last executing test programs: 1m58.367972404s ago: executing program 1 (id=439): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x800}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 1m58.112173088s ago: executing program 1 (id=444): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4068, 0xfe4) 1m57.830493007s ago: executing program 1 (id=447): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000800000022000000000000", @ANYRES32, @ANYBLOB="7e45a96c3ceca491000000000000f0"], 0x50) r0 = io_uring_setup(0x2f8f, &(0x7f00000003c0)={0x0, 0x1, 0x1, 0x43, 0xfffffffd}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 1m57.316107786s ago: executing program 1 (id=451): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x2, 0x0, 0x0) 1m56.641818424s ago: executing program 1 (id=462): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001680)={0x1c, &(0x7f0000001580)={0x40, 0x15, 0x2, '2='}, 0x0, 0x0}) 1m55.999743569s ago: executing program 1 (id=473): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}}, 0x4048000) 1m55.166450564s ago: executing program 32 (id=473): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}}, 0x4048000) 33.920634347s ago: executing program 6 (id=1355): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x20) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 33.456610535s ago: executing program 6 (id=1363): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) pidfd_send_signal(r0, 0x2f, 0x0, 0x0) 33.006170491s ago: executing program 6 (id=1367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0xf8, 0xe, 0x5, 0xf, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x20, 0x8, 0x8}}) 32.792982535s ago: executing program 6 (id=1372): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[]) 32.249710417s ago: executing program 6 (id=1381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_delvlan={0x18, 0x70, 0x1, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000000) 31.403930703s ago: executing program 6 (id=1388): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 30.890694861s ago: executing program 33 (id=1388): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 5.642732422s ago: executing program 5 (id=1614): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0x9, 0x5}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000000010000", 0x7) 5.424300311s ago: executing program 4 (id=1615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 5.229689627s ago: executing program 5 (id=1617): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x50}, [@IFLA_AF_SPEC={0x4, 0xc}, @IFLA_AF_SPEC={0x4}]}, 0x28}}, 0x8000) 4.928721571s ago: executing program 2 (id=1619): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 4.757953207s ago: executing program 4 (id=1621): unshare(0x60600) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) 4.708559387s ago: executing program 5 (id=1622): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") open(&(0x7f00000003c0)='./file2\x00', 0x842200, 0x8) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 4.582043427s ago: executing program 4 (id=1623): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x210040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@user_xattr}, {@journal_async_commit}, {@localflocks}]}, 0x1, 0x4454, &(0x7f0000000c80)="$eJzs101vG9UeB+Azk6Rx0qTXvbeLXN27iAQSFaCQZIVgAYiXqhIiVaAIEaTIeWkbcGyTOCiLLkDqkkURrFizhDUrpH4BkPgC8AGARVkUVhh5PE49sd0YajtteJ5FxnNe5vydn2d8HKeq17Z2Z7d2Zwul2fL6ld3F2Q/Kxb3tzRAPyXGvT28GkZPsj8/Si6+8/uZiCJUbiyu1Wq0WQgj50NlCy+s7t6+vtx6b4kNz6tftcrk+eTuEcK6trrqREMJbX4cQhRCi9E3F6XEinVXve+f9Rz8Ouf5U8+Hqd1Nf7l986qsr3/7vzk9LN7sOjEL4vPjfJ69u//zIyLM/Pt6f1QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB4XVheunxpfiHcivLJeeXG4kpr/3g+fZHrPL9W62GR8fsuEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4gF1YXrp8aX4h3IpC7tfxECo3Flda+0fz6Yt85/m154ZQJANz8bWll16eX0hyr9Witv6n06ZfXhgJZ0MId25fXw+Z4w/TreOjQ5+Tw5+ndFTf6m/WF+VPNa8dz7XUkQ9xPDcXQrTfOJ+JJuNiebf6xJXyXmmjb2U8tLL5x0lbJp1G0z3ybxwPhveUfz/9p+3TlJzPDHbVk+Ju/lMrtdpI13FffBQ188+Fe+Q/cgz5/13jfa3j4ZS9/0eTtuz91Ai0nv8no0ff/6NDyv9M/U8uqTXX+gSo72Hq7d32K2Rl8x9L2rrl3+n5//uh/Mc653/p04G9gy7P/8rAFjxRsvk39lDZ/2djA5DkHx99/596UL7/Zwe76kmRzb/xjXgowuTf2evzf3xI+eebdZ6J2j4BSXsuhOlBLHzCZPPPtfXf/f0X97T/zx3T77/mus130Pwdcj5q/P6js2z+E13H9Xr/Twz5+d/Y//VgbJBVPLyy+U8mbfez/58cUv7JrqTD/v+P5v5/fxCrnjzZ/E8nbdmnwM3kb7L/i9pz/+1Q/qcfgP1fUv/5wa56UmTzn+o6rp7/9z18/08NPf8QJv/yjPZ9zj9VNv90x/xN+7jk/s8dnf/0kPN/bJAXBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBg4nzjmA9RPJc5j+O5uRBG0vOZMBmtFTZW14rl9fd2QxhN22fDv6OrxfJaobi6VSpvbK4WisXyeghjaf+5kIt2i+Xq6nahcurgWhPRtc3CTnVts1ANIYyn7f8P081rrW1VtwuVEELuoO9fcXmncq1QWt3Y2nlmfn5+Pkwc1HA22tyvbpaqjdUbvSFMHszNRy3FJd2nD2qZit4t7+2UCsWkfaplTrG8Xii2zJlO+z4LZ6Pqzl5pvVDdXC2WrzbX62yiP0Ed4fn0GF9cfmP51YX2ATNpf34o5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn+zKsQ2CUBCA4dNYuoFDWBsX0MoR7JzBTkegZAgYgI4FYBF6WigehPbRf19yyV3uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYpb3fyog4pesYEY91OaT5T7/tGc27P1ff57X+dJdxeBVLlye/BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJkdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NK7agJBFAbgmUmRS7WPkWrZTZU2kBDSZEWwsvQFLC0sfV0LOysRZRZk3UUbbfy+Zi9nDufA/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCD+B03k1FVhxDDy+45hPnqY3pafyvyy6K//+kOO3I7f//N909V53uPZ/XP/Gv9lY7V7WY5Cz3PVuzkpJunfOryYgN5G9qvnVuEmMrDd87te0ypLPs6X68bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2YEDAQAAAABB/tYrDFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAUAAD//0AYnmI=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) 4.512560114s ago: executing program 2 (id=1625): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x0, "a94c67ae02ab48229ca5fa0755813900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b0149769d94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0x40103e05, 0x0) 4.134830396s ago: executing program 2 (id=1629): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x808010, &(0x7f00000002c0)=ANY=[], 0x1, 0x9b, &(0x7f0000000000)="$eJzs0s3NAQEQBuD324/gYBtw0IEatCKO3JyIREVaUYJECW7isrJhIyjAT54nmZlM3sscZnfeDlIm1SapniyWq9lkfu3p58E4/IIiSSdJN8mwvO/J4fYFyf64njZVJ3+nJgEAAL5JkVE9/l+TVpJekvYbrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HJcAAAD//yc5MPk=") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) 3.601241906s ago: executing program 5 (id=1631): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=@newqdisc={0x148, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "1d01002080b9639cda1554de667145238cfe634ebf62812d9ee1a5246cdcd657af6d8526e028059d2dd72fc3aef8fb5e51a294ea4d7090fba24662c7698fce7b84dbacba6bdcf51e642fce176ef4962b254f798c53f18d96841c2940e5a0049fb2e6c126d8b49da8378b0c5c6b321632339f59f4773aa2f2457985b0842691990da8447b7b4a63e37dbb547300c4c55aa5b0e91123fda1a374537f7901297ff26d16d7beefc6bef8e448eb58b3d478fdfbf0dc18581e29a8e7287015fa699edaaed818f95817335467b7fb3716b9e44d9ef8d54343a04cbe3f22ae18d72d994e0c4e493a1c9f2812fd8d5e68f97da8757553c2dbd72400"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x3, 0x5, 0x7, 0x0, 0x15, 0x6}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4940}, 0x400081c) 3.354669022s ago: executing program 2 (id=1633): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 3.192083327s ago: executing program 3 (id=1634): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x44800, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x5, 0x4) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 3.178194614s ago: executing program 0 (id=1635): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) 2.955171026s ago: executing program 2 (id=1637): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0xa7b4}) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 2.913573922s ago: executing program 5 (id=1638): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.828562411s ago: executing program 0 (id=1639): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r2}}, 0x18) 2.602348183s ago: executing program 0 (id=1641): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xfff, 0x0, 0x20000, 0x81, 0x50, 0xfffffffc, 0x4}, 0x9c) 2.295423358s ago: executing program 2 (id=1642): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x13, r0, 0xf4efc000) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x11, &(0x7f0000000000)="11106e00", 0x4) 1.468468692s ago: executing program 0 (id=1644): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$unix(r1, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x10}}], 0x10, 0x1}, 0x0) 1.465988029s ago: executing program 7 (id=1645): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.465526907s ago: executing program 3 (id=1646): unshare(0x2a020400) r0 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) copy_file_range(r0, &(0x7f0000000000)=0xa, r0, 0x0, 0x8200000000000003, 0x0) 1.464783816s ago: executing program 4 (id=1647): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000008c0)='w', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="ad", 0x1}], 0x1}}], 0x3, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001880)={r1, 0xfffffffc}, 0xc) 1.463195434s ago: executing program 5 (id=1648): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.25178869s ago: executing program 7 (id=1649): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x17ba803e, @private2={0xfc, 0x2, '\x00', 0x3}, 0x1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 1.243725479s ago: executing program 0 (id=1650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340000003"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.235984266s ago: executing program 3 (id=1651): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000000680)=""/198, 0xc6}], 0x1, &(0x7f0000000180)=""/140, 0x8c}, 0xfffffff9}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/133, 0x85}], 0x1, &(0x7f0000000840)=""/181, 0xb5}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000400)=""/11, 0xb}, {&(0x7f0000000ac0)=""/129, 0x81}], 0x3, &(0x7f0000000940)=""/33, 0x21}, 0x1}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003680)=[{&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/125, 0x7d}, {0x0}, {&(0x7f0000000e80)=""/77, 0x4d}, {&(0x7f0000000f00)=""/248, 0xf8}, {&(0x7f0000001000)=""/4096, 0x1000}, {0x0}], 0x7, &(0x7f0000002140)=""/205, 0xcd}, 0x3}, {{&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f00000024c0)=""/180, 0xb4}], 0x4, &(0x7f0000002580)=""/174, 0xae}, 0x5}, {{0x0, 0x0, &(0x7f0000002d40)=[{0x0}, {&(0x7f00000027c0)=""/215, 0xd7}, {&(0x7f00000028c0)=""/170, 0xaa}, {&(0x7f0000002980)}, {&(0x7f00000029c0)=""/3, 0x3}, {0x0}, {&(0x7f0000002b40)=""/116, 0x74}, {&(0x7f0000002bc0)=""/178, 0xb2}, {&(0x7f0000002c80)=""/135, 0x87}], 0x9}, 0x95}, {{&(0x7f0000002e00)=@vsock, 0x80, &(0x7f0000002f00)}, 0x5}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/53, 0x35}], 0x29, &(0x7f0000003100)=""/239, 0xef}, 0x5}], 0x8, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 973.305818ms ago: executing program 7 (id=1652): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8", 0x1}], 0x1, 0x0, 0x0, 0x400c800}, 0x4000000) close(r1) 822.036723ms ago: executing program 0 (id=1653): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000000)={0x60, 0x10, 0x4, "1265a7e0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 742.743255ms ago: executing program 3 (id=1654): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) 691.416466ms ago: executing program 4 (id=1655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x8, 0x2, 0x9, 0x9, 0xa0, 0x4, 0x7, 0xd, 0xff, 0x2, 0xf, 0x2, 0x6}, 0xe) sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x9, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="9570", 0x2}], 0x1}}], 0x1, 0x200288c0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 599.549506ms ago: executing program 7 (id=1656): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x20040840) 492.71133ms ago: executing program 3 (id=1657): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffe, 0x0, 0xdae, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 335.628846ms ago: executing program 7 (id=1658): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 294.115957ms ago: executing program 4 (id=1659): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000200)={0x4000000, 0x1, 0xfffffffffffffffd}) close(r0) 194.720949ms ago: executing program 3 (id=1660): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 0s ago: executing program 7 (id=1661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x6c, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "408922a0bd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_TYPE={0x8}]}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): T7760] BTRFS info (device loop5): force clearing of disk cache [ 153.479458][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 153.479481][ T31] audit: type=1800 audit(1772897008.416:37): pid=7760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.694" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 153.623331][ T5824] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.794912][ T7833] loop6: detected capacity change from 0 to 512 [ 153.795871][ T7833] EXT4-fs: Ignoring removed i_version option [ 153.795899][ T7833] EXT4-fs: Ignoring removed oldalloc option [ 153.824747][ T7833] EXT4-fs (loop6): 1 truncate cleaned up [ 153.999907][ T7833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.120648][ T7833] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.719: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 154.202241][ T29] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 154.291582][ T7159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.373166][ T7848] loop4: detected capacity change from 0 to 512 [ 154.390955][ T29] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.401137][ T7848] EXT4-fs: Ignoring removed oldalloc option [ 154.422322][ T29] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.460896][ T7848] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.724: Parent and EA inode have the same ino 15 [ 154.504848][ T29] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 154.519824][ T7848] loop4: lost filesystem error report for type 5 error -117 [ 154.526732][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 154.540825][ C1] EXT4-fs (loop4): initial error at time 1772897009: ext4_xattr_inode_iget:437 [ 154.549814][ C1] EXT4-fs (loop4): last error at time 1772897009: ext4_xattr_inode_iget:437 [ 154.578813][ T7848] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 154.602454][ T29] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 154.645589][ T29] usb 1-1: Product: syz [ 154.665367][ T7848] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.724: Parent and EA inode have the same ino 15 [ 154.686986][ T29] usb 1-1: Manufacturer: syz [ 154.734321][ T7848] loop4: lost filesystem error report for type 5 error -117 [ 154.734976][ T7848] EXT4-fs (loop4): 1 orphan inode deleted [ 154.770501][ T29] hub 1-1:4.0: USB hub found [ 154.781097][ T7848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.887720][ T7848] EXT4-fs warning (device loop4): __ext4_unlink:3276: inode #15: comm syz.4.724: Deleting file 'file1' with no links [ 154.987280][ T29] hub 1-1:4.0: 2 ports detected [ 155.061659][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.080390][ T5921] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 155.260954][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.286427][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 155.314582][ T5921] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 155.320649][ T7874] loop4: detected capacity change from 0 to 4096 [ 155.336845][ T3404] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.343176][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.361829][ T5921] usb 3-1: Product: syz [ 155.365743][ T7874] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 155.377503][ T5921] usb 3-1: Manufacturer: syz [ 155.382175][ T5921] usb 3-1: SerialNumber: syz [ 155.395460][ T29] hub 1-1:4.0: set hub depth failed [ 155.414356][ T5921] usb 3-1: config 0 descriptor?? [ 155.434159][ T7863] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.443235][ T29] usb 1-1: USB disconnect, device number 5 [ 155.497116][ T30] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 155.499161][ T3404] usb 4-1: Using ep0 maxpacket: 8 [ 155.538424][ T7874] ntfs3(loop4): ino=19, mi_enum_attr [ 155.551447][ T3404] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 155.566806][ T7874] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 155.579494][ T3404] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 155.606846][ T3404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.628567][ T3404] usb 4-1: Product: syz [ 155.629478][ T7874] ntfs3(loop4): failed to convert "c46c" to macturkish [ 155.632834][ T3404] usb 4-1: Manufacturer: syz [ 155.648170][ T3404] usb 4-1: SerialNumber: syz [ 155.652961][ T7874] ntfs3(loop4): ino=20, mi_enum_attr [ 155.665778][ T5921] powermate: unknown product id 0240 [ 155.673242][ T3404] usb 4-1: config 0 descriptor?? [ 155.678228][ T3404] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 155.688015][ T30] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 155.688334][ T3404] usb 4-1: setting power ON [ 155.700808][ T30] usb 6-1: config 0 has no interface number 0 [ 155.700868][ T30] usb 6-1: config 0 interface 41 has no altsetting 0 [ 155.704904][ T5921] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 155.748374][ T3404] dvb-usb: bulk message failed: -22 (2/0) [ 155.756859][ T30] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 155.771419][ T3404] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.776801][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.794423][ T5921] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 155.797531][ T3404] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 155.822873][ T30] usb 6-1: Product: syz [ 155.833234][ T30] usb 6-1: Manufacturer: syz [ 155.854810][ T30] usb 6-1: SerialNumber: syz [ 155.888868][ T30] usb 6-1: config 0 descriptor?? [ 155.900327][ T7869] dvb-usb: bulk message failed: -22 (3/0) [ 155.909210][ T3404] usb 4-1: media controller created [ 156.030859][ T3404] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.161267][ C1] powermate: config urb returned -71 [ 156.166828][ C1] powermate: config urb returned -71 [ 156.172312][ C1] powermate: config urb returned -71 [ 156.178937][ T5921] usb 3-1: USB disconnect, device number 3 [ 156.181877][ T3404] usb 4-1: selecting invalid altsetting 6 [ 156.187010][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 156.257586][ T3404] usb 4-1: digital interface selection failed (-22) [ 156.286655][ T3404] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 156.329324][ T30] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 156.342465][ T3404] usb 4-1: setting power OFF [ 156.358719][ T3404] dvb-usb: bulk message failed: -22 (2/0) [ 156.367565][ T30] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 156.390755][ T3404] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 156.403249][ T30] usb 6-1: USB disconnect, device number 4 [ 156.409365][ T7894] tipc: Started in network mode [ 156.417120][ T3404] (NULL device *): no alternate interface [ 156.425735][ T7894] tipc: Node identity 010000000000000001, cluster identity 4711 [ 156.458743][ T5828] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.558147][ T7897] raw_sendmsg: syz.0.746 forgot to set AF_INET. Fix it! [ 156.587774][ T3404] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 156.628926][ T3404] usb 4-1: USB disconnect, device number 4 [ 156.654440][ T5828] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 156.686873][ T5828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.719742][ T5828] usb 5-1: config 0 has no interface number 0 [ 156.748366][ T5828] usb 5-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.802595][ T5828] usb 5-1: config 0 interface 250 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.866906][ T5828] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 156.903287][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.915858][ T5828] usb 5-1: config 0 descriptor?? [ 156.980059][ T7905] loop0: detected capacity change from 0 to 2048 [ 157.026436][ T7905] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 157.099281][ T6091] udevd[6091]: incorrect nilfs2 checksum on /dev/loop0 [ 157.138209][ T7914] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.165952][ T5828] usb 5-1: string descriptor 0 read error: -71 [ 157.249462][ T7918] loop5: detected capacity change from 0 to 1024 [ 157.688864][ T5828] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 157.877901][ T7934] loop6: detected capacity change from 0 to 4096 [ 157.919360][ T7934] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 158.229217][ T5921] usb 5-1: USB disconnect, device number 6 [ 158.261529][ T7951] tipc: Started in network mode [ 158.266420][ T7951] tipc: Node identity , cluster identity 4711 [ 158.363116][ T7954] loop5: detected capacity change from 0 to 64 [ 158.654901][ T7967] loop3: detected capacity change from 0 to 512 [ 158.734433][ T7967] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 158.758011][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 158.835780][ T7967] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 158.856746][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 158.863202][ C1] EXT4-fs (loop3): initial error at time 1772897013: mb_free_blocks:2047: inode 11: block 64 [ 158.873564][ C1] EXT4-fs (loop3): last error at time 1772897013: mb_free_blocks:2047: inode 11: block 64 [ 158.958367][ T7967] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.773: corrupted inode contents [ 159.005310][ T7967] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.011852][ T7967] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #11: comm syz.3.773: mark_inode_dirty error [ 159.079467][ T7967] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.088664][ T7967] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.773: invalid indirect mapped block 1 (level 1) [ 159.117234][ T5843] Bluetooth: hci1: command tx timeout [ 159.152600][ T7967] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.154391][ T7967] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.773: corrupted inode contents [ 159.198637][ T31] audit: type=1326 audit(1772897014.146:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62dc19c799 code=0x7ffc0000 [ 159.282209][ T7967] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.292434][ T7967] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 159.306826][ T31] audit: type=1326 audit(1772897014.156:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f62dc19c799 code=0x7ffc0000 [ 159.380480][ T7967] loop3: lost filesystem error report for type 5 error -117 [ 159.383384][ T7967] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.773: corrupted inode contents [ 159.397631][ T31] audit: type=1326 audit(1772897014.156:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62dc19c799 code=0x7ffc0000 [ 159.446354][ T31] audit: type=1326 audit(1772897014.156:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62dc19c799 code=0x7ffc0000 [ 159.466201][ T7967] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.486875][ T5900] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 159.504114][ T7967] EXT4-fs error (device loop3): ext4_truncate:4587: inode #11: comm syz.3.773: mark_inode_dirty error [ 159.536789][ T31] audit: type=1326 audit(1772897014.156:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f62dc19c799 code=0x7ffc0000 [ 159.561689][ T31] audit: type=1326 audit(1772897014.156:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62dc19c799 code=0x7ffc0000 [ 159.602175][ T7967] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.602634][ T7967] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 159.626327][ T31] audit: type=1326 audit(1772897014.156:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62dc19c799 code=0x7ffc0000 [ 159.651416][ T7967] loop3: lost filesystem error report for type 5 error -117 [ 159.652145][ T7967] EXT4-fs (loop3): 1 truncate cleaned up [ 159.672559][ T7967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.746883][ T5900] usb 7-1: Using ep0 maxpacket: 32 [ 159.776858][ T5900] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 159.787563][ T7967] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz.3.773: path /153/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 159.809575][ T5900] usb 7-1: config 0 has no interface number 0 [ 159.815729][ T5900] usb 7-1: config 0 interface 184 has no altsetting 0 [ 159.883206][ T5900] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 159.922906][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.973223][ T5900] usb 7-1: Product: syz [ 159.994548][ T5900] usb 7-1: Manufacturer: syz [ 160.015400][ T5900] usb 7-1: SerialNumber: syz [ 160.053531][ T5900] usb 7-1: config 0 descriptor?? [ 160.173590][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.548568][ T8022] vivid-007: disconnect [ 160.558611][ T8021] vivid-007: reconnect [ 160.566128][ T31] audit: type=1326 audit(1772897015.506:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7579c799 code=0x7ffc0000 [ 160.647271][ T31] audit: type=1326 audit(1772897015.556:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc7579c799 code=0x7ffc0000 [ 160.707100][ T5900] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 160.721554][ T31] audit: type=1326 audit(1772897015.556:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7579c799 code=0x7ffc0000 [ 160.755850][ T5900] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 160.788370][ T5900] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 160.841832][ T5900] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 160.921522][ T5900] usb 7-1: USB disconnect, device number 2 [ 160.991625][ T8036] netlink: 'syz.3.796': attribute type 2 has an invalid length. [ 161.217106][ T8039] loop2: detected capacity change from 0 to 2048 [ 161.255134][ T8045] loop3: detected capacity change from 0 to 256 [ 161.287749][ T8039] UDF-fs: error (device loop2): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0) [ 161.332046][ T8045] exfat: Deprecated parameter 'utf8' [ 161.341721][ T8039] UDF-fs: Scanning with blocksize 512 failed [ 161.391208][ T8039] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 161.407647][ T8045] exfat: Deprecated parameter 'utf8' [ 161.420737][ T8039] UDF-fs: Scanning with blocksize 1024 failed [ 161.431004][ T7995] loop0: detected capacity change from 0 to 40427 [ 161.479916][ T8039] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 161.486780][ T8045] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 161.507270][ T7995] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 161.531857][ T8039] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 161.537112][ T7995] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 161.569592][ T8039] UDF-fs: Scanning with blocksize 2048 failed [ 161.590076][ T8052] loop5: detected capacity change from 0 to 1024 [ 161.623785][ T7995] F2FS-fs (loop0): invalid crc value [ 161.630214][ T8052] EXT4-fs: inline encryption not supported [ 161.671790][ T8039] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 161.770332][ T8039] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 161.794416][ T8039] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 161.858198][ T8052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.897039][ T8039] UDF-fs: Scanning with blocksize 4096 failed [ 161.944156][ T8039] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 162.137962][ T7995] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 162.200071][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.241019][ T7995] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 162.276840][ T7995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.582420][ T5819] syz-executor: attempt to access beyond end of device [ 162.582420][ T5819] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.641476][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 162.641517][ T5819] Tainted: [L]=SOFTLOCKUP [ 162.641527][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.641542][ T5819] Call Trace: [ 162.641553][ T5819] [ 162.641564][ T5819] dump_stack_lvl+0xe8/0x150 [ 162.641607][ T5819] f2fs_handle_critical_error+0x37c/0x540 [ 162.641649][ T5819] f2fs_write_end_io+0xcdb/0xff0 [ 162.641711][ T5819] __submit_merged_bio+0x256/0x700 [ 162.641753][ T5819] __submit_merged_write_cond+0x3c9/0x4e0 [ 162.641796][ T5819] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 162.641846][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.641890][ T5819] f2fs_write_data_pages+0x2975/0x35e0 [ 162.641977][ T5819] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 162.642031][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642061][ T5819] ? css_rstat_updated+0x23a/0x530 [ 162.642125][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642155][ T5819] ? rcu_is_watching+0x15/0xb0 [ 162.642194][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642224][ T5819] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 162.642268][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642298][ T5819] ? lru_gen_update_size+0x7c9/0xd10 [ 162.642350][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642393][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642423][ T5819] ? __lock_acquire+0x6b5/0x2cf0 [ 162.642465][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642512][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642549][ T5819] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 162.642587][ T5819] do_writepages+0x32e/0x550 [ 162.642628][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642662][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642698][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642727][ T5819] ? do_raw_spin_unlock+0xf5/0x210 [ 162.642762][ T5819] filemap_fdatawrite+0x1e9/0x2f0 [ 162.642807][ T5819] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 162.642905][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642938][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.642980][ T5819] ? do_raw_spin_unlock+0xf5/0x210 [ 162.643017][ T5819] f2fs_sync_dirty_inodes+0x30e/0x860 [ 162.643078][ T5819] f2fs_write_checkpoint+0x9df/0x26a0 [ 162.643163][ T5819] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 162.643198][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.643304][ T5819] kill_f2fs_super+0x314/0x720 [ 162.643350][ T5819] ? __pfx_kill_f2fs_super+0x10/0x10 [ 162.643406][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.643436][ T5819] ? lockdep_hardirqs_on+0x7a/0x110 [ 162.643476][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.643526][ T5819] deactivate_locked_super+0xbc/0x130 [ 162.643570][ T5819] cleanup_mnt+0x437/0x4d0 [ 162.643599][ T5819] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.643643][ T5819] task_work_run+0x1d9/0x270 [ 162.643677][ T5819] ? __pfx_task_work_run+0x10/0x10 [ 162.643720][ T5819] exit_to_user_mode_loop+0xed/0x480 [ 162.643750][ T5819] ? rcu_is_watching+0x15/0xb0 [ 162.643794][ T5819] do_syscall_64+0x32d/0xf80 [ 162.643818][ T5819] ? trace_irq_disable+0x3b/0x150 [ 162.643857][ T5819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.643893][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.643919][ T5819] RIP: 0033:0x7f62dc19d9d7 [ 162.643943][ T5819] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 162.643964][ T5819] RSP: 002b:00007ffc7506cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 162.643990][ T5819] RAX: 0000000000000000 RBX: 00007f62dc231f90 RCX: 00007f62dc19d9d7 [ 162.644009][ T5819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7506cd30 [ 162.644026][ T5819] RBP: 00007ffc7506cd30 R08: 00007ffc7506dd30 R09: 00000000ffffffff [ 162.644044][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7506ddc0 [ 162.644084][ T5819] R13: 00007f62dc231f90 R14: 0000000000027a66 R15: 00007ffc7506de00 [ 162.644126][ T5819] [ 163.197280][ T5819] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 163.646019][ T8107] loop2: detected capacity change from 0 to 2048 [ 163.698520][ T8107] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576 [ 163.857260][ T8107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.471403][ T8140] loop5: detected capacity change from 0 to 256 [ 164.509515][ T8144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.559475][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 164.559498][ T31] audit: type=1800 audit(1772897019.496:52): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.835" name="file1" dev="loop5" ino=1048635 res=0 errno=0 [ 164.752520][ T8145] loop4: detected capacity change from 0 to 32768 [ 164.759979][ T8145] btrfs: Deprecated parameter 'usebackuproot' [ 164.766065][ T8145] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 164.788635][ T8145] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.837 (8145) [ 164.805920][ T8145] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.816263][ T8145] BTRFS info (device loop4): using crc32c checksum algorithm [ 164.824250][ T8145] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 164.967223][ T167] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 165.063056][ T8145] BTRFS warning (device loop4): couldn't read tree root [ 165.070470][ T8145] BTRFS warning (device loop4): try to load backup roots slot 1 [ 165.078766][ T37] BTRFS error (device loop4): bad fsid on logical 5324800 mirror 1 [ 165.126955][ T8171] netlink: 24 bytes leftover after parsing attributes in process `syz.5.839'. [ 165.135880][ T8171] netlink: 32 bytes leftover after parsing attributes in process `syz.5.839'. [ 165.166852][ T8145] BTRFS warning (device loop4): couldn't read tree root [ 165.173884][ T8145] BTRFS warning (device loop4): try to load backup roots slot 2 [ 165.189225][ T1158] BTRFS warning (device loop4): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 165.265145][ T8145] BTRFS warning (device loop4): couldn't read tree root [ 165.273514][ T8145] BTRFS warning (device loop4): try to load backup roots slot 3 [ 165.287365][ T1158] BTRFS warning (device loop4): checksum verify failed on logical 5242880 mirror 1 wanted 0xc0857788 found 0x32e55448 level 0 [ 165.350017][ T8145] BTRFS warning (device loop4): couldn't read tree root [ 165.431859][ T8145] BTRFS error (device loop4): open_ctree failed: -5 [ 165.593253][ T8186] loop5: detected capacity change from 0 to 512 [ 165.684412][ T8186] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.719881][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.850'. [ 165.739253][ T8181] loop6: detected capacity change from 0 to 4096 [ 165.844275][ T8181] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 165.937012][ T8181] ntfs3(loop6): ino=1a, mi_enum_attr [ 165.942458][ T8181] ntfs3(loop6): ino=1a, mi_enum_attr [ 166.017172][ T8181] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 166.102903][ T8193] loop3: detected capacity change from 0 to 512 [ 166.128717][ T8193] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.261723][ T8201] loop2: detected capacity change from 0 to 256 [ 166.324594][ T8193] EXT4-fs (loop3): 1 truncate cleaned up [ 166.384183][ T8193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.404649][ T8201] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4711949a, utbl_chksum : 0xe619d30d) [ 166.556261][ T31] audit: type=1800 audit(1772897021.496:53): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.856" name="file1" dev="loop2" ino=1048637 res=0 errno=0 [ 166.583539][ T8209] loop5: detected capacity change from 0 to 512 [ 166.664562][ T8212] loop4: detected capacity change from 0 to 512 [ 166.671097][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.859'. [ 166.684046][ T8209] EXT4-fs: Ignoring removed oldalloc option [ 166.720125][ T8209] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 166.779482][ T8209] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.861: bad orphan inode 131083 [ 166.896826][ T8209] loop5: lost filesystem error report for type 5 error -117 [ 166.902366][ T8209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.902671][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.953403][ T8217] loop6: detected capacity change from 0 to 736 [ 166.965807][ T8209] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.5.861: path /142/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 167.259960][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.418025][ T31] audit: type=1326 audit(1772897022.366:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.6.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6779c799 code=0x7ffc0000 [ 167.531297][ T31] audit: type=1326 audit(1772897022.366:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.6.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6779c799 code=0x7ffc0000 [ 167.594406][ T31] audit: type=1326 audit(1772897022.386:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.6.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6779c799 code=0x7ffc0000 [ 167.641248][ T31] audit: type=1326 audit(1772897022.386:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.6.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6779c799 code=0x7ffc0000 [ 167.765032][ T31] audit: type=1326 audit(1772897022.416:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.6.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d6779c799 code=0x7ffc0000 [ 167.788028][ T8233] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 167.842888][ T8233] EXT4-fs (loop0): 1 orphan inode deleted [ 167.862347][ T31] audit: type=1326 audit(1772897022.416:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.6.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6779c799 code=0x7ffc0000 [ 167.892954][ T8233] EXT4-fs (loop0): 1 truncate cleaned up [ 167.901258][ T8233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.996843][ T8216] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 168.026840][ T31] audit: type=1326 audit(1772897022.416:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.6.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6779c799 code=0x7ffc0000 [ 168.051372][ T31] audit: type=1326 audit(1772897022.416:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.6.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6779c799 code=0x7ffc0000 [ 168.081580][ T8216] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.175399][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.184357][ T8260] mkiss: ax0: crc mode is auto. [ 168.427949][ T8216] XFS (loop2): Ending clean mount [ 168.762296][ T5825] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.793913][ T8279] set_capacity_and_notify: 2 callbacks suppressed [ 168.793935][ T8279] loop6: detected capacity change from 0 to 1024 [ 168.850906][ T8279] EXT4-fs: inline encryption not supported [ 168.931599][ T8285] netlink: 216 bytes leftover after parsing attributes in process `syz.5.892'. [ 168.952263][ T8279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.975253][ T8285] netlink: 'syz.5.892': attribute type 2 has an invalid length. [ 169.116064][ T8290] loop0: detected capacity change from 0 to 256 [ 169.183966][ T8279] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 169.241198][ T8279] EXT4-fs (loop6): Remounting filesystem read-only [ 169.420689][ T7159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.667128][ T5828] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 169.726651][ T8304] loop2: detected capacity change from 0 to 256 [ 169.773631][ T8306] ip6gretap0: entered promiscuous mode [ 169.819219][ T8277] loop3: detected capacity change from 0 to 32768 [ 169.849008][ T5828] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.886788][ T5828] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 169.925553][ T5828] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.965268][ T5828] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.993041][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 169.993062][ T31] audit: type=1326 audit(1772897024.926:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.4.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7579c799 code=0x7fc00000 [ 170.038619][ T5828] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.086545][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.129379][ T5828] usb 1-1: Product: syz [ 170.157763][ T5828] usb 1-1: Manufacturer: syz [ 170.206927][ T5828] cdc_wdm 1-1:1.0: skipping garbage [ 170.223185][ T5828] cdc_wdm 1-1:1.0: skipping garbage [ 170.242587][ T5828] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 170.451080][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 170.538812][ T5828] usb 1-1: USB disconnect, device number 6 [ 170.697160][ T8333] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 170.776266][ T8333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.912'. [ 170.817343][ T8333] netlink: 1 bytes leftover after parsing attributes in process `syz.2.912'. [ 170.851490][ T8333] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 170.875835][ T8336] tipc: Invalid UDP bearer configuration [ 170.875894][ T8336] tipc: Enabling of bearer rejected, failed to enable media [ 171.294050][ T8353] loop0: detected capacity change from 0 to 512 [ 171.344158][ T8353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.399310][ T8353] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.922: bg 0: block 306: padding at end of block bitmap is not set [ 171.472401][ T8358] netlink: 116 bytes leftover after parsing attributes in process `syz.4.923'. [ 171.515547][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.567176][ T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 171.702030][ T8369] loop4: detected capacity change from 0 to 128 [ 171.740008][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.774724][ T8369] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 171.791750][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.824361][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.857120][ T8369] FAT-fs (loop4): Filesystem has been set read-only [ 171.871575][ T30] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.897355][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.937798][ T30] usb 7-1: config 0 descriptor?? [ 172.219892][ T8381] loop4: detected capacity change from 0 to 2048 [ 172.285679][ T8381] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 172.320321][ T8381] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 172.360957][ T8381] UDF-fs: Scanning with blocksize 512 failed [ 172.384262][ T8381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.416584][ T30] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 172.568599][ T30] usb 7-1: USB disconnect, device number 3 [ 172.898881][ T8406] ipvlan2: entered promiscuous mode [ 172.908884][ T8406] bridge0: port 3(ipvlan2) entered blocking state [ 172.945457][ T8406] bridge0: port 3(ipvlan2) entered disabled state [ 172.990485][ T8406] ipvlan2: entered allmulticast mode [ 173.014855][ T8406] bridge0: entered allmulticast mode [ 173.037946][ T8406] ipvlan2: left allmulticast mode [ 173.057885][ T8406] bridge0: left allmulticast mode [ 173.114667][ T8408] vlan2: entered promiscuous mode [ 173.139207][ T8408] syz_tun: entered promiscuous mode [ 173.638531][ T8434] loop0: detected capacity change from 0 to 1764 [ 173.711477][ T8440] loop6: detected capacity change from 0 to 256 [ 173.826200][ T8440] FAT-fs (loop6): unable to read block(17179869180) for building NFS inode [ 174.112506][ T8448] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 174.167631][ T8452] netlink: 84 bytes leftover after parsing attributes in process `syz.6.964'. [ 174.221926][ T8452] netlink: 84 bytes leftover after parsing attributes in process `syz.6.964'. [ 174.307422][ T8452] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 174.502525][ T8458] netlink: 84 bytes leftover after parsing attributes in process `syz.4.967'. [ 174.533075][ T8458] netlink: 84 bytes leftover after parsing attributes in process `syz.4.967'. [ 174.597351][ T31] audit: type=1326 audit(1772897029.536:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af99c799 code=0x7ffc0000 [ 174.640794][ T8464] syz_tun: entered allmulticast mode [ 174.699818][ T31] audit: type=1326 audit(1772897029.536:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af99c799 code=0x7ffc0000 [ 174.816823][ T31] audit: type=1326 audit(1772897029.576:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f26af99c799 code=0x7ffc0000 [ 174.867472][ T31] audit: type=1326 audit(1772897029.576:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af99c799 code=0x7ffc0000 [ 174.891894][ T8437] loop3: detected capacity change from 0 to 32768 [ 174.903945][ T31] audit: type=1326 audit(1772897029.576:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af99c799 code=0x7ffc0000 [ 174.992346][ T31] audit: type=1326 audit(1772897029.586:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f26af99c799 code=0x7ffc0000 [ 175.076887][ T31] audit: type=1326 audit(1772897029.586:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af99c799 code=0x7ffc0000 [ 175.114097][ T8437] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 175.127261][ T8472] loop6: detected capacity change from 0 to 1024 [ 175.137712][ T8446] loop0: detected capacity change from 0 to 32768 [ 175.211126][ T8472] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.219721][ T31] audit: type=1326 audit(1772897029.586:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26af99c799 code=0x7ffc0000 [ 175.249079][ T8478] loop4: detected capacity change from 0 to 1024 [ 175.283861][ T8446] (syz.0.961,8446,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.364162][ T8472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.367412][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.5.977'. [ 175.395492][ T8446] (syz.0.961,8446,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.595763][ T8446] JBD2: Ignoring recovery information on journal [ 175.645540][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.981'. [ 175.701077][ T8446] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 175.730009][ T7159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.815685][ T5823] ocfs2: Unmounting device (7,3) on (node local) [ 176.184527][ T8501] loop5: detected capacity change from 0 to 4096 [ 176.200687][ T5819] ocfs2: Unmounting device (7,0) on (node local) [ 176.286015][ T8506] mkiss: ax0: crc mode is auto. [ 176.510277][ T8511] vivid-006: disconnect [ 176.542171][ T8509] ip6gretap0: entered promiscuous mode [ 176.559426][ T8510] vivid-006: reconnect [ 176.567950][ T8509] macsec1: entered promiscuous mode [ 176.586557][ T8509] macsec1: entered allmulticast mode [ 176.637004][ T8509] ip6gretap0: entered allmulticast mode [ 176.691098][ T8509] ip6gretap0: left allmulticast mode [ 176.727201][ T8509] ip6gretap0: left promiscuous mode [ 176.892656][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.994'. [ 177.111827][ T8527] loop2: detected capacity change from 0 to 128 [ 177.176851][ T8527] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 177.225623][ T8527] hpfs: filesystem error: improperly stopped [ 177.244871][ T8527] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 177.297283][ T8527] hpfs: You really don't want any checks? You are crazy... [ 177.304941][ T8527] hpfs: hpfs_map_sector(): read error [ 177.341996][ T8527] hpfs: code page support is disabled [ 177.367231][ T8527] hpfs: hpfs_map_4sectors(): unaligned read [ 177.367326][ T8527] hpfs: hpfs_map_4sectors(): unaligned read [ 177.367374][ T8527] hpfs: filesystem error: unable to find root dir [ 177.645155][ T8546] loop5: detected capacity change from 0 to 1024 [ 177.893588][ T1048] hfsplus: b-tree write err: -5, ino 25 [ 177.924434][ T1048] hfsplus: b-tree write err: -5, ino 4 [ 177.947390][ T1048] hfsplus: b-tree write err: -5, ino 2 [ 178.009324][ T1048] hfsplus: b-tree write err: -5, ino 17 [ 178.282932][ T8565] loop3: detected capacity change from 0 to 2048 [ 178.363057][ T8565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.407413][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1017'. [ 