last executing test programs: 24.917418614s ago: executing program 2 (id=198): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="22003300d0000000399d11000001080211000000505050505050000004040000000000000600cd"], 0x48}}, 0x0) 9.448452775s ago: executing program 2 (id=200): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000001080)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x1, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 8.857412732s ago: executing program 2 (id=246): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f041}) 8.511247221s ago: executing program 2 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 8.233140002s ago: executing program 2 (id=252): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='ext4_allocate_blocks\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[], 0xffe6) 7.782014156s ago: executing program 0 (id=254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8014) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x300) 7.672303309s ago: executing program 2 (id=255): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000400)={0x40, 0x14, 0x3, "15bf9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.868391434s ago: executing program 4 (id=260): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@journal_async_commit}, {@localflocks}, {@intr}, {@dir_resv_level}]}, 0x9, 0x442b, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzsLOwIaVsGDr53NgmOf38p159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4n2zb/6H965/2dOI6Oehr75/s6vmL7944E8L3sz8+WV9fXw9V3SERhWZDTb//9uu9meZjQxzSqu2GjvoghHByy7iqukII739X/xTnkrTR5NgbQjiWfMIb9z67mduj0Tx8XDybfzp1f2349OTqg7XWnz0K4avS/167Pf/zi13DP72yR90DAAAAAAAAAAAAAAAAAPCMG7929fo7g0PhURS6V6Ot7+uOJ8dW78eu75kXOv9hAQAAAAAAAAAAAAAAAAAA4G9q8/3/XHRim/f/x5LjSIv66291fox0zsTbV8cuDA4l+79HW/JfT5J+OdcV+rfZ9z27//u5TP3t93/f2s9uNcbX6LcvRPFA6jyOBwZC+CbZ+P1UdCQulZcqr94qLy/M7tkwnlnp+Nd3709FJ9nQv934j2ba7/z+///dcjVVz2/u3SX2XEvHv6tluW8/jdqK//lMvf2IP7uXjn93La23ucBIfQKoxv/z7p3jP5Zpv1PxPx5CyEXVseZSM0B1DVNNb7VeIS0d/0O1tNTUmfwhW93/v2fifyHT/kHN/yvZLyK2lY7/v2ppPakSm/d/f7zz/X8x0/5BxL86/hXf/21Jx/9wPbE7VaT2l2x3/h/PtN+p+F+Pk3Eej1JXwGpUT2/1/+pIS8e/Z0v+5vNf3Nb671Km/n49/zX6bTz/Nab/l6P68x/bS8e/t2W5du//iUy9Ts//I7X1H7uVjv+RWlp67dxX+9lu/Ccz7Xcq/rVVSU8j/pvzyR+H6+lfW/+1JR3/f9cT4+YSK7WftfVftPP6/3Km/YNY/1XHvxJ3ttfnRXP8u8LRluWq8f+hje//K5l6nY9/CIPW+ruWvv+PtSxXu/97do7/VKZep+P/UicbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgGjCbHvhDFA6nzOB4YCOF8cn4qHImmC7P56VJ55qOlEMaS9Fw4Ed0ulacLpfzcQnm2mC+USuWZEC4k+SdDT7RUKlfy84W7Fzfa6o3uFAuLlelioRJCGE/S/x+ONdqanqvMF+6GEC5t5P0nLi/evVNYyM/OLb45ODg4GCY2xtAfFT+pFBcq9d7ruSFMbtTti5oGV8u+vDGWo9GH5eXFhUKpln6lqU6pPFMoNdWZSvK+CP1RZXF5YaZQKeZL5duN/g7SSHIcm7j23rUrQ1vyb0b14+j+DgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv+jR8BtfhhC662dxCGGk8Uu0XfmHj4tn80+n7q8Nn55cfbD2pFU5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwi4dozQQRGEAfjMWaucxrJbdznZFES1cETyBHsPD6FG8hHdIkSJtihBIZiFsdmGbpPq+5sH8zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJjn6b37eKubiBRXm8uIv6//xWH+UurP/fj9izPMyOk8v3YPj3VT/j0d5XflaNnmXbpefX/GSO39DvZkuE97fZ/rybmm9m1qvr7vTaRcRURb8tuUc1XNewsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W0fRtwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA//+Elx0W") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x4020940d, &(0x7f0000000440)={0x4}) sendfile(r1, r1, 0x0, 0x7a680000) 6.004209022s ago: executing program 4 (id=264): timer_create(0x1, &(0x7f0000000340)={0x0, 0x5, 0x5, @thr={0x0, &(0x7f0000000240)="edadb0a71ec9960e62d5cccb97110e9a86"}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xa007}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080000000200088b2f01000046"], 0xfdef) 5.772552588s ago: executing program 0 (id=267): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x20000, 0x0, 0x0, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000380)=0x1) 5.651962497s ago: executing program 0 (id=268): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) r1 = syz_io_uring_setup(0x76, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$cgroup_pressure(r4, &(0x7f00000001c0)={'some'}, 0x4cdad095) 5.499281665s ago: executing program 0 (id=269): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000040)=""/180, 0xb4, 0x0, 0x0, 0x0) 5.272328547s ago: executing program 0 (id=270): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000980)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,nodiscard,iocharset=macturkish,errors=continue,iocharset=iso8859-6,nointegrity\x00gid=', @ANYRESHEX=0x0, @ANYBLOB=',quota,usrquota,resize,gid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x60fd, &(0x7f000000c4c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x47) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc4}}) 4.402245273s ago: executing program 4 (id=271): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070900be008300"], 0x0}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[], 0x1, 0x1cf, &(0x7f0000000780)="$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") chdir(0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 4.356694003s ago: executing program 3 (id=273): chdir(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) 4.076116524s ago: executing program 3 (id=274): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002a40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002c40)={0x2020, 0x0, 0x0}, 0x2020) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x2) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x28, 0xfff}}, 0x50) 3.872448903s ago: executing program 0 (id=275): mremap(&(0x7f00000e9000/0x400000)=nil, 0x400000, 0x1000, 0x0, &(0x7f00003b1000/0x1000)=nil) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000009640)='./file1\x00', 0x90, &(0x7f0000000cc0), 0x4, 0x960f, &(0x7f0000012cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) copy_file_range(r2, &(0x7f00000001c0), r1, 0x0, 0x10000, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0xfffffdef) 3.685596201s ago: executing program 3 (id=277): r0 = syz_io_uring_setup(0x520b, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.56840518s ago: executing program 3 (id=278): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000540)={[{@barrier={'barrier', 0x3d, 0x1}}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@atime_quantum={'atime_quantum', 0x3d, 0x5}}, {@coherency_full}]}, 0x3, 0x442a, &(0x7f0000008940)="$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") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) 2.513673613s ago: executing program 3 (id=279): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000001c0), 0xc) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4243a, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.227698993s ago: executing program 1 (id=280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x20002, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 2.171083646s ago: executing program 4 (id=281): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x132, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) ptrace$setopts(0x4206, r1, 0x0, 0x0) 2.008571824s ago: executing program 1 (id=282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snddsp(r3, &(0x7f0000000740)=""/56, 0x38) 1.963124084s ago: executing program 4 (id=283): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r1, 0x0, 0x0, 0x9000f4) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, 0x0) r2 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fallocate(r2, 0x11, 0x0, 0x3fffe) 1.816381676s ago: executing program 1 (id=284): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r1, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1bfc) 1.180567133s ago: executing program 1 (id=285): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x2000000) close(r1) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 633.458972ms ago: executing program 3 (id=286): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 335.792366ms ago: executing program 1 (id=287): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x5) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000700)='9', 0x1}]) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x3) 38.261497ms ago: executing program 4 (id=288): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 0s ago: executing program 1 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007340)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="00000000e42775"], 0x50}}], 0x1, 0x4010) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000500)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x6}, 0x8}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.256810][ T29] audit: type=1326 audit(1728945246.225:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.1.2" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d5b57dff9 code=0x0 [ 58.448010][ T5324] loop2: detected capacity change from 0 to 32768 [ 58.495901][ T5324] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8 (5324) [ 58.568725][ T5324] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 58.599313][ T5324] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 58.657793][ T5324] BTRFS info (device loop2): disk space caching is enabled [ 58.685885][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.698985][ T5324] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 58.875441][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 58.893502][ T8] usb 1-1: config 0 has no interfaces? [ 58.916324][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.945743][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.966601][ T8] usb 1-1: config 0 descriptor?? [ 59.212853][ T5307] usb 1-1: USB disconnect, device number 2 [ 59.525178][ T5242] Bluetooth: hci0: command tx timeout [ 59.698535][ T5366] loop3: detected capacity change from 0 to 256 [ 59.811289][ T5324] BTRFS info (device loop2): rebuilding free space tree [ 59.825450][ T5242] Bluetooth: hci1: command tx timeout [ 59.830919][ T5242] Bluetooth: hci2: command tx timeout [ 59.832809][ T5239] Bluetooth: hci3: command tx timeout [ 59.857356][ T5373] netlink: 'syz.4.16': attribute type 4 has an invalid length. [ 59.906980][ T4629] Bluetooth: hci4: command tx timeout [ 59.920170][ T5373] netlink: 'syz.4.16': attribute type 17 has an invalid length. [ 60.031902][ T5324] BTRFS info (device loop2): disabling free space tree [ 60.041348][ T5324] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 60.054192][ T5324] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 60.451980][ T5391] netlink: 48 bytes leftover after parsing attributes in process `syz.0.23'. [ 60.493915][ T5237] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 61.214302][ T5386] loop4: detected capacity change from 0 to 32768 [ 61.228254][ T5386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.21 (5386) [ 61.301908][ T5386] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 61.313982][ T5386] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 61.328840][ T5386] BTRFS info (device loop4): using free-space-tree [ 61.484301][ T5429] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.536590][ T5386] fs-verity: sha512 using implementation "sha512-avx2" [ 61.559573][ T5386] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 61.830972][ T5243] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 62.109905][ T5447] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 222 [ 62.500763][ T5450] loop0: detected capacity change from 0 to 4096 [ 62.800527][ T5450] ntfs3(loop0): failed to convert "0000" to iso8859-6 [ 62.833916][ T5450] ntfs3(loop0): failed to convert "0030" to iso8859-6 [ 62.861878][ T5450] ntfs3(loop0): failed to convert name for inode 1e. [ 62.882187][ T5450] ntfs3(loop0): failed to convert "0032" to iso8859-6 [ 62.903065][ T5450] ntfs3(loop0): failed to convert "0033" to iso8859-6 [ 63.174893][ T5462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 63.211262][ T5446] loop2: detected capacity change from 0 to 32768 [ 63.225313][ T5446] ======================================================= [ 63.225313][ T5446] WARNING: The mand mount option has been deprecated and [ 63.225313][ T5446] and is ignored by this kernel. Remove the mand [ 63.225313][ T5446] option from the mount to silence this warning. [ 63.225313][ T5446] ======================================================= [ 63.290893][ T5465] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.42'. [ 63.409647][ T5446] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 63.467354][ T5455] loop1: detected capacity change from 0 to 32768 [ 63.487246][ T5446] XFS (loop2): Ending clean mount [ 63.505602][ T5457] loop4: detected capacity change from 0 to 32768 [ 63.515662][ T5457] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.40 (5457) [ 63.519900][ T5283] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x20 [ 63.540013][ T5283] XFS (loop2): Unmount and run xfs_repair [ 63.545857][ T5283] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 63.553246][ T5283] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 63.562395][ T5283] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 63.569713][ T5457] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 63.571928][ T5283] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 63.582472][ T5457] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 63.590943][ T5283] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 63.605079][ T5457] BTRFS info (device loop4): using free-space-tree [ 63.608580][ T5283] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 63.615336][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.623831][ T5283] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 63.640440][ T5283] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 63.649334][ T5283] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 63.661963][ T5446] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x20 len 8 error 74 [ 63.675401][ T5446] XFS (loop2): Failed to initialize disk quotas. [ 63.692730][ T5455] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 63.715633][ T5455] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 63.750098][ T5455] XFS (loop1): Ending clean mount [ 63.767331][ T5455] XFS (loop1): Quotacheck needed: Please wait. [ 63.825318][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 63.839468][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 63.851462][ T9] usb 4-1: config 179 has no interface number 0 [ 63.858419][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 63.871840][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 