053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.715 (6053) [ 210.515185][ T6041] F2FS-fs (loop1): Found nat_bits in checkpoint [ 210.704989][ T6053] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 210.713838][ T6053] BTRFS info (device loop2): using free space tree [ 210.720614][ T6053] BTRFS info (device loop2): has skinny extents [ 210.871132][ T6041] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 210.929126][ T6041] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 211.092181][ T3548] usb 1-1: USB disconnect, device number 8 [ 211.249178][ T6053] BTRFS info (device loop2): enabling ssd optimizations [ 211.262287][ T6089] loop0: detected capacity change from 0 to 256 [ 211.767109][ T26] audit: type=1326 audit(1719424871.833:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.0.719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a5ddae9 code=0x0 [ 212.896105][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 213.944788][ T3900] attempt to access beyond end of device [ 213.944788][ T3900] loop1: rw=2049, want=45104, limit=40427 [ 214.167070][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.223791][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.283938][ T7] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 214.333582][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.377710][ T7] usb 4-1: config 0 descriptor?? [ 214.433490][ T7] usb 4-1: can't set config #0, error -71 [ 214.441630][ T7] usb 4-1: USB disconnect, device number 12 [ 217.153242][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 217.403306][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 217.443574][ T13] usb 2-1: too many configurations: 161, using maximum allowed: 8 [ 218.119562][ T6151] loop0: detected capacity change from 0 to 256 [ 218.194618][ T6151] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3289bd7c, utbl_chksum : 0xe619d30d) [ 218.254490][ T13] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 218.264458][ T13] usb 2-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 218.272718][ T13] usb 2-1: Product: syz [ 218.277962][ T13] usb 2-1: Manufacturer: syz [ 218.282850][ T13] usb 2-1: SerialNumber: syz [ 218.344794][ T13] usb 2-1: config 0 descriptor?? [ 219.517997][ T26] audit: type=1800 audit(1719424879.593:102): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.750" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 219.547290][ T6132] loop1: detected capacity change from 0 to 512 [ 219.554513][ T26] audit: type=1800 audit(1719424879.623:103): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.750" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 219.613572][ T6189] 9pnet: Insufficient options for proto=fd [ 219.648235][ T6198] netlink: 128 bytes leftover after parsing attributes in process `syz.4.752'. [ 219.660095][ T6132] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.729: inode #1: comm syz.1.729: iget: illegal inode # [ 219.675157][ T6132] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.729: error while reading EA inode 1 err=-117 [ 219.688855][ T6132] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.729: inode #1: comm syz.1.729: iget: illegal inode # [ 219.703013][ T6132] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.729: error while reading EA inode 1 err=-117 [ 219.728458][ T6132] EXT4-fs (loop1): 1 orphan inode deleted [ 219.735538][ T6132] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 220.706882][ T13] usb 2-1: USB disconnect, device number 6 [ 221.447161][ T6250] loop3: detected capacity change from 0 to 512 [ 221.454509][ T4250] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 221.574028][ T6250] EXT4-fs (loop3): Ignoring removed oldalloc option [ 221.582158][ T6250] EXT4-fs (loop3): Unrecognized mount option "nog" or missing value [ 221.854400][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.942839][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.004615][ T4250] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 222.028440][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.050361][ T4250] usb 3-1: config 0 descriptor?? [ 223.473559][ T6248] loop1: detected capacity change from 0 to 512 [ 223.733088][ T6248] EXT4-fs (loop1): Ignoring removed oldalloc option [ 223.812527][ T6248] EXT4-fs (loop1): Unrecognized mount option "nog" or missing value [ 223.862291][ T6266] loop3: detected capacity change from 0 to 256 [ 224.076355][ T4250] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000A/input/input15 [ 224.183448][ T3548] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 