178.440305][ T8532] loop4: detected capacity change from 0 to 32768 [ 178.488789][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1017'. [ 178.524659][ T8578] loop5: detected capacity change from 0 to 8192 [ 178.533260][ T8576] netlink: 'syz.6.1017': attribute type 13 has an invalid length. [ 178.541484][ T8578] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 178.550030][ T8578] UDF-fs: Scanning with blocksize 512 failed [ 178.556330][ T8576] netlink: 'syz.6.1017': attribute type 11 has an invalid length. [ 178.575833][ T8578] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 178.585563][ T8578] UDF-fs: Scanning with blocksize 1024 failed [ 178.594197][ T8578] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 178.595713][ T8532] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 178.610883][ T8578] UDF-fs: Scanning with blocksize 2048 failed [ 178.669604][ T8578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.810656][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.835170][ T1048] hfsplus: b-tree write err: -5, ino 25 [ 178.847971][ T31] audit: type=1800 audit(1772897033.776:77): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1019" name="bus" dev="loop5" ino=824 res=0 errno=0 [ 178.887306][ T8532] XFS (loop4): Ending clean mount [ 178.917714][ T1048] hfsplus: b-tree write err: -5, ino 4 [ 178.955412][ T1048] hfsplus: b-tree write err: -5, ino 2 [ 179.205216][ T5820] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 179.614075][ T8607] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 179.661894][ T8607] ntfs3(loop3): ino=3, mi_enum_attr [ 179.905191][ T31] audit: type=1800 audit(1772897034.836:78): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1027" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 180.020376][ T8623] set_capacity_and_notify: 2 callbacks suppressed [ 180.020404][ T8623] loop2: detected capacity change from 0 to 256 [ 180.163882][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1037'. [ 180.481391][ T8637] dummy0: entered promiscuous mode [ 180.493664][ T8637] dummy0: left promiscuous mode [ 180.590621][ T8640] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1043'. [ 180.609214][ T8642] loop2: detected capacity change from 0 to 2048 [ 180.686875][ T5914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.737379][ T8642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.835328][ T8652] loop0: detected capacity change from 0 to 256 [ 180.842776][ T8654] loop3: detected capacity change from 0 to 1024 [ 180.874563][ T8642] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 180.917989][ T5914] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 180.937297][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.974814][ T5914] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 181.001320][ T8652] FAT-fs (loop0): Directory bread(block 64) failed [ 181.004979][ T5914] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 181.026432][ T8652] FAT-fs (loop0): Directory bread(block 65) failed [ 181.052527][ T5914] usb 5-1: Manufacturer: syz [ 181.064456][ T8652] FAT-fs (loop0): Directory bread(block 66) failed [ 181.092452][ T8658] loop5: detected capacity change from 0 to 4096 [ 181.094443][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.099701][ T8652] FAT-fs (loop0): Directory bread(block 67) failed [ 181.117855][ T5914] usb 5-1: config 0 descriptor?? [ 181.162911][ T8658] NILFS (loop5): mounting unchecked fs [ 181.168670][ T8652] FAT-fs (loop0): Directory bread(block 68) failed [ 181.202975][ T8658] NILFS (loop5): invalid segment: Sequence number mismatch [ 181.221408][ T8652] FAT-fs (loop0): Directory bread(block 69) failed [ 181.238352][ T8652] FAT-fs (loop0): Directory bread(block 70) failed [ 181.262511][ T8658] NILFS (loop5): trying rollback from an earlier position [ 181.307530][ T8652] FAT-fs (loop0): Directory bread(block 71) failed [ 181.319960][ T8652] FAT-fs (loop0): Directory bread(block 72) failed [ 181.352421][ T8652] FAT-fs (loop0): Directory bread(block 73) failed [ 181.416858][ T8658] NILFS (loop5): recovery complete [ 181.459670][ T8667] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.492809][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.501553][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.576818][ T5914] rc_core: IR keymap rc-hauppauge not found [ 181.591329][ T5914] Registered IR keymap rc-empty [ 181.628938][ T5914] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 181.672679][ T5914] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 181.799271][ C1] igorplugusb 5-1:0.0: receive overflow, at least 5 lost [ 181.889169][ T8678] Bluetooth: MGMT ver 1.23 [ 181.962007][ T8679] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 182.037437][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.044239][ T5914] usb 5-1: USB disconnect, device number 7 [ 182.074884][ T8683] xt_l2tp: invalid flags combination: 0 [ 182.108399][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.473577][ T8691] loop5: detected capacity change from 0 to 4096 [ 182.675701][ T31] audit: type=1800 audit(1772897037.616:79): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1064" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 182.743202][ T31] audit: type=1800 audit(1772897037.616:80): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1064" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 182.973246][ T167] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.991978][ T8709] loop2: detected capacity change from 0 to 1024 [ 183.008191][ T167] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.049944][ T167] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.058073][ T8709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.125400][ T129] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.207222][ T8709] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 183.301152][ T8721] loop6: detected capacity change from 0 to 1024 [ 183.325453][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.525703][ T167] hfsplus: b-tree write err: -5, ino 25 [ 183.548077][ T167] hfsplus: b-tree write err: -5, ino 4 [ 183.553833][ T167] hfsplus: b-tree write err: -5, ino 2 [ 183.588563][ T167] hfsplus: b-tree write err: -5, ino 20 [ 184.285142][ T8745] loop2: detected capacity change from 0 to 4096 [ 184.311308][ T8745] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 184.354665][ T8745] ntfs3(loop2): ino=3, mi_enum_attr [ 184.365465][ T8763] loop3: detected capacity change from 0 to 128 [ 184.474243][ T8767] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1099'. [ 184.486616][ T8763] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 184.576282][ T8765] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.608007][ T8763] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.667017][ T8765] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.748736][ T8765] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.1100: No space for directory leaf checksum. Please run e2fsck -D. [ 184.791593][ T8765] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.1100: Directory block failed checksum [ 185.053001][ T8781] set_capacity_and_notify: 1 callbacks suppressed [ 185.053025][ T8781] loop0: detected capacity change from 0 to 1024 [ 185.094049][ T5820] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.152427][ T8777] loop6: detected capacity change from 0 to 8192 [ 185.327100][ T129] hfsplus: b-tree write err: -5, ino 25 [ 185.346256][ T129] hfsplus: b-tree write err: -5, ino 4 [ 185.354825][ T129] hfsplus: b-tree write err: -5, ino 2 [ 185.374908][ T8793] loop3: detected capacity change from 0 to 1024 [ 185.398023][ T8793] EXT4-fs: Ignoring removed orlov option [ 185.458431][ T8793] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 185.549504][ T8793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.684668][ T8805] loop5: detected capacity change from 0 to 16 [ 185.731698][ T8806] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1116'. [ 185.746330][ T8805] erofs (device loop5): mounted with root inode @ nid 36. [ 185.917968][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.943154][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1117'. [ 186.181584][ T8816] loop0: detected capacity change from 0 to 256 [ 186.599231][ T8831] loop6: detected capacity change from 0 to 512 [ 186.637077][ T29] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 186.847355][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.851006][ T8839] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1131'. [ 186.877287][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 186.901983][ T8839] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1131'. [ 186.927190][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 186.952907][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 186.997980][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 187.050590][ T29] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 187.068319][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 187.078380][ T29] usb 4-1: Product: syz [ 187.087130][ T29] usb 4-1: Manufacturer: syz [ 187.098839][ T29] usb 4-1: SerialNumber: syz [ 187.124998][ T29] usb 4-1: config 0 descriptor?? [ 187.182868][ T8845] loop4: detected capacity change from 0 to 128 [ 187.223464][ T8845] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.253139][ T8845] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.264066][ T5900] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 187.374541][ T29] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 187.418212][ T29] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 187.427203][ T5900] usb 7-1: Using ep0 maxpacket: 32 [ 187.447743][ T5900] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 187.456158][ T5900] usb 7-1: config 0 has no interface number 0 [ 187.478550][ T5900] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 187.502516][ T5820] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.515389][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.559791][ T5900] usb 7-1: Product: syz [ 187.567842][ T5900] usb 7-1: Manufacturer: syz [ 187.572736][ T29] radio-si470x 4-1:0.0: software version 38, hardware version 200 [ 187.578201][ T5900] usb 7-1: SerialNumber: syz [ 187.613046][ T29] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 187.614126][ T5900] usb 7-1: config 0 descriptor?? [ 187.636452][ T5900] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 187.751726][ T8860] loop0: detected capacity change from 0 to 1024 [ 187.772361][ T29] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 187.800892][ T8860] hfsplus: request for non-existent node 211 in B*Tree [ 187.805944][ T29] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 187.830255][ T29] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 187.839807][ T8860] hfsplus: request for non-existent node 211 in B*Tree [ 187.855972][ T5900] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 187.878947][ T29] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 187.921901][ T5900] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 187.954788][ T29] usb 4-1: USB disconnect, device number 5 [ 188.071291][ T8864] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1144'. [ 188.115720][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 188.141044][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 188.220336][ T8866] loop0: detected capacity change from 0 to 512 [ 188.264523][ T8866] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1145: invalid indirect mapped block 256 (level 2) [ 188.337266][ T8869] netlink: 'syz.2.1146': attribute type 3 has an invalid length. [ 188.346873][ T8866] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 188.365771][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 188.367581][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 188.375837][ T5900] usb 7-1: USB disconnect, device number 4 [ 188.382427][ C1] EXT4-fs (loop0): initial error at time 1772897043: ext4_free_branches:1023: inode 11 [ 188.404640][ C1] EXT4-fs (loop0): last error at time 1772897043: ext4_free_branches:1023: inode 11 [ 188.420914][ T5900] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 188.437755][ T8854] loop5: detected capacity change from 0 to 32768 [ 188.442623][ T8866] EXT4-fs (loop0): Remounting filesystem read-only [ 188.451666][ T8866] EXT4-fs (loop0): 2 truncates cleaned up [ 188.460819][ T8866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.550770][ T5900] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 188.581140][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.601823][ T5900] quatech2 7-1:0.51: device disconnected [ 189.290361][ T8888] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1157'. [ 189.307389][ T8888] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1157'. [ 189.330389][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'. [ 189.576885][ T5921] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 189.750154][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.827197][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.861923][ T5921] usb 6-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 189.895890][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.911678][ T5921] usb 6-1: config 0 descriptor?? [ 189.957823][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 190.531582][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 190.590019][ T5921] usb 6-1: string descriptor 0 read error: -71 [ 190.614574][ T8937] set_capacity_and_notify: 2 callbacks suppressed [ 190.614594][ T8937] loop3: detected capacity change from 0 to 1024 [ 190.633735][ T5921] uclogic 0003:5543:0081.0008: failed retrieving string descriptor #200: -71 [ 190.658585][ T5921] uclogic 0003:5543:0081.0008: failed retrieving pen parameters: -71 [ 190.700995][ T8937] hfsplus: bad catalog entry type [ 190.706294][ T5921] uclogic 0003:5543:0081.0008: failed probing pen v2 parameters: -71 [ 190.742290][ T5921] uclogic 0003:5543:0081.0008: failed probing parameters: -71 [ 190.787861][ T5921] uclogic 0003:5543:0081.0008: probe with driver uclogic failed with error -71 [ 190.833618][ T8940] loop2: detected capacity change from 0 to 64 [ 190.860578][ T5921] usb 6-1: USB disconnect, device number 5 [ 190.861064][ T37] hfsplus: b-tree write err: -5, ino 25 [ 190.909776][ T37] hfsplus: b-tree write err: -5, ino 4 [ 190.947290][ T37] hfsplus: b-tree write err: -5, ino 2 [ 191.425255][ T8916] loop0: detected capacity change from 0 to 32768 [ 191.522371][ T8957] loop5: detected capacity change from 0 to 4096 [ 191.547550][ T8916] JBD2: Ignoring recovery information on journal [ 191.582479][ T8957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.691158][ T8971] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 191.720177][ T8971] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1185'. [ 191.749936][ T8971] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1185'. [ 191.765899][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.773474][ T8916] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 191.775502][ T8971] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 191.841512][ T8971] netlink: 'syz.4.1185': attribute type 8 has an invalid length. [ 191.943147][ T8971] netlink: 606 bytes leftover after parsing attributes in process `syz.4.1185'. [ 192.002167][ T8978] loop3: detected capacity change from 0 to 256 [ 192.039614][ T8980] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 192.039614][ T8980] program syz.2.1188 not setting count and/or reply_len properly [ 192.087302][ T5819] ocfs2: Unmounting device (7,0) on (node local) [ 192.179229][ T8984] sg_write: data in/out 33554396/154 bytes for SCSI command 0x0-- guessing data in; [ 192.179229][ T8984] program syz.6.1189 not setting count and/or reply_len properly [ 192.212107][ T8978] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x8978cc48, utbl_chksum : 0xe619d30d) [ 192.371304][ T31] audit: type=1800 