63.915362][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 63.929431][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 63.943807][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 63.963516][ T5455] XFS (loop1): Quotacheck: Done. [ 63.999677][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 64.070663][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.133965][ T5471] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 64.195392][ T5237] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 64.209696][ T5237] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 64.341105][ T5457] BTRFS warning (device loop4): failed to trim 2 block group(s), last error -512 [ 64.478679][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 64.619648][ T5249] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 64.645216][ T5243] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 64.856126][ T5504] loop0: detected capacity change from 0 to 32768 [ 64.877076][ T8] usb 4-1: USB disconnect, device number 2 [ 64.883000][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 64.883076][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 64.909604][ T5504] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.47 (5504) [ 64.980207][ T5504] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.004984][ T5504] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 65.018995][ T5504] BTRFS info (device loop0): using free-space-tree [ 65.283237][ T5529] loop1: detected capacity change from 0 to 512 [ 65.296035][ T5529] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.377756][ T5529] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 65.396854][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.424438][ T5504] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 65.439181][ T5529] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.48: invalid indirect mapped block 1 (level 1) [ 65.440610][ T29] audit: type=1804 audit(1728945253.385:3): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.47" name="/newroot/12/file0/bus" dev="loop0" ino=264 res=1 errno=0 [ 65.456640][ T5529] EXT4-fs (loop1): 1 truncate cleaned up [ 65.506002][ T5529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.681824][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 65.760284][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.762325][ T5233] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.771309][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.771364][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 65.771387][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.823283][ T9] usb 3-1: config 0 descriptor?? [ 65.881097][ T5249] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.330282][ T9] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 66.466482][ T9] ft260 0003:0403:6030.0001: chip code: 5e81 abf2 [ 66.583212][ T5538] loop4: detected capacity change from 0 to 32768 [ 66.592577][ T5538] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.53 (5538) [ 66.652965][ T5554] loop3: detected capacity change from 0 to 512 [ 66.662019][ T9] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 66.676643][ T5554] EXT4-fs: Ignoring removed bh option [ 66.721326][ T5553] kvm: emulating exchange as write [ 66.746917][ T5554] EXT4-fs (loop3): invalid first ino: 10 [ 66.755848][ T5538] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.793606][ T5554] loop3: detected capacity change from 0 to 512 [ 66.801257][ T5538] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 66.824339][ T5538] BTRFS info (device loop4): using free-space-tree [ 66.874305][ T9] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 66.883166][ T5554] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 66.922518][ T9] ft260 0003:0403:6030.0001: failed to retrieve status: -32 [ 66.969116][ T5563] loop1: detected capacity change from 0 to 8 [ 67.228426][ T9] usb 3-1: USB disconnect, device number 2 [ 67.534482][ T5243] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.679133][ T5588] loop1: detected capacity change from 0 to 2048 [ 67.719267][ T5588] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.741648][ T5588] UDF-fs: error (device loop1): udf_read_inode: (ino 1376) failed !bh [ 67.788420][ T5588] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 68.159234][ T5600] syzkaller0: entered allmulticast mode [ 68.241752][ T5598] syzkaller0 (unregistering): left allmulticast mode [ 68.360053][ T5587] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.502930][ T5597] loop1: detected capacity change from 0 to 40427 [ 68.520181][ T5603] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.562121][ T5597] F2FS-fs (loop1): Found nat_bits in checkpoint [ 68.587794][ T5571] loop3: detected capacity change from 0 to 32768 [ 68.698206][ T5597] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 68.724384][ T5571] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 68.897095][ T5571] XFS (loop3): Ending clean mount [ 68.943429][ T5571] XFS (loop3): Quotacheck needed: Please wait. [ 69.057157][ T5249] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0 [ 69.078521][ T5571] XFS (loop3): Quotacheck: Done. [ 69.103576][ T5249] CPU: 0 UID: 0 PID: 5249 Comm: syz-executor Not tainted 6.12.0-rc3-next-20241014-syzkaller #0 [ 69.113997][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.124086][ T5249] Call Trace: [ 69.127419][ T5249] [ 69.130462][ T5249] dump_stack_lvl+0x241/0x360 [ 69.135207][ T5249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.140457][ T5249] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 69.146406][ T5249] ? validate_chain+0x11e/0x5920 [ 69.151541][ T5249] __f2fs_is_valid_blkaddr+0xd4d/0x1460 [ 69.157205][ T5249] f2fs_map_blocks+0xdd4/0x4f10 [ 69.162109][ T5249] ? mark_lock+0x9a/0x360 [ 69.166611][ T5249] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 69.171955][ T5249] ? xa_load+0x2dd/0x350 [ 69.176235][ T5249] ? __pfx_xa_load+0x10/0x10 [ 69.180850][ T5249] ? cgroup_rstat_updated+0x13b/0xc60 [ 69.186287][ T5249] ? folio_index+0xab/0x350 [ 69.190818][ T5249] f2fs_mpage_readpages+0xcae/0x2140 [ 69.196258][ T5249] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 69.201999][ T5249] ? __folio_batch_add_and_move+0x81a/0xf00 [ 69.207904][ T5249] ? __pfx_lock_release+0x10/0x10 [ 69.212982][ T5249] ? rcu_is_watching+0x15/0xb0 [ 69.217778][ T5249] ? f2fs_readahead+0x184/0x340 [ 69.222932][ T5249] read_pages+0x17e/0x840 [ 69.227364][ T5249] ? percpu_ref_put+0x19/0x180 [ 69.232140][ T5249] ? __pfx_read_pages+0x10/0x10 [ 69.236993][ T5249] ? filemap_add_folio+0x26d/0x650 [ 69.242162][ T5249] ? __pfx_filemap_add_folio+0x10/0x10 [ 69.247652][ T5249] page_cache_ra_unbounded+0x774/0x8a0 [ 69.253169][ T5249] f2fs_readdir+0x5b9/0xbf0 [ 69.257692][ T5249] ? __pfx___might_resched+0x10/0x10 [ 69.263112][ T5249] ? __pfx_f2fs_readdir+0x10/0x10 [ 69.268173][ T5249] ? trace_contention_end+0x3c/0x120 [ 69.273562][ T5249] ? iterate_dir+0x20c/0x800 [ 69.278155][ T5249] ? fdget_pos+0x254/0x320 [ 69.282617][ T5249] ? end_current_label_crit_section+0x151/0x180 [ 69.288906][ T5249] ? common_file_perm+0x1a6/0x210 [ 69.293956][ T5249] iterate_dir+0x571/0x800 [ 69.298417][ T5249] __se_sys_getdents64+0x1d3/0x4a0 [ 69.303646][ T5249] ? __pfx___se_sys_getdents64+0x10/0x10 [ 69.309395][ T5249] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.315391][ T5249] ? __pfx_filldir64+0x10/0x10 [ 69.320171][ T5249] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.326519][ T5249] ? exc_page_fault+0x590/0x8c0 [ 69.331374][ T5249] ? do_syscall_64+0xb6/0x230 [ 69.336050][ T5249] do_syscall_64+0xf3/0x230 [ 69.340577][ T5249] ? clear_bhb_loop+0x35/0x90 [ 69.345287][ T5249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.351202][ T5249] RIP: 0033:0x7f2d5b5b0193 [ 69.355644][ T5249] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 69.375347][ T5249] RSP: 002b:00007fff3d35a8a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 69.383764][ T5249] RAX: ffffffffffffffda RBX: 0000555586868600 RCX: 00007f2d5b5b0193 [ 69.391733][ T5249] RDX: 0000000000008000 RSI: 0000555586868600 RDI: 0000000000000005 [ 69.399717][ T5249] RBP: 00005555868685d4 R08: 0000000000000000 R09: 0000000000000000 [ 69.407691][ T5249] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 69.415672][ T5249] R13: 0000000000000010 R14: 00005555868685d0 R15: 00007fff3d35cb50 [ 69.423660][ T5249] [ 69.550166][ T29] audit: type=1804 audit(1728945257.495:4): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.63" name="/newroot/19/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 69.642910][ T5236] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 69.706172][ T5249] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0 [ 69.714413][ T5249] CPU: 1 UID: 0 PID: 5249 Comm: syz-executor Not tainted 6.12.0-rc3-next-20241014-syzkaller #0 [ 69.724776][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.734888][ T5249] Call Trace: [ 69.738187][ T5249] [ 69.741149][ T5249] dump_stack_lvl+0x241/0x360 [ 69.745894][ T5249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.751212][ T5249] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 69.757149][ T5249] ? __pfx_f2fs_lookup_read_extent_cache_block+0x10/0x10 [ 69.764296][ T5249] __f2fs_is_valid_blkaddr+0xd4d/0x1460 [ 69.769862][ T5249] f2fs_get_read_data_page+0x41a/0x8f0 [ 69.775338][ T5249] ? __pfx_f2fs_get_read_data_page+0x10/0x10 [ 69.781467][ T5249] ? f2fs_put_page+0x214/0x640 [ 69.786231][ T5249] f2fs_find_data_page+0x94/0x360 [ 69.791251][ T5249] f2fs_readdir+0x5ce/0xbf0 [ 69.795759][ T5249] ? __pfx___might_resched+0x10/0x10 [ 69.801081][ T5249] ? __pfx_f2fs_readdir+0x10/0x10 [ 69.806111][ T5249] ? trace_contention_end+0x3c/0x120 [ 69.811401][ T5249] ? iterate_dir+0x20c/0x800 [ 69.816009][ T5249] ? fdget_pos+0x254/0x320 [ 69.820430][ T5249] ? end_current_label_crit_section+0x151/0x180 [ 69.826717][ T5249] ? common_file_perm+0x1a6/0x210 [ 69.831751][ T5249] iterate_dir+0x571/0x800 [ 69.836171][ T5249] __se_sys_getdents64+0x1d3/0x4a0 [ 69.841384][ T5249] ? __pfx___se_sys_getdents64+0x10/0x10 [ 69.847099][ T5249] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.853084][ T5249] ? __pfx_filldir64+0x10/0x10 [ 69.857932][ T5249] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.864261][ T5249] ? exc_page_fault+0x590/0x8c0 [ 69.869117][ T5249] ? do_syscall_64+0xb6/0x230 [ 69.873826][ T5249] do_syscall_64+0xf3/0x230 [ 69.878391][ T5249] ? clear_bhb_loop+0x35/0x90 [ 69.883079][ T5249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.888976][ T5249] RIP: 0033:0x7f2d5b5b0193 [ 69.893389][ T5249] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 69.913087][ T5249] RSP: 002b:00007fff3d35a8a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 69.921520][ T5249] RAX: ffffffffffffffda RBX: 0000555586868600 RCX: 00007f2d5b5b0193 [ 69.929588][ T5249] RDX: 0000000000008000 RSI: 0000555586868600 RDI: 0000000000000005 [ 69.937564][ T5249] RBP: 00005555868685d4 R08: 0000000000000000 R09: 0000000000000000 [ 69.945533][ T5249] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 69.953507][ T5249] R13: 0000000000000010 R14: 00005555868685d0 R15: 00007fff3d35cb50 [ 69.961489][ T5249] [ 70.217904][ T5628] syz.0.74 (5628): drop_caches: 2 [ 70.287482][ T5647] warning: `syz.0.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.530037][ T62] kworker/u8:4: attempt to access beyond end of device [ 70.530037][ T62] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 70.600888][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 70.640582][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 70.672574][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 70.714157][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 70.821620][ T5654] loop3: detected capacity change from 0 to 4096 [ 71.218030][ T2885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.379537][ T2885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.398691][ T5669] loop3: detected capacity change from 0 to 2048 [ 71.430830][ T5669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.505935][ T2885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.643941][ T2885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.669293][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.680726][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.832936][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.844713][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.854095][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.863976][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.872426][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.896083][ T5236] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1357 (mode 100000) has inode size 549789401084 different from extent length 549789401088. Filesystem need not be standards compliant. [ 71.985652][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.179980][ T5676] loop2: detected capacity change from 0 to 4096 [ 72.255278][ T2885] bridge_slave_1: left allmulticast mode [ 72.288592][ T2885] bridge_slave_1: left promiscuous mode [ 72.370287][ T2885] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.411892][ T2885] bridge_slave_0: left allmulticast mode [ 72.422938][ T2885] bridge_slave_0: left promiscuous mode [ 72.480875][ T2885] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.575881][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.609532][ T5683] loop3: detected capacity change from 0 to 1764 [ 72.741567][ T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 72.754834][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.766172][ T8] usb 1-1: config 0 descriptor?? [ 72.802601][ T5687] loop2: detected capacity change from 0 to 1024 [ 72.955916][ T5687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.034261][ T8] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 73.043608][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 73.055822][ T5697] loop4: detected capacity change from 0 to 4096 [ 73.121060][ T5699] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.152715][ T8] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 73.194365][ T8] [drm] Initialized udl on minor 2 [ 73.195287][ T5687] loop2: detected capacity change from 1024 to 1001 [ 73.220455][ T5698] EXT4-fs error (device loop2): ext4_xattr_ibody_get:653: inode #15: comm syz.2.96: corrupted in-inode xattr: bad magic number in in-inode xattr [ 73.278654][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 