last executing test programs: 3m0.695006048s ago: executing program 32 (id=97): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) fallocate(r0, 0x20, 0x4000, 0x30000f5) 2m58.136512363s ago: executing program 33 (id=113): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/147, 0xb6) close_range(r0, 0xffffffffffffffff, 0x0) 2m55.923426676s ago: executing program 2 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c0003"], 0x38}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="bf000000000000003c001a803800048034"], 0x5c}}, 0x8000) 2m53.880044322s ago: executing program 2 (id=127): r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0x1, 0x3400) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="f1"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000200)={0x0, ""/266}, 0x112, 0xced6b2bc496a26e6, 0x1800) 2m53.07188985s ago: executing program 34 (id=128): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000002}, [@printk={@u}, @call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m53.052628807s ago: executing program 2 (id=131): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000640)={0x0, 0x0, 0x0, r2}) 2m52.85667679s ago: executing program 2 (id=132): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1400c, &(0x7f0000000080), 0x3, 0x47a, &(0x7f00000006c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 2m52.326085507s ago: executing program 2 (id=134): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x10001, 0x7}, &(0x7f0000000140)=0xc) 2m51.7747381s ago: executing program 2 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) 2m51.346083341s ago: executing program 35 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) 1m52.178404789s ago: executing program 7 (id=385): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m51.647513295s ago: executing program 7 (id=387): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m51.388801909s ago: executing program 7 (id=390): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 1m51.101743169s ago: executing program 7 (id=392): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m50.829377211s ago: executing program 7 (id=394): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3200009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m49.777763655s ago: executing program 7 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m47.968324944s ago: executing program 8 (id=412): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) 1m47.206815809s ago: executing program 8 (id=415): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 1m46.3485302s ago: executing program 8 (id=421): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x34}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 1m46.087384614s ago: executing program 8 (id=424): syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x550c, &(0x7f00000089c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m43.582564256s ago: executing program 8 (id=437): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x1, 0x9d3d, 0x13}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m41.513931429s ago: executing program 8 (id=443): r0 = socket$inet6(0xa, 0x1, 0x84) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000280)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4ea0, 0xd6, @private1, 0x1}, 0x1c) close(r0) 1m40.866408529s ago: executing program 36 (id=443): r0 = socket$inet6(0xa, 0x1, 0x84) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000280)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4ea0, 0xd6, @private1, 0x1}, 0x1c) close(r0) 1m34.191188353s ago: executing program 37 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 43.556393315s ago: executing program 5 (id=808): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0xfffff314}) 42.412890136s ago: executing program 5 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 42.072040869s ago: executing program 5 (id=821): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x0) 41.545967716s ago: executing program 5 (id=822): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000002c0)=0x700) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3200009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 39.751145087s ago: executing program 5 (id=829): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x78, &(0x7f0000000200)="0baeba5801183957102060f0416c4db001473465d9fdede4d4e12bb8d7540ff9e1137540d74ffb8871ffaf1ba3f184e14c5c3daa7bd4049e4446a2564aaf02ca52164fe6bfddc89f53b383f9fd8b12a57be9600a399ff608220e8220b8768e3037f156204cb27d8c820bccc932f87481c56b0cb9f260dcb1"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 37.413894532s ago: executing program 5 (id=838): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 37.369576026s ago: executing program 3 (id=839): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fb4d8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2303], 0xff, 0x5e5c, &(0x7f0000005d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') sendfile(r0, r1, 0x0, 0x20fffe82) 36.788017805s ago: executing program 38 (id=838): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 35.457638221s ago: executing program 3 (id=845): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 35.08990256s ago: executing program 3 (id=847): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000480)="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", 0x804}], 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) 34.364450209s ago: executing program 3 (id=851): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@quota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@uid}]}, 0x1, 0x61fd, &(0x7f000000c900)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) creat(&(0x7f0000000040)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') stat(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)) 32.875402142s ago: executing program 3 (id=856): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xefee, 0x4, 0x0, 0x8, 0x6}, &(0x7f0000000040)=0x14) 31.309468785s ago: executing program 3 (id=862): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x9}, 0x1c) sendmsg$inet6(r0, &(0x7f00000012c0)={&(0x7f0000001080)={0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000001240)="80", 0x1}], 0x1}, 0x4044000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) 30.664998735s ago: executing program 39 (id=862): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x9}, 0x1c) sendmsg$inet6(r0, &(0x7f00000012c0)={&(0x7f0000001080)={0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000001240)="80", 0x1}], 0x1}, 0x4044000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) 5.136731163s ago: executing program 9 (id=976): setuid(0xee00) r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f00000003c0)={0x0, 0xa846, 0x10, 0x3, 0x139}, &(0x7f0000002380)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.875905376s ago: executing program 9 (id=979): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x8, 0x4f, 0x7, 0x5, 0x9]}, &(0x7f0000000200)=0x54) 3.994786304s ago: executing program 1 (id=987): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x3fc, 0x7, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.636072604s ago: executing program 1 (id=990): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.206895375s ago: executing program 1 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40451}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1ff, 0x1, 0x6, 0x80000003, 0x2, 0x0, 0xcb, 0xf, 0x5, 0xb, 0x1f, 0x1a, 0x8, 0xf, 0xf, 0x9}}]}}]}, 0x170}}, 0x24008004) 3.007464867s ago: executing program 9 (id=996): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2.769776514s ago: executing program 1 (id=998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x38}}, 0x0) 2.655479178s ago: executing program 9 (id=1000): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 2.292329718s ago: executing program 1 (id=1003): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000180)={0x1, 0x200, 0x8, 0x808000, 0x7, 0x3, 0x10000080, 0xfffffffc, 0x5cc, 0x2, 0x5, 0x0, 0x7, 0x3}) 2.292059928s ago: executing program 9 (id=1004): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000100), 0x10) 2.074614488s ago: executing program 6 (id=1006): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x320}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x4000000) 1.921895696s ago: executing program 9 (id=1007): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.893643243s ago: executing program 0 (id=1008): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) 1.772972276s ago: executing program 4 (id=1009): socket$inet6_tcp(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xe827, 0x80, 0x1, 0x3c2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.642762048s ago: executing program 0 (id=1010): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 1.642040508s ago: executing program 6 (id=1011): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a4583c043d396d52fafd67bbd19f7e86b03f0890da3e3e1ac30139e27351572c4c42e96f4dec4c0c9d710f16af63cc306aa379bad5c6e7ef0f71776f0abdddb9ba606e921bcb3ac6bbea2ab3a0823b23088bc5e39310f040dacfd595b4675421c0046d89f2840d233d1034173a0fe91900d926e8d3a481c32b4f6079741d13e2ebb782090c8f38a9daebb1dea84e78c216cd7f9f10bf4b35158e3b36df0c4e9e74b585fc66f7b1fe5305f073f6de409973543e731424ab0605f2f4dfd7efe495ea426a69b13b27b7497895984a1502bac0855ad2bb86e88efdd6c976bbd1cc04dc6b4e8d579f1aecdf38461db91d3661703dec17b9a22d66299cacd23fb463dbb3fd7d59674fa4c5ec8b36422965f55ae455ef5051d029fe657b3f6c79a2bbfe60b0d64870d4ca793ebf5054a40157f0c78c3337cb131700670bc7dfa1cfddb8eb2d85b97c56339f45c4ee490d259121cdccf7be5bbc0ab7a375d931c0365c9809756d4491c866161833663e49a310df546ed841572ca40e40faea56bb05216b3390d807f756db218749a1c9a1ee817b9e5e6a00ca98e185cd6f690cc9e9d1567788e572378f11f688d8133c58b727ae51f95787f7f9952b32ed1494ea7e55f21baea3c9edb8b4523bbef158c8c239d4a54faa5996eb1f3f1c06acf8cd273e298e44b5642b8a50369b152a67932f48bed55c1c01d9a0ad6b2a3540e753c16e3054d483baad028fe42b4e5ebe562b6350c3a093f7456dde046258b8bfe19494d19a66809b612ba8deefea6b7007460ad826313420ac8e3f889da3c9b01a3d1f76acbdafb990fbe8479ded245d750a534e61b6b5fe9914f3760cbe0434f0b1593579f9d124e7c90ef5a50b21aad14ecd0cd712164782cfd329175225d99f90df6d123dde263d9329317f501199ba87458c0ead4baddeef35da92fea8ac878fa84bebfce075cbf56fad7fe823198ef50ce9e24d6c888337cfecb65e6dc7a3bce8f7b2cf734a1bf52cc24b77045e94c39756cb4287777e6f7bdfa19c387565dcb5258c3758a6d8cf94fa2adde5454735f944f6fde3c61376bf65c4c65bf973e1bdcd646b5883098b9f00712ab947b5a45ae1949357a7ef580895e7201e36ae4ab14da32e0a55327d25278d07e102c4e45f6566f5394c2259baa6b5b9511751c35ad74364be8bcfb77b0eb0d3c182dd50ae9fa498d5595bce5201d43acf6411e8e6074bdf001d4e4ddae00133002d9af61c3d9b594a230511c77460e477ab5d9d3d2dbdad6a971c4d4911d877a6d9eae79196e95565994954a3904d473fb369983020b99466c804127e8baf8147b5d228a17608d3ab4c31c6ad03135929e35feb8d166f5f820e40f94dd8102c9ca76ac48c3d668b00ca76cff37dcd35ddbf63b62ecaf7934a8ede4980f3294365ea63f7584373f638134fba55526983dabf2f189c70ddec701b55256d383dd802b4b09b801fb6cbe3408c9eb6d1fd85bf93b60b966680485d4550a3aa3454d888d6f8e81f669d4d87914041ac313e39f0ae29f31dedba1c5964c6729045cbd010e4469a7220335f76983c7d22a53401cb25444b9103643843726bdbb28d4032f9258f8539b9a7dfd6558b2c524d38c9e2e1c23fd7a6a42bf4bb5ebdf0b75ecc547ef15865536ee1de07155bc5e6b5a227c1170a6e4e44991f0685219c417d7194a4cdbce6a1e76f830fdd07887b49a3b648772b6e1b6fda08931540cc521e44f3fb221ce86438759704ce2422653a35f62c483a21ae6b34b14e6d900172dddecf8846a9423d784341296e141423f1c1efed6a0c334430647c0408af67c54a8cad69a43bf28ebe4a650343151223969bafa661999342df2a160f45b950f258f1e444575d6251a917bfcbb4dc834bd08d4deeb3be0dabade5f46060e54bc71f137f47e4233804eb9de", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0xd, "66581ddb34253c0556c786"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) 1.612334484s ago: executing program 4 (id=1012): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) recvmmsg(r1, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000005a40)=""/4091, 0xffb}], 0x1}, 0x5}], 0x1, 0x62, 0x0) 1.365882839s ago: executing program 0 (id=1013): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000180)={0x176, 0x0, [{0x2, 0x9, 0x7, 0xa3, 0x3, 0xa6, 0x5}]}) 1.244627473s ago: executing program 4 (id=1014): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x7f, 0x1f, 0x0, 0x83}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) read$midi(r0, 0x0, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) 1.231005191s ago: executing program 6 (id=1015): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.041430795s ago: executing program 0 (id=1016): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x3c, 0x14, 0x2, 0x70bd2c, 0x2, {0x2, 0x1, 0x0, 0xe005b8a858ea4c45}, [@IFA_CACHEINFO={0x14, 0x6, {0x10001, 0x1, 0x3, 0x30}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030203030303000010005a800c000080050002"], 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x840) 995.199128ms ago: executing program 6 (id=1017): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e1f, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 789.911869ms ago: executing program 4 (id=1018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 718.8364ms ago: executing program 0 (id=1019): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@orlov}, {@usrjquota}]}, 0x3, 0x556, &(0x7f0000000500)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2brkmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwMAay/4UIl6OiG+SiMMRkeTrhiNfOba63crD69PZkkS9/ulfSWO7rN58rebzDuaVlyLit68iThY2t1tdWp4rlcvpQl4fr81fGa8uLZ+6NF+aTWfTy5NTU2fenpp87913ehbrG+f/+f6Tux+e+fr4yne/3D9yO4mzcShf1xrHE7jRWhmLsfw9GYmzj2w40YPGdpOk3zvAjgzleT4SWR9wOIbyrAf+/76MiDowoBL5DwOqOQ5oXtv36Dr4ufHgg9ULoM3xD69+NhL7GtdGB1aSDVdG2fXuaA/az9r49c87t7Mlevc5BMC2btyMiNPDw5v7vyTv/3budBfbPNqG/g+enbvZ+OfNduOfwtr4J9qMfw62yd2d2D7/C/fXy3t60OJG2fjv/bbj37VJq9GhvPZCY8w3kly8VE6zvu3FiDgRI3uz+lbzOWdW7tU7rWsd/2VL1n5zLJjvx/3hvRufM1OqlZ4k5lYPbka80nb8m6wd/6TN8c/ej/NdtnEsvfNap3Xbx/901X+KeL3t8V+f0Uq2np8cb5wP482zYrO/bx37vVP7/Y4/O/4Hto5/NGmdr60+fhs/7vs37bRuQ/zR/fm/J/msUW72CNdKtdrCRMSe5OPNj0+uP7dZb26fxX/i+Nb9X7vzf39EfN5l/LeO/vxqV/H36fjPPNbxf/zCvY+++KFT+931f281SifyR7rp/7rdwSd57wAAAAAAAGC3KUTEoUgKxbVyoVAsrt7fcTQOFMqVau3kxcri5ZlofFd2NEYKzZnuwy33Q0zk98M265OP1Kci4khEfDu0v1EvTlfKM/0OHgAAAAAAAAAAAAAAAAAAAHaJgx2+/5/5Y6jfewc8dX7yGwbXtvnfi196AnYl//9hcMl/GFzyHwaX/IfBJf9hcMl/GFzyHwaX/AcAAAAAAAAAAAAAAAAAAAAAAAAAAICeOn/uXLbUVx5en87qM1eXFucqV0/NpNW54vzidHG6snClOFupzJbT4nRlfrvXK1cqVyYmY/HaeC2t1sarS8sX5iuLl2sXLs2XZtML6cgziQoAAAAAAAAAAAAAAAAAAACeL9Wl5blSuZwuKCjsqDC8O3ZDoceFfvdMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDuvwAAAP//MsI3tw==") chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x3af4701e) getdents64(r0, 0x0, 0x4f) 602.535074ms ago: executing program 6 (id=1020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x80, "759249ca79a4c27eb005b915dd578d01"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 392.461234ms ago: executing program 4 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x3, 0x7fe2, 0x1, 0x101}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 325.787205ms ago: executing program 6 (id=1022): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000140)='./file0\x00', 0x301c802, &(0x7f0000000040)=ANY=[], 0x13, 0x601e, &(0x7f0000000440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x64042, 0x12e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 237.296033ms ago: executing program 4 (id=1023): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) unshare(0x26020480) fadvise64(r0, 0x18, 0x0, 0x4) 54.300568ms ago: executing program 0 (id=1024): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 0s ago: executing program 1 (id=1025): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0x0, 0xee01) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) kernel console output (not intermixed with test programs): 388864) [ 175.509977][ T127] hub: probe of 1-1:1.0 failed with error -5 [ 175.524994][ T4957] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 175.550692][ T4957] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 175.595194][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 175.681273][ T127] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 175.785481][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 175.845622][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 175.866078][ T127] usb 6-1: USB disconnect, device number 4 [ 175.956011][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 175.985410][ T5972] fido_id[5972]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 176.040161][ T129] usb 1-1: USB disconnect, device number 10 [ 176.051045][ T129] usblp1: removed [ 176.056921][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 176.196637][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 176.459915][ T4317] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.616574][ T5994] Invalid argument reading file caps for ./file0 [ 176.641416][ T4317] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.660332][ T4317] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.764661][ T4317] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.917050][ T4317] usb 1-1: language id specifier not provided by device, defaulting to English [ 176.989884][ T4317] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 177.040474][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.090472][ T4317] hub 1-1:1.0: bad descriptor, ignoring hub [ 177.096603][ T4317] hub: probe of 1-1:1.0 failed with error -5 [ 177.286627][ T4317] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 177.350340][ T4317] usb 1-1: USB disconnect, device number 11 [ 177.370877][ T4317] usblp0: removed [ 178.405898][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.422'. [ 179.114409][ T4745] EXT4-fs: 26 callbacks suppressed [ 179.114427][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 179.217841][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 179.392808][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 179.508211][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 179.642173][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 179.691225][ T6031] loop8: detected capacity change from 0 to 40427 [ 179.700305][ T27] audit: type=1326 audit(1772552131.296:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.0.432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd60a79c799 code=0x0 [ 179.722356][ T4745] EXT4-fs error: 30 callbacks suppressed [ 179.722374][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 179.722641][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 179.775745][ T6031] F2FS-fs (loop8): build fault injection attr: rate: 684, type: 0x3ffff [ 179.796652][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 