audit(1772897047.296:81): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1190" name="file2" dev="loop3" ino=1048665 res=0 errno=0 [ 193.006272][ T9005] loop5: detected capacity change from 0 to 512 [ 193.013799][ T5921] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 193.136378][ T9005] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.200341][ T9005] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 193.215983][ T5921] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 193.255303][ T5921] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.311010][ T9005] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 193.332289][ T5921] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.402517][ T9005] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 193.421933][ T5921] usb 7-1: config 1 has no interface number 1 [ 193.460942][ T5921] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 193.495148][ T9005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.547541][ T5921] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 193.592433][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.599226][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.613259][ T9005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.649466][ T5921] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.700704][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.803697][ T5921] usb 7-1: Product: syz [ 193.860644][ T5921] usb 7-1: Manufacturer: syz [ 193.898771][ T5921] usb 7-1: SerialNumber: syz [ 194.241038][ T5921] usb 7-1: Failed to set altset [ 194.245977][ T5921] usb 7-1: 0:2: cannot create sequencer device [ 194.338727][ T5921] usb 7-1: Failed to set altset [ 194.584437][ T5921] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 194.676109][ T5921] usb 7-1: USB disconnect, device number 5 [ 194.822654][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.978779][ T9003] loop3: detected capacity change from 0 to 262144 [ 194.996572][ T9003] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1196 (9003) [ 195.013317][ T9003] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 195.023531][ T9003] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 195.247888][ T1048] BTRFS warning (device loop3): checksum verify failed on logical 30654464 mirror 1 wanted 0x6191332ca3bfabbd found 0x4a774cf51a31801a level 0 [ 195.294961][ T9003] BTRFS info (device loop3): read error corrected: ino 0 off 30654464 (dev /dev/loop3 sector 76256) [ 195.327928][ T50] BTRFS warning (device loop3): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0xeab9a4b9d7fe7ab6 level 0 [ 195.446086][ T9003] BTRFS info (device loop3): read error corrected: ino 0 off 30457856 (dev /dev/loop3 sector 75872) [ 195.462494][ T9003] BTRFS info (device loop3): deleted orphan free space tree entries [ 195.472658][ T9003] BTRFS info (device loop3): checking UUID tree [ 195.482010][ T9003] BTRFS info (device loop3): setting nodatasum [ 195.489467][ T9003] BTRFS info (device loop3): enabling free space tree [ 195.655494][ T9020] loop5: detected capacity change from 0 to 32768 [ 195.754445][ T5823] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 195.802666][ T9051] loop2: detected capacity change from 0 to 256 [ 195.826970][ T9020] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 195.926237][ T9051] FAT-fs (loop2): Directory bread(block 64) failed [ 195.946849][ T9051] FAT-fs (loop2): Directory bread(block 65) failed [ 195.953579][ T9051] FAT-fs (loop2): Directory bread(block 66) failed [ 195.966522][ T9022] loop4: detected capacity change from 0 to 32768 [ 195.973163][ T9051] FAT-fs (loop2): Directory bread(block 67) failed [ 195.992699][ T9051] FAT-fs (loop2): Directory bread(block 68) failed [ 195.993679][ T9020] XFS (loop5): Ending clean mount [ 196.003883][ T9051] FAT-fs (loop2): Directory bread(block 69) failed [ 196.014523][ T9051] FAT-fs (loop2): Directory bread(block 70) failed [ 196.026502][ T9051] FAT-fs (loop2): Directory bread(block 71) failed [ 196.092106][ T9051] FAT-fs (loop2): Directory bread(block 72) failed [ 196.119499][ T9051] FAT-fs (loop2): Directory bread(block 73) failed [ 196.263241][ T5824] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 196.945041][ T9079] loop6: detected capacity change from 0 to 2048 [ 197.091726][ T9079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.177317][ T9079] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.219907][ T9090] loop3: detected capacity change from 0 to 256 [ 197.405703][ T9088] loop5: detected capacity change from 0 to 4096 [ 197.458621][ T9090] FAT-fs (loop3): Directory bread(block 64) failed [ 197.465388][ T9090] FAT-fs (loop3): Directory bread(block 65) failed [ 197.487448][ T9090] FAT-fs (loop3): Directory bread(block 66) failed [ 197.494048][ T9090] FAT-fs (loop3): Directory bread(block 67) failed [ 197.522872][ T9088] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 197.593105][ T9090] FAT-fs (loop3): Directory bread(block 68) failed [ 197.601696][ T7159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.653696][ T9090] FAT-fs (loop3): Directory bread(block 69) failed [ 197.667368][ T9090] FAT-fs (loop3): Directory bread(block 70) failed [ 197.704648][ T9090] FAT-fs (loop3): Directory bread(block 71) failed [ 197.723763][ T9062] loop0: detected capacity change from 0 to 32768 [ 197.787349][ T9090] FAT-fs (loop3): Directory bread(block 72) failed [ 197.827899][ T9062] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.832944][ T9090] FAT-fs (loop3): Directory bread(block 73) failed [ 198.056997][ T9062] XFS (loop0): Ending clean mount [ 198.112014][ T9062] XFS (loop0): Quotacheck needed: Please wait. [ 198.285525][ T9062] XFS (loop0): Quotacheck: Done. [ 198.295441][ T9112] loop6: detected capacity change from 0 to 512 [ 198.662329][ T5819] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.128676][ T9129] loop3: detected capacity change from 0 to 16 [ 199.219188][ T9132] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 199.226590][ T9129] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 199.270333][ T9129] erofs (device loop3): mounted with root inode @ nid 36. [ 199.330015][ T9129] syz.3.1236: attempt to access beyond end of device [ 199.330015][ T9129] loop3: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 199.407996][ T9129] syz.3.1236: attempt to access beyond end of device [ 199.407996][ T9129] loop3: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 199.467959][ T9129] erofs (device loop3): read error -5 @ 0 of nid 36 [ 199.507327][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 199.528344][ T9138] syz.3.1236: attempt to access beyond end of device [ 199.528344][ T9138] loop3: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 199.589320][ T9138] syz.3.1236: attempt to access beyond end of device [ 199.589320][ T9138] loop3: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 199.692967][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 199.703041][ T9138] erofs (device loop3): read error -5 @ 0 of nid 36 [ 199.722021][ T29] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 199.737987][ T29] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 199.774531][ T29] usb 6-1: string descriptor 0 read error: -22 [ 199.786880][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 199.813091][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.108085][ T9133] loop2: detected capacity change from 0 to 32768 [ 200.117450][ T29] usb 6-1: Can't get UAC3 power state for id 10 [ 200.338259][ T9157] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.355282][ T29] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 200.375446][ T29] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 200.607176][ T29] usb 6-1: USB disconnect, device number 6 [ 200.789931][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 200.797644][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 200.803682][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 200.810299][ T5846] Bluetooth: hci5: command 0x0405 tx timeout [ 200.816360][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 200.877092][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1253'. [ 201.089004][ T9178] program syz.6.1256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.272989][ T9183] set_capacity_and_notify: 1 callbacks suppressed [ 201.273011][ T9183] loop2: detected capacity change from 0 to 4096 [ 201.293092][ T9183] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 201.378095][ T9186] loop4: detected capacity change from 0 to 512 [ 201.463070][ T9183] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 201.770229][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1264'. [ 201.921559][ T5833] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 201.931503][ T5833] Bluetooth: hci1: Injecting HCI hardware error event [ 201.940882][ T5833] Bluetooth: hci1: hardware error 0x00 [ 202.463548][ T9181] loop5: detected capacity change from 0 to 32768 [ 202.520907][ T9181] JBD2: Ignoring recovery information on journal [ 202.604411][ T9181] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 202.992113][ T5824] ocfs2: Unmounting device (7,5) on (node local) [ 203.106611][ T9234] loop3: detected capacity change from 0 to 512 [ 203.202562][ T9234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 203.283937][ T9234] System zones: 1-20 [ 203.339733][ T9234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.363648][ T9237] loop5: detected capacity change from 0 to 4096 [ 203.404894][ T9237] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 203.577245][ T9237] ntfs3(loop5): ino=1b, "file0" indx_read_ra [ 203.611625][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.900458][ T9231] loop6: detected capacity change from 0 to 32768 [ 203.940971][ T3404] kernel write not supported for file /snd/seq (pid: 3404 comm: kworker/0:2) [ 204.001341][ T9231] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 204.067116][ T5833] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 204.126527][ T9231] XFS (loop6): Ending clean mount [ 204.219456][ T9231] XFS (loop6): Quotacheck needed: Please wait. [ 204.363112][ T9231] XFS (loop6): Quotacheck: Done. [ 204.733164][ T7159] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 204.772436][ T9276] loop5: detected capacity change from 0 to 128 [ 204.816382][ T9276] FAT-fs (loop5): Directory bread(block 11554) failed [ 204.839199][ T9276] FAT-fs (loop5): Directory bread(block 11555) failed [ 204.859171][ T9276] FAT-fs (loop5): Directory bread(block 11556) failed [ 204.866188][ T9276] FAT-fs (loop5): Directory bread(block 11557) failed [ 204.896503][ T9276] FAT-fs (loop5): Directory bread(block 11558) failed [ 204.911244][ T9276] FAT-fs (loop5): Directory bread(block 11559) failed [ 204.918807][ T9276] FAT-fs (loop5): Directory bread(block 11560) failed [ 204.925893][ T9276] FAT-fs (loop5): Directory bread(block 11561) failed [ 204.934621][ T9276] FAT-fs (loop5): Directory bread(block 11562) failed [ 204.952706][ T9276] FAT-fs (loop5): Directory bread(block 11563) failed [ 205.598627][ T9291] loop3: detected capacity change from 0 to 512 [ 205.677269][ T9291] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1303: inode has both inline data and extents flags [ 205.683126][ T9296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1305'. [ 205.700354][ T9296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1305'. [ 205.766946][ T9291] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.767330][ T9291] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1303: couldn't read orphan inode 15 (err -117) [ 205.776731][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 205.776753][ C0] EXT4-fs (loop3): initial error at time 1772897060: ext4_orphan_get:1391: inode 15 [ 205.776790][ C0] EXT4-fs (loop3): last error at time 1772897060: ext4_orphan_get:1391: inode 15 [ 205.826545][ T9291] loop3: lost filesystem error report for type 5 error -117 [ 205.829866][ T9291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.901004][ T9303] loop6: detected capacity change from 0 to 256 [ 205.984936][ T9303] exfat: Deprecated parameter 'namecase' [ 206.014322][ T9303] exfat: Deprecated parameter 'utf8' [ 206.043043][ T9271] loop4: detected capacity change from 0 to 32768 [ 206.059542][ T9303] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 206.151604][ T9271] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 206.183538][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.360641][ T9271] XFS (loop4): Ending clean mount [ 206.418125][ T9323] loop2: detected capacity change from 0 to 8 [ 206.483945][ T9323] SQUASHFS error: zlib decompression failed, data probably corrupt [ 206.534094][ T9323] SQUASHFS error: Failed to read block 0x9b: -5 [ 206.600005][ T9323] SQUASHFS error: Unable to read metadata cache entry [99] [ 206.646829][ T9323] SQUASHFS error: Unable to read inode 0x127 [ 206.663221][ T5820] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 207.177366][ T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 207.369094][ T29] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 207.379415][ T29] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.390480][ T29] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 207.401175][ T29] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.415410][ T29] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.415561][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1323'. [ 207.424957][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.471299][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.485770][ T9349] loop4: detected capacity change from 0 to 128 [ 207.497665][ T29] usb 3-1: invalid MIDI out EP 0 [ 207.597788][ T9349] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.632124][ T29] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 207.651598][ T9349] ext4 filesystem being mounted at /227/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.701949][ T9349] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 1025 (only 1 groups) [ 207.821691][ T5820] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.919601][ T9327] loop3: detected capacity change from 0 to 32768 [ 207.948886][ T9357] Invalid source name [ 207.998630][ T9335] loop2: detected capacity change from 0 to 4096 [ 208.014478][ T9335] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 208.049977][ T9327] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 208.153362][ T9327] XFS (loop3): Ending clean mount [ 208.209478][ T5953] usb 3-1: USB disconnect, device number 4 [ 208.233221][ T9327] XFS (loop3): Quotacheck needed: Please wait. [ 208.345907][ T9327] XFS (loop3): Quotacheck: Done. [ 208.406088][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.663209][ T5823] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 208.917023][ T9389] loop3: detected capacity change from 0 to 8 [ 209.916812][ T5953] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 210.017350][ T9422] syz.4.1353 uses obsolete (PF_INET,SOCK_PACKET) [ 210.040934][ T9425] loop6: detected capacity change from 0 to 1024 [ 210.087779][ T9425] EXT4-fs: Ignoring removed bh option [ 210.097116][ T5953] usb 6-1: Using ep0 maxpacket: 16 [ 210.103834][ T9425] EXT4-fs: Ignoring removed oldalloc option [ 210.130235][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.164735][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.179170][ T5953] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 210.188701][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.204239][ T9425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.220111][ T5953] usb 6-1: config 0 descriptor?? [ 210.461951][ T7159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.478275][ T9438] loop3: detected capacity change from 0 to 512 [ 210.493454][ T9438] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.554287][ T9438] EXT4-fs (loop3): 1 truncate cleaned up [ 210.627730][ T9438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.660521][ T5953] apple 0003:05AC:024B.0009: fixing up MacBook JIS keyboard report descriptor [ 