73.315963][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 73.326346][ T5698] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.96: corrupted in-inode xattr: bad magic number in in-inode xattr [ 73.357733][ T5697] syz.4.99 (5697) used greatest stack depth: 18128 bytes left [ 73.419762][ T5237] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /15/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 73.482156][ T941] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 73.524985][ T8] usb 1-1: USB disconnect, device number 3 [ 73.533070][ T941] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 73.580340][ T5237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.735471][ T2885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.753620][ T2885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.774566][ T2885] bond0 (unregistering): Released all slaves [ 73.856785][ T941] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.016467][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.045749][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.057657][ T941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.070783][ T941] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.074720][ T4629] Bluetooth: hci4: command tx timeout [ 74.079886][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.108651][ T941] usb 5-1: config 0 descriptor?? [ 74.520547][ T5671] chnl_net:caif_netlink_parms(): no params data found [ 74.581930][ T941] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 74.687485][ T941] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 74.822864][ T2885] hsr_slave_0: left promiscuous mode [ 74.857998][ T2885] hsr_slave_1: left promiscuous mode [ 74.869351][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.885713][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.892733][ T5283] usb 5-1: USB disconnect, device number 2 [ 74.899186][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.908490][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.918629][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.926662][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.945631][ T2885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.953162][ T2885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.005356][ T2885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.012871][ T2885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.037467][ T2885] veth1_macvtap: left promiscuous mode [ 75.043747][ T2885] veth0_macvtap: left promiscuous mode [ 75.050342][ T2885] veth1_vlan: left promiscuous mode [ 75.056488][ T2885] veth0_vlan: left promiscuous mode [ 75.558865][ T5731] loop0: detected capacity change from 0 to 32768 [ 75.599796][ T5734] loop3: detected capacity change from 0 to 40427 [ 75.630493][ T5731] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.634160][ T5734] F2FS-fs (loop3): invalid crc value [ 75.674927][ T5734] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.769018][ T5731] XFS (loop0): Ending clean mount [ 75.779465][ T5731] XFS (loop0): Quotacheck needed: Please wait. [ 75.784132][ T5734] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 75.855858][ T5731] XFS (loop0): Quotacheck: Done. [ 76.089970][ T5236] syz-executor: attempt to access beyond end of device [ 76.089970][ T5236] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.117789][ T5236] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 76.118837][ T2885] team0 (unregistering): Port device team_slave_1 removed [ 76.147070][ T4629] Bluetooth: hci4: command tx timeout [ 76.175356][ T5233] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 76.277958][ T2885] team0 (unregistering): Port device team_slave_0 removed [ 76.827686][ T938] cfg80211: failed to load regulatory.db [ 76.854872][ T5280] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.018468][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 77.034914][ T4629] Bluetooth: hci2: command tx timeout [ 77.036168][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 77.069056][ T5280] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 77.089283][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.128954][ T5280] usb 1-1: config 0 descriptor?? [ 77.226707][ T5758] netlink: 'syz.4.113': attribute type 1 has an invalid length. [ 77.231662][ T5762] loop3: detected capacity change from 0 to 32768 [ 77.235874][ T5758] netlink: 76 bytes leftover after parsing attributes in process `syz.4.113'. [ 77.300524][ T5762] overlayfs: upper fs needs to support d_type. [ 77.309678][ T5762] overlayfs: upper fs does not support tmpfile. [ 77.320130][ T5762] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.377718][ T5758] Zero length message leads to an empty skb [ 77.388236][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.405186][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.422237][ T5671] bridge_slave_0: entered allmulticast mode [ 77.458211][ T5671] bridge_slave_0: entered promiscuous mode [ 77.492143][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.513353][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.523542][ T5671] bridge_slave_1: entered allmulticast mode [ 77.534928][ T5671] bridge_slave_1: entered promiscuous mode [ 77.552824][ T5760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.586643][ T5760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.639030][ T5762] jfs_strtoUCS: char2uni returned -22. [ 77.657865][ T5280] hid (null): nested delimiters [ 77.662914][ T5280] hid (null): nested delimiters [ 77.674234][ T5280] hid (null): nested delimiters [ 77.695459][ T5280] hid (null): unknown global tag 0x83 [ 77.700947][ T5280] hid (null): unknown global tag 0xc [ 77.706605][ T5762] charset = iso8859-6, char = 0xfc [ 77.749289][ T5671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.765182][ T5280] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 77.772642][ T5280] hid-generic 0003:0158:0100.0003: unexpected long global item [ 77.793993][ T5671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.813562][ T5280] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 77.884342][ T938] usb 1-1: USB disconnect, device number 4 [ 78.023338][ T5671] team0: Port device team_slave_0 added [ 78.060898][ T5671] team0: Port device team_slave_1 added [ 78.183884][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.199015][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.230902][ T5671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.236097][ T4629] Bluetooth: hci4: command tx timeout [ 78.277758][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.294941][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.322797][ T5671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.416058][ T5671] hsr_slave_0: entered promiscuous mode [ 78.422571][ T5671] hsr_slave_1: entered promiscuous mode [ 78.432373][ T5671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.441232][ T5671] Cannot create hsr debugfs directory [ 78.507192][ T5789] loop0: detected capacity change from 0 to 128 [ 78.519115][ T5789] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 78.710050][ T5778] loop4: detected capacity change from 0 to 32768 [ 78.768613][ T5778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.117 (5778) [ 78.809749][ T5735] chnl_net:caif_netlink_parms(): no params data found [ 78.830337][ T5778] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.862280][ T5778] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 78.914924][ T5778] BTRFS info (device loop4): using free-space-tree [ 78.959032][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.114853][ T4629] Bluetooth: hci2: command tx timeout [ 79.218625][ T5778] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 79.229024][ T29] audit: type=1800 audit(1728945267.185:5): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.117" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 79.257764][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.301474][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.311720][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.322855][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.332186][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.343695][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.352924][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.518869][ T5243] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 79.555063][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.624972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.634099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 79.745587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.754036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.762600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.951946][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.236693][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.249664][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.259028][ T5735] bridge_slave_0: entered allmulticast mode [ 80.282521][ T5735] bridge_slave_0: entered promiscuous mode [ 80.299436][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.307484][ T5239] Bluetooth: hci4: command tx timeout [ 80.313977][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.321821][ T5735] bridge_slave_1: entered allmulticast mode [ 80.329419][ T5735] bridge_slave_1: entered promiscuous mode [ 80.485268][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.576587][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.733982][ T5735] team0: Port device team_slave_0 added [ 80.778526][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.837606][ T5735] team0: Port device team_slave_1 added [ 80.888307][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.895482][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.922275][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.924944][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.012772][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.037663][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.045780][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.069231][ T5836] loop0: detected capacity change from 0 to 32768 [ 81.073405][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.116176][ T5836] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.123 (5836) [ 81.130823][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 81.145367][ T9] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 81.156616][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.173482][ T9] usb 5-1: Product: syz [ 81.178908][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.179822][ T5836] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 81.189649][ T5239] Bluetooth: hci2: command tx timeout [ 81.199745][ T9] usb 5-1: Manufacturer: syz [ 81.199770][ T9] usb 5-1: SerialNumber: syz [ 81.202089][ T5836] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 81.227294][ T9] usb 5-1: config 0 descriptor?? [ 81.254903][ T9] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 81.281225][ T5671] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.315007][ T5836] BTRFS info (device loop0): disk space caching is enabled [ 81.333009][ T5836] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 81.377958][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.406028][ T5671] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.416344][ T5671] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.428509][ T5239] Bluetooth: hci1: command tx timeout [ 81.451119][ T5735] hsr_slave_0: entered promiscuous mode [ 81.459089][ T5735] hsr_slave_1: entered promiscuous mode [ 81.472498][ T5735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.485487][ T5283] usb 5-1: USB disconnect, device number 3 [ 81.508737][ T5735] Cannot create hsr debugfs directory [ 81.519315][ T5836] BTRFS info (device loop0): rebuilding free space tree [ 81.536324][ T5836] BTRFS info (device loop0): disabling free space tree [ 81.543323][ T5836] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.572936][ T5836] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.574200][ T5671] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.624818][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 81.954295][ T5233] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 82.029787][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.064142][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.100782][ T5817] bridge_slave_0: entered allmulticast mode [ 82.117330][ T5817] bridge_slave_0: entered promiscuous mode [ 82.136852][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.143993][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.169388][ T5817] bridge_slave_1: entered allmulticast mode [ 82.193822][ T5817] bridge_slave_1: entered promiscuous mode [ 82.362627][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.389399][ T12] bridge_slave_1: left allmulticast mode [ 82.423028][ T12] bridge_slave_1: left promiscuous mode [ 82.438342][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.466991][ T12] bridge_slave_0: left allmulticast mode [ 82.472779][ T12] bridge_slave_0: left promiscuous mode [ 82.479126][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.491545][ T12] bridge_slave_1: left allmulticast mode [ 82.498961][ T12] bridge_slave_1: left promiscuous mode [ 82.501988][ T5880] loop0: detected capacity change from 0 to 2048 [ 82.506601][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.536841][ T12] bridge_slave_0: left allmulticast mode [ 82.542537][ T12] bridge_slave_0: left promiscuous mode [ 82.549852][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.577216][ T5881] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.685046][ T5880] loop0: detected capacity change from 2048 to 0 [ 82.721813][ T5880] syz.0.125: attempt to access beyond end of device [ 82.721813][ T5880] loop0: rw=0, sector=78, nr_sectors = 2 limit=0 [ 82.743913][ T5880] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=4) [ 82.754033][ T5880] NILFS (loop0): error -5 reading inode: ino=16 [ 82.790264][ T5233] syz-executor: attempt to access beyond end of device [ 82.790264][ T5233] loop0: rw=0, sector=72, nr_sectors = 2 limit=0 [ 82.828224][ T5233] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 83.079531][ T5883] evm: overlay not supported [ 83.250588][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'. [ 83.264826][ T5239] Bluetooth: hci2: command tx timeout [ 