179.815365][ T6031] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x35f7 [ 179.823906][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 179.839904][ T5327] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 179.863364][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 179.882963][ T6031] F2FS-fs (loop8): invalid crc value [ 179.891989][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 179.926571][ T6031] F2FS-fs (loop8): Found nat_bits in checkpoint [ 179.969737][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 180.036674][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 180.043789][ T5327] usb 6-1: Using ep0 maxpacket: 16 [ 180.062119][ T6031] F2FS-fs (loop8): Start checkpoint disabled! [ 180.074081][ T5327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.106552][ T5327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.131349][ T5327] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 180.177923][ T5327] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 180.177947][ T6031] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 180.225919][ T5327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.226853][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 180.258602][ T5327] usb 6-1: config 0 descriptor?? [ 180.354641][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 180.454787][ T6031] F2FS-fs (loop8) : inject checkpoint error in f2fs_balance_fs of f2fs_setxattr+0x1ae/0x310 [ 180.528511][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 180.700924][ T5327] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.000B/input/input22 [ 180.752741][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 180.809504][ T5412] F2FS-fs (loop8): access invalid blkaddr:4043309056 [ 180.823193][ T5327] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 180.859942][ T5412] CPU: 1 PID: 5412 Comm: syz-executor Not tainted syzkaller #0 [ 180.867605][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.877730][ T5412] Call Trace: [ 180.881073][ T5412] [ 180.884057][ T5412] dump_stack_lvl+0x188/0x24e [ 180.888795][ T5412] ? show_regs_print_info+0x12/0x12 [ 180.894241][ T5412] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 180.900303][ T5412] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 180.905805][ T5412] f2fs_map_blocks+0xd2a/0x3410 [ 180.910791][ T5412] ? f2fs_get_block+0x140/0x140 [ 180.915725][ T5412] ? xa_load+0x2b3/0x2e0 [ 180.920118][ T5412] ? xa_load+0x60/0x2e0 [ 180.924517][ T5412] ? page_index+0xe7/0x470 [ 180.929126][ T5412] f2fs_mpage_readpages+0xa9a/0x2850 [ 180.934515][ T5412] ? dquot_release_reservation_block+0xa0/0xa0 [ 180.940735][ T5412] ? __mod_lruvec_page_state+0xa1/0x410 [ 180.946337][ T5412] ? f2fs_readahead+0x180/0x380 [ 180.951248][ T5412] ? blk_start_plug+0x94/0x110 [ 180.956244][ T5412] read_pages+0x185/0x850 [ 180.960796][ T5412] ? folio_put+0xd0/0xd0 [ 180.965102][ T5412] ? page_cache_ra_unbounded+0x770/0x770 [ 180.970971][ T5412] ? filemap_add_folio+0x188/0x3c0 [ 180.976155][ T5412] page_cache_ra_unbounded+0x690/0x770 [ 180.981678][ T5412] f2fs_readdir+0x487/0xa00 [ 180.986240][ T5412] ? f2fs_fill_dentries+0xce0/0xce0 [ 180.991487][ T5412] ? end_current_label_crit_section+0x14b/0x170 [ 180.997771][ T5412] ? iterate_dir+0x10d/0x560 [ 181.002401][ T5412] ? down_read_killable+0x1cc/0x340 [ 181.007656][ T5412] ? fsnotify_perm+0x248/0x550 [ 181.012463][ T5412] iterate_dir+0x218/0x560 [ 181.016925][ T5412] ? f2fs_fill_dentries+0xce0/0xce0 [ 181.022163][ T5412] __se_sys_getdents64+0xf2/0x270 [ 181.027235][ T5412] ? __x64_sys_getdents64+0x80/0x80 [ 181.032465][ T5412] ? filldir+0x700/0x700 [ 181.036746][ T5412] ? lockdep_hardirqs_on+0x94/0x140 [ 181.041982][ T5412] do_syscall_64+0x4c/0xa0 [ 181.046442][ T5412] ? clear_bhb_loop+0x60/0xb0 [ 181.051162][ T5412] ? clear_bhb_loop+0x60/0xb0 [ 181.055902][ T5412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.061837][ T5412] RIP: 0033:0x7f1e139c5133 [ 181.066286][ T5412] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 181.086017][ T5412] RSP: 002b:00007fff133ed9f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 181.094475][ T5412] RAX: ffffffffffffffda RBX: 000055556f298a30 RCX: 00007f1e139c5133 [ 181.102488][ T5412] RDX: 0000000000008000 RSI: 000055556f298a60 RDI: 0000000000000005 [ 181.110519][ T5412] RBP: 000055556f298a60 R08: 00007f1e13bebe20 R09: 0000000000000001 [ 181.118539][ T5412] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556f298a34 [ 181.126903][ T5412] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff133efca0 [ 181.135288][ T5412] [ 181.168754][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 181.219873][ T4954] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 181.254716][ T4957] usb 6-1: USB disconnect, device number 5 [ 181.289447][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 181.378862][ T5412] bio_check_eod: 7 callbacks suppressed [ 181.378882][ T5412] syz-executor: attempt to access beyond end of device [ 181.378882][ T5412] loop8: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 181.407289][ T5412] syz-executor: attempt to access beyond end of device [ 181.407289][ T5412] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 181.414974][ T4954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.436535][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 181.463954][ T4954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.474403][ T6080] fido_id[6080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 181.499509][ T4954] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.525643][ T4954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.544537][ T4954] usb 1-1: Product: syz [ 181.548782][ T4954] usb 1-1: Manufacturer: syz [ 181.568088][ T4954] usb 1-1: SerialNumber: syz [ 181.795110][ T4954] usb 1-1: 0:2 : does not exist [ 181.818031][ T4954] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 181.921619][ T4954] usb 1-1: USB disconnect, device number 12 [ 182.055222][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.439'. [ 182.096220][ T6088] bridge0: port 3(vlan2) entered blocking state [ 182.120085][ T6088] bridge0: port 3(vlan2) entered disabled state [ 182.151209][ T6088] device vlan2 entered promiscuous mode [ 182.175235][ T6088] device macvtap0 entered promiscuous mode [ 182.191338][ T4466] udevd[4466]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.359098][ T4977] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.615147][ T4977] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.803333][ T4977] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.940034][ T4977] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.130585][ T6085] loop6: detected capacity change from 0 to 32768 [ 183.393282][ T6101] UFO tlock:0xffffc900028aa1b0 [ 183.670973][ T6110] loop0: detected capacity change from 0 to 128 [ 183.687831][ T6109] loop5: detected capacity change from 0 to 512 [ 183.831282][ T6110] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.852684][ T5532] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.867023][ T6109] tipc: Started in network mode [ 183.904660][ T6109] tipc: Node identity 2d7755a7e347459e002e, cluster identity 4711 [ 183.955361][ T6110] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.202700][ T4745] EXT4-fs: 25 callbacks suppressed [ 184.202721][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 184.356082][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 184.435093][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 184.566883][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 184.747519][ T4745] EXT4-fs error: 23 callbacks suppressed [ 184.747539][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 184.865010][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 184.908663][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 184.930730][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.942047][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.951133][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.959160][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.968989][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 184.976444][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 184.976466][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.167878][ T6131] loop6: detected capacity change from 0 to 4096 [ 185.176046][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 185.261865][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 185.419899][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 185.448190][ T6143] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.539902][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 185.761110][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 185.803560][ T27] audit: type=1800 audit(1772552137.396:137): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.451" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 185.824475][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.844038][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 185.986179][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 186.120949][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 186.183962][ T6132] chnl_net:caif_netlink_parms(): no params data found [ 186.336317][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 186.373283][ T4745] EXT4-fs (loop7): Remounting filesystem read-only [ 186.499285][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 186.791783][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 186.854118][ T4977] device hsr_slave_0 left promiscuous mode [ 186.915966][ T4977] device hsr_slave_1 left promiscuous mode [ 186.930487][ T4977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.955835][ T4745] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 186.996132][ T4977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.014430][ T4977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.036780][ T4977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.069516][ T4977] device bridge_slave_1 left promiscuous mode [ 187.082277][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 187.100079][ T4977] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.160229][ T4977] device bridge_slave_0 left promiscuous mode [ 187.166573][ T4977] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.278382][ T4977] device veth1_macvtap left promiscuous mode [ 187.298667][ T4977] device veth0_macvtap left promiscuous mode [ 187.313859][ T4977] device veth1_vlan left promiscuous mode [ 187.328813][ T4977] device veth0_vlan left promiscuous mode [ 188.666050][ T4977] team0 (unregistering): Port device team_slave_1 removed [ 188.778242][ T4977] team0 (unregistering): Port device team_slave_0 removed [ 188.881586][ T4977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.978943][ T4977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.311038][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 189.795894][ T4977] bond0 (unregistering): Released all slaves [ 190.337872][ T6199] loop0: detected capacity change from 0 to 262144 [ 190.350222][ T6199] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.472 (6199) [ 190.394635][ T6199] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 190.405209][ T6199] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 190.414975][ T6199] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 190.425719][ T6199] BTRFS info (device loop0): trying to use backup root at mount time [ 190.434311][ T6199] BTRFS info (device loop0): using free space tree [ 190.620920][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.628528][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.721376][ T4745] EXT4-fs: 21 callbacks suppressed [ 190.721396][ T4745] EXT4-fs (loop7): unmounting filesystem. [ 190.787613][ T6132] device bridge_slave_0 entered promiscuous mode [ 190.869167][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.940151][ T6199] BTRFS info (device loop0): enabling ssd optimizations [ 190.940412][ T6227] loop6: detected capacity change from 0 to 7 [ 190.966081][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.042107][ T6132] device bridge_slave_1 entered promiscuous mode [ 191.069542][ T6199] BTRFS info (device loop0): balance: start -d -s [ 191.077137][ T6227] Dev loop6: unable to read RDB block 7 [ 191.103069][ T6199] BTRFS info (device loop0): relocating block group 22020096 flags system|dup [ 191.133842][ T6227] loop6: unable to read partition table [ 191.186705][ T6199] BTRFS info (device loop0): relocating block group 13631488 flags data [ 191.209387][ T6132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.220687][ T6227] loop6: partition table beyond EOD, truncated [ 191.266814][ T6227] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 191.290631][ T6199] BTRFS info (device loop0): balance: canceled [ 191.345165][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 191.360843][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.372889][ T6132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.401458][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.410567][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.418521][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.431775][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 191.439305][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.551856][ T4268] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 191.752946][ T6132] team0: Port device team_slave_0 added [ 191.961067][ T6132] team0: Port device team_slave_1 added [ 192.126466][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.168808][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.246582][ T6132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.334609][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.366098][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.450523][ T5327] kernel read not supported for file /swradio0 (pid: 5327 comm: kworker/1:13) [ 192.499845][ T6132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.703358][ T6132] device hsr_slave_0 entered promiscuous mode [ 192.749282][ T6132] device hsr_slave_1 entered promiscuous mode [ 192.978031][ T4977] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.099959][ T5329] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 193.210332][ T4977] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.246698][ T6233] chnl_net:caif_netlink_parms(): no params data found [ 193.291749][ T5329] usb 7-1: config 0 interface 0 has no altsetting 0 [ 193.328559][ T5329] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 193.368380][ T5329] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 193.391372][ T5329] usb 7-1: Product: syz [ 193.395654][ T5329] usb 7-1: Manufacturer: syz [ 193.409842][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 193.420309][ T5329] usb 7-1: SerialNumber: syz [ 193.429007][ T4977] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.451347][ T5329] usb 7-1: config 0 descriptor?? [ 193.479983][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 193.497521][ T5329] usb 7-1: selecting invalid altsetting 0 [ 193.764056][ T5329] usb 7-1: USB disconnect, device number 5 [ 193.850078][ T4977] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.146165][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.166554][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.179403][ T6233] device bridge_slave_0 entered promiscuous mode [ 194.307981][ T6233] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.315571][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.336923][ T6233] device bridge_slave_1 entered promiscuous mode [ 194.443803][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.450923][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.562770][ T6233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.604197][ T6233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.007451][ T6233] team0: Port device team_slave_0 added [ 195.127769][ T6233] team0: Port device team_slave_1 added [ 195.152184][ T6132] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 195.186834][ T6328] loop5: detected capacity change from 0 to 64 [ 195.233265][ T6328] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 195.334579][ T6316] device syzkaller1 entered promiscuous mode [ 195.351915][ T6132] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 195.450359][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.458287][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.559139][ T6233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.570171][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 195.706356][ T6132] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 195.788587][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.815172][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.877716][ T6233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.957086][ T6233] device hsr_slave_0 entered promiscuous mode [ 195.967994][ T6233] device hsr_slave_1 entered promiscuous mode [ 196.000075][ T6233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.025717][ T6233] Cannot create hsr debugfs directory [ 196.479253][ T6343] loop5: detected capacity change from 0 to 1024 [ 196.730159][ T27] audit: type=1800 audit(1772552148.256:138): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.505" name=80E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080 [ 196.891223][ T11] hfsplus: b-tree write err: -5, ino 4 [ 196.944008][ T6337] loop0: detected capacity change from 0 to 131072 [ 196.994710][ T6337] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 197.003333][ T6337] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 197.024511][ T6337] F2FS-fs (loop0): invalid crc value [ 197.073736][ T6337] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.129372][ T6337] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 197.136598][ T6337] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 197.412161][ T6358] sctp: [Deprecated]: syz.5.507 (pid 6358) Use of int in maxseg socket option. [ 197.412161][ T6358] Use struct sctp_assoc_value instead [ 197.491443][ T6132] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 197.640304][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 198.000036][ T6369] Bluetooth: MGMT ver 1.22 [ 198.419848][ T6379] loop5: detected capacity change from 0 to 256 [ 198.477176][ T6379] exfat: Deprecated parameter 'utf8' [ 198.543780][ T6379] exfat: Deprecated parameter 'utf8' [ 198.631554][ T6379] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 198.873309][ T6387] input: syz1 as /devices/virtual/input/input23 [ 199.056079][ T6391] loop0: detected capacity change from 0 to 