224.195884][ T4250] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000A/input/input16 [ 224.233982][ T4250] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 224.288966][ T26] audit: type=1326 audit(1719424884.363:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.3.773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa817daae9 code=0x0 [ 224.313294][ T4250] usb 3-1: USB disconnect, device number 6 [ 224.453468][ T3548] usb 1-1: Using ep0 maxpacket: 16 [ 224.503372][ T3548] usb 1-1: too many configurations: 161, using maximum allowed: 8 [ 225.324488][ T6291] loop2: detected capacity change from 0 to 32768 [ 225.408178][ T6291] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.781 (6291) [ 225.552465][ T6295] loop4: detected capacity change from 0 to 512 [ 225.604704][ T6295] EXT4-fs (loop4): Ignoring removed oldalloc option [ 225.612529][ T6295] EXT4-fs (loop4): Unrecognized mount option "nog" or missing value [ 225.864352][ T3548] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 225.909901][ T3548] usb 1-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 225.997310][ T3548] usb 1-1: Product: syz [ 226.001962][ T3548] usb 1-1: Manufacturer: syz [ 226.046337][ T3548] usb 1-1: SerialNumber: syz [ 226.160705][ T3548] usb 1-1: config 0 descriptor?? [ 226.165591][ T6291] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 226.174575][ T6291] BTRFS info (device loop2): using free space tree [ 226.181100][ T6291] BTRFS info (device loop2): has skinny extents [ 226.333336][ T6291] BTRFS info (device loop2): enabling ssd optimizations [ 226.973725][ T7] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 227.374253][ T7] usb 3-1: config 99 has an invalid interface number: 110 but max is 0 [ 227.424176][ T7] usb 3-1: config 99 has no interface number 0 [ 227.433605][ T7] usb 3-1: config 99 interface 110 altsetting 3 endpoint 0x8 has invalid wMaxPacketSize 0 [ 227.473768][ T7] usb 3-1: config 99 interface 110 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 227.500248][ T6330] loop4: detected capacity change from 0 to 512 [ 227.504323][ T7] usb 3-1: config 99 interface 110 altsetting 3 endpoint 0x84 has invalid wMaxPacketSize 0 [ 227.522753][ T7] usb 3-1: config 99 interface 110 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 227.540386][ T7] usb 3-1: config 99 interface 110 altsetting 3 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 227.551858][ T7] usb 3-1: config 99 interface 110 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 227.575513][ T7] usb 3-1: config 99 interface 110 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 227.599152][ T7] usb 3-1: config 99 interface 110 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 227.624168][ T6330] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 227.637716][ T6330] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 227.652670][ T6268] loop0: detected capacity change from 0 to 512 [ 227.659882][ T7] usb 3-1: config 99 interface 110 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 227.673705][ T6330] EXT4-fs (loop4): 1 truncate cleaned up [ 227.677394][ T7] usb 3-1: config 99 interface 110 has no altsetting 0 [ 227.679376][ T6330] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="grpid,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 227.741018][ T6268] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.774: inode #1: comm syz.0.774: iget: illegal inode # [ 227.759871][ T7] usb 3-1: language id specifier not provided by device, defaulting to English [ 227.781846][ T6268] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.774: error while reading EA inode 1 err=-117 [ 227.799113][ T6268] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.774: inode #1: comm syz.0.774: iget: illegal inode # [ 227.818620][ T6268] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.774: error while reading EA inode 1 err=-117 [ 227.832049][ T6268] EXT4-fs (loop0): 1 orphan inode deleted [ 227.844226][ T6268] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 227.919040][ T3548] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 228.176295][ T7] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=3c.71 [ 228.185931][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.254307][ T7] usb 3-1: can't set config #99, error -71 [ 228.261461][ T7] usb 3-1: USB disconnect, device number 7 [ 228.269288][ T5801] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 228.333598][ T3548] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 228.344672][ T3548] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.453546][ T3548] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.466655][ T3548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.483224][ T3548] usb 4-1: SerialNumber: syz [ 228.524938][ T6336] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 228.605482][ T3550] usb 1-1: USB disconnect, device number 9 [ 228.633623][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.653283][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.669859][ T5801] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 228.679581][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.697996][ T5801] usb 2-1: config 0 descriptor?? [ 228.813580][ T6361] loop0: detected capacity change from 0 to 128 [ 228.920458][ T6361] attempt to access beyond end of device [ 228.920458][ T6361] loop0: rw=2049, want=1041, limit=128 [ 228.965140][ T6361] attempt to access beyond end of device [ 228.965140][ T6361] loop0: rw=524288, want=369, limit=128 [ 229.130023][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 229.641895][ T6375] loop0: detected capacity change from 0 to 32768 [ 229.698098][ T6375] Dev loop0 SGI disklabel: csum bad, label corrupted [ 230.106283][ T5801] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000B/input/input17 [ 230.207773][ T5801] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000B/input/input18 [ 230.241539][ T5801] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 230.310866][ T6383] loop2: detected capacity change from 0 to 32768 [ 230.335430][ T3550] usb 2-1: USB disconnect, device number 7 [ 230.360174][ T6383] Dev loop2 SGI disklabel: csum bad, label corrupted [ 230.643534][ T3548] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 230.674662][ T3548] usb 4-1: USB disconnect, device number 13 [ 230.720319][ T6401] loop3: detected capacity change from 0 to 256 [ 230.761906][ T6404] lo speed is unknown, defaulting to 1000 [ 231.320632][ T6429] loop3: detected capacity change from 0 to 1764 [ 231.401592][ T6429] syz.3.819 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 231.498149][ T6439] loop0: detected capacity change from 0 to 512 [ 231.569978][ T6439] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 231.681833][ T6439] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.822: iget: bad i_size value: -67835469387268086 [ 231.748555][ T6439] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.822: couldn't read orphan inode 15 (err -117) [ 231.793760][ T6439] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.838695][ T6439] ext2 filesystem being mounted at /root/syzkaller.VT7lrc/56/file0 supports timestamps until 2038 (0x7fffffff) [ 231.873786][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 231.937800][ T6456] tc_dump_action: action bad kind [ 232.405935][ T6468] loop1: detected capacity change from 0 to 128 [ 232.601948][ T6468] attempt to access beyond end of device [ 232.601948][ T6468] loop1: rw=2049, want=521, limit=128 [ 232.658475][ T6476] loop4: detected capacity change from 0 to 512 [ 232.740381][ T6476] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 232.825048][ T6476] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.837: iget: bad i_size value: -67835469387268086 [ 232.881990][ T6476] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.837: couldn't read orphan inode 15 (err -117) [ 232.931071][ T6476] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.968878][ T6476] ext2 filesystem being mounted at /root/syzkaller.7AlG3z/92/file0 supports timestamps until 2038 (0x7fffffff) [ 233.545907][ T6512] loop0: detected capacity change from 0 to 128 [ 233.549844][ T4702] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 41: comm syz-executor: path /root/syzkaller.7AlG3z/92/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=4096 fake=0 [ 233.696926][ T6512] attempt to access beyond end of device [ 233.696926][ T6512] loop0: rw=2049, want=465, limit=128 [ 234.003090][ T26] audit: type=1800 audit(1719424894.073:105): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.862" name="bus" dev="sda1" ino=1993 res=0 errno=0 [ 234.859604][ T6566] lo speed is unknown, defaulting to 1000 [ 235.494366][ T6589] loop2: detected capacity change from 0 to 2048 [ 235.566514][ T6589] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 235.614838][ T6595] loop1: detected capacity change from 0 to 512 [ 235.647226][ T6589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.665889][ T6566] chnl_net:caif_netlink_parms(): no params data found [ 235.720547][ T6595] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 235.786396][ T6595] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.883: iget: bad i_size value: -67835469387268086 [ 235.881970][ T6595] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.883: couldn't read orphan inode 15 (err -117) [ 235.953444][ T6595] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.980521][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.004141][ T6595] ext2 filesystem being mounted at /root/syzkaller.Qun27c/145/file0 supports timestamps until 2038 (0x7fffffff) [ 236.031110][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.079255][ T6566] device bridge_slave_0 entered promiscuous mode [ 236.106257][ T6588] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 270336 lbcount: 274432 extent 129+238592 [ 236.171467][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.199698][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.227492][ T6566] device bridge_slave_1 entered promiscuous mode [ 236.502344][ T3957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.599690][ T6566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.640431][ T3900] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 41: comm syz-executor: path /root/syzkaller.Qun27c/145/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=4096 fake=0 [ 236.678794][ T6566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.739731][ T3957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.744852][ T6608] ODEBUG: Out of memory. ODEBUG disabled [ 236.746368][ T6608] [ 236.746376][ T6608] ====================================================== [ 236.746384][ T6608] WARNING: possible circular locking dependency detected [ 236.746392][ T6608] 5.15.161-syzkaller #0 Not tainted [ 236.746404][ T6608] ------------------------------------------------------ [ 236.746410][ T6608] syz.2.885/6608 is trying to acquire lock: [ 236.746421][ T6608] ffffffff8c914660 (console_owner){-.-.}-{0:0}, at: console_trylock_spinning+0x185/0x3f0 [ 236.746493][ T6608] [ 236.746493][ T6608] but task is already holding lock: [ 236.746498][ T6608] ffff888063f489b8 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 236.746547][ T6608] [ 236.746547][ T6608] which lock already depends on the new lock. [ 236.746547][ T6608] [ 236.746553][ T6608] [ 236.746553][ T6608] the existing dependency chain (in reverse order) is: [ 236.746559][ T6608] [ 236.746559][ T6608] -> #5 (&trie->lock){....}-{2:2}: [ 236.746585][ T6608] lock_acquire+0x1db/0x4f0 [ 236.746604][ T6608] _raw_spin_lock_irqsave+0xd1/0x120 [ 236.746628][ T6608] trie_delete_elem+0x90/0x690 [ 236.746650][ T6608] 0xffffffffa002a54a [ 236.746664][ T6608] bpf_trace_run3+0x1d1/0x380 [ 236.746684][ T6608] __schedule+0x1e8d/0x45b0 [ 236.746704][ T6608] preempt_schedule_common+0x83/0xd0 [ 236.746732][ T6608] preempt_schedule+0xd9/0xe0 [ 236.746751][ T6608] preempt_schedule_thunk+0x16/0x18 [ 236.746775][ T6608] try_to_wake_up+0x8a8/0x1300 [ 236.746799][ T6608] wake_up_q+0x8b/0xd0 [ 236.746818][ T6608] futex_wake+0x607/0x750 [ 236.746840][ T6608] do_futex+0x1394/0x1810 [ 236.746860][ T6608] __se_sys_futex+0x407/0x490 [ 236.746882][ T6608] do_syscall_64+0x3b/0xb0 [ 236.746902][ T6608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.746923][ T6608] [ 236.746923][ T6608] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 236.746948][ T6608] lock_acquire+0x1db/0x4f0 [ 236.746966][ T6608] _raw_spin_lock_nested+0x2d/0x40 [ 236.746984][ T6608] raw_spin_rq_lock_nested+0x26/0x140 [ 236.747006][ T6608] task_fork_fair+0x5d/0x350 [ 236.747024][ T6608] sched_cgroup_fork+0x2d3/0x330 [ 236.747047][ T6608] copy_process+0x224a/0x3ef0 [ 236.747067][ T6608] kernel_clone+0x210/0x960 [ 236.747084][ T6608] kernel_thread+0x168/0x1e0 [ 236.747103][ T6608] rest_init+0x21/0x330 [ 236.747128][ T6608] start_kernel+0x48c/0x540 [ 236.747150][ T6608] secondary_startup_64_no_verify+0xb1/0xbb [ 236.747172][ T6608] [ 236.747172][ T6608] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 236.747198][ T6608] lock_acquire+0x1db/0x4f0 [ 236.747215][ T6608] _raw_spin_lock_irqsave+0xd1/0x120 [ 236.747240][ T6608] try_to_wake_up+0xae/0x1300 [ 236.747262][ T6608] __wake_up_common+0x2a0/0x4e0 [ 236.747284][ T6608] __wake_up+0x112/0x1c0 [ 236.747304][ T6608] tty_port_default_wakeup+0xa8/0x100 [ 236.747327][ T6608] serial8250_tx_chars+0x60d/0x800 [ 236.747349][ T6608] serial8250_handle_irq+0x505/0x600 [ 236.747371][ T6608] serial8250_default_handle_irq+0xc8/0x1e0 [ 236.747394][ T6608] serial8250_interrupt+0xa1/0x1e0 [ 236.747415][ T6608] __handle_irq_event_percpu+0x292/0xa70 [ 236.747437][ T6608] handle_irq_event+0xff/0x2b0 [ 236.747458][ T6608] handle_edge_irq+0x245/0xbf0 [ 236.747474][ T6608] __common_interrupt+0xd7/0x1f0 [ 236.747494][ T6608] common_interrupt+0x9f/0xc0 [ 236.747514][ T6608] asm_common_interrupt+0x22/0x40 [ 236.747533][ T6608] lock_is_held_type+0x3d/0x180 [ 236.747554][ T6608] xas_descend+0x118/0x3a0 [ 236.747573][ T6608] xas_load+0xba/0x140 [ 236.747589][ T6608] pagecache_get_page+0x20f/0x1010 [ 236.747611][ T6608] __find_get_block+0x3e8/0x1350 [ 236.747632][ T6608] __getblk_gfp+0x2d/0xaf0 [ 236.747652][ T6608] __ext4_get_inode_loc+0x4ce/0xcd0 [ 236.747671][ T6608] ext4_reserve_inode_write+0x1bf/0x3d0 [ 236.747690][ T6608] __ext4_mark_inode_dirty+0x1d6/0x860 [ 236.747720][ T6608] ext4_dirty_inode+0xbf/0x100 [ 236.747739][ T6608] __mark_inode_dirty+0x2fd/0xd60 [ 236.747760][ T6608] generic_update_time+0x1cb/0x1e0 [ 236.747780][ T6608] file_update_time+0x3eb/0x460 [ 236.747799][ T6608] ext4_page_mkwrite+0x1cc/0x1290 [ 236.747818][ T6608] do_page_mkwrite+0x1a9/0x440 [ 236.747842][ T6608] handle_mm_fault+0x2803/0x5950 [ 236.747863][ T6608] exc_page_fault+0x271/0x700 [ 236.747884][ T6608] asm_exc_page_fault+0x22/0x30 [ 236.747903][ T6608] [ 236.747903][ T6608] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 236.747929][ T6608] lock_acquire+0x1db/0x4f0 [ 236.747947][ T6608] _raw_spin_lock_irqsave+0xd1/0x120 [ 236.747970][ T6608] __wake_up+0xf5/0x1c0 [ 236.747989][ T6608] tty_port_default_wakeup+0xa8/0x100 [ 236.748010][ T6608] serial8250_tx_chars+0x60d/0x800 [ 236.748033][ T6608] serial8250_handle_irq+0x505/0x600 [ 236.748053][ T6608] serial8250_default_handle_irq+0xc8/0x1e0 [ 236.748077][ T6608] serial8250_interrupt+0xa1/0x1e0 [ 236.748097][ T6608] __handle_irq_event_percpu+0x292/0xa70 [ 236.748120][ T6608] handle_irq_event+0xff/0x2b0 [ 236.748140][ T6608] handle_edge_irq+0x245/0xbf0 [ 236.748158][ T6608] __common_interrupt+0xd7/0x1f0 [ 236.748176][ T6608] common_interrupt+0x9f/0xc0 [ 236.748197][ T6608] asm_common_interrupt+0x22/0x40 [ 236.748215][ T6608] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 236.748239][ T6608] uart_write+0x6af/0x930 [ 236.748256][ T6608] n_tty_write+0xd7e/0x1280 [ 236.748274][ T6608] file_tty_write+0x561/0x920 [ 236.748295][ T6608] vfs_write+0xacf/0xe50 [ 236.748314][ T6608] ksys_write+0x1a2/0x2c0 [ 236.748333][ T6608] do_syscall_64+0x3b/0xb0 [ 236.748352][ T6608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.748373][ T6608] [ 236.748373][ T6608] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 236.748399][ T6608] lock_acquire+0x1db/0x4f0 [ 236.748416][ T6608] _raw_spin_lock_irqsave+0xd1/0x120 [ 236.748438][ T6608] serial8250_console_write+0x19d/0x1180 [ 236.748461][ T6608] console_unlock+0xced/0x12b0 [ 236.748480][ T6608] vprintk_emit+0xbf/0x150 [ 236.748498][ T6608] _printk+0xd1/0x120 [ 236.748518][ T6608] register_console+0x65a/0x940 [ 236.748537][ T6608] univ8250_console_init+0x41/0x50 [ 236.748560][ T6608] console_init+0x18c/0x660 [ 236.748578][ T6608] start_kernel+0x301/0x540 [ 236.748598][ T6608] secondary_startup_64_no_verify+0xb1/0xbb [ 236.748621][ T6608] [ 236.748621][ T6608] -> #0 (console_owner){-.-.}-{0:0}: [ 236.748646][ T6608] validate_chain+0x1649/0x5930 [ 236.748665][ T6608] __lock_acquire+0x1295/0x1ff0 [ 236.748683][ T6608] lock_acquire+0x1db/0x4f0 [ 236.748700][ T6608] console_trylock_spinning+0x1a5/0x3f0 [ 236.748726][ T6608] vprintk_emit+0xa6/0x150 [ 236.748745][ T6608] _printk+0xd1/0x120 [ 236.748764][ T6608] debug_objects_oom+0xb4/0x370 [ 236.748787][ T6608] debug_object_activate+0x42d/0x4e0 [ 236.748810][ T6608] kvfree_call_rcu+0xb6/0x8a0 [ 236.748829][ T6608] trie_update_elem+0x808/0xc00 [ 236.748853][ T6608] bpf_map_update_value+0x5d7/0x6c0 [ 236.748876][ T6608] generic_map_update_batch+0x54d/0x8b0 [ 236.748898][ T6608] bpf_map_do_batch+0x4d0/0x620 [ 236.748915][ T6608] __sys_bpf+0x55c/0x670 [ 236.748937][ T6608] __x64_sys_bpf+0x78/0x90 [ 236.748958][ T6608] do_syscall_64+0x3b/0xb0 [ 236.748977][ T6608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.748997][ T6608] [ 236.748997][ T6608] other info that might help us debug this: [ 236.748997][ T6608] [ 236.749002][ T6608] Chain exists of: [ 236.749002][ T6608] console_owner --> &rq->__lock --> &trie->lock [ 236.749002][ T6608] [ 236.749032][ T6608] Possible unsafe locking scenario: [ 236.749032][ T6608] [ 236.749037][ T6608] CPU0 CPU1 [ 236.749042][ T6608] ---- ---- [ 236.749047][ T6608] lock(&trie->lock); [ 236.749059][ T6608] lock(&rq->__lock); [ 236.749073][ T6608] lock(&trie->lock); [ 236.749086][ T6608] lock(console_owner); [ 236.749097][ T6608] [ 236.749097][ T6608] *** DEADLOCK *** [ 236.749097][ T6608] [ 236.749102][ T6608] 2 locks held by syz.2.885/6608: [ 236.749114][ T6608] #0: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 236.749166][ T6608] #1: ffff888063f489b8 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 236.749215][ T6608] [ 236.749215][ T6608] stack backtrace: [ 236.749228][ T6608] CPU: 1 PID: 6608 Comm: syz.2.885 Not tainted 5.15.161-syzkaller #0 [ 236.749249][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 236.749262][ T6608] Call Trace: [ 236.749268][ T6608] [ 236.749276][ T6608] dump_stack_lvl+0x1e3/0x2d0 [ 236.749304][ T6608] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 236.749331][ T6608] ? print_circular_bug+0x12b/0x1a0 [ 236.749355][ T6608] check_noncircular+0x2f8/0x3b0 [ 236.749380][ T6608] ? add_chain_block+0x850/0x850 [ 236.749400][ T6608] ? lockdep_lock+0x11f/0x2a0 [ 236.749425][ T6608] ? _find_first_zero_bit+0xcf/0xf0 [ 236.749451][ T6608] validate_chain+0x1649/0x5930 [ 236.749481][ T6608] ? reacquire_held_locks+0x660/0x660 [ 236.749501][ T6608] ? __lock_acquire+0x1295/0x1ff0 [ 236.749520][ T6608] ? reacquire_held_locks+0x660/0x660 [ 236.749556][ T6608] ? mark_lock+0x98/0x340 [ 236.749577][ T6608] __lock_acquire+0x1295/0x1ff0 [ 236.749604][ T6608] lock_acquire+0x1db/0x4f0 [ 236.749622][ T6608] ? console_trylock_spinning+0x185/0x3f0 [ 236.749648][ T6608] ? read_lock_is_recursive+0x10/0x10 [ 236.749669][ T6608] ? __lock_acquire+0x1ff0/0x1ff0 [ 236.749687][ T6608] ? do_raw_spin_lock+0x14a/0x370 [ 236.749719][ T6608] ? do_raw_spin_unlock+0x137/0x8b0 [ 236.749739][ T6608] ? is_bpf_text_address+0x24f/0x260 [ 236.749764][ T6608] console_trylock_spinning+0x1a5/0x3f0 [ 236.749785][ T6608] ? console_trylock_spinning+0x185/0x3f0 [ 236.749807][ T6608] ? vprintk_emit+0x150/0x150 [ 236.749827][ T6608] ? __lock_acquire+0x1295/0x1ff0 [ 236.749852][ T6608] vprintk_emit+0xa6/0x150 [ 236.749874][ T6608] _printk+0xd1/0x120 [ 236.749899][ T6608] ? panic+0x860/0x860 [ 236.749922][ T6608] ? do_raw_spin_lock+0x14a/0x370 [ 236.749943][ T6608] ? __lock_acquire+0x1ff0/0x1ff0 [ 236.749965][ T6608] debug_objects_oom+0xb4/0x370 [ 236.749993][ T6608] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 236.750018][ T6608] ? debug_object_activate+0x4e0/0x4e0 [ 236.750044][ T6608] debug_object_activate+0x42d/0x4e0 [ 236.750068][ T6608] kvfree_call_rcu+0xb6/0x8a0 [ 236.750088][ T6608] ? call_rcu+0xa70/0xa70 [ 236.750105][ T6608] ? __kmalloc_node+0x199/0x390 [ 236.750123][ T6608] ? bpf_map_kmalloc_node+0xdb/0x160 [ 236.750145][ T6608] ? _raw_spin_lock+0x40/0x40 [ 236.750167][ T6608] ? longest_prefix_match+0x2db/0x640 [ 236.750192][ T6608] trie_update_elem+0x808/0xc00 [ 236.750220][ T6608] bpf_map_update_value+0x5d7/0x6c0 [ 236.750245][ T6608] generic_map_update_batch+0x54d/0x8b0 [ 236.750274][ T6608] ? rcu_read_unlock+0x90/0x90 [ 236.750297][ T6608] ? __fdget+0x191/0x220 [ 236.750317][ T6608] ? rcu_read_unlock+0x90/0x90 [ 236.750339][ T6608] bpf_map_do_batch+0x4d0/0x620 [ 236.750359][ T6608] __sys_bpf+0x55c/0x670 [ 236.750382][ T6608] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 236.750412][ T6608] ? syscall_enter_from_user_mode+0x2e/0x240 [ 236.750436][ T6608] ? lockdep_hardirqs_on+0x94/0x130 [ 236.750459][ T6608] __x64_sys_bpf+0x78/0x90 [ 236.750480][ T6608] do_syscall_64+0x3b/0xb0 [ 236.750498][ T6608] ? clear_bhb_loop+0x15/0x70 [ 236.750517][ T6608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.750548][ T6608] RIP: 0033:0x7f6ae9388ae9 [ 236.750567][ T6608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.750589][ T6608] RSP: 002b:00007f6ae7e09048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.750610][ T6608] RAX: ffffffffffffffda RBX: 00007f6ae9516fa0 RCX: 00007f6ae9388ae9 [ 236.750626][ T6608] RDX: 0000000000000038 RSI: 0000000020000680 RDI: 000000000000001a [ 236.750639][ T6608] RBP: 00007f6ae9409746 R08: 0000000000000000 R09: 0000000000000000 [ 236.750652][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.750664][ T6608] R13: 000000000000000b R14: 00007f6ae9516fa0 R15: 00007ffc685a8388 [ 236.750684][ T6608] [ 236.844301][ T5803] Bluetooth: hci4: command 0x0409 tx timeout [ 237.976532][ T6611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.887'. [ 237.992918][ T6613] lo speed is unknown, defaulting to 1000 [ 237.994458][ T6566] team0: Port device team_slave_0 added [ 238.006021][ T6566] team0: Port device team_slave_1 added [ 