83.465276][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.483946][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.496193][ T12] bond0 (unregistering): Released all slaves [ 83.505408][ T5239] Bluetooth: hci1: command tx timeout [ 83.650659][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.662283][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.673581][ T12] bond0 (unregistering): Released all slaves [ 83.751993][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.950526][ T5817] team0: Port device team_slave_0 added [ 83.959839][ T5817] team0: Port device team_slave_1 added [ 83.978900][ T5671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.999307][ T5671] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.028047][ T5881] segctord: attempt to access beyond end of device [ 84.028047][ T5881] loop0: rw=2049, sector=106, nr_sectors = 22 limit=0 [ 84.059059][ T5881] segctord: attempt to access beyond end of device [ 84.059059][ T5881] loop0: rw=2049, sector=128, nr_sectors = 12 limit=0 [ 84.086731][ T5881] NILFS (loop0): I/O error writing log (start-blocknr=53, block-count=11) in segment 3 [ 84.097113][ T5881] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=6) in segment 4 [ 84.109706][ T5881] segctord: attempt to access beyond end of device [ 84.109706][ T5881] loop0: rw=2049, sector=128, nr_sectors = 32 limit=0 [ 84.123660][ T5881] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 84.132160][ T5892] loop4: detected capacity change from 0 to 32768 [ 84.135718][ T5881] segctord: attempt to access beyond end of device [ 84.135718][ T5881] loop0: rw=2049, sector=128, nr_sectors = 32 limit=0 [ 84.172543][ T5881] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 84.200202][ T5881] segctord: attempt to access beyond end of device [ 84.200202][ T5881] loop0: rw=2049, sector=128, nr_sectors = 32 limit=0 [ 84.214320][ T5881] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 84.227074][ T5881] segctord: attempt to access beyond end of device [ 84.227074][ T5881] loop0: rw=2049, sector=128, nr_sectors = 32 limit=0 [ 84.241618][ T5881] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 84.258555][ T5892] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 84.297114][ T5881] segctord: attempt to access beyond end of device [ 84.297114][ T5881] loop0: rw=2049, sector=128, nr_sectors = 32 limit=0 [ 84.314038][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.321290][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.349378][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.352347][ T5881] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 84.428270][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.436385][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.457019][ T5233] syz-executor: attempt to access beyond end of device [ 84.457019][ T5233] loop0: rw=2049, sector=128, nr_sectors = 32 limit=0 [ 84.464124][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.511975][ T5896] (syz.4.132,5896,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 84.517822][ T5233] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 84.557586][ T5233] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 84.583888][ T5233] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 84.613760][ T5892] syz.4.132 (5892) used greatest stack depth: 17760 bytes left [ 84.622457][ T5233] NILFS (loop0): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 84.644959][ T5233] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 84.660394][ T5817] hsr_slave_0: entered promiscuous mode [ 84.666242][ T5233] Buffer I/O error on dev loop0, logical block 1020, lost sync page write [ 84.675983][ T5817] hsr_slave_1: entered promiscuous mode [ 84.677701][ T5233] NILFS (loop0): unable to write superblock: err=-5 [ 84.688464][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.694744][ T5233] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 84.703545][ T5817] Cannot create hsr debugfs directory [ 84.707408][ T5233] NILFS (loop0): unable to write superblock: err=-5 [ 84.717923][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.725104][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.790440][ T5243] ocfs2: Unmounting device (7,4) on (node local) [ 84.822018][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.829294][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.376913][ T12] hsr_slave_0: left promiscuous mode [ 85.404257][ T12] hsr_slave_1: left promiscuous mode [ 85.411438][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.425803][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.438978][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.452293][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.459714][ T938] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 85.505358][ T12] hsr_slave_0: left promiscuous mode [ 85.528295][ T12] hsr_slave_1: left promiscuous mode [ 85.536489][ T4629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.544160][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.547883][ T4629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.559870][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.560344][ T4629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.576939][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.584433][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.584761][ T4629] Bluetooth: hci1: command tx timeout [ 85.599140][ T4629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.607114][ T4629] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.618012][ T4629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.626950][ T938] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 85.635911][ T938] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 85.644896][ T938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 85.653829][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 85.668353][ T938] usb 5-1: string descriptor 0 read error: -22 [ 85.675488][ T938] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 85.677678][ T12] veth1_macvtap: left promiscuous mode [ 85.684721][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.700923][ T938] usb 5-1: config 0 descriptor?? [ 85.706648][ T12] veth0_macvtap: left promiscuous mode [ 85.709213][ T5907] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.714004][ T12] veth1_vlan: left promiscuous mode [ 85.720721][ T938] hub 5-1:0.0: bad descriptor, ignoring hub [ 85.730962][ T938] hub 5-1:0.0: probe with driver hub failed with error -5 [ 85.737239][ T12] veth0_vlan: left promiscuous mode [ 85.740989][ T938] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 85.777843][ T12] veth1_macvtap: left promiscuous mode [ 85.784167][ T12] veth0_macvtap: left promiscuous mode [ 85.798762][ T12] veth1_vlan: left promiscuous mode [ 85.804119][ T12] veth0_vlan: left promiscuous mode [ 86.109237][ T8] usb 5-1: USB disconnect, device number 4 [ 86.412519][ T12] team0 (unregistering): Port device team_slave_1 removed [ 86.458569][ T12] team0 (unregistering): Port device team_slave_0 removed [ 87.254930][ T12] team0 (unregistering): Port device team_slave_1 removed [ 87.306790][ T12] team0 (unregistering): Port device team_slave_0 removed [ 87.670446][ T4629] Bluetooth: hci1: command tx timeout [ 87.675230][ T5239] Bluetooth: hci0: command tx timeout [ 87.751311][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.761910][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.810641][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.834161][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.402222][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.542569][ T5671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.641757][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.686977][ T5937] loop4: detected capacity change from 0 to 4096 [ 88.713491][ T5671] veth0_vlan: entered promiscuous mode [ 88.724145][ T5671] veth1_vlan: entered promiscuous mode [ 88.735688][ T5915] chnl_net:caif_netlink_parms(): no params data found [ 88.780631][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.787815][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.791071][ T5937] ntfs3(loop4): ino=3, Correct links count -> 2. [ 88.865374][ T5671] veth0_macvtap: entered promiscuous mode [ 88.880164][ T5671] veth1_macvtap: entered promiscuous mode [ 88.888449][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.901931][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.989455][ T2885] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.996650][ T2885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.023012][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.134766][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.264089][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.319827][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.341649][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.358895][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.371880][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.383791][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.393303][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.401736][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.414859][ T5915] bridge_slave_0: entered allmulticast mode [ 89.421895][ T5915] bridge_slave_0: entered promiscuous mode [ 89.437261][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.444446][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.459165][ T5915] bridge_slave_1: entered allmulticast mode [ 89.469612][ T5915] bridge_slave_1: entered promiscuous mode [ 89.516821][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.537510][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.559097][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.569816][ T5671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.590900][ T5671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.610197][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.699561][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.742973][ T5671] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.753748][ T5671] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.754871][ T5239] Bluetooth: hci0: command tx timeout [ 89.763380][ T5671] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.780749][ T5671] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.805936][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.823836][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.875367][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.916843][ T5915] team0: Port device team_slave_0 added [ 89.926272][ T5915] team0: Port device team_slave_1 added [ 89.966463][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.974003][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.002985][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.017222][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.024197][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.051680][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.149030][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.182087][ T5981] process 'syz.4.138' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 90.349634][ T5915] hsr_slave_0: entered promiscuous mode [ 90.370530][ T5985] loop4: detected capacity change from 0 to 4096 [ 90.386415][ T5915] hsr_slave_1: entered promiscuous mode [ 90.404032][ T5915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.422861][ T5915] Cannot create hsr debugfs directory [ 90.564855][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.572715][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.606433][ T12] bridge_slave_1: left allmulticast mode [ 90.620788][ T12] bridge_slave_1: left promiscuous mode [ 90.641037][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.673219][ T12] bridge_slave_0: left allmulticast mode [ 90.684210][ T12] bridge_slave_0: left promiscuous mode [ 90.690471][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.431519][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.442376][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.453726][ T12] bond0 (unregistering): Released all slaves [ 91.512598][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.517519][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.535078][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.798834][ T5735] veth0_vlan: entered promiscuous mode [ 91.825022][ T5239] Bluetooth: hci0: command tx timeout [ 91.830792][ T5735] veth1_vlan: entered promiscuous mode [ 91.850304][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.949455][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.957866][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.071028][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.078297][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.286445][ T5735] veth0_macvtap: entered promiscuous mode [ 92.387566][ T12] hsr_slave_0: left promiscuous mode [ 92.407410][ T12] hsr_slave_1: left promiscuous mode [ 92.451551][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.461476][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.495613][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.513385][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.592274][ T12] veth1_macvtap: left promiscuous mode [ 92.601485][ T12] veth0_macvtap: left promiscuous mode [ 92.607216][ T12] veth1_vlan: left promiscuous mode [ 92.612577][ T12] veth0_vlan: left promiscuous mode [ 93.223695][ T6053] loop1: detected capacity change from 0 to 40427 [ 93.236136][ T6053] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 93.243902][ T6053] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 93.284511][ T6053] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.384321][ T6053] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 93.397942][ T6053] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.422652][ T6053] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 93.447560][ T6053] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 93.467925][ T12] team0 (unregistering): Port device team_slave_1 removed [ 93.553531][ T12] team0 (unregistering): Port device team_slave_0 removed [ 93.904799][ T5239] Bluetooth: hci0: command tx timeout [ 94.235574][ T6065] netlink: 'syz.1.153': attribute type 5 has an invalid length. [ 94.306459][ T5735] veth1_macvtap: entered promiscuous mode [ 94.396571][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.417434][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.430841][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.443210][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.461759][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.490232][ T6070] tipc: Started in network mode [ 94.501162][ T6070] tipc: Node identity 2e2cbd04cc92, cluster identity 4711 [ 94.515119][ T6070] tipc: Enabled bearer , priority 0 [ 94.530168][ T6074] ªªªªªª: renamed from syzkaller0 [ 94.549570][ T6074] tipc: Disabling bearer [ 94.579386][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.600338][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.614030][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.632403][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.643847][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.717346][ T5735] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.774429][ T5735] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.790888][ T5735] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.800452][ T5735] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.803558][ T6081] loop4: detected capacity change from 0 to 164 [ 94.971435][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.997771][ T6084] loop4: detected capacity change from 0 to 512 [ 95.016256][ T6084] EXT4-fs: Ignoring removed i_version option [ 95.056105][ T6084] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.093218][ T6084] EXT4-fs (loop4): 1 truncate cleaned up [ 95.123320][ T6084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.186066][ T5915] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.219190][ T5915] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.287645][ T5915] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.311657][ T5915] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.481308][ T5817] veth0_vlan: entered promiscuous mode [ 95.561072][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.574220][ T5243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.602056][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.760367][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.777309][ T4629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.789964][ T4629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.799111][ T4629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.812663][ T4629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.823927][ T4629] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.836123][ T4629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.887533][ T5817] veth1_vlan: entered promiscuous mode [ 95.952966][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.963549][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.983224][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.093458][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.149394][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.183154][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.203784][ T5817] veth0_macvtap: entered promiscuous mode [ 96.224270][ T5817] veth1_macvtap: entered promiscuous mode [ 96.268298][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.277731][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.293127][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.303344][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.314800][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.325509][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.336185][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.347646][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.369475][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.380283][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.391277][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.401975][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.405785][ T5280] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.411890][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.431451][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.442319][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.483064][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.490186][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.556235][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.565742][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.574463][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.583497][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.599001][ T5280] usb 3-1: New USB device found, idVendor=1039, idProduct=2121, bcdDevice=9e.ff [ 96.608490][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.618327][ T5280] usb 3-1: Product: syz [ 96.622846][ T5280] usb 3-1: Manufacturer: syz [ 96.629382][ T5280] usb 3-1: SerialNumber: syz [ 96.645342][ T5280] usb 3-1: config 0 descriptor?? [ 96.654831][ T5280] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2121) Rev (0X9EFF): Eagle II [ 96.672893][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.680044][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.702005][ T12] bridge_slave_1: left allmulticast mode [ 96.717918][ T12] bridge_slave_1: left promiscuous mode [ 96.732483][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.749914][ T12] bridge_slave_0: left allmulticast mode [ 96.758647][ T12] bridge_slave_0: left promiscuous mode [ 96.764365][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.822494][ T5280] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 97.287855][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.322585][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.338321][ T12] bond0 (unregistering): Released all slaves [ 97.469673][ T6103] chnl_net:caif_netlink_parms(): no params data found [ 97.484870][ T6127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.169'. [ 97.719256][ T5280] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 97.760449][ T5280] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 97.780174][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.795507][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.827719][ T8] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 97.861025][ T5280] usb 3-1: USB disconnect, device number 3 [ 97.885105][ T8] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 97.909452][ T5915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.909818][ T4629] Bluetooth: hci4: command tx timeout [ 97.989696][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.998601][ T6139] netlink: 'syz.2.171': attribute type 4 has an invalid length. [ 98.009035][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.018640][ T6139] netlink: 'syz.2.171': attribute type 11 has an invalid length. [ 98.261707][ T6135] loop4: detected capacity change from 0 to 32768 [ 98.329348][ T6135] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.170 (6135) [ 98.352464][ T6135] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.363453][ T6135] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 98.386383][ T12] hsr_slave_0: left promiscuous mode [ 98.392383][ T12] hsr_slave_1: left promiscuous mode [ 98.405006][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.412473][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.421391][ T6135] BTRFS info (device loop4): using free-space-tree [ 98.429485][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.438928][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.513110][ T12] veth1_macvtap: left promiscuous mode [ 98.525900][ T12] veth0_macvtap: left promiscuous mode [ 98.531741][ T12] veth1_vlan: left promiscuous mode [ 98.552254][ T12] veth0_vlan: left promiscuous mode [ 98.762050][ T5243] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.815385][ T6178] loop3: detected capacity change from 0 to 256 [ 99.209009][ T6181] loop4: detected capacity change from 0 to 128 [ 99.245080][ T6181] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.257939][ T6181] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.370423][ T5243] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.914638][ T12] team0 (unregistering): Port device team_slave_1 removed [ 99.984801][ T4629] Bluetooth: hci4: command tx timeout [ 99.997189][ T12] team0 (unregistering): Port device team_slave_0 removed [ 100.864852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.143372][ T6152] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 101.151141][ T6156] lo: entered promiscuous mode [ 101.204188][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.269591][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.285348][ T6103] bridge_slave_0: entered allmulticast mode [ 101.302084][ T6103] bridge_slave_0: entered promiscuous mode [ 101.329095][ T6156] lo: left promiscuous mode [ 101.333952][ T6156] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 101.370224][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.380016][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.387444][ T6103] bridge_slave_1: entered allmulticast mode [ 101.397485][ T6103] bridge_slave_1: entered promiscuous mode [ 101.422625][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.459066][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.183'. [ 101.482896][ T6207] netlink: 'syz.4.183': attribute type 29 has an invalid length. [ 101.576004][ T6103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.609658][ T6103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.715159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.724897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.751519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.803667][ T6103] team0: Port device team_slave_0 added [ 101.840560][ T6103] team0: Port device team_slave_1 added [ 102.012994][ T6220] loop3: detected capacity change from 0 to 256 [ 102.041499][ T6103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.065113][ T4629] Bluetooth: hci4: command tx timeout [ 102.084628][ T6103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.124973][ T6103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.140621][ T6103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.148925][ T6103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.189157][ T6103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.200788][ T29] audit: type=1800 audit(1728945546.160:6): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.187" name="bus" dev="loop3" ino=1048618 res=0 errno=0 [ 102.342025][ T5915] veth0_vlan: entered promiscuous mode [ 102.345320][ T6220] loop3: detected capacity change from 256 to 0 [ 102.361087][ T6228] loop2: detected capacity change from 0 to 512 [ 102.374505][ T6231] bio_check_eod: 5 callbacks suppressed [ 102.374525][ T6231] syz.3.187: attempt to access beyond end of device [ 102.374525][ T6231] loop3: rw=0, sector=12, nr_sectors = 4 limit=0 [ 102.397630][ T5915] veth1_vlan: entered promiscuous mode [ 102.453058][ T6231] FAT-fs (loop3): unable to read inode block for updating (i_pos 198) [ 102.507226][ T6231] syz.3.187: attempt to access beyond end of device [ 102.507226][ T6231] loop3: rw=0, sector=12, nr_sectors = 4 limit=0 [ 102.511206][ T6228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.527537][ T6231] FAT-fs (loop3): unable to read inode block for updating (i_pos 198) [ 102.552050][ T6103] hsr_slave_0: entered promiscuous mode [ 102.561462][ T6238] loop4: detected capacity change from 0 to 256 [ 102.561531][ T6228] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.584862][ T6103] hsr_slave_1: entered promiscuous mode [ 102.605967][ T5915] veth0_macvtap: entered promiscuous mode [ 102.631984][ T6219] syz.3.187: attempt to access beyond end of device [ 102.631984][ T6219] loop3: rw=2049, sector=48, nr_sectors = 192 limit=0 [ 102.659856][ T6238] FAT-fs (loop4): Directory bread(block 64) failed [ 102.661759][ T5915] veth1_macvtap: entered promiscuous mode [ 102.681305][ T6219] syz.3.187: attempt to access beyond end of device [ 102.681305][ T6219] loop3: rw=2049, sector=16, nr_sectors = 32 limit=0 [ 102.689122][ T6238] FAT-fs (loop4): Directory bread(block 65) failed [ 102.726057][ T6238] FAT-fs (loop4): Directory bread(block 66) failed [ 102.732691][ T6238] FAT-fs (loop4): Directory bread(block 67) failed [ 102.768146][ T6238] FAT-fs (loop4): Directory bread(block 68) failed [ 102.775636][ T6238] FAT-fs (loop4): Directory bread(block 69) failed [ 102.782237][ T6238] FAT-fs (loop4): Directory bread(block 70) failed [ 102.790053][ T6238] FAT-fs (loop4): Directory bread(block 71) failed [ 102.797168][ T6238] FAT-fs (loop4): Directory bread(block 72) failed [ 102.803732][ T6238] FAT-fs (loop4): Directory bread(block 73) failed [ 102.819731][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.846855][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.876162][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.898095][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.910354][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.927676][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.943047][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.970244][ T5735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.036183][ T5817] syz-executor: attempt to access beyond end of device [ 103.036183][ T5817] loop3: rw=0, sector=12, nr_sectors = 4 limit=0 [ 103.080945][ T5817] FAT-fs (loop3): Directory bread(block 3) failed [ 103.111893][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.130924][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.147933][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.162804][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.177882][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.189308][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.200862][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.230887][ T5817] syz-executor: attempt to access beyond end of device [ 103.230887][ T5817] loop3: rw=0, sector=0, nr_sectors = 4 limit=0 [ 103.268665][ T5915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.289114][ T5817] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 103.304663][ T5915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.323662][ T5915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.342373][ T5915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.021629][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.093656][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.117242][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.155106][ T5239] Bluetooth: hci4: command tx timeout [ 