210.712036][ T5953] apple 0003:05AC:024B.0009: unknown global tag 0xe [ 210.758852][ T5953] apple 0003:05AC:024B.0009: item 0 1 1 14 parsing failed [ 210.771033][ T5953] apple 0003:05AC:024B.0009: parse failed [ 210.786453][ T5953] apple 0003:05AC:024B.0009: probe with driver apple failed with error -22 [ 210.850799][ T5953] usb 6-1: USB disconnect, device number 7 [ 210.981717][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.163220][ T9459] loop3: detected capacity change from 0 to 128 [ 211.221804][ T9459] EXT4-fs (loop3): Test dummy encryption mode enabled [ 211.250003][ T9459] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.286050][ T9463] loop6: detected capacity change from 0 to 2048 [ 211.293114][ T9459] ext4 filesystem being mounted at /235/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.343243][ T9463] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 211.369525][ T9463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.495631][ T5823] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.664309][ T7159] UDF-fs: error (device loop6): udf_read_inode: (ino 1440) failed !bh [ 211.677216][ T5833] Bluetooth: hci2: command tx timeout [ 211.728758][ T7159] UDF-fs: error (device loop6): udf_read_inode: (ino 1440) failed !bh [ 211.864334][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 211.917633][ T9486] loop5: detected capacity change from 0 to 64 [ 211.929757][ T9482] hsr0: entered promiscuous mode [ 211.967809][ T9482] macvlan2: entered allmulticast mode [ 212.029845][ T9482] hsr0: entered allmulticast mode [ 212.034918][ T9482] hsr_slave_0: entered allmulticast mode [ 212.116961][ T9482] hsr_slave_1: entered allmulticast mode [ 212.303488][ T7159] syz_tun (unregistering): left allmulticast mode [ 212.761527][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.939456][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.989298][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.094890][ T9518] loop3: detected capacity change from 0 to 512 [ 213.128941][ T9518] EXT4-fs (loop3): Test dummy encryption mode enabled [ 213.138706][ T9518] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 213.162000][ T9518] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1393: bad orphan inode 131083 [ 213.177257][ T9518] loop3: lost filesystem error report for type 5 error -117 [ 213.179901][ T9518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.314496][ T9518] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 213.388437][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.398434][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.407186][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.428909][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.449111][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.589095][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.614963][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.653247][ T9527] batadv_slave_0: entered promiscuous mode [ 213.671428][ T9527] batman_adv: batadv0: Adding interface: macsec2 [ 213.690858][ T9527] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.748936][ T9527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.762982][ T9531] loop3: detected capacity change from 0 to 128 [ 213.773367][ T9527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.795577][ T9527] batman_adv: batadv0: Interface activated: macsec2 [ 213.824774][ T9531] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.837194][ T5953] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 213.868198][ T9531] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.011459][ T31] audit: type=1800 audit(1772897068.956:82): pid=9531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1398" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 214.026827][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 214.091411][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.146862][ T5953] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.179491][ T5953] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 214.211939][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.228899][ T5953] usb 6-1: Product: syz [ 214.233545][ T5953] usb 6-1: Manufacturer: syz [ 214.248928][ T5823] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.276506][ T5953] usb 6-1: SerialNumber: syz [ 214.330228][ T5953] usb 6-1: config 0 descriptor?? [ 214.507726][ T5953] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 214.604974][ T9525] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 214.667931][ T5953] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 214.677870][ T5953] usb 6-1: USB disconnect, device number 8 [ 214.705337][ T37] bridge_slave_1: left allmulticast mode [ 214.747944][ T37] bridge_slave_1: left promiscuous mode [ 214.768560][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.845210][ T37] bridge_slave_0: left allmulticast mode [ 214.867307][ T37] bridge_slave_0: left promiscuous mode [ 214.892826][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.283930][ T9575] loop2: detected capacity change from 0 to 512 [ 215.373022][ T9575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 215.409194][ T9581] loop3: detected capacity change from 0 to 128 [ 215.424566][ T9575] System zones: 1-12 [ 215.478277][ T9575] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1415: missing EA_INODE flag [ 215.507340][ T5826] Bluetooth: hci2: command tx timeout [ 215.568533][ T9587] netlink: 'syz.4.1418': attribute type 83 has an invalid length. [ 215.588659][ T9575] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 215.589103][ T9575] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1415: error while reading EA inode 12 err=-117 [ 215.598336][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 215.598364][ C0] EXT4-fs (loop2): initial error at time 1772897070: ext4_xattr_inode_iget:441: inode 12 [ 215.598415][ C0] EXT4-fs (loop2): last error at time 1772897070: ext4_xattr_inode_iget:441: inode 12 [ 215.719438][ T9575] loop2: lost filesystem error report for type 5 error -117 [ 215.721346][ T9575] EXT4-fs (loop2): 1 orphan inode deleted [ 215.787906][ T9575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.901791][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.111542][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.128111][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.154557][ T37] bond0 (unregistering): Released all slaves [ 216.329165][ T9608] loop4: detected capacity change from 0 to 512 [ 216.440693][ T9608] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1425: inode has both inline data and extents flags [ 216.466411][ T9615] loop0: detected capacity change from 0 to 8 [ 216.503538][ T37] tipc: Left network mode [ 216.519904][ T9608] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 216.520389][ T9608] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1425: couldn't read orphan inode 15 (err -117) [ 216.529836][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 216.529864][ C0] EXT4-fs (loop4): initial error at time 1772897071: ext4_orphan_get:1391: inode 15 [ 216.529903][ C0] EXT4-fs (loop4): last error at time 1772897071: ext4_orphan_get:1391: inode 15 [ 216.618543][ T9615] SQUASHFS error: Failed to read block 0x18e: -5 [ 216.644010][ T9608] loop4: lost filesystem error report for type 5 error -117 [ 216.657070][ T9615] SQUASHFS error: Unable to read metadata cache entry [18c] [ 216.690573][ T9608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.892031][ T31] audit: type=1800 audit(1772897071.826:83): pid=9608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1425" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 216.936982][ T5953] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 217.060914][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.119733][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.165563][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 217.246763][ T5953] usb 3-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 217.297071][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.356534][ T5953] usb 3-1: config 0 descriptor?? [ 217.389849][ T9624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.540680][ T9639] loop0: detected capacity change from 0 to 4096 [ 217.589692][ T5826] Bluetooth: hci2: command tx timeout [ 217.596518][ T9522] chnl_net:caif_netlink_parms(): no params data found [ 217.652859][ T9648] loop4: detected capacity change from 0 to 4096 [ 217.704511][ T9639] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 217.727932][ T9639] ntfs3(loop0): Failed to load $Extend (-22). [ 217.752457][ T9639] ntfs3(loop0): Failed to initialize $Extend. [ 217.869695][ T37] hsr_slave_0: left promiscuous mode [ 217.878693][ T5953] hid_parser_main: 470 callbacks suppressed [ 217.878717][ T5953] apple 0003:05AC:0267.000A: unknown main item tag 0x0 [ 217.902655][ T9639] ntfs3(loop0): ino=1b, "file0" ntfs_readdir [ 217.930853][ T37] hsr_slave_1: left promiscuous mode [ 217.947081][ T5953] apple 0003:05AC:0267.000A: unknown main item tag 0x0 [ 217.951610][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.984437][ T5953] apple 0003:05AC:0267.000A: unknown main item tag 0x0 [ 217.994819][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.012298][ T5953] apple 0003:05AC:0267.000A: unknown main item tag 0x0 [ 218.049348][ T5953] apple 0003:05AC:0267.000A: unknown main item tag 0x0 [ 218.076815][ T5953] apple 0003:05AC:0267.000A: unknown main item tag 0x0 [ 218.114291][ T5953] apple 0003:05AC:0267.000A: unknown main item tag 0x0 [ 218.135901][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.146833][ T5953] apple 0003:05AC:0267.000A: unknown main item tag 0x0 [ 218.151717][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.177111][ T5953] apple 0003:05AC:0267.000A: unknown main item tag 0x0 [ 218.186778][ T5953] apple 0003:05AC:0267.000A: unknown main item tag 0x0 [ 218.259204][ T5953] apple 0003:05AC:0267.000A: hidraw0: USB HID v7f.fd Device [HID 05ac:0267] on usb-dummy_hcd.2-1/input0 [ 218.293277][ T37] veth1_macvtap: left promiscuous mode [ 218.335224][ T37] veth0_macvtap: left promiscuous mode [ 218.338817][ T5953] usb 3-1: USB disconnect, device number 5 [ 218.372889][ T37] veth1_vlan: left promiscuous mode [ 218.399855][ T37] veth0_vlan: left promiscuous mode [ 218.553788][ T9662] fido_id[9662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 218.972409][ T9677] loop0: detected capacity change from 0 to 512 [ 219.063500][ T9677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.118592][ T9677] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.294136][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.655070][ T37] team0 (unregistering): Port device team_slave_1 removed [ 219.677232][ T5826] Bluetooth: hci2: command tx timeout [ 219.708776][ T37] team0 (unregistering): Port device team_slave_0 removed [ 220.164423][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.222789][ T9707] loop0: detected capacity change from 0 to 64 [ 220.329841][ T9705] loop4: detected capacity change from 0 to 2048 [ 220.394410][ T9705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.414317][ T9711] loop5: detected capacity change from 0 to 1024 [ 220.436967][ T9522] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.444314][ T9522] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.475272][ T31] audit: type=1800 audit(1772897075.396:84): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1462" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 220.549642][ T9522] bridge_slave_0: entered allmulticast mode [ 220.566015][ T9713] loop3: detected capacity change from 0 to 256 [ 220.580532][ T9522] bridge_slave_0: entered promiscuous mode [ 220.615900][ T9522] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.643644][ T9715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.652912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.668054][ T9522] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.692832][ T9522] bridge_slave_1: entered allmulticast mode [ 220.738632][ T9522] bridge_slave_1: entered promiscuous mode [ 220.745232][ T9713] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 220.870081][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.889327][ T50] hfsplus: b-tree write err: -5, ino 25 [ 220.895451][ T50] hfsplus: b-tree write err: -5, ino 4 [ 220.947444][ T50] hfsplus: b-tree write err: -5, ino 2 [ 220.953104][ T50] hfsplus: b-tree write err: -5, ino 20 [ 221.010181][ T9522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.180128][ T9522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.282399][ T9735] netlink: 'syz.3.1469': attribute type 20 has an invalid length. [ 221.347589][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.390054][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.434299][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.451392][ T9522] team0: Port device team_slave_0 added [ 221.482436][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.484158][ T9522] team0: Port device team_slave_1 added [ 221.506014][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.514993][ T5900] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 221.567625][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.661261][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.707435][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.712029][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 221.767163][ T5826] Bluetooth: hci2: command tx timeout [ 221.803236][ T5900] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 221.811695][ T5900] usb 1-1: config 0 has no interface number 0 [ 221.811942][ T9522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.818009][ T5900] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.818051][ T5900] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.818102][ T5900] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 221.818136][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.870533][ T5900] usb 1-1: config 0 descriptor?? [ 221.912078][ T9755] loop4: detected capacity change from 0 to 512 [ 221.974333][ T9755] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 222.014922][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.039082][ T9755] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 222.046664][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.109197][ T9755] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 222.136853][ T9755] System zones: 0-2, 18-18, 34-35 [ 222.141077][ T9522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.151449][ T9755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 222.180854][ T9755] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 222.231698][ T9755] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.1477: path /261/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 222.311355][ T5900] hid (null): unknown global tag 0xe [ 222.330691][ T5900] hid (null): unknown global tag 0xd [ 222.447521][ T9522] hsr_slave_0: entered promiscuous mode [ 222.456633][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.462811][ T9740] loop5: detected capacity change from 0 to 32768 [ 222.471171][ T9522] hsr_slave_1: entered promiscuous mode [ 222.509664][ T9522] debugfs: 'hsr0' already exists in 'hsr' [ 222.559071][ T29] usb 1-1: USB disconnect, device number 7 [ 222.597438][ T9522] Cannot create hsr debugfs directory [ 222.691845][ T9740] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 222.765003][ T9740] XFS (loop5): Ending clean mount [ 222.784243][ T9740] XFS (loop5): Quotacheck needed: Please wait. [ 222.963563][ T9740] XFS (loop5): Quotacheck: Done. [ 223.205280][ T5824] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 223.871907][ T9522] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 223.911329][ T9775] loop4: detected capacity change from 0 to 32768 [ 223.943279][ T9522] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 223.958997][ T9775] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1481 (9775) [ 223.982029][ T9522] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 224.028095][ T9775] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.066366][ T9522] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 224.094499][ T9775] BTRFS info (device loop4): using sha256 checksum algorithm [ 224.151401][ T9811] loop2: detected capacity change from 0 to 1024 [ 224.267343][ T9813] loop5: detected capacity change from 0 to 2048 [ 224.274664][ T9813] EXT4-fs: Ignoring removed bh option [ 224.371118][ T9813] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.386354][ T9775] BTRFS info (device loop4): enabling ssd optimizations [ 224.411641][ T9775] BTRFS info (device loop4): turning on async discard [ 224.445144][ T9775] BTRFS info (device loop4): enabling free space tree [ 224.472402][ T9837] loop3: detected capacity change from 0 to 128 [ 224.487428][ T9775] BTRFS info (device loop4): enabling auto defrag [ 224.487586][ T9813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.493876][ T9775] BTRFS info (device loop4): max_inline set to 4096 [ 224.507585][ T9813] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.597842][ T9522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.620676][ T9837] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 224.701477][ T9522] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.724157][ T9837] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.757963][ T31] audit: type=1800 audit(1772897079.706:85): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1492" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 224.768589][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.785840][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.858333][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.865569][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.886372][ T9847] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 224.981466][ T9847] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 225.014517][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.028192][ T5823] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.059830][ T9847] overlayfs: failed to get uuid (236/file0, err=-13); falling back to uuid=null. [ 225.070368][ T5820] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 225.376135][ T9855] loop5: detected capacity change from 0 to 512 [ 225.545467][ T9855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.633650][ T9855] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.635989][ T9868] loop2: detected capacity change from 0 to 256 [ 225.790952][ T9868] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 225.937226][ T31] audit: type=1800 audit(1772897080.876:86): pid=9868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1501" name="file1" dev="loop2" ino=1048688 res=0 errno=0 [ 225.960003][ T5824] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 226.067217][ T29] net_ratelimit: 6 callbacks suppressed [ 226.067236][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.082051][ T9522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.231498][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.241111][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.263618][ T9880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.272413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.319040][ T9880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.327470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.358568][ T9880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.367000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.396390][ T9880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.404987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.503963][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 226.564154][ T9891] loop4: detected capacity change from 0 to 1024 [ 226.616787][ T5900] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 226.657053][ T9891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 226.697211][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 226.716940][ T9891] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.748996][ T29] usb 4-1: string descriptor 0 read error: -22 [ 226.755526][ T29] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 226.775037][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.787204][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 226.809387][ T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.826304][ T29] usb 4-1: MIDIStreaming interface descriptor not found [ 226.862666][ T5900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.864711][ T9891] EXT4-fs (loop4): shut down requested (2) [ 226.919343][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.001303][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.057580][ T29] usb 4-1: USB disconnect, device number 6 [ 227.078766][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 227.160874][ T5900] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 227.226994][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.231649][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 227.297614][ T5900] usb 1-1: config 0 descriptor?? [ 227.425084][ T9907] loop5: detected capacity change from 0 to 1024 [ 227.467478][ T9522] veth0_vlan: entered promiscuous mode [ 227.487687][ T9522] veth1_vlan: entered promiscuous mode [ 227.598394][ T9522] veth0_macvtap: entered promiscuous mode [ 227.649467][ T129] hfsplus: bad catalog file entry [ 227.656019][ T9522] veth1_macvtap: entered promiscuous mode [ 227.658375][ T129] hfsplus: b-tree write err: -5, ino 3 [ 227.690731][ T9911] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1514'. [ 227.763730][ T5900] hid_parser_main: 222 callbacks suppressed [ 227.763756][ T5900] nintendo 0003:057E:2019.000C: unknown main item tag 0x0 [ 227.790866][ T5900] nintendo 0003:057E:2019.000C: unknown main item tag 0x0 [ 227.798121][ T5900] nintendo 0003:057E:2019.000C: item fetching failed at offset 2/5 [ 227.806921][ T5900] nintendo 0003:057E:2019.000C: HID parse failed [ 227.812468][ T9522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.816056][ T5900] nintendo 0003:057E:2019.000C: probe - fail = -22 [ 227.834799][ T5900] nintendo 0003:057E:2019.000C: probe with driver nintendo failed with error -22 [ 227.893720][ T9522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.964927][ T5914] usb 1-1: USB disconnect, device number 8 [ 227.972631][ T129] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.983725][ T9919] loop3: detected capacity change from 0 to 1024 [ 228.018819][ T129] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.056474][ T129] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.085865][ T129] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.240700][ T12] hfsplus: b-tree write err: -5, ino 25 [ 228.284843][ T12] hfsplus: b-tree write err: -5, ino 4 [ 228.294463][ T12] hfsplus: b-tree write err: -5, ino 2 [ 228.326060][ T12] hfsplus: b-tree write err: -5, ino 17 [ 228.352811][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.398669][ T9929] loop5: detected capacity change from 0 to 128 [ 228.405190][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.458439][ T9929] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.562658][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.597599][ T9929] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.628089][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.835221][ T5824] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.021286][ T9945] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1529'. [ 229.040771][ T9925] set_capacity_and_notify: 1 callbacks suppressed [ 229.040792][ T9925] loop4: detected capacity change from 0 to 32768 [ 229.154352][ T9948] loop5: detected capacity change from 0 to 1024 [ 229.188051][ T9948] hfsplus: failed to load root directory [ 229.479795][ T9959] netlink: 64691 bytes leftover after parsing attributes in process `syz.7.1534'. [ 229.511664][ T9960] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 229.550899][ T9961] loop2: detected capacity change from 0 to 136 [ 229.690515][ T9961] rock: directory entry would overflow storage [ 229.726907][ T9961] rock: sig=0x4f50, size=4, remaining=3 [ 229.732586][ T9961] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 229.897995][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 229.908482][ T9967] loop5: detected capacity change from 0 to 64 [ 229.931248][ T9963] bridge_slave_0: left allmulticast mode [ 229.943910][ T9963] bridge_slave_0: left promiscuous mode [ 229.970725][ T9963] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.993297][ T9967] hfs: request for non-existent node 65538 in B*Tree [ 230.026512][ T9967] hfs: request for non-existent node 65538 in B*Tree [ 230.065265][ T9967] hfs: fail to find leaf node: node ID 65538 [ 230.439632][ T9979] ÿÿÿÿÿÿ: renamed from vlan0 (while UP) [ 230.491133][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'. [ 230.517544][ T9949] loop3: detected capacity change from 0 to 32768 [ 230.646947][ T9949] JBD2: Ignoring recovery information on journal [ 230.824016][ T9949] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 230.867797][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 231.037923][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 231.072103][ T29] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 231.076779][ T5953] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 231.101966][ T29] usb 5-1: config 0 has no interface number 0 [ 231.131258][ T29] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 231.166727][ T29] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 231.199965][ T29] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 231.222713][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.267267][ T5822] net_ratelimit: 2047 callbacks suppressed [ 231.267290][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.282729][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 231.282906][ T29] usb 5-1: Product: syz [ 231.297697][ T29] usb 5-1: Manufacturer: syz [ 231.298789][ T5953] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.302306][ T29] usb 5-1: SerialNumber: syz [ 231.313620][ T29] usb 5-1: config 0 descriptor?? [ 231.328388][ T5823] ocfs2: Unmounting device (7,3) on (node local) [ 231.358080][ T5953] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.376525][ T9990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.384224][ T5953] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.394650][ T9990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.448935][ T5953] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.500986][ T5953] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.550235][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.636486][ T9990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.643790][T10011] program syz.5.1554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.667829][ T9990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.798789][ T5953] usb 3-1: GET_CAPABILITIES returned 0 [ 231.804338][ T5953] usbtmc 3-1:16.0: can't read capabilities [ 232.008477][ T5953] usb 3-1: USB disconnect, device number 6 [ 232.065559][ T9993] loop0: detected capacity change from 0 to 32768 [ 232.192237][ T9993] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 232.302692][ T29] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 232.313362][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.322018][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.424205][ T9993] XFS (loop0): Ending clean mount [ 232.478720][ T29] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 232.534270][ T29] asix 5-1:0.251: probe with driver asix failed with error -71 [ 232.553143][T10041] loop3: detected capacity change from 0 to 512 [ 232.591600][T10007] loop7: detected capacity change from 0 to 32768 [ 232.608375][ T29] usb 5-1: USB disconnect, device number 8 [ 232.655729][T10041] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1559: invalid indirect mapped block 256 (level 2) [ 232.680291][ T5819] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 232.732293][T10041] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 232.736734][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 232.752358][ C1] EXT4-fs (loop3): initial error at time 1772897087: ext4_free_branches:1023: inode 11 [ 232.762081][ C1] EXT4-fs (loop3): last error at time 1772897087: ext4_free_branches:1023: inode 11 [ 232.793321][T10041] EXT4-fs (loop3): 2 truncates cleaned up [ 232.800510][ T31] audit: type=1800 audit(1772897087.746:87): pid=10007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1552" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 232.838936][T10041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.936271][ T31] audit: type=1800 audit(1772897087.876:88): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1559" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 233.124274][T10056] loop4: detected capacity change from 0 to 128 [ 233.302138][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.315828][T10058] loop0: detected capacity change from 0 to 2048 [ 233.347031][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.464775][T10058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.749595][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.106444][T10076] loop4: detected capacity change from 0 to 4096 [ 234.148228][T10076] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 234.192609][T10076] ntfs3(loop4): ino=3, mi_enum_attr [ 234.284027][T10076] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 234.388207][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.717746][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 235.171465][T10079] loop3: detected capacity change from 0 to 32768 [ 235.200197][T10079] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1572 (10079) [ 235.256296][T10115] loop4: detected capacity change from 0 to 1024 [ 235.270336][T10079] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 235.307467][T10079] BTRFS info (device loop3): using blake2b checksum algorithm [ 235.317757][T10115] ext3: Bad value for 'resgid' [ 235.336781][T10115] ext3: Bad value for 'resgid' [ 235.348449][ T3404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.455903][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.565057][T10079] BTRFS info (device loop3): enabling ssd optimizations [ 235.596738][T10079] BTRFS info (device loop3): turning on async discard [ 235.603558][T10079] BTRFS info (device loop3): enabling free space tree [ 236.436285][ T3404] kernel read not supported for file /binder/state (pid: 3404 comm: kworker/0:2) [ 236.662150][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.801610][T10140] loop7: detected capacity change from 0 to 131072 [ 236.817611][T10140] F2FS-fs (loop7): Test dummy encryption mode enabled [ 236.896634][T10140] F2FS-fs (loop7): invalid crc value [ 236.904225][T10157] loop4: detected capacity change from 0 to 4096 [ 236.998808][T10140] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 237.010217][ T5823] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 237.025544][T10140] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 237.129647][T10172] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.679041][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.390469][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.506625][T10206] Bluetooth: MGMT ver 1.23 [ 238.708575][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.871556][T10208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.921527][T10208] bond0: (slave bond1): Enslaving as an active interface with an up link [ 239.030617][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.376874][T10233] loop5: detected capacity change from 0 to 512 [ 239.384210][T10233] EXT4-fs: Ignoring removed nobh option [ 239.459313][T10233] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 239.549614][T10233] EXT4-fs (loop5): 1 truncate cleaned up [ 