last executing test programs: 3.061814411s ago: executing program 2 (id=533): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x17f, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, r1, 0xb}}, 0x48) 2.718799993s ago: executing program 2 (id=534): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r0, &(0x7f0000000000)=""/42, 0x2a) getdents(r0, &(0x7f0000000140)=""/112, 0x70) 2.495789294s ago: executing program 2 (id=537): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x54}}, 0x0) 2.257129536s ago: executing program 2 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000004880)={0x38, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) 2.149951166s ago: executing program 4 (id=542): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000022c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x1, 0x0) 2.085374627s ago: executing program 2 (id=543): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x20, 0x22, 0x5, {0x5, 0x7, "a18265"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.939198058s ago: executing program 4 (id=546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.716126429s ago: executing program 4 (id=549): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 1.45414314s ago: executing program 4 (id=555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) 1.298556781s ago: executing program 4 (id=557): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4002}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001600156601000000000000000a0040"], 0x84}}, 0x0) 1.297915012s ago: executing program 1 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) 1.198946342s ago: executing program 4 (id=560): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 1.114310083s ago: executing program 1 (id=562): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000000)="b5", 0x1, 0x7fffffffffffffff) 1.041619233s ago: executing program 3 (id=563): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2132, 0xffffffffffffffff, 0x0) mlockall(0x7) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) 941.398304ms ago: executing program 1 (id=564): r0 = io_uring_setup(0xb9c, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x1d3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x8}, 0x1c) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 939.723224ms ago: executing program 0 (id=574): rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) r0 = gettid() tkill(r0, 0x11) 773.986075ms ago: executing program 0 (id=565): unshare(0x22020600) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/35, 0x23}], 0x1, 0x8, 0x5) 773.913295ms ago: executing program 1 (id=566): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 726.132525ms ago: executing program 3 (id=567): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x40}, [{0x2, 0x60b, 0x5}]}, 0x78) 628.303036ms ago: executing program 0 (id=568): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x5433, 0x0) 543.653716ms ago: executing program 3 (id=569): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x0, 0x80000) 542.722166ms ago: executing program 1 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000980)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 467.800247ms ago: executing program 0 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 343.335477ms ago: executing program 0 (id=571): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000000)) 343.175797ms ago: executing program 3 (id=572): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfdfff00d}, {0x6, 0x0, 0xfc, 0x3}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 316.555848ms ago: executing program 1 (id=573): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 94.338899ms ago: executing program 3 (id=575): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000000)={0x1, 0xc}) 93.685299ms ago: executing program 0 (id=586): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100090808004149004001040800", 0x58}], 0x1) 32.679459ms ago: executing program 3 (id=576): unshare(0x22020600) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, 0x0) 0s ago: executing program 2 (id=577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 51.394034][ T4255] cgroup: Unknown subsys name 'net' [ 51.507432][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.754484][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.002065][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.007739][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.010011][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.024388][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.033026][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.033202][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.040401][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.047972][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.055606][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.061717][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.068808][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.076188][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.083138][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.089675][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.097708][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.111145][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.118530][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.126224][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.129857][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.133360][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.140479][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.148730][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.162813][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.163090][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.170186][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.177503][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.184939][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.192395][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.210912][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.218283][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.609743][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 54.622690][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 54.705523][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 54.751821][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 54.799810][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.807347][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.815914][ T4277] device bridge_slave_0 entered promiscuous mode [ 54.850335][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.857464][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.865290][ T4277] device bridge_slave_1 entered promiscuous mode [ 54.876421][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.883660][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.891212][ T4268] device bridge_slave_0 entered promiscuous mode [ 54.898491][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 54.923751][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.930830][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.938659][ T4268] device bridge_slave_1 entered promiscuous mode [ 54.987462][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.997102][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.004327][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.012090][ T4269] device bridge_slave_0 entered promiscuous mode [ 55.020802][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.044324][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.053659][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.060726][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.069017][ T4269] device bridge_slave_1 entered promiscuous mode [ 55.077571][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.098467][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.105771][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.113894][ T4266] device bridge_slave_0 entered promiscuous mode [ 55.143203][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.150288][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.158562][ T4266] device bridge_slave_1 entered promiscuous mode [ 55.191229][ T4277] team0: Port device team_slave_0 added [ 55.206475][ T4268] team0: Port device team_slave_0 added [ 55.214265][ T4268] team0: Port device team_slave_1 added [ 55.221437][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.238770][ T4277] team0: Port device team_slave_1 added [ 55.259853][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.284087][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.306608][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.313870][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.321454][ T4267] device bridge_slave_0 entered promiscuous mode [ 55.336211][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.354453][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.361383][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.388016][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.407429][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.414619][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.422188][ T4267] device bridge_slave_1 entered promiscuous mode [ 55.429609][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.436767][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.463531][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.483424][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.490373][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.517066][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.530682][ T4269] team0: Port device team_slave_0 added [ 55.549595][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.556672][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.582711][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.595586][ T4266] team0: Port device team_slave_0 added [ 55.610207][ T4269] team0: Port device team_slave_1 added [ 55.626380][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.646754][ T4266] team0: Port device team_slave_1 added [ 55.666591][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.726622][ T4277] device hsr_slave_0 entered promiscuous mode [ 55.733531][ T4277] device hsr_slave_1 entered promiscuous mode [ 55.740502][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.747543][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.773527][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.785229][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.792183][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.818495][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.831013][ T4267] team0: Port device team_slave_0 added [ 55.847610][ T4268] device hsr_slave_0 entered promiscuous mode [ 55.854306][ T4268] device hsr_slave_1 entered promiscuous mode [ 55.860758][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.868652][ T4268] Cannot create hsr debugfs directory [ 55.875055][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.881996][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.907989][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.919401][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.926431][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.952468][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.965563][ T4267] team0: Port device team_slave_1 added [ 56.012158][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.019220][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.045224][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.087373][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.094551][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.120806][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.180401][ T4269] device hsr_slave_0 entered promiscuous mode [ 56.187315][ T4269] device hsr_slave_1 entered promiscuous mode [ 56.194011][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.201552][ T4269] Cannot create hsr debugfs directory [ 56.224441][ T4266] device hsr_slave_0 entered promiscuous mode [ 56.231227][ T4266] device hsr_slave_1 entered promiscuous mode [ 56.237908][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.245523][ T4266] Cannot create hsr debugfs directory [ 56.253143][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 56.259396][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 56.262684][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 56.265556][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 56.286022][ T4267] device hsr_slave_0 entered promiscuous mode [ 56.293450][ T4267] device hsr_slave_1 entered promiscuous mode [ 56.299916][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.307532][ T4267] Cannot create hsr debugfs directory [ 56.332491][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 56.559658][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.589845][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.600748][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.611020][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.632120][ T4268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.647752][ T4268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.674657][ T4268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.689127][ T4268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.727061][ T4269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.741813][ T4269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.777592][ T4269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.786835][ T4269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.843806][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.871873][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.884414][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.908969][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.917523][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.965473][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.990317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.000153][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.013569][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.021633][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.029892][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.039502][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.054048][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.067532][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.075129][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.097840][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.124471][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.161351][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.168969][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.178514][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.187917][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.195181][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.204608][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.213800][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.222068][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.229170][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.237181][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.247323][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.256034][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.266409][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.274317][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.283565][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.291848][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.298927][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.307249][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.316723][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.325125][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.332161][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.339930][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.348254][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.357219][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.373882][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.386787][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.396935][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.406862][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.416547][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.425575][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.434206][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.443773][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.456157][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.484241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.493082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.503009][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.510067][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.518820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.527461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.536976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.545645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.554373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.562857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.592894][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.600684][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.612187][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.621487][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.628641][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.637811][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.646632][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.656296][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.664777][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.672483][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.681184][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.690111][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.708145][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.722828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.747814][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.767358][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.802646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.819316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.828752][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.835895][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.843977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.853924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.862219][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.869316][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.880434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.888734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.897203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.906162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.914766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.923707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.932031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.940694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.951208][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.961760][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.976566][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.995060][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.003741][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.023304][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.043735][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.056776][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.066393][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.081035][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.091352][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.107579][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.125436][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.146112][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.166084][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.179281][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.188596][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.197661][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.204794][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.215864][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.230749][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.240293][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.249585][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.260368][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.283985][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.304927][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.333178][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 58.339225][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 58.350387][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 58.350407][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 58.362846][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.382845][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.389948][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.413337][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 58.417198][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.445395][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.457740][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.466809][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.477108][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.507359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.530849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.544875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.562822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.570300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.586568][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.620298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.644088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.653467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.663188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.701326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.710307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.719102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.730019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.740999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.755416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.768178][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.796591][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.806288][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.832187][ T4277] device veth0_vlan entered promiscuous mode [ 58.854408][ T4268] device veth0_vlan entered promiscuous mode [ 58.864300][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.878486][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.887806][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.906533][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.915302][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.923075][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.937775][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.949785][ T4277] device veth1_vlan entered promiscuous mode [ 58.964537][ T4268] device veth1_vlan entered promiscuous mode [ 58.986487][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.004326][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.023517][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.042726][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.093807][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.113561][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.121881][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.135572][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.147104][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.156378][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.166560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.175397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.187885][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.197703][ T4268] device veth0_macvtap entered promiscuous mode [ 59.208604][ T4277] device veth0_macvtap entered promiscuous mode [ 59.227131][ T4268] device veth1_macvtap entered promiscuous mode [ 59.256163][ T4277] device veth1_macvtap entered promiscuous mode [ 59.301403][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.341857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.350745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.374567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.399285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.407843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.419187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.428234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.437740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.446600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.455437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.464235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.471935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.484412][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.491729][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.500755][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.511581][ T4267] device veth0_vlan entered promiscuous mode [ 59.528446][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.538049][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.559913][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.570226][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.579320][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.588780][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.615038][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.624500][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.642519][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.659625][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.681159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.697071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.720144][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.731638][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.743761][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.761417][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.775108][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.784481][ T4267] device veth1_vlan entered promiscuous mode [ 59.793161][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.801863][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.810683][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.819640][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.877215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.887722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.897429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.906323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.937683][ T4266] device veth0_vlan entered promiscuous mode [ 59.946473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.955708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.998199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.003358][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.006734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.021798][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.022156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.038319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.047101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.068842][ T4267] device veth0_macvtap entered promiscuous mode [ 60.080778][ T4266] device veth1_vlan entered promiscuous mode [ 60.104204][ T4267] device veth1_macvtap entered promiscuous mode [ 60.129969][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.138493][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.141202][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.155813][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.159533][ T4269] device veth0_vlan entered promiscuous mode [ 60.170277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.179255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.188195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.196434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.205694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.214993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.222965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.231208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.239794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.255673][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.266470][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.276582][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.287404][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.299385][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.317705][ T4269] device veth1_vlan entered promiscuous mode [ 60.334048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.350575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.359069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.368612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.385107][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.395674][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.405784][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.413119][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 60.417609][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.422181][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 60.432062][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 