104.247582][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.253097][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.261940][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.263566][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.280204][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.284480][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.294487][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.300384][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 104.316880][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.378018][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.396723][ T6265] tipc: Enabled bearer , priority 10 [ 104.540636][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.649665][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.673032][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.692421][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.765142][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.778970][ T2885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.787669][ T2885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.807167][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.911983][ T6103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.955417][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 104.965901][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.978778][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.992543][ T6103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.021721][ T9] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 105.056580][ T6103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.066682][ T6103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.077077][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.113805][ T9] usb 5-1: config 0 descriptor?? [ 105.282373][ T6269] chnl_net:caif_netlink_parms(): no params data found [ 105.386742][ T5280] tipc: Node number set to 3804151044 [ 105.441591][ T6266] chnl_net:caif_netlink_parms(): no params data found [ 105.501552][ T12] bridge_slave_1: left allmulticast mode [ 105.509515][ T12] bridge_slave_1: left promiscuous mode [ 105.515926][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.525855][ T12] bridge_slave_0: left allmulticast mode [ 105.531540][ T12] bridge_slave_0: left promiscuous mode [ 105.539018][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.753281][ T6278] loop0: detected capacity change from 0 to 32768 [ 105.767963][ T6278] XFS: attr2 mount option is deprecated. [ 105.773705][ T6278] XFS: ikeep mount option is deprecated. [ 105.786899][ T6278] XFS: noikeep mount option is deprecated. [ 105.842301][ T6278] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 105.929908][ T6278] XFS (loop0): Ending clean mount [ 105.939420][ T6278] XFS (loop0): Quotacheck needed: Please wait. [ 105.963922][ T9] letsketch 0003:6161:4D15.0004: Device info: Д [ 106.039054][ T6278] XFS (loop0): Quotacheck: Done. [ 106.087594][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.102659][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.120976][ T12] bond0 (unregistering): Released all slaves [ 106.130202][ T5915] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 106.167845][ T9] letsketch 0003:6161:4D15.0004: Device info: í—¶ [ 106.379219][ T9] letsketch 0003:6161:4D15.0004: Device info: Г [ 106.387548][ T5239] Bluetooth: hci1: command tx timeout [ 106.387564][ T4629] Bluetooth: hci2: command tx timeout [ 106.495748][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.502895][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.534974][ T6269] bridge_slave_0: entered allmulticast mode [ 106.542412][ T6269] bridge_slave_0: entered promiscuous mode [ 106.566372][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.577716][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.595175][ T6269] bridge_slave_1: entered allmulticast mode [ 106.605606][ T6269] bridge_slave_1: entered promiscuous mode [ 106.820636][ T9] usb 5-1: Max retries (5) exceeded reading string descriptor 2 [ 106.844398][ T9] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71 [ 106.865948][ T9] usb 5-1: USB disconnect, device number 5 [ 106.919756][ T6269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.964508][ T6269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.028634][ T6103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.071522][ T12] hsr_slave_0: left promiscuous mode [ 107.082806][ T12] hsr_slave_1: left promiscuous mode [ 107.093360][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.122184][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.131315][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.146485][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.180440][ T12] veth1_macvtap: left promiscuous mode [ 107.192377][ T12] veth0_macvtap: left promiscuous mode [ 107.201353][ T12] veth1_vlan: left promiscuous mode [ 107.211825][ T12] veth0_vlan: left promiscuous mode [ 107.470987][ T6341] syz.4.204 uses obsolete (PF_INET,SOCK_PACKET) [ 107.976802][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.027536][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.470385][ T5239] Bluetooth: hci2: command tx timeout [ 108.470432][ T4629] Bluetooth: hci1: command tx timeout [ 108.518255][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.528976][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.540843][ T6266] bridge_slave_0: entered allmulticast mode [ 108.551189][ T6266] bridge_slave_0: entered promiscuous mode [ 108.591981][ T6269] team0: Port device team_slave_0 added [ 108.629252][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.657037][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.664350][ T6266] bridge_slave_1: entered allmulticast mode [ 108.680075][ T6266] bridge_slave_1: entered promiscuous mode [ 108.757060][ T6357] loop4: detected capacity change from 0 to 2048 [ 108.775789][ T6269] team0: Port device team_slave_1 added [ 108.788006][ T6103] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.803196][ T6357] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 108.842388][ T6357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.861761][ T6266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.962529][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.969743][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.040692][ T6266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.051306][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.067110][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.112175][ T6269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.136974][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.143971][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.224144][ T6269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.250053][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.257252][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.370929][ T6266] team0: Port device team_slave_0 added [ 109.388369][ T6266] team0: Port device team_slave_1 added [ 109.499627][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 109.556328][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.568942][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.609593][ T6266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.657779][ T6269] hsr_slave_0: entered promiscuous mode [ 109.675445][ T6269] hsr_slave_1: entered promiscuous mode [ 109.681875][ T6269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.704673][ T6269] Cannot create hsr debugfs directory [ 109.731631][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.759641][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.800615][ T6266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.883080][ T6266] hsr_slave_0: entered promiscuous mode [ 109.902245][ T6266] hsr_slave_1: entered promiscuous mode [ 109.908331][ T6391] loop0: detected capacity change from 0 to 1024 [ 109.921993][ T6266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.922539][ T6391] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.931327][ T6266] Cannot create hsr debugfs directory [ 109.967578][ T6391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.050452][ T5915] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.149434][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.160686][ T5282] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 110.319687][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.330265][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 110.337073][ T5282] usb 5-1: config 0 has no interfaces? [ 110.342668][ T5282] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.355845][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.367150][ T5282] usb 5-1: config 0 descriptor?? [ 110.488424][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.545171][ T4629] Bluetooth: hci2: command tx timeout [ 110.545220][ T5239] Bluetooth: hci1: command tx timeout [ 110.596619][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.602980][ T5284] usb 5-1: USB disconnect, device number 6 [ 110.729759][ T6103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.940001][ T6103] veth0_vlan: entered promiscuous mode [ 110.983847][ T6103] veth1_vlan: entered promiscuous mode [ 111.076496][ T12] bridge_slave_1: left allmulticast mode [ 111.083760][ T12] bridge_slave_1: left promiscuous mode [ 111.101484][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.119379][ T12] bridge_slave_0: left allmulticast mode [ 111.130248][ T12] bridge_slave_0: left promiscuous mode [ 111.136322][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.350058][ T6417] loop0: detected capacity change from 0 to 32768 [ 111.411846][ T6417] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.589898][ T6417] XFS (loop0): Ending clean mount [ 111.608601][ T6417] XFS (loop0): Quotacheck needed: Please wait. [ 111.681131][ T6417] XFS (loop0): Quotacheck: Done. [ 111.734254][ T6417] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.834907][ T941] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.861474][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.872232][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.883381][ T12] bond0 (unregistering): Released all slaves [ 111.977049][ T6103] veth0_macvtap: entered promiscuous mode [ 112.016516][ T941] usb 5-1: Using ep0 maxpacket: 16 [ 112.027626][ T941] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 112.037617][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.048545][ T6103] veth1_macvtap: entered promiscuous mode [ 112.059505][ T941] usb 5-1: Product: syz [ 112.074892][ T941] usb 5-1: Manufacturer: syz [ 112.079550][ T941] usb 5-1: SerialNumber: syz [ 112.092803][ T941] usb 5-1: config 0 descriptor?? [ 112.124203][ T941] as10x_usb: device has been detected [ 112.140736][ T941] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 112.185511][ T941] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 112.200244][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.215743][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.237166][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.250899][ T941] as10x_usb: error during firmware upload part1 [ 112.257608][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.269057][ T941] Registered device Sky IT Digital Key (green led) [ 112.290301][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.328616][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.351003][ T6436] random: crng reseeded on system resumption [ 112.356940][ T6103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.378278][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.389131][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.422158][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.457726][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.483260][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.534714][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.579515][ T6103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.596872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.629469][ T5239] Bluetooth: hci2: command tx timeout [ 112.635104][ T4629] Bluetooth: hci1: command tx timeout [ 112.658890][ T6103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.678142][ T6103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.694176][ T6103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.704760][ T6103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.918975][ T12] hsr_slave_0: left promiscuous mode [ 112.951095][ T12] hsr_slave_1: left promiscuous mode [ 112.986359][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.993884][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.055204][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.078684][ T941] usb 5-1: USB disconnect, device number 7 [ 113.079809][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.112927][ T941] Unregistered device Sky IT Digital Key (green led) [ 113.125361][ T941] as10x_usb: device has been disconnected [ 113.134126][ T12] veth1_macvtap: left promiscuous mode [ 113.171403][ T12] veth0_macvtap: left promiscuous mode [ 113.178280][ T12] veth1_vlan: left promiscuous mode [ 113.183746][ T12] veth0_vlan: left promiscuous mode [ 113.653191][ T6452] loop0: detected capacity change from 0 to 40427 [ 113.676521][ T6452] F2FS-fs (loop0): invalid crc value [ 113.683301][ T6452] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.801353][ T6452] F2FS-fs (loop0): Start checkpoint disabled! [ 113.840425][ T6452] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 114.014218][ T12] team0 (unregistering): Port device team_slave_1 removed [ 114.030134][ T11] kworker/u8:0: attempt to access beyond end of device [ 114.030134][ T11] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 114.057459][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 114.066935][ T11] kworker/u8:0: attempt to access beyond end of device [ 114.066935][ T11] loop0: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 114.081809][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 114.102058][ T12] team0 (unregistering): Port device team_slave_0 removed [ 114.744014][ T6464] loop4: detected capacity change from 0 to 512 [ 114.795125][ T6464] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.223: corrupted in-inode xattr: invalid ea_ino [ 114.830041][ T6464] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.223: couldn't read orphan inode 15 (err -117) [ 114.866597][ T6464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.164446][ T5243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.301716][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.321801][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.419978][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.428080][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.714413][ T6490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.765489][ T6490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.798331][ T6490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.806457][ T6266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.825831][ T6266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.844046][ T6490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.866675][ T6490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.866793][ T6266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.893103][ T6490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.913713][ T6266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.919021][ T6490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.969814][ T6490] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 115.976739][ T6490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.009318][ T6490] vhci_hcd vhci_hcd.0: Device attached [ 116.043305][ T6492] vhci_hcd: connection closed [ 116.059817][ T1080] vhci_hcd: stop threads [ 116.096944][ T1080] vhci_hcd: release socket [ 116.101636][ T1080] vhci_hcd: disconnect device [ 116.109337][ T6269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.120956][ T6269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.144260][ T6269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.160034][ T6269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.236837][ T6266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.273605][ T6266] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.317691][ T2885] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.324904][ T2885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.338694][ T6477] loop4: detected capacity change from 0 to 32768 [ 116.383256][ T6266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.394007][ T6266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.444397][ T6269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.461524][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.491616][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.498822][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.563472][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.570659][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.584253][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.591463][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.637902][ T6477] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.670224][ T6269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.681451][ T6269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.808115][ T6266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.892345][ T6266] veth0_vlan: entered promiscuous mode [ 116.912288][ T6266] veth1_vlan: entered promiscuous mode [ 116.934021][ T6266] veth0_macvtap: entered promiscuous mode [ 116.944352][ T6266] veth1_macvtap: entered promiscuous mode [ 116.959603][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.970375][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.980554][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.991362][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.001491][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.012400][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.023897][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.035557][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.046156][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.056067][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.066728][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.076713][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.087251][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.099476][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.111873][ T6266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.120743][ T6266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.129732][ T6266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.138572][ T6266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.301453][ T6269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.336474][ T6477] XFS (loop4): Ending clean mount [ 117.362499][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.390931][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.404156][ T6477] XFS (loop4): Quotacheck needed: Please wait. [ 117.563578][ T6477] XFS (loop4): Quotacheck: Done. [ 117.588785][ T6269] veth0_vlan: entered promiscuous mode [ 117.652824][ T6269] veth1_vlan: entered promiscuous mode [ 117.710631][ T29] audit: type=1804 audit(1728945561.680:7): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.225" name="/newroot/78/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 117.767091][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.818254][ T29] audit: type=1804 audit(1728945561.770:8): pid=6549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.225" name="/newroot/78/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 117.824353][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.859141][ T6269] veth0_macvtap: entered promiscuous mode [ 117.882426][ T6269] veth1_macvtap: entered promiscuous mode [ 117.990685][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.007068][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.017594][ T5243] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.051322][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.068107][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.078527][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.121181][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.174850][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.204904][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.248946][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.274506][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.305028][ T941] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 118.305121][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.334635][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.364099][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.378795][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.391778][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.402179][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.412794][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.424057][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.505497][ T6269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.515383][ T6269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.524127][ T6269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.553039][ T6269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.612143][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.622361][ T941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.635824][ T6572] netlink: 'syz.4.238': attribute type 10 has an invalid length. [ 118.676841][ T941] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 118.695330][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.731520][ T6572] team0: Port device netdevsim0 added [ 118.739261][ T6576] capability: warning: `syz.3.239' uses deprecated v2 capabilities in a way that may be insecure [ 118.763135][ T941] usb 1-1: config 0 descriptor?? [ 118.787802][ T6579] netlink: 'syz.4.238': attribute type 10 has an invalid length. [ 118.849865][ T6579] team0: Port device netdevsim0 removed [ 118.869910][ T6579] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 119.080343][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.121485][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.147370][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.157912][ T6591] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 119.166904][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.179750][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.242'. [ 119.282729][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.333568][ T6595] loop2: detected capacity change from 0 to 512 [ 119.387757][ T6595] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 119.414999][ T6595] UDF-fs: Scanning with blocksize 512 failed [ 119.473408][ T6595] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 119.494777][ T6595] UDF-fs: Scanning with blocksize 1024 failed [ 119.503401][ T6595] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 119.511621][ T6595] UDF-fs: Scanning with blocksize 2048 failed [ 119.516680][ T6599] loop1: detected capacity change from 0 to 512 [ 119.525332][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 119.551434][ T6595] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 119.573366][ T9] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 119.581971][ T9] usb 4-1: config 0 has no interface number 0 [ 119.598599][ T9] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 119.608114][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.616291][ T9] usb 4-1: Product: syz [ 119.620548][ T9] usb 4-1: Manufacturer: syz [ 119.625396][ T9] usb 4-1: SerialNumber: syz [ 119.644345][ T6599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.644516][ T9] usb 4-1: config 0 descriptor?? [ 119.671055][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 119.718540][ T6599] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.730351][ T6595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.898787][ T6103] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.939380][ T941] vrc2 0003:07C0:1125.0005: fixing up VRC-2 report descriptor [ 120.028494][ T941] input: HID 07c0:1125 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:07C0:1125.0005/input/input7 [ 120.109485][ T6614] vivid-004: disconnect [ 120.140150][ T6607] vivid-004: reconnect [ 120.169537][ T941] vrc2 0003:07C0:1125.0005: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.0-1/input0 [ 120.206748][ T941] usb 1-1: USB disconnect, device number 5 [ 120.326989][ T6619] loop1: detected capacity change from 0 to 256 [ 120.394177][ T6619] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 120.692775][ T6618] loop4: detected capacity change from 0 to 32768 [ 120.798783][ T6618] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 120.863443][ T29] audit: type=1804 audit(1728945564.830:9): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.249" name="/newroot/85/file1/bus" dev="loop4" ino=17058 res=1 errno=0 [ 121.046117][ T29] audit: type=1804 audit(1728945564.960:10): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.249" name="/newroot/85/file1/bus" dev="loop4" ino=17058 res=1 errno=0 [ 121.131650][ T5243] ocfs2: Unmounting device (7,4) on (node local) [ 121.231453][ T128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.271170][ T9] gspca_topro: Sensor cx0342 [ 121.415035][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.426890][ T128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.473315][ T6632] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 121.586266][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 121.600027][ T46] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 121.618649][ T46] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 121.637828][ T938] usb 4-1: USB disconnect, device number 3 [ 121.648061][ T128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.679533][ T46] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 121.722189][ T46] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 121.722859][ T4629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.750275][ T4629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.759981][ T4629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.770972][ T4629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.778956][ T4629] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 121.783462][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.792996][ T4629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.866385][ T46] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 121.882579][ T46] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 121.895734][ T128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.920999][ T46] usb 1-1: Product: syz [ 121.928149][ T46] usb 1-1: Manufacturer: syz [ 121.940889][ T6641] loop1: detected capacity change from 0 to 4096 [ 121.950723][ T46] usb 1-1: SerialNumber: syz [ 121.973605][ T6641] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 121.991115][ T46] usb 1-1: config 0 descriptor?? [ 122.026268][ T46] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 122.061598][ T46] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 122.278039][ T6626] ldusb 1-1:0.0: Write buffer overflow, 448 bytes dropped [ 122.299794][ T6641] ntfs3(loop1): failed to convert "c46c" to cp865 [ 122.315484][ T128] bridge_slave_1: left allmulticast mode [ 122.338754][ T46] usb 1-1: USB disconnect, device number 6 [ 122.357427][ T128] bridge_slave_1: left promiscuous mode [ 122.382056][ T46] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 122.391143][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.406892][ T6643] loop4: detected capacity change from 0 to 32768 [ 122.421303][ T128] bridge_slave_0: left allmulticast mode [ 122.447778][ T128] bridge_slave_0: left promiscuous mode [ 122.450569][ T6643] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 122.458737][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.776189][ T5243] ocfs2: Unmounting device (7,4) on (node local) [ 123.570934][ T6653] loop1: detected capacity change from 0 to 32768 [ 123.588454][ T6653] XFS: ikeep mount option is deprecated. [ 123.671885][ T6653] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.789176][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.813050][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.833729][ T6653] XFS (loop1): Ending clean mount [ 123.835182][ T5239] Bluetooth: hci2: command tx timeout [ 123.847371][ T6653] XFS (loop1): Quotacheck needed: Please wait. [ 123.858412][ T128] bond0 (unregistering): Released all slaves [ 123.960479][ T6653] XFS (loop1): Quotacheck: Done. [ 124.169122][ T6653] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.443426][ T6637] chnl_net:caif_netlink_parms(): no params data