238.025863][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.032823][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.058948][ T6566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.087284][ T3957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.108315][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.115906][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.142253][ T6566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.194085][ T3957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.218190][ T6566] device hsr_slave_0 entered promiscuous mode [ 238.226444][ T6566] device hsr_slave_1 entered promiscuous mode [ 238.232902][ T6566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.240951][ T6566] Cannot create hsr debugfs directory [ 239.067828][ T3957] device hsr_slave_0 left promiscuous mode [ 239.074244][ T3957] device hsr_slave_1 left promiscuous mode [ 239.080562][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.089574][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.100571][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.108436][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.119430][ T3957] device bridge_slave_1 left promiscuous mode [ 239.125850][ T3957] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.136085][ T3957] device bridge_slave_0 left promiscuous mode [ 239.142232][ T3957] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.152125][ T3957] device veth1_macvtap left promiscuous mode [ 239.158315][ T3957] device veth0_macvtap left promiscuous mode [ 239.165476][ T3957] device veth1_vlan left promiscuous mode [ 239.171232][ T3957] device veth0_vlan left promiscuous mode [ 239.293009][ T3957] team0 (unregistering): Port device virt_wifi0 removed [ 239.318726][ T3957] team0 (unregistering): Port device team_slave_1 removed [ 239.331837][ T3957] team0 (unregistering): Port device team_slave_0 removed [ 239.344465][ T3957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.356977][ T3957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.405408][ T3957] bond0 (unregistering): Released all slaves [ 239.489744][ T6566] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.499679][ T6566] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.508303][ T6566] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.518289][ T6566] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.570464][ T6566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.582157][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.589868][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.602126][ T6566] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.627902][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.636648][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.645679][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.652759][ T5801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.660672][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.669252][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.677961][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.685045][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.693465][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.702852][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.721834][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.739661][ T6566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.750764][ T6566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.767150][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.776278][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.784792][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.795202][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.803908][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.812221][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.821198][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.829529][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.837907][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.845782][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.916533][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.924686][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.937160][ T6566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.963335][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 240.089781][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.098909][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.121962][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.130727][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.141119][ T6566] device veth0_vlan entered promiscuous mode [ 240.149195][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.157838][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.168745][ T6566] device veth1_vlan entered promiscuous mode [ 240.187715][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.197089][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.205597][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.214821][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.227233][ T6566] device veth0_macvtap entered promiscuous mode [ 240.237570][ T6566] device veth1_macvtap entered promiscuous mode [ 240.252014][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.263093][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.273679][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.284392][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.294385][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.304907][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.316079][ T6566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.327078][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.338210][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.348501][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.358995][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.368918][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.379425][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.390159][ T6566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.397701][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.406172][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.414292][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.422848][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.431499][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.440075][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.450810][ T6566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.461494][ T6566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.470338][ T6566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.479388][ T6566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.508255][ T6566] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 240.531685][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.532506][ T6566] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 240.544143][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.565968][ T3998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.573362][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.582064][ T3998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.590436][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.627501][ T3957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.676737][ T3957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.737096][ T3957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.797530][ T3957] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.490239][ T3957] device hsr_slave_0 left promiscuous mode [ 241.497059][ T3957] device hsr_slave_1 left promiscuous mode [ 241.504147][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.511604][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.519726][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.527341][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.535813][ T3957] device bridge_slave_1 left promiscuous mode [ 241.542123][ T3957] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.550427][ T3957] device bridge_slave_0 left promiscuous mode [ 241.556768][ T3957] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.566537][ T3957] rdma_rxe: ignoring netdev event = 10 for lo [ 241.573923][ T3957] device veth1_macvtap left promiscuous mode [ 241.579938][ T3957] device veth0_macvtap left promiscuous mode [ 241.586811][ T3957] device veth1_vlan left promiscuous mode [ 241.592565][ T3957] device veth0_vlan left promiscuous mode [ 241.648131][ T3957] infiniband syz0: set down [ 241.699503][ T3957] team0 (unregistering): Port device team_slave_1 removed [ 241.711724][ T3957] team0 (unregistering): Port device team_slave_0 removed [ 241.722109][ T3957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.734342][ T3957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.781490][ T3957] bond0 (unregistering): Released all slaves [ 241.845902][ T3998] smc: removing ib device syz0 [ 241.854067][ T7] lo speed is unknown, defaulting to 1000 [ 242.053524][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 244.123277][ T21] Bluetooth: hci4: command 0x0419 tx timeout