60.432093][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 60.450358][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.474414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.489182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.502931][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 60.539613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.550355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.586378][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.595938][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.604440][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.613236][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.621965][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.630835][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.657547][ T4269] device veth0_macvtap entered promiscuous mode [ 60.670253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.679116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.688767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.698072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.708425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.724066][ T4266] device veth0_macvtap entered promiscuous mode [ 60.740329][ T4266] device veth1_macvtap entered promiscuous mode [ 60.762794][ T4269] device veth1_macvtap entered promiscuous mode [ 60.827111][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.881883][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.897595][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.914206][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.926134][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.950732][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.980297][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.982513][ T4378] loop3: detected capacity change from 0 to 32768 [ 61.002248][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.020573][ T4378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4378) [ 61.047415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.080858][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.092098][ T4378] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.108137][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.108820][ T4378] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 61.118781][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.127349][ T4378] BTRFS info (device loop3): force clearing of disk cache [ 61.150634][ T4378] BTRFS info (device loop3): enabling auto defrag [ 61.152313][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.160273][ T4378] BTRFS info (device loop3): enabling ssd optimizations [ 61.168781][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.179304][ T4378] BTRFS info (device loop3): max_inline at 0 [ 61.186427][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.191141][ T4378] BTRFS info (device loop3): enabling disk space caching [ 61.201642][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.219864][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.220806][ T4378] BTRFS info (device loop3): disk space caching is enabled [ 61.232911][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.264318][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.278849][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.289314][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.300999][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.311128][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.327610][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.338535][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.349817][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.361849][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.369509][ T4381] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.381130][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.391199][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.403544][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.413155][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.423247][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.435175][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.455401][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.461083][ T4378] BTRFS info (device loop3): rebuilding free space tree [ 61.486564][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.496836][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.503218][ T4378] BTRFS info (device loop3): disabling free space tree [ 61.507420][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.525575][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.539187][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.546426][ T4378] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 61.557628][ T4378] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 61.558166][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.585331][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.613862][ T4381] usb 3-1: Using ep0 maxpacket: 32 [ 61.627739][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.639693][ T4381] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 61.656921][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.665342][ T4381] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 61.669079][ T4268] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.680906][ T4381] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.690304][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.715402][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.724440][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.727734][ T4381] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 61.735346][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.743599][ T4381] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 61.760458][ T4381] usb 3-1: Product: syz [ 61.765108][ T4381] usb 3-1: Manufacturer: syz [ 61.778021][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.779707][ T4381] usb 3-1: SerialNumber: syz [ 61.787526][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.805579][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.814761][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.824055][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.833393][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.842112][ T4381] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 61.845018][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.169008][ T4347] usb 3-1: USB disconnect, device number 2 [ 62.189358][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.217488][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.228550][ T4347] appletouch 3-1:1.0: input: appletouch disconnected [ 62.259023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.277097][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.296988][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.306104][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.318953][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.350448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.383928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.433795][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.451107][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.494321][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 62.500362][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 62.506781][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 62.506800][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 62.521837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.573333][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 62.750818][ T4422] loop4: detected capacity change from 0 to 4096 [ 62.846421][ T4422] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 62.964332][ T4422] ntfs3: loop4: Failed to load root. [ 63.299028][ T4443] netlink: 'syz.3.16': attribute type 10 has an invalid length. [ 63.338675][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.346942][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.387578][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.394769][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.402878][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.410086][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.531964][ T4443] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 63.572821][ T4445] device bridge_slave_1 left promiscuous mode [ 63.579067][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.663135][ T4445] device bridge_slave_0 left promiscuous mode [ 63.669371][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.753419][ T4426] loop0: detected capacity change from 0 to 40427 [ 63.788009][ T4426] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 63.802296][ T4455] sg_write: data in/out 532239/1 bytes for SCSI command 0x1c-- guessing data in; [ 63.802296][ T4455] program syz.4.23 not setting count and/or reply_len properly [ 63.819636][ T4445] bond0: (slave bridge0): Releasing backup interface [ 63.828561][ T4426] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.837609][ T4426] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3ffff [ 63.868616][ T4426] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 63.910795][ T4426] F2FS-fs (loop0): invalid crc value [ 63.949971][ T4426] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.041183][ T4460] loop1: detected capacity change from 0 to 512 [ 64.062662][ T27] audit: type=1326 audit(1762203548.724:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9918f6c9 code=0x7ffc0000 [ 64.091867][ T4460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.152729][ T4460] EXT4-fs: Ignoring removed bh option [ 64.170365][ T27] audit: type=1326 audit(1762203548.734:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9918f6c9 code=0x7ffc0000 [ 64.179600][ T4426] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 64.195473][ T4460] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.249181][ T4437] loop2: detected capacity change from 0 to 32768 [ 64.284077][ T4437] ======================================================= [ 64.284077][ T4437] WARNING: The mand mount option has been deprecated and [ 64.284077][ T4437] and is ignored by this kernel. Remove the mand [ 64.284077][ T4437] option from the mount to silence this warning. [ 64.284077][ T4437] ======================================================= [ 64.286562][ T4426] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.322375][ T27] audit: type=1326 audit(1762203548.774:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fda9918f6c9 code=0x7ffc0000 [ 64.369484][ T4460] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 64.380075][ T27] audit: type=1326 audit(1762203548.774:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9918f6c9 code=0x7ffc0000 [ 64.406860][ T27] audit: type=1326 audit(1762203548.774:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9918f6c9 code=0x7ffc0000 [ 64.430643][ T4460] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #11: comm syz.1.24: corrupted inode contents [ 64.456527][ T4470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27'. [ 64.552397][ T4460] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #11: comm syz.1.24: mark_inode_dirty error [ 64.626713][ T4460] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.24: invalid indirect mapped block 1 (level 1) [ 64.654831][ T4267] syz-executor: attempt to access beyond end of device [ 64.654831][ T4267] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.677947][ T4460] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #11: comm syz.1.24: corrupted inode contents [ 64.742194][ T4460] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 64.769815][ T4460] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #11: comm syz.1.24: corrupted inode contents [ 64.855158][ T4460] EXT4-fs error (device loop1): ext4_truncate:4318: inode #11: comm syz.1.24: mark_inode_dirty error [ 64.900967][ T4460] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 64.941148][ T4460] EXT4-fs (loop1): 1 truncate cleaned up [ 64.964564][ T4460] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 65.068816][ T4460] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.24: path /5/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 65.352704][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 65.486264][ T4490] loop2: detected capacity change from 0 to 4096 [ 65.522426][ T4490] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 65.627370][ T4490] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 65.691138][ T3637] udevd[3637]: worker [4260] terminated by signal 33 (Unknown signal 33) [ 65.700042][ T4490] ntfs3: loop2: Failed to load $Extend. [ 65.712515][ T3637] udevd[3637]: worker [4260] failed while handling '/devices/virtual/block/loop2' [ 65.734729][ T4500] netlink: 'syz.0.37': attribute type 10 has an invalid length. [ 65.763120][ T4500] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.770535][ T4500] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.840795][ T4477] loop4: detected capacity change from 0 to 32768 [ 65.867992][ T4500] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.875163][ T4500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.883017][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.890168][ T4500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.909718][ T4477] loop4: p1 p2 p3 < p5 p6 > [ 65.926233][ T4477] loop4: p1 size 242222080 extends beyond EOD, truncated [ 65.961298][ T4477] loop4: p2 start 4294967295 is beyond EOD, truncated [ 65.981992][ T4500] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 66.046996][ T4501] device bridge_slave_1 left promiscuous mode [ 66.072027][ T4501] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.126999][ T4501] device bridge_slave_0 left promiscuous mode [ 66.169311][ T4501] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.242711][ T4501] bond0: (slave bridge0): Releasing backup interface [ 66.940801][ T4529] netlink: 56 bytes leftover after parsing attributes in process `syz.4.50'. [ 66.977931][ T4529] netlink: 56 bytes leftover after parsing attributes in process `syz.4.50'. [ 67.021451][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 67.038851][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 67.049948][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 67.068068][ T4514] udevd[4514]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 67.133314][ T4510] loop1: detected capacity change from 0 to 32768 [ 67.200011][ T4533] loop3: detected capacity change from 0 to 16 [ 67.252140][ T4533] cramfs: empty filesystem [ 67.543787][ T4541] loop3: detected capacity change from 0 to 256 [ 67.593599][ T4541] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 67.650136][ T4543] netlink: 'syz.1.57': attribute type 10 has an invalid length. [ 67.697839][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.705347][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.746009][ T4520] loop0: detected capacity change from 0 to 32768 [ 67.778434][ T4520] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.46 (4520) [ 67.813110][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.820289][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.827762][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.834917][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.859027][ T4520] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 67.876083][ T4520] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 67.927900][ T4520] BTRFS info (device loop0): using free space tree [ 67.958710][ T4543] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 67.985880][ T4548] device bridge_slave_1 left promiscuous mode [ 68.051797][ T4548] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.100105][ T4548] device bridge_slave_0 left promiscuous mode [ 68.117232][ T4548] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.201197][ T4548] bond0: (slave bridge0): Releasing backup interface [ 68.262949][ T4520] BTRFS info (device loop0): enabling ssd optimizations [ 68.533477][ T4267] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 68.988939][ T4594] capability: warning: `syz.0.66' uses 32-bit capabilities (legacy support in use) [ 69.014105][ T4547] loop2: detected capacity change from 0 to 32768 [ 69.098405][ T4547] loop2: p1 p2 p3 < p5 p6 > [ 69.108226][ T4547] loop2: p1 size 242222080 extends beyond EOD, truncated [ 69.133102][ T4547] loop2: p2 start 4294967295 is beyond EOD, truncated [ 69.355262][ T4605] loop4: detected capacity change from 0 to 128 [ 69.383196][ T4605] EXT4-fs: Ignoring removed nobh option [ 69.400834][ T4580] loop3: detected capacity change from 0 to 32768 [ 69.474749][ T4605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 69.509577][ T4605] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.657433][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 69.840436][ T4614] loop1: detected capacity change from 0 to 512 [ 69.876568][ T4617] netlink: 'syz.2.79': attribute type 10 has an invalid length. [ 69.942912][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.950368][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.000377][ T4614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.006994][ T4617] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.016460][ T4617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.023906][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.031052][ T4617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.049275][ T4614] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.071573][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 70.071678][ T4514] udevd[4514]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 70.094185][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 70.107939][ T4617] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 70.141117][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 70.221853][ T4618] device bridge_slave_1 left promiscuous mode [ 70.228322][ T4618] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.278093][ T4618] device bridge_slave_0 left promiscuous mode [ 70.288538][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 70.302661][ T4618] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.410619][ T4618] bond0: (slave bridge0): Releasing backup interface [ 70.525453][ T4630] loop4: detected capacity change from 0 to 4096 [ 70.603060][ T4630] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 71.138728][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 71.216886][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.223474][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.460391][ T4671] netlink: 'syz.2.104': attribute type 10 has an invalid length. [ 71.496982][ T4674] loop1: detected capacity change from 0 to 256 [ 71.575535][ T4674] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 71.591391][ T4638] loop0: detected capacity change from 0 to 32768 [ 71.666076][ T4679] loop4: detected capacity change from 0 to 256 [ 71.754123][ T4679] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.835380][ T4679] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 71.899280][ T4679] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 71.937183][ T4685] loop1: detected capacity change from 0 to 512 [ 72.042718][ T4685] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 72.065705][ T4685] EXT4-fs (loop1): invalid journal inode [ 72.071596][ T4685] EXT4-fs (loop1): can't get journal size [ 72.110028][ T4685] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.118775][ T4685] EXT4-fs (loop1): 1 truncate cleaned up [ 72.132465][ T4685] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.239144][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 72.405058][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 72.605049][ T4706] netlink: 'syz.3.120': attribute type 10 has an invalid length. [ 72.691558][ T4708] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 72.806616][ T4708] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.122'. [ 72.909800][ T4711] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 808 [ 72.951128][ T4705] loop0: detected capacity change from 0 to 32768 [ 72.983382][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Trying to join cluster "lock_nolock", "errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í" [ 73.001657][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Now mounting FS (format 1801)... [ 73.034751][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: journal 0 mapped with 5 extents in 0ms [ 73.050390][ T4409] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0, already locked for use [ 73.063205][ T4409] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Looking at journal... [ 73.134956][ T4409] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Journal head lookup took 71ms [ 73.153840][ T4409] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Done [ 73.165080][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: first mount done, others may mount [ 73.179057][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: ri_addr = 18 [ 73.179057][ T4705] ri_length = 1 [ 73.179057][ T4705] ri_data0 = 19 [ 73.179057][ T4705] ri_data = 524288 [ 73.179057][ T4705] ri_bitbytes = 515 [ 73.179057][ T4705] start=0 len=515 offset=128 [ 73.208817][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: R: n:18 f:00 b:0/0 i:0 q:0 r:0 e:0 [ 73.221396][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: fatal: filesystem consistency error [ 73.221396][ T4705] RG = 18 [ 73.221396][ T4705] function = compute_bitstructs, file = fs/gfs2/rgrp.c, line = 829 [ 73.244529][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: G: s:UN n:3/12 f:n t:UN d:EX/0 a:0 v:0 r:1 m:20 p:0 [ 73.258243][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: about to withdraw this file system [ 73.275608][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Journal recovery skipped for jid 0 until next mount. [ 73.288324][ T4716] loop4: detected capacity change from 0 to 1764 [ 73.289343][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Glock dequeues delayed: 0 [ 73.307235][ T4705] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: File system withdrawn [ 73.318783][ T4705] CPU: 1 PID: 4705 Comm: syz.0.121 Not tainted syzkaller #0 [ 73.326093][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.336177][ T4705] Call Trace: [ 73.339464][ T4705] [ 73.342399][ T4705] dump_stack_lvl+0x168/0x22e [ 73.347104][ T4705] ? kobject_uevent_env+0x35f/0x8a0 [ 73.352319][ T4705] ? show_regs_print_info+0x12/0x12 [ 73.357522][ T4705] ? load_image+0x3b0/0x3b0 [ 73.362022][ T4705] ? kobject_uevent_env+0x35f/0x8a0 [ 73.367217][ T4705] gfs2_withdraw+0x143f/0x1780 [ 73.371981][ T4705] ? gfs2_lm+0x220/0x220 [ 73.376220][ T4705] ? gfs2_rgrp_dump+0x2f9/0x520 [ 73.381058][ T4705] ? do_raw_spin_unlock+0x11d/0x230 [ 73.386423][ T4705] gfs2_consist_rgrpd_i+0x148/0x1a0 [ 73.391613][ T4705] ? gfs2_consist_inode_i+0x110/0x110 [ 73.397162][ T4705] ? __kmem_cache_alloc_node+0x140/0x260 [ 73.402781][ T4705] ? gfs2_ri_update+0x466/0x17c0 [ 73.407705][ T4705] ? rcu_is_watching+0x11/0xa0 [ 73.412469][ T4705] gfs2_ri_update+0xbcb/0x17c0 [ 73.417245][ T4705] ? gfs2_glock_nq_init+0x60/0x60 [ 73.422441][ T4705] ? inode_go_held+0xf4/0x200 [ 73.427114][ T4705] ? gfs2_glock_wait+0x20b/0x2a0 [ 73.432045][ T4705] gfs2_rindex_update+0x331/0x400 [ 73.437060][ T4705] ? lockdep_init_map_type+0x9d/0x880 [ 73.442419][ T4705] ? gfs2_ri_total+0x1f0/0x1f0 [ 73.447172][ T4705] ? init_inodes+0x249/0x320 [ 73.451754][ T4705] ? complete_all+0x29/0x1d0 [ 73.456332][ T4705] init_inodes+0x249/0x320 [ 73.460741][ T4705] gfs2_fill_super+0x1718/0x1f80 [ 73.465680][ T4705] ? gfs2_reconfigure+0xcd0/0xcd0 [ 73.470737][ T4705] ? init_locking+0xb8/0x200 [ 73.475326][ T4705] ? sb_set_blocksize+0xa5/0xe0 [ 73.480174][ T4705] get_tree_bdev+0x3f1/0x610 [ 73.484751][ T4705] ? gfs2_reconfigure+0xcd0/0xcd0 [ 73.490026][ T4705] gfs2_get_tree+0x4d/0x1e0 [ 73.494520][ T4705] vfs_get_tree+0x88/0x270 [ 73.498924][ T4705] do_new_mount+0x24a/0xa40 [ 73.503421][ T4705] __se_sys_mount+0x2d6/0x3c0 [ 73.508263][ T4705] ? __x64_sys_mount+0xc0/0xc0 [ 73.513016][ T4705] ? lockdep_hardirqs_on+0x94/0x140 [ 73.518216][ T4705] ? __x64_sys_mount+0x1c/0xc0 [ 73.522969][ T4705] do_syscall_64+0x4c/0xa0 [ 73.527371][ T4705] ? clear_bhb_loop+0x60/0xb0 [ 73.532030][ T4705] ? clear_bhb_loop+0x60/0xb0 [ 73.536693][ T4705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.542571][ T4705] RIP: 0033:0x7f5bbd990e6a [ 73.546981][ T4705] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.566593][ T4705] RSP: 002b:00007f5bbe85ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.574995][ T4705] RAX: ffffffffffffffda RBX: 00007f5bbe85aef0 RCX: 00007f5bbd990e6a [ 73.582950][ T4705] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007f5bbe85aeb0 [ 73.590903][ T4705] RBP: 0000200000000000 R08: 00007f5bbe85aef0 R09: 0000000000a00408 [ 73.598859][ T4705] R10: 0000000000a00408 R11: 0000000000000246 R12: 0000200000012500 [ 73.606815][ T4705] R13: 00007f5bbe85aeb0 R14: 0000000000012627 R15: 00002000000000c0 [ 73.614780][ T4705] [ 73.992408][ T4726] loop0: detected capacity change from 0 to 512 [ 74.054904][ T4728] loop4: detected capacity change from 0 to 128 [ 74.069755][ T4726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 74.084502][ T4726] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.141275][ T4737] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 74.309579][ T4726] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 3: comm syz.0.130: lblock 8 mapped to illegal pblock 3 (length 26) [ 74.368766][ T4726] EXT4-fs (loop0): Remounting filesystem read-only [ 74.428494][ T4742] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 74.462449][ T4702] mmap: syz.1.118 (4702) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.477062][ T4742] comedi comedi3: 8255: I/O port conflict (0xffffffffffffff00,4) [ 74.491547][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 74.506088][ T4742] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 74.521652][ T4742] comedi comedi3: 8255: I/O port conflict (0x80007,4) [ 74.528977][ T4742] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 74.569340][ T4742] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 74.581880][ T4746] loop4: detected capacity change from 0 to 512 [ 74.602711][ T4742] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 74.631788][ T4746] EXT4-fs: Ignoring removed bh option [ 74.631831][ T4748] loop0: detected capacity change from 0 to 1024 [ 74.646909][ T4742] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 74.701589][ T4746] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.750782][ T4748] hfsplus: bad catalog entry type [ 74.795935][ T4746] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.797653][ T36] hfsplus: b-tree write err: -5, ino 4 [ 74.822163][ T4746] EXT4-fs (loop4): 1 truncate cleaned up [ 74.831975][ T4746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.001393][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 75.564587][ T4775] loop2: detected capacity change from 0 to 4096 [ 75.618199][ T4775] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 75.657428][ T4775] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 75.688260][ T4775] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 75.710087][ T4775] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 75.716043][ T4784] loop4: detected capacity change from 0 to 256 [ 75.736490][ T4775] ntfs: volume version 3.1. [ 75.829602][ T4775] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp949. You might want to try to use the mount option nls=utf8. [ 75.898743][ T4784] FAT-fs (loop4): Directory bread(block 64) failed [ 75.928160][ T4784] FAT-fs (loop4): Directory bread(block 65) failed [ 75.962842][ T4775] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 75.973709][ T4784] FAT-fs (loop4): Directory bread(block 66) failed [ 75.986574][ T4775] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp949. You might want to try to use the mount option nls=utf8. [ 76.010860][ T4784] FAT-fs (loop4): Directory bread(block 67) failed [ 76.049002][ T4784] FAT-fs (loop4): Directory bread(block 68) failed [ 76.066194][ T4775] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 76.088715][ T4784] FAT-fs (loop4): Directory bread(block 69) failed [ 76.115811][ T4784] FAT-fs (loop4): Directory bread(block 70) failed [ 76.134343][ T4784] FAT-fs (loop4): Directory bread(block 71) failed [ 76.141058][ T4784] FAT-fs (loop4): Directory bread(block 72) failed [ 76.157987][ T4784] FAT-fs (loop4): Directory bread(block 73) failed [ 76.175310][ T4760] loop3: detected capacity change from 0 to 32768 [ 76.192536][ T4404] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.210656][ T4760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.145 (4760) [ 76.210781][ T4791] netlink: 44 bytes leftover after parsing attributes in process `syz.0.158'. [ 76.260752][ T4760] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.298923][ T4760] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 76.327021][ T4760] BTRFS info (device loop3): using free space tree [ 76.338888][ T128] cfg80211: failed to load regulatory.db [ 76.392697][ T4404] usb 2-1: Using ep0 maxpacket: 16 [ 76.400574][ T4404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.447942][ T4404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.472546][ T4404] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.492641][ T4404] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 76.501716][ T4404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.538570][ T4404] usb 2-1: config 0 descriptor?? [ 76.629039][ T4760] BTRFS info (device loop3): enabling ssd optimizations [ 76.734330][ T4802] loop0: detected capacity change from 0 to 4096 [ 76.780436][ T4802] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 76.863630][ T4802] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 76.936879][ T4802] ntfs: volume version 3.1. [ 76.958481][ T4404] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 76.987128][ T4404] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 77.013313][ T4822] loop4: detected capacity change from 0 to 1024 [ 77.041380][ T4404] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 77.075145][ T4404] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 77.123016][ T4404] microsoft 0003:045E:07DA.0001: no inputs found [ 77.149715][ T4404] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 77.178156][ T4404] usb 2-1: USB disconnect, device number 2 [ 77.207300][ T4268] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.235828][ T11] hfsplus: b-tree write err: -5, ino 4 [ 77.434648][ T4827] loop4: detected capacity change from 0 to 8 [ 77.515285][ T4834] loop0: detected capacity change from 0 to 64 [ 77.578308][ T4825] fido_id[4825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 77.595599][ T4834] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 77.625110][ T4827] SQUASHFS error: xz decompression failed, data probably corrupt [ 77.678826][ T4827] SQUASHFS error: Failed to read block 0x108: -5 [ 77.736586][ T4827] SQUASHFS error: Unable to read metadata cache entry [106] [ 77.782637][ T4827] SQUASHFS error: Unable to read inode 0x11f [ 78.013758][ T4846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 78.158500][ T4854] loop2: detected capacity change from 0 to 64 [ 78.248497][ T4854] hfs: bad catalog entry type 0 [ 78.274984][ T4858] loop0: detected capacity change from 0 to 1024 [ 78.333538][ T4858] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.400000][ T4408] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.473639][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 78.491001][ T4868] capability: warning: `syz.4.183' uses deprecated v2 capabilities in a way that may be insecure [ 78.526982][ T4866] loop1: detected capacity change from 0 to 256 [ 78.575593][ T4866] FAT-fs (loop1): Directory bread(block 64) failed [ 78.575649][ T4866] FAT-fs (loop1): Directory bread(block 65) failed [ 78.575720][ T4866] FAT-fs (loop1): Directory bread(block 66) failed [ 78.575745][ T4866] FAT-fs (loop1): Directory bread(block 67) failed [ 78.575806][ T4866] FAT-fs (loop1): Directory bread(block 68) failed [ 78.575831][ T4866] FAT-fs (loop1): Directory bread(block 69) failed [ 78.575897][ T4866] FAT-fs (loop1): Directory bread(block 70) failed [ 78.575921][ T4866] FAT-fs (loop1): Directory bread(block 71) failed [ 78.575986][ T4866] FAT-fs (loop1): Directory bread(block 72) failed [ 78.576009][ T4866] FAT-fs (loop1): Directory bread(block 73) failed [ 78.602496][ T4408] usb 4-1: Using ep0 maxpacket: 8 [ 78.614752][ T4408] usb 4-1: unable to get BOS descriptor or descriptor too short [ 78.615755][ T4408] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 78.615776][ T4408] usb 4-1: config 4 has no interface number 0 [ 78.615798][ T4408] usb 4-1: config 4 interface 30 has no altsetting 0 [ 78.618772][ T4408] usb 4-1: string descriptor 0 read error: -22 [ 78.618847][ T4408] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 78.618869][ T4408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.624923][ T4408] dw2102: su3000_identify_state [ 78.673372][ T4871] loop2: detected capacity change from 0 to 4096 [ 78.721279][ T4408] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 78.760146][ T4408] dw2102: su3000_power_ctrl: 1, initialized 0 [ 78.767159][ T4408] dvb-usb: bulk message failed: -22 (2/0) [ 78.770921][ T4873] loop0: detected capacity change from 0 to 1764 [ 78.787378][ T4408] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.818581][ T4408] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 78.831093][ T4853] dvb-usb: bulk message failed: -22 (3/0) [ 78.843938][ T4875] netlink: 'syz.4.185': attribute type 2 has an invalid length. [ 78.858477][ T4853] dw2102: i2c transfer failed. [ 78.868623][ T4408] usb 4-1: media controller created [ 78.881592][ T4853] dvb-usb: bulk message failed: -22 (3/0) [ 78.888220][ T4875] netlink: 48 bytes leftover after parsing attributes in process `syz.4.185'. [ 78.900108][ T4853] dw2102: i2c transfer failed. [ 78.919241][ T4853] dvb-usb: bulk message failed: -22 (4/0) [ 78.947630][ T4853] dw2102: i2c transfer failed. [ 78.980332][ T4408] dvb-usb: bulk message failed: -22 (6/0) [ 78.990134][ T4408] dw2102: i2c transfer failed. [ 79.022525][ T4408] dvb-usb: bulk message failed: -22 (6/0) [ 79.034238][ T4876] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.047440][ T4408] dw2102: i2c transfer failed. [ 79.052258][ T4408] dvb-usb: bulk message failed: -22 (6/0) [ 79.058740][ T4408] dw2102: i2c transfer failed. [ 79.067786][ T4408] dvb-usb: bulk message failed: -22 (6/0) [ 79.074003][ T4408] dw2102: i2c transfer failed. [ 79.078805][ T4408] dvb-usb: bulk message failed: -22 (6/0) [ 79.085973][ T4408] dw2102: i2c transfer failed. [ 79.090783][ T4408] dvb-usb: bulk message failed: -22 (6/0) [ 79.097294][ T4408] dw2102: i2c transfer failed. [ 79.107337][ T4408] dvb-usb: MAC address: 02:02:02:02:02:02 [ 79.141971][ T4408] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.154718][ T4871] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 79.168546][ T4408] dvb-usb: bulk message failed: -22 (3/0) [ 79.185654][ T4408] dw2102: command 0x0e transfer failed. [ 79.193458][ T4871] Remounting filesystem read-only [ 79.202092][ T4408] dvb-usb: bulk message failed: -22 (3/0) [ 79.212212][ T4408] dw2102: command 0x0e transfer failed. [ 79.276503][ T4277] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 79.572589][ T4408] dvb-usb: bulk message failed: -22 (3/0) [ 79.578404][ T4408] dw2102: command 0x0e transfer failed. [ 79.615645][ T4408] dvb-usb: bulk message failed: -22 (3/0) [ 79.621414][ T4408] dw2102: command 0x0e transfer failed. [ 79.688655][ T4408] dvb-usb: bulk message failed: -22 (1/0) [ 79.708135][ T4408] dw2102: command 0x51 transfer failed. [ 79.727246][ T4408] dvb-usb: bulk message failed: -22 (5/0) [ 79.754052][ T4898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'. [ 79.768585][ T4408] dw2102: i2c probe for address 0x68 failed. [ 79.774794][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 79.792625][ T4408] dvb-usb: bulk message failed: -22 (5/0) [ 79.798459][ T4408] dw2102: i2c probe for address 0x69 failed. [ 79.815418][ T4408] dvb-usb: bulk message failed: -22 (5/0) [ 79.821188][ T4408] dw2102: i2c probe for address 0x6a failed. [ 79.859328][ T4408] dw2102: probing for demodulator failed. Is the external power switched on? [ 79.872570][ T4408] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 79.999624][ T4905] loop4: detected capacity change from 0 to 512 [ 80.069738][ T4905] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.187628][ T4905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.192636][ T4408] rc_core: IR keymap rc-tt-1500 not found [ 80.196916][ T4905] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.202242][ T4408] Registered IR keymap rc-empty [ 80.276072][ T4408] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 80.350355][ T4408] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 80.361623][ T4917] netdevsim netdevsim3: Firmware load for '../file0' refused, path contains '..' component [ 80.407238][ T4408] dvb-usb: schedule remote query interval to 250 msecs. [ 80.439218][ T4408] dw2102: su3000_power_ctrl: 0, initialized 1 [ 80.457894][ T4408] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 80.528319][ T4920] loop2: detected capacity change from 0 to 512 [ 80.542147][ T4408] usb 4-1: USB disconnect, device number 2 [ 80.568052][ T4920] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.665897][ T4920] EXT4-fs (loop2): 1 truncate cleaned up [ 80.700824][ T4408] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 80.730801][ T4891] loop0: detected capacity change from 0 to 32768 [ 80.737497][ T4920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.806062][ T4896] loop1: detected capacity change from 0 to 40427 [ 80.839293][ T4891] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.192 (4891) [ 80.858255][ T4896] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 80.899399][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 80.903804][ T4896] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 80.922030][ T4891] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 80.954525][ T4891] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 80.998007][ T4891] BTRFS info (device loop0): using free space tree [ 81.004776][ T4896] F2FS-fs (loop1): invalid crc value [ 81.017744][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 81.020200][ T4929] loop3: detected capacity change from 0 to 2048 [ 81.041246][ T4896] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.115467][ T4929] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 81.152916][ T4896] F2FS-fs (loop1): Start checkpoint disabled! [ 81.180048][ T4929] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 81.202781][ T4896] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 81.217305][ T4929] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 81.223690][ T4945] loop2: detected capacity change from 0 to 736 [ 81.244208][ T4929] UDF-fs: Scanning with blocksize 512 failed [ 81.301416][ T4953] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 81.345504][ T4929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.370069][ T4945] rock: directory entry would overflow storage [ 81.397833][ T4891] BTRFS info (device loop0): enabling ssd optimizations [ 81.423326][ T4945] rock: sig=0x3b10, size=4, remaining=3 [ 81.623944][ T4267] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 81.636545][ T4312] kworker/u4:5: attempt to access beyond end of device [ 81.636545][ T4312] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 82.009058][ T4967] loop2: detected capacity change from 0 to 16 [ 82.061529][ T4967] erofs: (device loop2): mounted with root inode @ nid 36. [ 82.620202][ T4984] [U]  [ 82.912028][ T4965] loop3: detected capacity change from 0 to 32768 [ 83.004170][ T4402] kernel write not supported for file /uhid (pid: 4402 comm: kworker/1:10) [ 83.017553][ T4965] ERROR: (device loop3): dtSearch: stack overrun! [ 83.017553][ T4965] [ 83.077908][ T4965] ERROR: (device loop3): remounting filesystem as read-only [ 83.127790][ T4965] btstack dump: [ 83.131304][ T4965] bn = 0, index = 0 [ 83.165881][ T4965] bn = 72c, index = 96 [ 83.170010][ T4965] bn = 0, index = 0 [ 83.185069][ T4994] loop4: detected capacity change from 0 to 64 [ 83.197371][ T4965] bn = 72c, index = 96 [ 83.201497][ T4965] bn = 0, index = 0 [ 83.241506][ T4965] bn = 72c, index = 96 [ 83.266370][ T4965] bn = 0, index = 0 [ 83.270228][ T4965] bn = 0, index = 0 [ 83.419766][ T4996] loop4: detected capacity change from 0 to 8 [ 83.507840][ T4996] SQUASHFS error: Unable to read directory block [2c0:35] [ 83.542107][ T4974] loop2: detected capacity change from 0 to 40427 [ 83.578360][ T4988] loop1: detected capacity change from 0 to 32768 [ 83.589553][ T4974] F2FS-fs (loop2): invalid crc value [ 83.640987][ T4974] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.771349][ T4983] loop0: detected capacity change from 0 to 40427 [ 83.801397][ T4988] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 83.817675][ T4974] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.832147][ T4983] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 83.879212][ T4983] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 83.900803][ T4983] F2FS-fs (loop0): invalid crc value [ 83.909121][ T4988] (syz.1.227,4988,0):ocfs2_verify_group_and_input:425 ERROR: the add group should be in chain 1 [ 83.989374][ T4983] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.122466][ T4988] (syz.1.227,4988,0):ocfs2_group_add:503 ERROR: status = -22 [ 84.246120][ T5014] program syz.4.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.247794][ T4983] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 84.307928][ T4983] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.328001][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 85.072539][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.267124][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 85.277084][ T22] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 85.322487][ T22] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 509 [ 85.362472][ T22] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.403137][ T22] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.426711][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.449231][ T5020] loop3: detected capacity change from 0 to 32768 [ 85.457898][ T22] usb 2-1: SerialNumber: syz [ 85.471322][ T5030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.493213][ T5030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.514129][ T5043] loop2: detected capacity change from 0 to 16 [ 85.542922][ T5043] erofs: (device loop2): mounted with root inode @ nid 36. [ 85.941745][ T5030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.949593][ T5030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 86.182891][ T22] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 86.219549][ T22] usb 2-1: USB disconnect, device number 3 [ 86.312941][ T5070] loop4: detected capacity change from 0 to 128 [ 86.338835][ T5070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.368495][ T5070] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.420534][ T5076] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.527907][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 86.660149][ T5084] loop0: detected capacity change from 0 to 256 [ 86.704618][ T5084] exfat: Deprecated parameter 'namecase' [ 86.740412][ T5086] sp0: Synchronizing with TNC [ 86.754926][ T5084] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 86.867176][ T5091] loop2: detected capacity change from 0 to 64 [ 86.915856][ T5093] overlayfs: unrecognized mount option "GPL=û\}" or missing value [ 87.088044][ T5097] loop3: detected capacity change from 0 to 256 [ 87.140109][ T5097] FAT-fs (loop3): Directory bread(block 64) failed [ 87.152557][ T5097] FAT-fs (loop3): Directory bread(block 65) failed [ 87.168186][ T5097] FAT-fs (loop3): Directory bread(block 66) failed [ 87.192589][ T5097] FAT-fs (loop3): Directory bread(block 67) failed [ 87.217985][ T5097] FAT-fs (loop3): Directory bread(block 68) failed [ 87.243302][ T5097] FAT-fs (loop3): Directory bread(block 69) failed [ 87.266389][ T5097] FAT-fs (loop3): Directory bread(block 70) failed [ 87.286043][ T5097] FAT-fs (loop3): Directory bread(block 71) failed [ 87.295242][ T5097] FAT-fs (loop3): Directory bread(block 72) failed [ 87.301950][ T5097] FAT-fs (loop3): Directory bread(block 73) failed [ 87.330629][ T5107] loop0: detected capacity change from 0 to 256 [ 87.390432][ T5107] FAT-fs (loop0): Directory bread(block 64) failed [ 87.398464][ T4835] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.412084][ T5107] FAT-fs (loop0): Directory bread(block 65) failed [ 87.432776][ T5107] FAT-fs (loop0): Directory bread(block 66) failed [ 87.439833][ T5107] FAT-fs (loop0): Directory bread(block 67) failed [ 87.454424][ T5107] FAT-fs (loop0): Directory bread(block 68) failed [ 87.461176][ T5107] FAT-fs (loop0): Directory bread(block 69) failed [ 87.511922][ T5107] FAT-fs (loop0): Directory bread(block 70) failed [ 87.537799][ T5107] FAT-fs (loop0): Directory bread(block 71) failed [ 87.565377][ T5107] FAT-fs (loop0): Directory bread(block 72) failed [ 87.572281][ T5107] FAT-fs (loop0): Directory bread(block 73) failed [ 87.592459][ T4835] usb 3-1: Using ep0 maxpacket: 32 [ 87.600324][ T4835] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.643146][ T4835] usb 3-1: config 0 has no interface number 0 [ 87.668372][ T5113] loop4: detected capacity change from 0 to 4096 [ 87.670217][ T4835] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 87.739463][ T4835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.775586][ T5116] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.775660][ T4835] usb 3-1: Product: syz [ 87.841299][ T4835] usb 3-1: Manufacturer: syz [ 87.861517][ T4835] usb 3-1: SerialNumber: syz [ 87.887552][ T4835] usb 3-1: config 0 descriptor?? [ 87.928521][ T4835] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 87.981488][ T4835] usb 3-1: selecting invalid altsetting 1 [ 87.987565][ T4835] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 88.022918][ T4835] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.058179][ T4835] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 88.107533][ T4835] usb 3-1: media controller created [ 88.176664][ T4835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.549266][ T5111] loop1: detected capacity change from 0 to 32768 [ 88.562130][ T5115] loop3: detected capacity change from 0 to 32768 [ 88.640780][ T5115] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 88.681428][ T5111] XFS (loop1): Mounting V5 Filesystem [ 88.786996][ T5118] loop0: detected capacity change from 0 to 40427 [ 88.806815][ T5118] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 88.824831][ T5118] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.858915][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 88.871014][ T5118] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.908622][ T5111] XFS (loop1): Ending clean mount [ 88.974121][ T5111] XFS (loop1): Quotacheck needed: Please wait. [ 89.020485][ T5118] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 89.066281][ T5118] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.074013][ T5111] XFS (loop1): Quotacheck: Done. [ 89.184150][ T5120] loop4: detected capacity change from 0 to 32768 [ 89.213269][ T5101] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 89.230215][ T4266] XFS (loop1): Unmounting Filesystem [ 89.244677][ T4835] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 89.251978][ T4835] zl10353_read_register: readreg error (reg=127, ret==-71) [ 89.261940][ T4835] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 89.351230][ T4267] syz-executor: attempt to access beyond end of device [ 89.351230][ T4267] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.380077][ T5120] XFS (loop4): Mounting V5 Filesystem [ 89.455703][ T4835] usb 3-1: USB disconnect, device number 3 [ 89.613768][ T5120] XFS (loop4): Ending clean mount [ 89.650030][ T5120] XFS (loop4): Quotacheck needed: Please wait. [ 89.715407][ T5120] XFS (loop4): Quotacheck: Done. [ 89.863373][ T4269] XFS (loop4): Unmounting Filesystem [ 90.035723][ T5150] devtmpfs: Too few inodes for current use [ 90.236480][ T5156] loop1: detected capacity change from 0 to 764 [ 90.364375][ T5158] tmpfs: Too few inodes for current use [ 90.961107][ T5180] loop0: detected capacity change from 0 to 16 [ 90.997066][ T5148] loop2: detected capacity change from 0 to 32768 [ 91.009263][ T5180] erofs: (device loop0): mounted with root inode @ nid 36. [ 91.048270][ T5180] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 91.073916][ T5180] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 91.251431][ T5188] loop0: detected capacity change from 0 to 512 [ 91.322120][ T5188] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #17: comm syz.0.306: iget: bogus i_mode (0) [ 91.410375][ T5188] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.306: couldn't read orphan inode 17 (err -117) [ 91.438948][ T5188] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.666715][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 91.872489][ T4402] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.076331][ T4402] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.096153][ T4402] usb 2-1: config 0 has no interface number 0 [ 92.121971][ T4402] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 92.143363][ T4402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.167673][ T4402] usb 2-1: Product: syz [ 92.171876][ T4402] usb 2-1: Manufacturer: syz [ 92.201624][ T4402] usb 2-1: SerialNumber: syz [ 92.226141][ T5222] can0: slcan on ptm0. [ 92.239274][ T4402] usb 2-1: config 0 descriptor?? [ 92.358316][ T5221] can0 (unregistered): slcan off ptm0. [ 92.467558][ T4402] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 92.484200][ T4402] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 92.533142][ T4402] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 92.557572][ T4402] usb 2-1: media controller created [ 92.578036][ T5235] loop2: detected capacity change from 0 to 64 [ 92.626695][ T4402] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.701535][ T5238] netlink: 'syz.3.329': attribute type 2 has an invalid length. [ 92.705590][ T5202] loop4: detected capacity change from 0 to 40427 [ 92.743124][ T5242] netlink: 'syz.3.329': attribute type 2 has an invalid length. [ 92.760334][ T5202] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 92.832112][ T5202] F2FS-fs (loop4): invalid crc value [ 92.895112][ T5202] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.930833][ T4402] usb 2-1: USB disconnect, device number 4 [ 92.976337][ T5247] loop2: detected capacity change from 0 to 64 [ 93.056762][ T5202] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.328284][ T5261] loop3: detected capacity change from 0 to 256 [ 93.404602][ T5261] FAT-fs (loop3): Directory bread(block 64) failed [ 93.438310][ T5261] FAT-fs (loop3): Directory bread(block 65) failed [ 93.553149][ T5261] FAT-fs (loop3): Directory bread(block 66) failed [ 93.559740][ T5261] FAT-fs (loop3): Directory bread(block 67) failed [ 93.673178][ T5261] FAT-fs (loop3): Directory bread(block 68) failed [ 93.708554][ T5261] FAT-fs (loop3): Directory bread(block 69) failed [ 93.777692][ T5261] FAT-fs (loop3): Directory bread(block 70) failed [ 93.839254][ T5261] FAT-fs (loop3): Directory bread(block 71) failed [ 93.880399][ T5261] FAT-fs (loop3): Directory bread(block 72) failed [ 93.939273][ T5261] FAT-fs (loop3): Directory bread(block 73) failed [ 94.397407][ T5263] loop0: detected capacity change from 0 to 131072 [ 94.533380][ T5284] loop2: detected capacity change from 0 to 256 [ 94.540574][ T5263] XFS (loop0): Mounting V5 Filesystem [ 94.547557][ T5284] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.628355][ T5284] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 94.774866][ T5284] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 94.790822][ T5263] XFS (loop0): Starting recovery (logdev: internal) [ 94.822290][ T5263] XFS (loop0): Ending recovery (logdev: internal) [ 94.938355][ T4267] XFS (loop0): Unmounting Filesystem [ 95.263745][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 95.263758][ T27] audit: type=1326 audit(1762203579.934:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.3.349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f6e78f6c9 code=0x0 [ 95.840289][ T5296] loop4: detected capacity change from 0 to 32768 [ 95.860275][ T5296] XFS: ikeep mount option is deprecated. [ 95.925580][ T5331] sctp: [Deprecated]: syz.2.354 (pid 5331) Use of int in max_burst socket option. [ 95.925580][ T5331] Use struct sctp_assoc_value instead [ 95.966172][ T5296] XFS (loop4): Mounting V5 Filesystem [ 96.181402][ T5296] XFS (loop4): Ending clean mount [ 96.238239][ T5296] XFS (loop4): Quotacheck needed: Please wait. [ 96.370305][ T5296] XFS (loop4): Quotacheck: Done. [ 96.546052][ T4269] XFS (loop4): Unmounting Filesystem [ 96.712105][ T5352] loop1: detected capacity change from 0 to 4096 [ 96.900949][ T5365] MPTCP: kernel_bind error, err=-22 [ 96.917839][ T5352] ntfs3: loop1: failed to convert "0080" to koi8-ru [ 96.992793][ T5352] ntfs3: loop1: failed to convert name for inode 1e. [ 97.206536][ T5374] loop2: detected capacity change from 0 to 512 [ 97.268118][ T5374] EXT4-fs: Ignoring removed oldalloc option [ 97.281472][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 97.306437][ T5374] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.459784][ T5374] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.370: Parent and EA inode have the same ino 15 [ 97.504915][ T5374] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.370: Parent and EA inode have the same ino 15 [ 97.518496][ T5374] EXT4-fs (loop2): 1 orphan inode deleted [ 97.518530][ T5374] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.634973][ T5392] loop3: detected capacity change from 0 to 164 [ 97.657654][ T5392] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.693660][ T5394] raw_sendmsg: syz.0.377 forgot to set AF_INET. Fix it! [ 97.696463][ T4275] Bluetooth: hci4: command 0x0405 tx timeout [ 97.720467][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 98.115617][ T5406] loop0: detected capacity change from 0 to 47 [ 98.177433][ T5406] Trying to free block not in datazone [ 98.220841][ T5406] Trying to free block not in datazone [ 98.220853][ T5406] Trying to free block not in datazone [ 98.220860][ T5406] Trying to free block not in datazone [ 98.220868][ T5406] Trying to free block not in datazone [ 98.220874][ T5406] Trying to free block not in datazone [ 98.220881][ T5406] Trying to free block not in datazone [ 98.220894][ T5406] Trying to free block not in datazone [ 98.221098][ T5406] Trying to free block not in datazone [ 98.221762][ T5406] Trying to free block not in datazone [ 98.432499][ T5406] Trying to free block not in datazone [ 98.438003][ T5406] Trying to free block not in datazone [ 98.458286][ T5413] usb usb8: usbfs: process 5413 (syz.4.386) did not claim interface 0 before use [ 98.471811][ T5406] Trying to free block not in datazone [ 98.478545][ T5406] Trying to free block not in datazone [ 98.484294][ T5406] Trying to free block not in datazone [ 98.489975][ T5406] Trying to free block not in datazone [ 98.512055][ T5406] Trying to free block not in datazone [ 98.543259][ T5406] Trying to free block not in datazone [ 98.571784][ T5406] Trying to free block not in datazone [ 98.594761][ T5406] Trying to free block not in datazone [ 98.604192][ T5387] loop1: detected capacity change from 0 to 40427 [ 98.630207][ T5406] minix_free_block (loop0:5): bit already cleared [ 98.640612][ T5387] F2FS-fs (loop1): Invalid segment count (0) [ 98.667054][ T5387] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 98.676879][ T5420] loop4: detected capacity change from 0 to 16 [ 98.689981][ T5406] Trying to free block not in datazone [ 98.709450][ T5406] Trying to free block not in datazone [ 98.716810][ T5420] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 98.738443][ T5406] Trying to free block not in datazone [ 98.768915][ T5387] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.775386][ T5406] Trying to free block not in datazone [ 98.775396][ T5406] Trying to free block not in datazone [ 98.775404][ T5406] Trying to free block not in datazone [ 98.775411][ T5406] Trying to free block not in datazone [ 98.775416][ T5406] Trying to free block not in datazone [ 98.775423][ T5406] Trying to free block not in datazone [ 98.775429][ T5406] Trying to free block not in datazone [ 98.775442][ T5406] minix_free_block (loop0:6): bit already cleared [ 98.836986][ T5427] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 98.880823][ T5427] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 98.922879][ T5427] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 98.956807][ T5427] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 98.958276][ T5387] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 98.964797][ T5427] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 98.979250][ T5427] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 98.991476][ T5406] minix_free_block (loop0:6): bit already cleared [ 98.995766][ T5431] loop2: detected capacity change from 0 to 1024 [ 98.998152][ T5387] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.010190][ T5427] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 99.468698][ T5444] loop3: detected capacity change from 0 to 128 [ 99.747183][ T5446] loop0: detected capacity change from 0 to 32768 [ 99.912457][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.112614][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 100.124192][ T22] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.165711][ T5459] "syz.3.407" (5459) uses obsolete ecb(arc4) skcipher [ 100.191127][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.212448][ T22] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 100.242475][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.262794][ T22] usb 3-1: config 0 descriptor?? [ 100.512650][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.659799][ T5476] loop1: detected capacity change from 0 to 8192 [ 100.693891][ T5479] loop3: detected capacity change from 0 to 256 [ 100.732647][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 100.740673][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.770724][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.772570][ T22] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 100.789448][ T7] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 100.821499][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.838958][ T22] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 100.895569][ T7] usb 1-1: config 0 descriptor?? [ 100.910794][ T22] usb 3-1: USB disconnect, device number 4 [ 101.310219][ T7] ft260 0003:0403:6030.0003: item fetching failed at offset 0/2 [ 101.328895][ T7] ft260 0003:0403:6030.0003: failed to parse HID [ 101.347606][ T7] ft260: probe of 0003:0403:6030.0003 failed with error -22 [ 101.522420][ T4835] usb 1-1: USB disconnect, device number 2 [ 101.631860][ T5480] loop4: detected capacity change from 0 to 32768 [ 101.759469][ T5480] XFS (loop4): Mounting V5 Filesystem [ 101.814276][ T5482] loop1: detected capacity change from 0 to 32768 [ 101.856717][ T4258] udevd[4258]: symlink '../../loop4' '/dev/disk/by-diskseq/239.tmp-b7:4' failed: Read-only file system [ 101.870339][ T4258] udevd[4258]: symlink '../../loop4' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:4' failed: Read-only file system [ 101.935468][ T5507] loop3: detected capacity change from 0 to 