239.585204][T10233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.669102][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.753550][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.990927][T10233] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 240.138968][T10253] loop2: detected capacity change from 0 to 64 [ 240.151127][T10251] loop7: detected capacity change from 0 to 256 [ 240.180770][T10233] EXT4-fs (loop5): Remounting filesystem read-only [ 240.190901][T10247] loop0: detected capacity change from 0 to 40427 [ 240.200652][T10247] F2FS-fs: inline encryption not supported [ 240.208852][T10247] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 240.219362][T10233] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -30) [ 240.228861][T10247] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 240.239361][T10247] F2FS-fs (loop0): invalid crc value [ 240.384476][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.794157][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.230094][T10279] loop5: detected capacity change from 0 to 512 [ 241.238343][T10237] loop4: detected capacity change from 0 to 32768 [ 241.289294][T10279] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 241.349327][T10279] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1638: bad orphan inode 131083 [ 241.359458][T10237] JBD2: Ignoring recovery information on journal [ 241.360105][T10279] loop5: lost filesystem error report for type 5 error -117 [ 241.366710][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 241.380647][ C1] EXT4-fs (loop5): initial error at time 1772897096: ext4_orphan_get:1417 [ 241.389209][ C1] EXT4-fs (loop5): last error at time 1772897096: ext4_orphan_get:1417 [ 241.394117][T10279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.431028][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.608101][T10237] (syz.4.1623,10237,0):ocfs2_clear_journal_error:1137 ERROR: File system error 33023 recorded in journal 0. [ 241.683358][T10237] (syz.4.1623,10237,0):ocfs2_clear_journal_error:1139 ERROR: File system on device loop4 needs checking. [ 241.763782][T10237] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 241.870363][ T50] (kworker/u8:3,50,0):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0 [ 241.901036][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.929220][T10237] (syz.4.1623,10237,0):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=0, inode=397313, rec_len=0, name_len=1 [ 242.089548][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.195231][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.219117][ T5820] ocfs2: Unmounting device (7,4) on (node local) [ 242.415382][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.765562][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.793491][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 242.840076][T10314] Set syz1 is full, maxelem 768 reached [ 242.879588][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.893586][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.907607][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.945214][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.956628][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.990818][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 243.001610][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.099354][ T29] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 243.131713][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.197173][ T29] usb 6-1: config 0 descriptor?? [ 243.252008][ T29] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 243.397412][ T5914] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 243.603612][ T5914] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 243.628253][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.665230][ T37] bridge_slave_1: left allmulticast mode [ 243.672031][ T5914] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 243.704146][ T5914] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 243.712279][ T37] bridge_slave_1: left promiscuous mode [ 243.712551][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.796442][ T5914] usb 1-1: Manufacturer: syz [ 243.810809][ T5914] usb 1-1: config 0 descriptor?? [ 243.825861][ T37] bridge_slave_0: left allmulticast mode [ 243.877618][ T37] bridge_slave_0: left promiscuous mode [ 243.883427][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.893030][T10351] [ 243.895778][T10351] ============================= [ 243.900878][T10351] WARNING: suspicious RCU usage [ 243.906871][T10351] syzkaller #0 Tainted: G L [ 243.913900][T10351] ----------------------------- [ 243.918906][T10351] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 243.927571][T10351] [ 243.927571][T10351] other info that might help us debug this: [ 243.927571][T10351] [ 243.938005][T10351] [ 243.938005][T10351] rcu_scheduler_active = 2, debug_locks = 1 [ 243.946133][T10351] 1 lock held by syz.3.1660/10351: [ 243.951835][T10351] #0: ffffffff8e7604d8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 243.963473][T10351] [ 243.963473][T10351] stack backtrace: [ 243.969843][T10351] CPU: 0 UID: 0 PID: 10351 Comm: syz.3.1660 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.969881][T10351] Tainted: [L]=SOFTLOCKUP [ 243.969891][T10351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.969908][T10351] Call Trace: [ 243.969917][T10351] [ 243.969928][T10351] dump_stack_lvl+0xe8/0x150 [ 243.969971][T10351] lockdep_rcu_suspicious+0x13f/0x1d0 [ 243.970016][T10351] get_callchain_entry+0x2b6/0x3c0 [ 243.970064][T10351] get_perf_callchain+0xd5/0x880 [ 243.970114][T10351] ? __pfx_get_perf_callchain+0x10/0x10 [ 243.970163][T10351] ? futex_unqueue+0x22/0x240 [ 243.970205][T10351] ? futex_unqueue+0x22/0x240 [ 243.970233][T10351] ? futex_unqueue+0x22/0x240 [ 243.970264][T10351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.970301][T10351] __bpf_get_stack+0x445/0xab0 [ 243.970355][T10351] ? __pfx___bpf_get_stack+0x10/0x10 [ 243.970410][T10351] bpf_get_stack+0x33/0x50 [ 243.970448][T10351] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 243.970474][T10351] bpf_get_stack_raw_tp+0x1a9/0x220 [ 243.970519][T10351] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 243.970546][T10351] bpf_prog_run_pin_on_cpu+0x3b4/0x470 [ 243.970593][T10351] bpf_prog_test_run_syscall+0x318/0x4c0 [ 243.970636][T10351] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 243.970674][T10351] ? __fget_files+0x2a/0x420 [ 243.970720][T10351] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 243.970761][T10351] bpf_prog_test_run+0x2c7/0x340 [ 243.970792][T10351] __sys_bpf+0x643/0x950 [ 243.970836][T10351] ? __pfx___sys_bpf+0x10/0x10 [ 243.970900][T10351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.970932][T10351] ? rcu_is_watching+0x15/0xb0 [ 243.970981][T10351] __x64_sys_bpf+0x7c/0x90 [ 243.971019][T10351] do_syscall_64+0x14d/0xf80 [ 243.971044][T10351] ? trace_irq_disable+0x3b/0x150 [ 243.971084][T10351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.971117][T10351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.971143][T10351] RIP: 0033:0x7f77f7d9c799 [ 243.971167][T10351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.971196][T10351] RSP: 002b:00007f77f8d22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.971223][T10351] RAX: ffffffffffffffda RBX: 00007f77f8015fa0 RCX: 00007f77f7d9c799 [ 243.971242][T10351] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 243.971259][T10351] RBP: 00007f77f7e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 243.971276][T10351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.971292][T10351] R13: 00007f77f8016038 R14: 00007f77f8015fa0 R15: 00007ffffc19e4d8 [ 243.971332][T10351] [ 244.315553][ T29] gspca_vc032x: reg_w err -71 [ 244.321698][ T5914] rc_core: IR keymap rc-hauppauge not found [ 244.346799][ T29] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 244.397149][ T5914] Registered IR keymap rc-empty [ 244.459206][ T5914] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 244.504214][ T29] usb 6-1: USB disconnect, device number 9 [ 244.554177][ T5914] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 244.733906][ T5914] usb 1-1: USB disconnect, device number 9 [ 245.033799][ T5826] Bluetooth: hci5: command tx timeout [ 245.186990][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.212530][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.231784][ T37] bond0 (unregistering): Released all slaves [ 245.247828][ T37] bond1 (unregistering): Released all slaves [ 246.013519][ T37] hsr_slave_0: left promiscuous mode [ 246.020243][ T37] hsr_slave_1: left promiscuous mode [ 246.029152][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.036607][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.045193][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.061250][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.071566][ T37] batman_adv: batadv0: Interface deactivated: macsec2 [ 246.080278][ T37] batman_adv: batadv0: Removing interface: macsec2 [ 246.119608][ T37] batadv_slave_0: left promiscuous mode [ 246.125261][ T37] veth1_macvtap: left promiscuous mode [ 246.141494][ T37] veth0_macvtap: left promiscuous mode [ 246.160641][ T37] veth1_vlan: left promiscuous mode [ 246.165946][ T37] veth0_vlan: left promiscuous mode [ 246.603601][ T37] team0 (unregistering): Port device team_slave_1 removed [ 246.633654][ T37] team0 (unregistering): Port device team_slave_0 removed [ 247.301442][ T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.372805][ T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.482629][ T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.568745][ T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.773088][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.863001][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.939743][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.029610][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.272328][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.355260][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.444868][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.526235][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.729766][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.851491][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.932268][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.035432][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.655243][ T37] bridge_slave_1: left allmulticast mode [ 249.664676][ T37] bridge_slave_1: left promiscuous mode [ 249.671417][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.682464][ T37] bridge_slave_0: left allmulticast mode [ 249.689613][ T37] bridge_slave_0: left promiscuous mode [ 249.695407][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.708329][ T37] bridge_slave_1: left allmulticast mode [ 249.714000][ T37] bridge_slave_1: left promiscuous mode [ 249.720658][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.740253][ T37] bridge_slave_1: left allmulticast mode [ 249.746013][ T37] bridge_slave_1: left promiscuous mode [ 249.752617][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.762442][ T37] bridge_slave_0: left allmulticast mode [ 249.768572][ T37] bridge_slave_0: left promiscuous mode [ 249.774271][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.789334][ T37] bridge_slave_1: left allmulticast mode [ 249.795024][ T37] bridge_slave_1: left promiscuous mode [ 249.801189][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.810967][ T37] bridge_slave_0: left allmulticast mode [ 249.816600][ T37] bridge_slave_0: left promiscuous mode [ 249.822992][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.834335][ T37] bridge_slave_1: left allmulticast mode [ 249.840507][ T37] bridge_slave_1: left promiscuous mode [ 249.847135][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.856059][ T37] bridge_slave_0: left allmulticast mode [ 249.862186][ T37] bridge_slave_0: left promiscuous mode [ 249.869863][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.123168][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.134233][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.145429][ T37] bond0 (unregistering): Released all slaves [ 250.316192][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.327685][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.338074][ T37] bond0 (unregistering): Released all slaves [ 250.498820][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.509694][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.521033][ T37] bond0 (unregistering): Released all slaves [ 250.679541][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.692435][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.704194][ T37] bond0 (unregistering): (slave bond1): Releasing backup interface [ 250.713012][ T37] bond0 (unregistering): Released all slaves [ 250.724453][ T37] bond1 (unregistering): Released all slaves [ 250.888324][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.898486][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.908243][ T37] bond0 (unregistering): Released all slaves [ 252.165367][ T37] hsr_slave_0: left promiscuous mode [ 252.175607][ T37] hsr_slave_1: left promiscuous mode [ 252.183563][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.191701][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.200068][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.207754][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.219588][ T37] hsr_slave_0: left promiscuous mode [ 252.226086][ T37] hsr_slave_1: left promiscuous mode [ 252.232721][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.240298][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.249789][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.257420][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.269806][ T37] hsr_slave_0: left promiscuous mode [ 252.275697][ T37] hsr_slave_1: left promiscuous mode [ 252.281986][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.289725][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.297835][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.305228][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.319791][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.327212][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.335142][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.342679][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.354306][ T37] hsr_slave_0: left promiscuous mode [ 252.360500][ T37] hsr_slave_1: left promiscuous mode [ 252.366481][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.376552][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.406156][ T37] veth1_macvtap: left promiscuous mode [ 252.411728][ T37] veth0_macvtap: left promiscuous mode [ 252.417332][ T37] veth1_vlan: left promiscuous mode [ 252.422711][ T37] veth0_vlan: left promiscuous mode [ 252.429440][ T37] veth1_macvtap: left promiscuous mode [ 252.435118][ T37] veth0_macvtap: left promiscuous mode [ 252.440751][ T37] veth1_vlan: left promiscuous mode [ 252.446025][ T37] veth0_vlan: left promiscuous mode [ 252.453778][ T37] veth1_macvtap: left promiscuous mode [ 252.459372][ T37] veth0_macvtap: left promiscuous mode [ 252.464924][ T37] veth1_vlan: left promiscuous mode [ 252.471067][ T37] veth0_vlan: left promiscuous mode [ 252.479197][ T37] hsr0: left allmulticast mode [ 252.484014][ T37] veth1_macvtap: left promiscuous mode [ 252.490472][ T37] veth0_macvtap: left promiscuous mode [ 252.496048][ T37] veth1_vlan: left promiscuous mode [ 252.501457][ T37] veth0_vlan: left promiscuous mode [ 252.956942][ T37] team0 (unregistering): Port device team_slave_1 removed [ 252.978099][ T37] team0 (unregistering): Port device team_slave_0 removed [ 253.267210][ T37] team0 (unregistering): Port device team_slave_1 removed [ 253.283982][ T37] team0 (unregistering): Port device team_slave_0 removed [ 253.571553][ T37] team0 (unregistering): Port device team_slave_1 removed [ 253.592020][ T37] team0 (unregistering): Port device team_slave_0 removed