128 [ 199.095735][ T6391] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 199.138801][ T6391] hpfs: filesystem error: improperly stopped [ 199.169944][ T6391] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 199.177860][ T6391] hpfs: You really don't want any checks? You are crazy... [ 199.200178][ T6391] hpfs: hpfs_map_sector(): read error [ 199.205659][ T6391] hpfs: code page support is disabled [ 199.258647][ T6391] hpfs: hpfs_map_4sectors(): unaligned read [ 199.280012][ T6391] hpfs: hpfs_map_4sectors(): unaligned read [ 199.286007][ T6391] hpfs: filesystem error: unable to find root dir [ 199.434414][ T6400] loop5: detected capacity change from 0 to 256 [ 199.635740][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.688711][ T6404] netlink: 'syz.0.523': attribute type 12 has an invalid length. [ 199.719697][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 199.728060][ T4286] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 199.741225][ T6404] netlink: 'syz.0.523': attribute type 29 has an invalid length. [ 199.750524][ T6404] netlink: 148 bytes leftover after parsing attributes in process `syz.0.523'. [ 199.839131][ T6404] netlink: 'syz.0.523': attribute type 2 has an invalid length. [ 199.859836][ T6404] netlink: 'syz.0.523': attribute type 3 has an invalid length. [ 200.178413][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.228593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.255815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.314414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.345040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.379210][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.386604][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.415403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.436894][ T6233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 200.473758][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.493457][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.538106][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.545395][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.608747][ T4977] device hsr_slave_0 left promiscuous mode [ 200.630164][ T4977] device hsr_slave_1 left promiscuous mode [ 200.657351][ T4977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.670843][ T4977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.690795][ T4977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.710951][ T4977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.730579][ T4977] device bridge_slave_1 left promiscuous mode [ 200.736854][ T4977] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.789087][ T4977] device bridge_slave_0 left promiscuous mode [ 200.815261][ T4977] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.907760][ T4977] device veth1_macvtap left promiscuous mode [ 200.938285][ T4977] device veth0_macvtap left promiscuous mode [ 200.946179][ T4977] device veth1_vlan left promiscuous mode [ 200.959984][ T4977] device veth0_vlan left promiscuous mode [ 201.050845][ T6414] loop0: detected capacity change from 0 to 32768 [ 201.091869][ T6414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.526 (6414) [ 201.154455][ T6414] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.175414][ T6414] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 201.219863][ T6414] BTRFS info (device loop0): using free space tree [ 201.368896][ T6439] loop5: detected capacity change from 0 to 64 [ 201.500018][ T6414] BTRFS info (device loop0): enabling ssd optimizations [ 201.603302][ T4268] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.801923][ T4286] Bluetooth: hci0: command 0x1407 tx timeout [ 202.280156][ T4317] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 202.498503][ T4317] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.524037][ T4317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 202.544702][ T4317] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 202.569147][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 202.577607][ T4317] usb 1-1: Product: syz [ 202.581969][ T4317] usb 1-1: Manufacturer: syz [ 202.586909][ T4317] usb 1-1: SerialNumber: syz [ 202.595087][ T4317] usb 1-1: config 0 descriptor?? [ 202.617010][ T4317] usb 1-1: selecting invalid altsetting 0 [ 202.773429][ T4977] team0 (unregistering): Port device team_slave_1 removed [ 202.838862][ T7] usb 1-1: USB disconnect, device number 13 [ 202.858813][ T4977] team0 (unregistering): Port device team_slave_0 removed [ 202.946241][ T4977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.002378][ T4977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.494353][ T4977] bond0 (unregistering): Released all slaves [ 203.640133][ T6233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 203.657214][ T6233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.672740][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.685970][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.534'. [ 203.740123][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.534'. [ 203.790995][ T6233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.846792][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.931239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.978998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.021366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.087815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.112433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.136933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.159236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.202988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.217088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.242956][ T6132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.593655][ T6233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.660526][ T6233] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.678709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.706740][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.815972][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.836078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.870615][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.877791][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.903318][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.930585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.966549][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.973802][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.995032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.034501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.057347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.086394][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.132665][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.160700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.190325][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.217454][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.252657][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.294056][ T6233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.317056][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.355583][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.365662][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.395064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.555746][ T6513] Invalid argument reading file caps for ./file0 [ 205.671404][ T6132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.693544][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.710749][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.886944][ T6521] loop6: detected capacity change from 0 to 1024 [ 205.945706][ T6521] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 205.960148][ T6521] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.024938][ T6521] EXT4-fs error (device loop6): ext4_map_blocks:745: inode #15: block 3: comm syz.6.552: lblock 3 mapped to illegal pblock 3 (length 3) [ 206.109706][ T6521] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 206.171254][ T6521] EXT4-fs (loop6): This should not happen!! Data will be lost [ 206.171254][ T6521] [ 206.262271][ T6532] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: block 3: comm syz.6.552: lblock 3 mapped to illegal pblock 3 (length 1) [ 206.262877][ T6534] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: block 4: comm syz.6.552: lblock 4 mapped to illegal pblock 4 (length 2) [ 206.427400][ T6534] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: block 4: comm syz.6.552: lblock 4 mapped to illegal pblock 4 (length 2) [ 206.448068][ T6532] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: block 3: comm syz.6.552: lblock 3 mapped to illegal pblock 3 (length 1) [ 206.487435][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.510004][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.555576][ T6233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.634202][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.660768][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.669150][ T6532] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: block 3: comm syz.6.552: lblock 3 mapped to illegal pblock 3 (length 1) [ 206.732053][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.743091][ T6543] loop0: detected capacity change from 0 to 512 [ 206.764781][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.803196][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.834017][ T6543] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 206.851159][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.858703][ T6543] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.922712][ T4324] EXT4-fs error (device loop6): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 206.952614][ T6233] device veth0_vlan entered promiscuous mode [ 206.995889][ T4324] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 207.013362][ T4324] EXT4-fs (loop6): This should not happen!! Data will be lost [ 207.013362][ T4324] [ 207.030210][ T4684] EXT4-fs (loop6): unmounting filesystem. [ 207.058493][ T6233] device veth1_vlan entered promiscuous mode [ 207.157318][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 207.163759][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.213377][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.286619][ T6233] device veth0_macvtap entered promiscuous mode [ 207.312357][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.345535][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.371843][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.424752][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.457602][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.483986][ T6556] input: syz0 as /devices/virtual/input/input24 [ 207.498465][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.527165][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.567824][ T6233] device veth1_macvtap entered promiscuous mode [ 207.592541][ T6132] device veth0_vlan entered promiscuous mode [ 207.643104][ T6132] device veth1_vlan entered promiscuous mode [ 207.684516][ T6531] loop5: detected capacity change from 0 to 40427 [ 207.696726][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.709144][ T6531] F2FS-fs (loop5): invalid crc value [ 207.718791][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.731165][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.758469][ T6531] F2FS-fs (loop5): Found nat_bits in checkpoint [ 207.764981][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.800320][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.839999][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.892841][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.920114][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.928416][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.953644][ T6531] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 207.980787][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.996928][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.018053][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.062838][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.099673][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.109575][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.146300][ T6531] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 208.179722][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.209790][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.244670][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.289867][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.308385][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.332272][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.372667][ T6233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.389687][ T6233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.398537][ T6233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.433179][ T6233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.476210][ T6132] device veth0_macvtap entered promiscuous mode [ 208.517287][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.527292][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.535729][ T4952] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 208.566519][ T6132] device veth1_macvtap entered promiscuous mode [ 208.587934][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.608803][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.648086][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.664999][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.675274][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.686961][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.697319][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.708944][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.719544][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.739744][ T4952] usb 1-1: Using ep0 maxpacket: 8 [ 208.744968][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.756857][ T4952] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.777146][ T4952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.789075][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.809539][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.819297][ T4952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.839464][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.855618][ T4952] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.887651][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.940029][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.960073][ T4952] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.960421][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.969462][ T4952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.058795][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.081004][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.116769][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.148351][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.200849][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.228636][ T4952] usb 1-1: GET_CAPABILITIES returned 0 [ 209.234951][ T4952] usbtmc 1-1:16.0: can't read capabilities [ 209.254938][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.284709][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.330341][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.380423][ T6132] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.405593][ T6132] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.427448][ T6132] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.459311][ T4952] usb 1-1: USB disconnect, device number 14 [ 209.467308][ T6132] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.513381][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.533559][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.637637][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.683581][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.720605][ T6590] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 209.727851][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.742761][ T6593] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.568'. [ 209.755190][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.836523][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.873109][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.962609][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.030890][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.038962][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.116053][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.182541][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.569'. [ 210.192177][ T6599] sctp: [Deprecated]: syz.5.570 (pid 6599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.192177][ T6599] Use struct sctp_sack_info instead [ 210.298280][ T6600] device hsr0 entered promiscuous mode [ 210.318041][ T6600] device macsec1 entered promiscuous mode [ 210.427071][ T6607] netlink: 104 bytes leftover after parsing attributes in process `syz.3.572'. [ 210.678772][ T6603] loop0: detected capacity change from 0 to 8192 [ 210.769835][ T6603] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 210.811092][ T6603] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 210.823891][ T6603] REISERFS (device loop0): using ordered data mode [ 210.935502][ T6603] reiserfs: using flush barriers [ 210.965326][ T6603] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.071740][ T6603] REISERFS (device loop0): checking transaction log (loop0) [ 211.122414][ T6603] REISERFS (device loop0): Using r5 hash to sort names [ 211.129422][ T6603] REISERFS (device loop0): using 3.5.x disk format [ 211.205595][ T6603] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 211.212620][ T6624] input: syz1 as /devices/virtual/input/input25 [ 211.775659][ T6638] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.139723][ T4312] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 212.318405][ T6651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.318582][ T4275] Bluetooth: hci3: link tx timeout [ 212.335004][ T4275] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.369696][ T4312] usb 1-1: Using ep0 maxpacket: 16 [ 212.378869][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.393172][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.403693][ T4312] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.416795][ T4312] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 212.426478][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.438745][ T4312] usb 