found [ 124.460474][ T6675] loop0: detected capacity change from 0 to 32768 [ 124.696227][ T6675] loop0: detected capacity change from 32768 to 32745 [ 124.714759][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.815954][ T128] hsr_slave_0: left promiscuous mode [ 124.834303][ T128] hsr_slave_1: left promiscuous mode [ 124.853635][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.884277][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.895963][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 124.906629][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.924839][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.935863][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.947606][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.953148][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.968392][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.015862][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.019657][ T128] veth1_macvtap: left promiscuous mode [ 125.038035][ T128] veth0_macvtap: left promiscuous mode [ 125.053925][ T128] veth1_vlan: left promiscuous mode [ 125.060841][ T128] veth0_vlan: left promiscuous mode [ 125.073954][ T9] usb 5-1: config 0 descriptor?? [ 125.294761][ T5256] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.476545][ T5256] usb 2-1: Using ep0 maxpacket: 16 [ 125.494275][ T5256] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.524756][ T5256] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 125.528143][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 125.533869][ T5256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.551257][ T5256] usb 2-1: config 0 descriptor?? [ 125.573347][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 125.588124][ T5256] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 125.619603][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 125.641860][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 125.662855][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 125.701344][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 125.709798][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 125.720371][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 125.724181][ T6701] loop4: detected capacity change from 0 to 8 [ 125.740838][ T6722] loop3: detected capacity change from 0 to 32768 [ 125.762828][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 125.770245][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 125.779062][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 125.790262][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input9 [ 125.791897][ T6718] input: syz0 as /devices/virtual/input/input10 [ 125.898982][ T6722] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 125.909222][ T4676] bcm5974 2-1:0.0: could not read from device [ 125.923792][ T5239] Bluetooth: hci2: command tx timeout [ 125.995961][ T4676] bcm5974 2-1:0.0: could not read from device [ 126.006646][ T9] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 126.022202][ T5256] usb 2-1: USB disconnect, device number 2 [ 126.031672][ T9] usb 5-1: USB disconnect, device number 8 [ 126.071120][ T5505] bcm5974 2-1:0.0: could not read from device [ 126.215839][ T6722] syz.3.278 (6722) used greatest stack depth: 17144 bytes left [ 126.291056][ T6266] ocfs2: Unmounting device (7,3) on (node local) [ 126.373821][ T128] team0 (unregistering): Port device team_slave_1 removed [ 126.443539][ T128] team0 (unregistering): Port device team_slave_0 removed [ 126.665733][ T6730] ptrace attach of "./syz-executor exec"[5243] was attempted by ""[6730] [ 127.071739][ T6727] loop3: detected capacity change from 0 to 32768 [ 127.080312][ T6737] loop1: detected capacity change from 0 to 2048 [ 127.111496][ T6727] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.279 (6727) [ 127.168722][ T6727] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.180883][ T6737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.193338][ T6727] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 127.209591][ T6727] BTRFS info (device loop3): using free-space-tree [ 127.246884][ T6737] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.292006][ T6737] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 31 with max blocks 33 with error 28 [ 127.358002][ T6737] EXT4-fs (loop1): This should not happen!! Data will be lost [ 127.358002][ T6737] [ 127.396154][ T6737] EXT4-fs (loop1): Total free blocks count 0 [ 127.414385][ T6737] EXT4-fs (loop1): Free/Dirty block details [ 127.420891][ T6737] EXT4-fs (loop1): free_blocks=2415919104 [ 127.427046][ T6737] EXT4-fs (loop1): dirty_blocks=48 [ 127.432201][ T6737] EXT4-fs (loop1): Block reservation details [ 127.439065][ T6737] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 127.577350][ T6103] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.587151][ T6727] loop3: detected capacity change from 32768 to 0 [ 127.687119][ T1080] kworker/u8:6: attempt to access beyond end of device [ 127.687119][ T1080] loop3: rw=6145, sector=10440, nr_sectors = 8 limit=0 [ 127.710707][ T35] kworker/u8:2: attempt to access beyond end of device [ 127.710707][ T35] loop3: rw=4097, sector=10448, nr_sectors = 8 limit=0 [ 127.755650][ T35] kworker/u8:2: attempt to access beyond end of device [ 127.755650][ T35] loop3: rw=4097, sector=10456, nr_sectors = 8 limit=0 [ 127.808047][ T1080] kworker/u8:6: attempt to access beyond end of device [ 127.808047][ T1080] loop3: rw=6145, sector=10464, nr_sectors = 8 limit=0 [ 127.810756][ T6763] loop1: detected capacity change from 0 to 1024 [ 127.832343][ T35] kworker/u8:2: attempt to access beyond end of device [ 127.832343][ T35] loop3: rw=4097, sector=13440, nr_sectors = 8 limit=0 [ 127.846324][ T1080] kworker/u8:6: attempt to access beyond end of device [ 127.846324][ T1080] loop3: rw=6145, sector=13448, nr_sectors = 8 limit=0 [ 127.860496][ T35] kworker/u8:2: attempt to access beyond end of device [ 127.860496][ T35] loop3: rw=4097, sector=13456, nr_sectors = 8 limit=0 [ 127.902574][ T1080] BTRFS: error (device loop3) in btrfs_commit_transaction:2524: errno=-5 IO failure (Error while writing out transaction) [ 127.915525][ T1080] BTRFS info (device loop3 state E): forced readonly [ 127.922247][ T1080] BTRFS warning (device loop3 state E): Skipping commit of aborted transaction. [ 127.932228][ T1080] BTRFS error (device loop3 state EA): Transaction aborted (error -5) [ 127.940543][ T1080] BTRFS: error (device loop3 state EA) in cleanup_transaction:2017: errno=-5 IO failure [ 127.953297][ T1080] BTRFS info (device loop3 state EA): cannot satisfy tickets, dumping space info [ 127.955225][ T6761] BTRFS error (device loop3 state EMA): remounting read-write after error is not allowed [ 127.963146][ T1080] BTRFS info (device loop3 state EMA): space_info DATA+METADATA has 1785856 free, is not full [ 127.984056][ T1080] BTRFS info (device loop3 state EMA): space_info total=3276800, used=53248, pinned=0, reserved=0, may_use=1437696, readonly=0 zone_unusable=0 [ 127.991871][ T6735] loop4: detected capacity change from 0 to 40427 [ 128.008089][ T5239] Bluetooth: hci2: command tx timeout [ 128.046198][ T6735] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 128.059872][ T6763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.106881][ T6266] BTRFS info (device loop3 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.115007][ T6735] F2FS-fs (loop4): Image doesn't support compression [ 128.127202][ T6735] F2FS-fs (loop4): Image doesn't support compression [ 128.150319][ T6735] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 128.160286][ T6735] F2FS-fs (loop4): invalid crc value [ 128.168295][ T6763] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 128.188093][ T6763] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 66 with error 28 [ 128.191132][ T6735] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.200985][ T6763] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.200985][ T6763] [ 128.223446][ T6763] EXT4-fs (loop1): Total free blocks count 0 [ 128.231890][ T6763] EXT4-fs (loop1): Free/Dirty block details [ 128.241666][ T6763] EXT4-fs (loop1): free_blocks=68451041280 [ 128.264909][ T6763] EXT4-fs (loop1): dirty_blocks=80 [ 128.270196][ T6763] EXT4-fs (loop1): Block reservation details [ 128.292011][ T6763] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 128.357424][ T6735] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 128.399449][ T6103] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.724172][ T5243] syz-executor: attempt to access beyond end of device [ 128.724172][ T5243] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 128.748356][ T5243] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 128.755700][ T5243] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 128.796117][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.803268][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.838160][ T113] ------------[ cut here ]------------ [ 128.844002][ T113] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2780:24 [ 128.862905][ T113] index 4294967295 is out of range for type 's8[1365]' (aka 'signed char[1365]') [ 128.873896][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.12.0-rc3-next-20241014-syzkaller #0 [ 128.884104][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.891850][ T6637] bridge_slave_0: entered allmulticast mode [ 128.894160][ T113] Call Trace: [ 128.903381][ T113] [ 128.906328][ T113] dump_stack_lvl+0x241/0x360 [ 128.911042][ T113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.913567][ T6637] bridge_slave_0: entered promiscuous mode [ 128.916243][ T113] ? __pfx__printk+0x10/0x10 [ 128.916273][ T113] ? lock_metapage+0x2fa/0x370 [ 128.916299][ T113] __ubsan_handle_out_of_bounds+0x121/0x150 [ 128.937359][ T113] ? __pfx_reacquire_held_locks+0x10/0x10 [ 128.943122][ T113] dbJoin+0x2ed/0x310 [ 128.947136][ T113] ? do_read_cache_folio+0x77a/0x850 [ 128.952468][ T113] dbFreeBits+0x4db/0xd90 [ 128.955850][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.956812][ T113] dbFree+0x35b/0x680 [ 128.967842][ T113] txFreeMap+0x96a/0xd50 [ 128.972102][ T113] ? _raw_spin_unlock+0x28/0x50 [ 128.976973][ T113] ? __mark_inode_dirty+0x5b2/0xe90 [ 128.982210][ T113] xtTruncate+0xe65/0x3270 [ 128.986683][ T113] ? __pfx_xtTruncate+0x10/0x10 [ 128.991599][ T113] jfs_free_zero_link+0x46e/0x6e0 [ 128.993771][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.996627][ T113] ? inode_wait_for_writeback+0x111/0x2a0 [ 128.996657][ T113] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 128.996689][ T113] jfs_evict_inode+0x35f/0x440 [ 129.008369][ T6637] bridge_slave_1: entered allmulticast mode [ 129.009392][ T113] ? __pfx_jfs_evict_inode+0x10/0x10 [ 129.009422][ T113] evict+0x4e8/0x9b0 [ 129.034786][ T113] ? __pfx_evict+0x10/0x10 [ 129.039249][ T113] ? iput+0x713/0xa50 [ 129.040283][ T6637] bridge_slave_1: entered promiscuous mode [ 129.043248][ T113] txUpdateMap+0x931/0xb10 [ 129.043286][ T113] ? __pfx_txUpdateMap+0x10/0x10 [ 129.058454][ T113] jfs_lazycommit+0x49a/0xb80 [ 129.063163][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 129.069084][ T113] ? lockdep_hardirqs_on+0x99/0x150 [ 129.074310][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 129.079539][ T113] ? __pfx_default_wake_function+0x10/0x10 [ 129.085363][ T113] ? __kthread_parkme+0x169/0x1d0 [ 129.090393][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 129.095598][ T113] kthread+0x2f0/0x390 [ 129.099666][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 129.104862][ T113] ? __pfx_kthread+0x10/0x10 [ 129.109454][ T113] ret_from_fork+0x4b/0x80 [ 129.113866][ T113] ? __pfx_kthread+0x10/0x10 [ 129.118454][ T113] ret_from_fork_asm+0x1a/0x30 [ 129.123251][ T113] [ 129.172106][ T113] ---[ end trace ]--- [ 129.178350][ T113] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 129.185583][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.12.0-rc3-next-20241014-syzkaller #0 [ 129.195570][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.205624][ T113] Call Trace: [ 129.208899][ T113] [ 129.211823][ T113] dump_stack_lvl+0x241/0x360 [ 129.216500][ T113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.221690][ T113] ? __pfx__printk+0x10/0x10 [ 129.226275][ T113] ? lockdep_hardirqs_on+0x99/0x150 [ 129.231471][ T113] ? vscnprintf+0x5d/0x90 [ 129.235796][ T113] panic+0x349/0x880 [ 129.239695][ T113] ? check_panic_on_warn+0x21/0xb0 [ 129.244808][ T113] ? __pfx_panic+0x10/0x10 [ 129.249219][ T113] ? _printk+0xd5/0x120 [ 129.253396][ T113] ? __pfx__printk+0x10/0x10 [ 129.258006][ T113] check_panic_on_warn+0x86/0xb0 [ 129.262959][ T113] __ubsan_handle_out_of_bounds+0x141/0x150 [ 129.268859][ T113] ? __pfx_reacquire_held_locks+0x10/0x10 [ 129.274589][ T113] dbJoin+0x2ed/0x310 [ 129.278595][ T113] ? do_read_cache_folio+0x77a/0x850 [ 129.283886][ T113] dbFreeBits+0x4db/0xd90 [ 129.288227][ T113] dbFree+0x35b/0x680 [ 129.292222][ T113] txFreeMap+0x96a/0xd50 [ 129.296466][ T113] ? _raw_spin_unlock+0x28/0x50 [ 129.301311][ T113] ? __mark_inode_dirty+0x5b2/0xe90 [ 129.306609][ T113] xtTruncate+0xe65/0x3270 [ 129.311045][ T113] ? __pfx_xtTruncate+0x10/0x10 [ 129.315926][ T113] jfs_free_zero_link+0x46e/0x6e0 [ 129.320943][ T113] ? inode_wait_for_writeback+0x111/0x2a0 [ 129.326658][ T113] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 129.332204][ T113] jfs_evict_inode+0x35f/0x440 [ 129.336961][ T113] ? __pfx_jfs_evict_inode+0x10/0x10 [ 129.342242][ T113] evict+0x4e8/0x9b0 [ 129.346152][ T113] ? __pfx_evict+0x10/0x10 [ 129.350564][ T113] ? iput+0x713/0xa50 [ 129.354548][ T113] txUpdateMap+0x931/0xb10 [ 129.358970][ T113] ? __pfx_txUpdateMap+0x10/0x10 [ 129.363910][ T113] jfs_lazycommit+0x49a/0xb80 [ 129.368582][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 129.374473][ T113] ? lockdep_hardirqs_on+0x99/0x150 [ 129.379687][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 129.384908][ T113] ? __pfx_default_wake_function+0x10/0x10 [ 129.390725][ T113] ? __kthread_parkme+0x169/0x1d0 [ 129.395757][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 129.400956][ T113] kthread+0x2f0/0x390 [ 129.405031][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 129.410233][ T113] ? __pfx_kthread+0x10/0x10 [ 129.414840][ T113] ret_from_fork+0x4b/0x80 [ 129.419247][ T113] ? __pfx_kthread+0x10/0x10 [ 129.423829][ T113] ret_from_fork_asm+0x1a/0x30 [ 129.428603][ T113] [ 129.431860][ T113] Kernel Offset: disabled [ 129.436264][ T113] Rebooting in 86400 seconds..