256 [ 102.031799][ T5480] XFS (loop4): Ending clean mount [ 102.059125][ T5480] XFS (loop4): Quotacheck needed: Please wait. [ 102.119218][ T4258] udevd[4258]: symlink '../../loop3' '/dev/disk/by-diskseq/241.tmp-b7:3' failed: Read-only file system [ 102.195068][ T4258] udevd[4258]: symlink '../../loop3' '/dev/disk/by-diskseq/241.tmp-b7:3' failed: Read-only file system [ 102.246590][ T5480] XFS (loop4): Quotacheck: Done. [ 102.315157][ T4258] udevd[4258]: symlink '../../loop3' '/dev/disk/by-diskseq/241.tmp-b7:3' failed: Read-only file system [ 102.316318][ T4514] udevd[4514]: symlink '../../loop1' '/dev/disk/by-diskseq/240.tmp-b7:1' failed: Read-only file system [ 102.368363][ T4258] udevd[4258]: symlink '../../loop3' '/dev/disk/by-diskseq/241.tmp-b7:3' failed: Read-only file system [ 102.406268][ T5517] loop3: detected capacity change from 0 to 16 [ 102.438687][ T4514] udevd[4514]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 102.458303][ T5517] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.467119][ T4269] XFS (loop4): Unmounting Filesystem [ 102.477266][ T4258] udevd[4258]: symlink '../../loop3' '/dev/disk/by-diskseq/241.tmp-b7:3' failed: Read-only file system [ 102.537079][ T4258] udevd[4258]: symlink '../../loop3' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:3' failed: Read-only file system [ 103.194166][ T5539] loop1: detected capacity change from 0 to 16 [ 103.215811][ T5539] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 103.648247][ T5555] process 'syz.3.448' launched './file1' with NULL argv: empty string added [ 103.977519][ T5563] loop2: detected capacity change from 0 to 4096 [ 103.982174][ T5566] loop4: detected capacity change from 0 to 4096 [ 104.044148][ T5566] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 104.046694][ T5563] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 104.157707][ T5563] ntfs3: loop2: Failed to load $Extend. [ 104.782742][ T5587] loop2: detected capacity change from 0 to 1024 [ 104.828504][ T5587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.955210][ T5587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.186145][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 105.282318][ T5601] loop1: detected capacity change from 0 to 256 [ 105.339803][ T5601] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 105.623066][ T5614] netlink: 100 bytes leftover after parsing attributes in process `syz.2.484'. [ 105.813118][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.918157][ T5624] loop1: detected capacity change from 0 to 512 [ 105.954335][ T5624] EXT4-fs: Ignoring removed orlov option [ 105.980355][ T5624] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 106.015970][ T5624] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.479: corrupted in-inode xattr [ 106.019365][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 106.044327][ T22] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 106.062532][ T22] usb 4-1: config 0 has no interface number 0 [ 106.073004][ T22] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 106.083663][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.093037][ T22] usb 4-1: Product: syz [ 106.097230][ T22] usb 4-1: Manufacturer: syz [ 106.104461][ T22] usb 4-1: SerialNumber: syz [ 106.123351][ T22] usb 4-1: config 0 descriptor?? [ 106.138755][ T22] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 106.141678][ T5624] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.479: couldn't read orphan inode 15 (err -117) [ 106.168064][ T5624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.181886][ T5580] loop0: detected capacity change from 0 to 65536 [ 106.229334][ T5580] XFS (loop0): Mounting V5 Filesystem [ 106.279558][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 106.318969][ T5639] sp0: Synchronizing with TNC [ 106.327521][ T5638] [U] è [ 106.331802][ T5580] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x2a9/0x1060, inode 0x21 dinode [ 106.354235][ T22] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 106.359791][ T5580] XFS (loop0): Unmount and run xfs_repair [ 106.395590][ T22] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 106.397308][ T5580] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 106.460379][ T5580] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 106.501350][ T5580] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.545889][ T5580] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 69 c5 80 b8 ..e.....4.Xhi... [ 106.572560][ T5580] 00000030: 34 f7 58 68 69 c5 80 b8 00 00 00 00 00 00 00 00 4.Xhi........... [ 106.600442][ T5580] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.637209][ T5580] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00 ................ [ 106.664907][ T5580] 00000060: ff ff ff ff f6 31 a3 b2 00 00 00 00 00 00 00 02 .....1.......... [ 106.694315][ T5580] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 106.723135][ T5580] XFS (loop0): failed to read RT inodes [ 106.751235][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 106.760130][ T4320] usb 4-1: USB disconnect, device number 3 [ 106.788536][ T4320] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 106.819683][ T4320] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 106.856872][ T4320] quatech2 4-1:0.51: device disconnected [ 106.950492][ T5645] loop2: detected capacity change from 0 to 8192 [ 106.983198][ T5645] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.000367][ T5645] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 107.010787][ T5645] REISERFS (device loop2): using ordered data mode [ 107.017823][ T5645] reiserfs: using flush barriers [ 107.032589][ T5645] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.107759][ T4514] udevd[4514]: symlink '../../loop0' '/dev/disk/by-diskseq/258.tmp-b7:0' failed: Read-only file system [ 107.126030][ T5645] REISERFS (device loop2): checking transaction log (loop2) [ 107.141832][ T5641] loop1: detected capacity change from 0 to 32768 [ 107.201436][ T4514] udevd[4514]: symlink '../../loop0' '/dev/disk/by-diskseq/258.tmp-b7:0' failed: Read-only file system [ 107.241432][ T5647] loop4: detected capacity change from 0 to 4096 [ 107.289033][ T5647] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 107.322045][ T4933] udevd[4933]: symlink '../../loop3' '/dev/disk/by-diskseq/245.tmp-b7:3' failed: Read-only file system [ 107.389473][ T4258] udevd[4258]: symlink '../../loop2' '/dev/disk/by-diskseq/260.tmp-b7:2' failed: Read-only file system [ 107.413551][ T5647] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 107.437873][ T4258] udevd[4258]: symlink '../../loop2' '/dev/disk/by-label/syzk\x03.tmp-b7:2' failed: Read-only file system [ 107.449937][ T5647] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 107.470221][ T5645] REISERFS (device loop2): Using tea hash to sort names [ 107.483533][ T4258] udevd[4258]: symlink '../../loop2' '/dev/disk/by-uuid/12312312-1233-1233-1231-123413412412.tmp-b7:2' failed: Read-only file system [ 107.487341][ T4789] udevd[4789]: symlink '../../loop1' '/dev/disk/by-diskseq/262.tmp-b7:1' failed: Read-only file system [ 107.497395][ T5647] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 107.505132][ T5645] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 107.532483][ T5647] ntfs: volume version 3.1. [ 107.584718][ T4789] udevd[4789]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 107.616319][ T4933] udevd[4933]: symlink '../../loop3' '/dev/disk/by-diskseq/245.tmp-b7:3' failed: Read-only file system [ 107.658158][ T5647] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 107.680232][ T4514] udevd[4514]: symlink '../../loop4' '/dev/disk/by-diskseq/263.tmp-b7:4' failed: Read-only file system [ 107.803419][ T5005] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 107.860733][ T4269] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 107.968404][ T5656] loop1: detected capacity change from 0 to 128 [ 108.162930][ T5661] loop3: detected capacity change from 0 to 256 [ 108.197189][ T5661] exfat: Deprecated parameter 'utf8' [ 108.233535][ T5661] exfat: Deprecated parameter 'utf8' [ 108.283051][ T5661] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 108.742450][ T4320] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.760436][ T5681] loop3: detected capacity change from 0 to 8 [ 108.891278][ T5687] loop0: detected capacity change from 0 to 256 [ 108.948040][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024 [ 109.010903][ T4320] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 109.055274][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.103490][ T4320] usb 3-1: config 0 descriptor?? [ 109.119485][ T5669] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.366915][ T5665] loop1: detected capacity change from 0 to 32768 [ 109.451222][ T5665] XFS (loop1): Mounting V5 Filesystem [ 109.557417][ T4320] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 109.586157][ T5695] loop3: detected capacity change from 0 to 32768 [ 109.587485][ T4320] uclogic 0003:5543:0064.0004: item fetching failed at offset 3/5 [ 109.601058][ T5695] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.508 (5695) [ 109.607110][ T4402] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.638032][ T4320] uclogic 0003:5543:0064.0004: parse failed [ 109.652463][ T4320] uclogic: probe of 0003:5543:0064.0004 failed with error -22 [ 109.700226][ T5665] XFS (loop1): Ending clean mount [ 109.715208][ T5695] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 109.742558][ T5695] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 109.779414][ T5695] BTRFS info (device loop3): using free space tree [ 109.795157][ T4313] usb 3-1: USB disconnect, device number 5 [ 109.803500][ T4402] usb 5-1: Using ep0 maxpacket: 32 [ 109.810403][ T4402] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.828739][ T4402] usb 5-1: config 0 has no interface number 0 [ 109.839858][ T4266] XFS (loop1): Unmounting Filesystem [ 109.857460][ T4402] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 109.887644][ T4402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.913644][ T4402] usb 5-1: Product: syz [ 109.917865][ T4402] usb 5-1: Manufacturer: syz [ 109.930749][ T5713] loop0: detected capacity change from 0 to 1024 [ 109.932503][ T4402] usb 5-1: SerialNumber: syz [ 109.964748][ T4402] usb 5-1: config 0 descriptor?? [ 109.973156][ T4402] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 109.982142][ T4402] usb 5-1: selecting invalid altsetting 1 [ 109.988964][ T4402] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 109.999024][ T4402] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 110.009625][ T4402] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 110.018842][ T4402] usb 5-1: media controller created [ 110.040905][ T4402] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.059108][ T5713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.119628][ T5713] EXT4-fs warning (device loop0): empty_inline_dir:1874: bad inline directory (dir #12) - no `..' [ 110.144379][ T5695] BTRFS info (device loop3): enabling ssd optimizations [ 110.194646][ T4402] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 110.201827][ T4402] zl10353_read_register: readreg error (reg=127, ret==-71) [ 110.228237][ T4402] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 110.293103][ T4402] usb 5-1: USB disconnect, device number 2 [ 110.304710][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 110.432898][ T4268] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 110.525436][ T5732] program syz.0.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.565914][ T4258] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop3 scanned by udevd (4258) [ 111.117057][ T27] audit: type=1326 audit(1762203595.784:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6e78f6c9 code=0x7ffc0000 [ 111.176354][ T5758] loop2: detected capacity change from 0 to 256 [ 111.222654][ T27] audit: type=1326 audit(1762203595.784:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7f6e78f6c9 code=0x7ffc0000 [ 111.325907][ T27] audit: type=1326 audit(1762203595.784:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6e78f6c9 code=0x7ffc0000 [ 111.658253][ T5730] loop1: detected capacity change from 0 to 32768 [ 111.697023][ T5730] XFS: noikeep mount option is deprecated. [ 111.752441][ T5736] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.777822][ T5730] XFS (loop1): Mounting V5 Filesystem [ 111.832982][ T5757] loop0: detected capacity change from 0 to 32768 [ 111.851689][ T5757] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.523 (5757) [ 111.882768][ T5757] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 111.944859][ T5757] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 111.961868][ T5736] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.007746][ T5736] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.031016][ T5730] XFS (loop1): Ending clean mount [ 112.032425][ T5757] BTRFS info (device loop0): force zlib compression, level 3 [ 112.037540][ T5736] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.092507][ T5757] BTRFS info (device loop0): force clearing of disk cache [ 112.112498][ T5757] BTRFS info (device loop0): setting nodatasum [ 112.118711][ T5757] BTRFS info (device loop0): allowing degraded mounts [ 112.120626][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.149001][ T4514] udevd[4514]: symlink '../../loop1' '/dev/disk/by-diskseq/283.tmp-b7:1' failed: Read-only file system [ 112.173212][ T5757] BTRFS info (device loop0): enabling disk space caching [ 112.180282][ T5757] BTRFS info (device loop0): disk space caching is enabled [ 112.182411][ T5736] usb 3-1: SerialNumber: syz [ 112.202029][ T5730] XFS (loop1): Quotacheck needed: Please wait. [ 112.219040][ T4258] udevd[4258]: symlink '../../loop0' '/dev/disk/by-diskseq/284.tmp-b7:0' failed: Read-only file system [ 112.235694][ T4514] udevd[4514]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system [ 112.290037][ T5730] XFS (loop1): Quotacheck: Done. [ 112.361201][ T4258] udevd[4258]: symlink '../../loop0' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:0' failed: Read-only file system [ 112.421719][ T5736] usb 3-1: 0:2 : does not exist [ 112.443232][ T5757] BTRFS info (device loop0): rebuilding free space tree [ 112.489659][ T5757] BTRFS info (device loop0): disabling free space tree [ 112.526349][ T5784] loop4: detected capacity change from 0 to 32768 [ 112.544510][ T5757] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.590587][ T5757] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.602574][ T5782] loop3: detected capacity change from 0 to 32768 [ 112.621178][ T5736] usb 3-1: USB disconnect, device number 6 [ 112.649788][ T4266] XFS (loop1): Unmounting Filesystem [ 112.664730][ T5784] XFS (loop4): Mounting V5 Filesystem [ 112.765012][ T5782] XFS (loop3): Mounting V5 Filesystem [ 112.822953][ T5784] XFS (loop4): Ending clean mount [ 112.871807][ T4267] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 112.895984][ T5782] XFS (loop3): Ending clean mount [ 112.914185][ T4789] udevd[4789]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.943618][ T5782] XFS (loop3): Quotacheck needed: Please wait. [ 112.955198][ T4514] udevd[4514]: symlink '../../loop4' '/dev/disk/by-diskseq/285.tmp-b7:4' failed: Read-only file system [ 112.961501][ T4258] udevd[4258]: symlink '../../loop1' '/dev/disk/by-diskseq/283.tmp-b7:1' failed: Read-only file system [ 113.029284][ T4286] udevd[4286]: symlink '../../loop0' '/dev/disk/by-diskseq/284.tmp-b7:0' failed: Read-only file system [ 113.106274][ T4514] udevd[4514]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system [ 113.145314][ T4286] udevd[4286]: symlink '../../loop0' '/dev/disk/by-diskseq/284.tmp-b7:0' failed: Read-only file system [ 113.194200][ T4269] XFS (loop4): Unmounting Filesystem [ 113.238704][ T5782] XFS (loop3): Quotacheck: Done. [ 113.484869][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 113.537702][ T4268] XFS (loop3): Unmounting Filesystem [ 114.330140][ T5846] loop3: detected capacity change from 0 to 4096 [ 114.391949][ T5854] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.441344][ T5846] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 114.510318][ T5846] Remounting filesystem read-only [ 114.573655][ T5737] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 114.629469][ T4268] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 114.784213][ T5737] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 114.799551][ T5737] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.857059][ T5737] usb 3-1: config 0 interface 0 has no altsetting 0 [ 114.871047][ T5737] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 114.914775][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.946760][ T5737] usb 3-1: config 0 descriptor?? [ 114.952496][ T5851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.395369][ T5737] uclogic 0003:28BD:0094.0005: interface is invalid, ignoring [ 115.630721][ T5736] usb 3-1: USB disconnect, device number 7 [ 115.809105][ T5904] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 116.037773][ T5912] loop1: detected capacity change from 0 to 1024 [ 116.046358][ T5883] loop4: detected capacity change from 0 to 32768 [ 116.123340][ T5912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.149246][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 116.149259][ T27] audit: type=1800 audit(1762203600.814:15): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.573" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 116.236392][ T5883] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 116.368621][ T5883] [ 116.371005][ T5883] ====================================================== [ 116.378025][ T5883] WARNING: possible circular locking dependency detected [ 116.385059][ T5883] syzkaller #0 Not tainted [ 116.389479][ T5883] ------------------------------------------------------ [ 116.396494][ T5883] syz.4.560/5883 is trying to acquire lock: [ 116.402381][ T5883] ffff8880567f22e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb3/0x320 [ 116.413966][ T5883] [ 116.413966][ T5883] but task is already holding lock: [ 116.415350][ T5912] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, [ 116.421315][ T5883] ffff8880567f2378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x320 [ 116.421366][ T5883] [ 116.421366][ T5883] which lock already depends on the new lock. [ 116.421366][ T5883] [ 116.421371][ T5883] [ 116.421371][ T5883] the existing dependency chain (in reverse order) is: [ 116.421377][ T5883] [ 116.421377][ T5883] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 116.421398][ T5883] down_read+0x42/0x2d0 [ 116.421416][ T5883] ocfs2_init_acl+0x2fb/0x720 [ 116.421434][ T5883] ocfs2_mknod+0x1463/0x2350 [ 116.421448][ T5883] ocfs2_create+0x1b6/0x4a0 [ 116.421462][ T5883] path_openat+0x1187/0x2e70 [ 116.421475][ T5883] do_filp_open+0x1c1/0x3c0 [ 116.421488][ T5883] do_sys_openat2+0x142/0x490 [ 116.421504][ T5883] __x64_sys_openat+0x135/0x160 [ 116.421520][ T5883] do_syscall_64+0x4c/0xa0 [ 116.421536][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.421551][ T5883] [ 116.421551][ T5883] -> #3 (jbd2_handle){++++}-{0:0}: [ 116.421575][ T5883] start_this_handle+0x1f49/0x2150 [ 116.421594][ T5883] jbd2__journal_start+0x2b7/0x5a0 [ 116.421613][ T5883] jbd2_journal_start+0x26/0x30 [ 116.421632][ T5883] ocfs2_start_trans+0x372/0x6c0 [ 116.421651][ T5883] ocfs2_mknod+0xe6a/0x2350 [ 116.421666][ T5883] ocfs2_create+0x1b6/0x4a0 [ 116.421681][ T5883] path_openat+0x1187/0x2e70 [ 116.421693][ T5883] do_filp_open+0x1c1/0x3c0 [ 116.421706][ T5883] do_sys_openat2+0x142/0x490 [ 116.421721][ T5883] __x64_sys_openat+0x135/0x160 [ 116.430070][ T5912] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 116.440496][ T5883] do_syscall_64+0x4c/0xa0 [ 116.440517][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.440533][ T5883] [ 116.440533][ T5883] -> #2 (&journal->j_trans_barrier [ 116.469129][ T5912] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1280 with error 28 [ 116.472362][ T5883] ){.+.+}-{3:3}: [ 116.472376][ T5883] down_read+0x42/0x2d0 [ 116.472397][ T5883] ocfs2_start_trans+0x366/0x6c0 [ 116.472418][ T5883] ocfs2_mknod+0xe6a/0x2350 [ 116.472431][ T5883] ocfs2_create+0x1b6/0x4a0 [ 116.472446][ T5883] path_openat+0x1187/0x2e70 [ 116.472459][ T5883] do_filp_open+0x1c1/0x3c0 [ 116.472472][ T5883] do_sys_openat2+0x142/0x490 [ 116.477801][ T5912] EXT4-fs (loop1): This should not happen!! Data will be lost [ 116.477801][ T5912] [ 116.482737][ T5883] __x64_sys_openat+0x135/0x160 [ 116.482757][ T5883] do_syscall_64+0x4c/0xa0 [ 116.482771][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.482787][ T5883] [ 116.482787][ T5883] -> #1 (sb_internal#4 [ 116.488741][ T5912] EXT4-fs (loop1): Total free blocks count 0 [ 116.492869][ T5883] ){.+.+}-{0:0}: [ 116.492883][ T5883] ocfs2_start_trans+0x267/0x6c0 [ 116.492905][ T5883] ocfs2_truncate_file+0x648/0x14d0 [ 116.492921][ T5883] ocfs2_setattr+0x16a9/0x1cf0 [ 116.492938][ T5883] notify_change+0xc74/0xf40 [ 116.492953][ T5883] do_truncate+0x197/0x220 [ 116.498507][ T5912] EXT4-fs (loop1): Free/Dirty block details [ 116.503133][ T5883] path_openat+0x27f2/0x2e70 [ 116.503150][ T5883] do_filp_open+0x1c1/0x3c0 [ 116.503162][ T5883] do_sys_openat2+0x142/0x490 [ 116.503179][ T5883] __x64_sys_openat+0x135/0x160 [ 116.503193][ T5883] do_syscall_64+0x4c/0xa0 [ 116.503206][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.503223][ T5883] [ 116.503223][ T5883] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 116.773986][ T5883] __lock_acquire+0x2cf8/0x7c50 [ 116.779349][ T5883] lock_acquire+0x1b4/0x490 [ 116.784357][ T5883] down_write+0x36/0x60 [ 116.789021][ T5883] ocfs2_try_remove_refcount_tree+0xb3/0x320 [ 116.795510][ T5883] ocfs2_truncate_file+0xdd4/0x14d0 [ 116.801737][ T5883] ocfs2_setattr+0x16a9/0x1cf0 [ 116.807006][ T5883] notify_change+0xc74/0xf40 [ 116.812104][ T5883] do_truncate+0x197/0x220 [ 116.817025][ T5883] path_openat+0x27f2/0x2e70 [ 116.822119][ T5883] do_filp_open+0x1c1/0x3c0 [ 116.827127][ T5883] do_sys_openat2+0x142/0x490 [ 116.832398][ T5883] __x64_sys_openat+0x135/0x160 [ 116.837753][ T5883] do_syscall_64+0x4c/0xa0 [ 116.842687][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.849087][ T5883] [ 116.849087][ T5883] other info that might help us debug this: [ 116.849087][ T5883] [ 116.859381][ T5883] Chain exists of: [ 116.859381][ T5883] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 116.859381][ T5883] [ 116.873352][ T5883] Possible unsafe locking scenario: [ 116.873352][ T5883] [ 116.880779][ T5883] CPU0 CPU1 [ 116.886136][ T5883] ---- ---- [ 116.891486][ T5883] lock(&oi->ip_xattr_sem); [ 116.896076][ T5883] lock(jbd2_handle); [ 116.902657][ T5883] lock(&oi->ip_xattr_sem); [ 116.910648][ T5883] lock(&ocfs2_file_ip_alloc_sem_key); [ 116.916279][ T5883] [ 116.916279][ T5883] *** DEADLOCK *** [ 116.916279][ T5883] [ 116.924493][ T5883] 3 locks held by syz.4.560/5883: [ 116.929497][ T5883] #0: ffff88807a482460 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 116.938736][ T5883] #1: ffff8880567f2648 (&sb->s_type->i_mutex_key#36){+.+.}-{3:3}, at: do_truncate+0x183/0x220 [ 116.949107][ T5883] #2: ffff8880567f2378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x320 [ 116.960154][ T5883] [ 116.960154][ T5883] stack backtrace: [ 116.966037][ T5883] CPU: 0 PID: 5883 Comm: syz.4.560 Not tainted syzkaller #0 [ 116.973309][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.983358][ T5883] Call Trace: [ 116.986624][ T5883] [ 116.989542][ T5883] dump_stack_lvl+0x168/0x22e [ 116.994207][ T5883] ? load_image+0x3b0/0x3b0 [ 116.998699][ T5883] ? show_regs_print_info+0x12/0x12 [ 117.003884][ T5883] ? print_circular_bug+0x12b/0x1a0 [ 117.009072][ T5883] check_noncircular+0x274/0x310 [ 117.013996][ T5883] ? add_chain_block+0x940/0x940 [ 117.018919][ T5883] ? lockdep_lock+0xdc/0x1e0 [ 117.023495][ T5883] ? __schedule+0x10f4/0x40b0 [ 117.028156][ T5883] ? _find_first_zero_bit+0xcf/0x100 [ 117.033431][ T5883] __lock_acquire+0x2cf8/0x7c50 [ 117.038273][ T5883] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 117.044238][ T5883] ? verify_lock_unused+0x140/0x140 [ 117.049423][ T5883] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 117.055560][ T5883] ? lockdep_hardirqs_on+0x94/0x140 [ 117.060745][ T5883] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 117.066884][ T5883] lock_acquire+0x1b4/0x490 [ 117.071373][ T5883] ? ocfs2_try_remove_refcount_tree+0xb3/0x320 [ 117.077521][ T5883] ? __might_sleep+0xd0/0xd0 [ 117.082093][ T5883] ? preempt_count_add+0x8d/0x190 [ 117.087106][ T5883] ? read_lock_is_recursive+0x10/0x10 [ 117.092462][ T5883] ? rwsem_write_trylock+0x12f/0x1b0 [ 117.097823][ T5883] ? clear_nonspinnable+0x60/0x60 [ 117.102836][ T5883] ? ocfs2_truncate_file+0xcfa/0x14d0 [ 117.108198][ T5883] down_write+0x36/0x60 [ 117.112349][ T5883] ? ocfs2_try_remove_refcount_tree+0xb3/0x320 [ 117.118488][ T5883] ocfs2_try_remove_refcount_tree+0xb3/0x320 [ 117.124453][ T5883] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 117.130329][ T5883] ? preempt_count_add+0x8d/0x190 [ 117.135334][ T5883] ? up_write+0x1bb/0x420 [ 117.139648][ T5883] ? unmap_mapping_range+0x91/0x100 [ 117.144840][ T5883] ocfs2_truncate_file+0xdd4/0x14d0 [ 117.150029][ T5883] ? ocfs2_simple_size_update+0x470/0x470 [ 117.155734][ T5883] ? do_raw_spin_unlock+0x11d/0x230 [ 117.160921][ T5883] ? _raw_spin_unlock+0x24/0x40 [ 117.165771][ T5883] ? ocfs2_inode_lock_tracker+0x3e8/0x660 [ 117.171474][ T5883] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 117.177003][ T5883] ? ocfs2_rw_lock+0x134/0x240 [ 117.182014][ T5883] ? dquot_initialize+0x20/0x20 [ 117.187294][ T5883] ? ocfs2_create_new_inode_locks+0x640/0x640 [ 117.193350][ T5883] ? jbd2_journal_begin_ordered_truncate+0xb7/0x150 [ 117.199940][ T5883] ocfs2_setattr+0x16a9/0x1cf0 [ 117.204695][ T5883] ? ocfs2_extend_allocation+0x1840/0x1840 [ 117.210487][ T5883] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 117.216283][ T5883] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 117.222514][ T5883] ? ocfs2_xattr_get+0x12e/0x220 [ 117.227453][ T5883] ? ocfs2_get_reflink_xattr_value_root+0xd0/0xd0 [ 117.233852][ T5883] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 117.239733][ T5883] ? current_time+0x18e/0x2a0 [ 117.244395][ T5883] ? atime_needs_update+0x780/0x780 [ 117.249585][ T5883] ? evm_inode_setattr+0x91/0x790 [ 117.254599][ T5883] ? bpf_lsm_inode_setattr+0x5/0x10 [ 117.259789][ T5883] ? security_inode_setattr+0xd8/0x140 [ 117.265231][ T5883] ? try_break_deleg+0x79/0x120 [ 117.270065][ T5883] ? ocfs2_extend_allocation+0x1840/0x1840 [ 117.275860][ T5883] notify_change+0xc74/0xf40 [ 117.280438][ T5883] do_truncate+0x197/0x220 [ 117.284836][ T5883] ? aa_get_current_label+0x110/0x1d0 [ 117.290278][ T5883] ? put_page_bootmem+0x2c0/0x2c0 [ 117.295290][ T5883] ? ima_bprm_check+0x1f0/0x1f0 [ 117.300127][ T5883] ? bpf_lsm_path_truncate+0x5/0x10 [ 117.305313][ T5883] path_openat+0x27f2/0x2e70 [ 117.309891][ T5883] ? do_sys_openat2+0xcf/0x490 [ 117.314640][ T5883] ? __x64_sys_openat+0x135/0x160 [ 117.319652][ T5883] ? do_filp_open+0x3c0/0x3c0 [ 117.324316][ T5883] do_filp_open+0x1c1/0x3c0 [ 117.328890][ T5883] ? vfs_tmpfile+0x480/0x480 [ 117.333468][ T5883] ? _raw_spin_unlock+0x24/0x40 [ 117.338307][ T5883] ? alloc_fd+0x58f/0x630 [ 117.342625][ T5883] do_sys_openat2+0x142/0x490 [ 117.347290][ T5883] ? do_sys_open+0xe0/0xe0 [ 117.351691][ T5883] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 117.357660][ T5883] ? lock_chain_count+0x20/0x20 [ 117.362497][ T5883] __x64_sys_openat+0x135/0x160 [ 117.367336][ T5883] do_syscall_64+0x4c/0xa0 [ 117.371736][ T5883] ? clear_bhb_loop+0x60/0xb0 [ 117.376397][ T5883] ? clear_bhb_loop+0x60/0xb0 [ 117.381058][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.386935][ T5883] RIP: 0033:0x7fda9918f6c9 [ 117.391333][ T5883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.410920][ T5883] RSP: 002b:00007fda9a020038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.419316][ T5883] RAX: ffffffffffffffda RBX: 00007fda993e5fa0 RCX: 00007fda9918f6c9 [ 117.427268][ T5883] RDX: 000000000000275a RSI: 0000200000000140 RDI: ffffffffffffff9c [ 117.435225][ T5883] RBP: 00007fda99211f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.443180][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.451134][ T5883] R13: 00007fda993e6038 R14: 00007fda993e5fa0 R15: 00007fff63746618 [ 117.459092][ T5883] [ 117.472522][ T5912] EXT4-fs (loop1): free_blocks=68451041280 [ 117.503287][ T4258] udevd[4258]: symlink '../../loop1' '/dev/disk/by-diskseq/293.tmp-b7:1' failed: Read-only file system [ 117.514657][ T5912] EXT4-fs (loop1): dirty_blocks=1312 [ 117.519953][ T5912] EXT4-fs (loop1): Block reservation details [ 117.536067][ T4514] udevd[4514]: symlink '../../loop0' '/dev/disk/by-diskseq/288.tmp-b7:0' failed: Read-only file system [ 117.540043][ T4789] udevd[4789]: symlink '../../loop3' '/dev/disk/by-diskseq/292.tmp-b7:3' failed: Read-only file system [ 117.560730][ T4258] udevd[4258]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 117.573831][ T5912] EXT4-fs (loop1): i_reserved_data_blocks=82 [ 117.576124][ T4514] udevd[4514]: symlink '../../loop2' '/dev/disk/by-diskseq/282.tmp-b7:2' failed: Read-only file system [ 117.595562][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 117.615978][ T4258] udevd[4258]: symlink '../../loop4' '/dev/disk/by-diskseq/294.tmp-b7:4' failed: Read-only file system [ 117.645960][ T75] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 117.661157][ T4258] udevd[4258]: symlink '../../loop4' '/dev/disk/by-diskseq/294.tmp-b7:4' failed: Read-only file system [ 117.683354][ T4514] udevd[4514]: symlink '../../loop1' '/dev/disk/by-diskseq/293.tmp-b7:1' failed: Read-only file system [ 117.703693][ T4258] udevd[4258]: symlink '../../loop1' '/dev/disk/by-diskseq/293.tmp-b7:1' failed: Read-only file system [ 117.704266][ T4514] udevd[4514]: symlink '../../loop4' '/dev/disk/by-diskseq/295.tmp-b7:4' failed: Read-only file system