1-1: config 0 descriptor?? [ 212.653851][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.702415][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.883282][ T4317] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 212.950863][ T4312] microsoft 0003:045E:07DA.000C: unknown main item tag 0x2 [ 212.968833][ T4312] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 212.980476][ T4312] microsoft 0003:045E:07DA.000C: unknown main item tag 0x2 [ 213.009690][ T4312] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 213.045393][ T4312] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input26 [ 213.078220][ T4312] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 213.090989][ T4317] usb 6-1: Using ep0 maxpacket: 32 [ 213.110276][ T4317] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 213.153069][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.177810][ T4312] usb 1-1: USB disconnect, device number 15 [ 213.209068][ T4317] usb 6-1: config 0 descriptor?? [ 213.438065][ T4317] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 213.456827][ T6680] fido_id[6680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 213.481016][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.494520][ T4317] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 213.514467][ T4317] usb 6-1: media controller created [ 213.564753][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.766009][ T4317] DVB: Unable to find symbol dib7000p_attach() [ 213.776208][ T4317] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 213.959806][ T4317] rc_core: IR keymap rc-dib0700-rc5 not found [ 213.967707][ T4317] Registered IR keymap rc-empty [ 213.978489][ T4317] dvb-usb: could not initialize remote control. [ 213.997091][ T4317] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 214.057095][ T4317] usb 6-1: USB disconnect, device number 6 [ 214.193720][ T4317] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 214.305971][ T6700] netlink: 2 bytes leftover after parsing attributes in process `syz.3.599'. [ 214.339402][ T6700] netlink: 2 bytes leftover after parsing attributes in process `syz.3.599'. [ 214.369982][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 214.400147][ T6701] netlink: 2 bytes leftover after parsing attributes in process `syz.3.599'. [ 214.489972][ T6701] netlink: 2 bytes leftover after parsing attributes in process `syz.3.599'. [ 214.849490][ T6715] loop3: detected capacity change from 0 to 256 [ 214.888820][ T6713] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 215.009765][ T6718] input: syz1 as /devices/virtual/input/input28 [ 215.311905][ T6728] loop6: detected capacity change from 0 to 128 [ 215.430070][ T6728] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 215.440912][ T6728] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.612303][ T6728] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.610: Logical block already allocated [ 215.696423][ T6728] EXT4-fs (loop6): Remounting filesystem read-only [ 215.838796][ T4684] EXT4-fs (loop6): unmounting filesystem. [ 216.347519][ T6766] loop9: detected capacity change from 0 to 64 [ 216.463802][ T27] audit: type=1800 audit(1772552168.056:139): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.622" name="file1" dev="loop9" ino=21 res=0 errno=0 [ 217.452536][ T6760] loop0: detected capacity change from 0 to 32768 [ 217.510880][ T6760] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.621 (6760) [ 217.625811][ T6773] loop6: detected capacity change from 0 to 32768 [ 217.790397][ T6770] loop3: detected capacity change from 0 to 32768 [ 218.326405][ T6773] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.625 (6773) [ 218.349930][ T6760] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.374607][ T6785] loop5: detected capacity change from 0 to 131072 [ 218.403744][ T6785] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 218.411975][ T6785] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 218.421873][ T6785] F2FS-fs (loop5): invalid crc value [ 218.447089][ T6770] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.623 (6770) [ 218.471670][ T6760] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 218.481451][ T6773] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.508754][ T6785] F2FS-fs (loop5): Found nat_bits in checkpoint [ 218.533468][ T6760] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 218.562246][ T6773] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 218.596085][ T6785] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 218.603648][ T6785] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 218.630083][ T6773] BTRFS info (device loop6): force clearing of disk cache [ 218.637419][ T6760] BTRFS info (device loop0): trying to use backup root at mount time [ 218.653541][ T5524] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (5524) [ 218.654810][ T6760] BTRFS info (device loop0): setting nodatasum [ 218.685662][ T6773] BTRFS info (device loop6): metadata ratio 0 [ 218.695083][ T6773] BTRFS info (device loop6): enabling ssd optimizations [ 218.718202][ T6760] BTRFS info (device loop0): force zlib compression, level 3 [ 218.731364][ T6773] BTRFS info (device loop6): using spread ssd allocation scheme [ 218.739098][ T6773] BTRFS info (device loop6): using free space tree [ 218.766506][ T6760] BTRFS info (device loop0): setting nodatacow [ 218.779735][ T129] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 218.797641][ T6760] BTRFS info (device loop0): turning off barriers [ 218.865455][ T6760] BTRFS info (device loop0): disabling tree log [ 218.963876][ T6760] BTRFS info (device loop0): using free space tree [ 218.994843][ T129] usb 10-1: unable to get BOS descriptor or descriptor too short [ 219.025278][ T129] usb 10-1: not running at top speed; connect to a high speed hub [ 219.071855][ T129] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 219.142061][ T129] usb 10-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 219.180448][ T6773] BTRFS info (device loop6): rebuilding free space tree [ 219.203880][ T129] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.259725][ T129] usb 10-1: Product: syz [ 219.264092][ T129] usb 10-1: Manufacturer: syz [ 219.312353][ T129] usb 10-1: SerialNumber: syz [ 219.343655][ T6795] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 219.596218][ T129] usb 10-1: MIDIStreaming interface descriptor not found [ 219.717042][ T129] usb 10-1: USB disconnect, device number 2 [ 220.075751][ T6760] BTRFS error (device loop0): open_ctree failed: -12 [ 220.114660][ T4401] udevd[4401]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.220515][ T4684] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.560910][ T6819] loop3: detected capacity change from 0 to 32768 [ 220.734921][ T6819] XFS (loop3): Mounting V5 Filesystem [ 220.925224][ T6819] XFS (loop3): Ending clean mount [ 220.948350][ T6819] XFS (loop3): Quotacheck needed: Please wait. [ 221.068602][ T6819] XFS (loop3): Quotacheck: Done. [ 221.413630][ T6233] XFS (loop3): Unmounting Filesystem [ 221.541642][ T6876] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 221.699784][ T129] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 221.889771][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 221.904165][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.950312][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.991205][ T129] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 222.021194][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.065923][ T129] usb 1-1: config 0 descriptor?? [ 222.512266][ T129] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 222.738156][ T6908] ptrace attach of "./syz-executor exec"[6233] was attempted by "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 222.768260][ T6913] loop5: detected capacity change from 0 to 128 [ 222.808576][ T4949] usb 1-1: USB disconnect, device number 16 [ 223.020982][ T6913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 223.066232][ T6913] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.118402][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.653'. [ 223.221050][ T6922] device syzkaller1 entered promiscuous mode [ 223.237836][ T4637] EXT4-fs (loop5): unmounting filesystem. [ 223.385275][ T6926] loop6: detected capacity change from 0 to 512 [ 223.458404][ T6926] EXT4-fs (loop6): 1 truncate cleaned up [ 223.476408][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.657'. [ 223.508254][ T6926] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 223.549981][ T6930] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 223.559040][ T6930] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 223.650413][ T27] audit: type=1800 audit(1772552175.236:140): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.655" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 223.691299][ T6926] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.655: bg 0: block 465: padding at end of block bitmap is not set [ 223.743360][ T6926] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 223.763504][ T6926] EXT4-fs (loop6): This should not happen!! Data will be lost [ 223.763504][ T6926] [ 223.785871][ T6926] EXT4-fs (loop6): Total free blocks count 0 [ 223.819334][ T6926] EXT4-fs (loop6): Free/Dirty block details [ 223.835882][ T6926] EXT4-fs (loop6): free_blocks=0 [ 223.865487][ T6926] EXT4-fs (loop6): dirty_blocks=2 [ 223.910086][ T6926] EXT4-fs (loop6): Block reservation details [ 223.939299][ T6926] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 224.089311][ T4684] EXT4-fs (loop6): unmounting filesystem. [ 224.117618][ T6944] loop5: detected capacity change from 0 to 4096 [ 224.371601][ T6944] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 224.520286][ T5327] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 224.719910][ T5327] usb 7-1: Using ep0 maxpacket: 32 [ 224.727914][ T5327] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 224.765264][ T5327] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.800647][ T6965] loop3: detected capacity change from 0 to 256 [ 224.813303][ T5327] usb 7-1: config 0 descriptor?? [ 224.898146][ T6965] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 224.961329][ T6965] FAT-fs (loop3): Filesystem has been set read-only [ 224.968256][ T6965] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 225.053611][ T5327] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 225.067070][ T5327] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.086122][ T6965] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 225.127037][ T27] audit: type=1800 audit(1772552176.716:141): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.667" name="file1" dev="loop3" ino=1048638 res=0 errno=0 [ 225.166932][ T5327] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 225.225142][ T5327] usb 7-1: media controller created [ 225.326919][ T5327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.648140][ T6985] netlink: 64 bytes leftover after parsing attributes in process `syz.0.673'. [ 225.718201][ T5327] DVB: Unable to find symbol dib7000p_attach() [ 225.725873][ T5327] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 226.089748][ T5327] rc_core: IR keymap rc-dib0700-rc5 not found [ 226.097159][ T5327] Registered IR keymap rc-empty [ 226.126686][ T5327] dvb-usb: could not initialize remote control. [ 226.156767][ T5327] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 226.174044][ T4952] kernel read not supported for file /dsp1 (pid: 4952 comm: kworker/0:10) [ 226.219890][ T5327] usb 7-1: USB disconnect, device number 6 [ 226.331254][ T5327] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 226.588433][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.682'. [ 226.950421][ T7025] netlink: 104 bytes leftover after parsing attributes in process `syz.6.685'. [ 227.022854][ T7028] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 227.050488][ T7027] support for cryptoloop has been removed. Use dm-crypt instead. [ 227.245896][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 227.332041][ T7034] loop9: detected capacity change from 0 to 4096 [ 227.354103][ T7034] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512) [ 228.488258][ T7036] loop6: detected capacity change from 0 to 32768 [ 229.187972][ T7077] loop3: detected capacity change from 0 to 1024 [ 229.459793][ T7077] hfsplus: bad catalog file entry [ 229.732788][ T7092] overlayfs: failed to set xattr on upper [ 229.739784][ T7092] overlayfs: ...falling back to index=off,metacopy=off. [ 229.759070][ T9] hfsplus: b-tree write err: -5, ino 3 [ 229.766625][ T9] hfsplus: bad catalog file entry [ 229.939851][ T4952] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 230.179976][ T4952] usb 7-1: Using ep0 maxpacket: 32 [ 230.207317][ T4952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.231987][ T4952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.266777][ T4952] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 230.299657][ T4952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.345341][ T4952] usb 7-1: config 0 descriptor?? [ 230.414658][ T7081] loop9: detected capacity change from 0 to 40427 [ 230.457158][ T7081] F2FS-fs (loop9): Invalid segment/section count (31, 24 x 1) [ 230.465926][ T7108] loop5: detected capacity change from 0 to 256 [ 230.492056][ T7081] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 230.502442][ T7081] F2FS-fs (loop9): invalid crc value [ 230.507878][ T7081] F2FS-fs (loop9): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 230.570047][ T7108] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 230.617686][ T7081] F2FS-fs (loop9): Found nat_bits in checkpoint [ 230.810129][ T4952] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 230.873933][ T7081] F2FS-fs (loop9): Cannot turn on quotas: -2 on 0 [ 230.951392][ T7081] F2FS-fs (loop9): Cannot turn on quotas: -2 on 1 [ 231.018744][ T7081] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 231.058824][ T7081] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 231.145267][ T4952] usb 7-1: USB disconnect, device number 7 [ 231.271326][ T7117] fido_id[7117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 231.349063][ T7081] syz.9.704: attempt to access beyond end of device [ 231.349063][ T7081] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 231.703553][ T6132] syz-executor: attempt to access beyond end of device [ 231.703553][ T6132] loop9: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 232.460694][ T7159] input: syz0 as /devices/virtual/input/input30 [ 232.873823][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.735'. [ 233.809956][ T6850] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 233.836981][ T7204] loop9: detected capacity change from 0 to 128 [ 234.009677][ T6850] usb 1-1: Using ep0 maxpacket: 8 [ 234.016753][ T6850] usb 1-1: config 0 has no interfaces? [ 234.028333][ T6850] usb 1-1: New USB device found, idVendor=19d2, idProduct=0167, bcdDevice=bc.89 [ 234.044088][ T6850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.097196][ T6850] usb 1-1: Product: syz [ 234.116663][ T6850] usb 1-1: Manufacturer: syz [ 234.127409][ T6850] usb 1-1: SerialNumber: syz [ 234.141898][ T6850] usb 1-1: config 0 descriptor?? [ 234.474494][ T7219] device syzkaller1 entered promiscuous mode [ 234.589438][ T4354] usb 1-1: USB disconnect, device number 17 [ 234.781159][ T7227] loop6: detected capacity change from 0 to 4096 [ 234.860613][ T7233] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.160059][ T4354] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 235.359667][ T4354] usb 10-1: Using ep0 maxpacket: 16 [ 235.371566][ T4354] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 235.422638][ T4354] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.443277][ T4354] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.486296][ T4354] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.502632][ T4354] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.521669][ T4354] usb 10-1: Product: syz [ 235.526025][ T4354] usb 10-1: Manufacturer: syz [ 235.539520][ T4354] usb 10-1: SerialNumber: syz [ 235.557808][ T7247] loop5: detected capacity change from 0 to 1024 [ 235.560356][ T4275] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 235.564726][ T4286] Bluetooth: hci5: command 0x1003 tx timeout [ 235.649088][ T7247] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.776940][ T7247] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 235.786397][ T7247] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.958117][ T4324] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:6: bg 0: block 112: padding at end of block bitmap is not set [ 236.014116][ T4324] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 236.027771][ T4354] usb 10-1: 0:2 : does not exist [ 236.047276][ T4324] EXT4-fs (loop5): This should not happen!! Data will be lost [ 236.047276][ T4324] [ 236.119637][ T4324] EXT4-fs (loop5): Total free blocks count 0 [ 236.130039][ T4324] EXT4-fs (loop5): Free/Dirty block details [ 236.155050][ T4324] EXT4-fs (loop5): free_blocks=0 [ 236.160398][ T4324] EXT4-fs (loop5): dirty_blocks=80 [ 236.165873][ T4324] EXT4-fs (loop5): Block reservation details [ 236.172277][ T4324] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 236.184618][ T4637] EXT4-fs (loop5): unmounting filesystem. [ 236.209818][ T6850] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 236.415857][ T6850] usb 4-1: Using ep0 maxpacket: 16 [ 236.430300][ T6850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.456116][ T6850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.467742][ T6850] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.481530][ T6850] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.491481][ T6850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.517421][ T6850] usb 4-1: config 0 descriptor?? [ 236.663513][ T4354] usb 10-1: USB disconnect, device number 3 [ 236.956938][ T6850] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000F/input/input31 [ 237.027340][ T6850] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 237.064608][ T7285] loop0: detected capacity change from 0 to 512 [ 237.178654][ T7285] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 237.267214][ T5327] usb 4-1: USB disconnect, device number 4 [ 237.368138][ T7285] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.768: bg 0: block 104: invalid block bitmap [ 237.401789][ T7285] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 237.473236][ T7285] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.768: invalid indirect mapped block 1 (level 1) [ 237.521444][ T7285] EXT4-fs (loop0): 1 truncate cleaned up [ 237.527300][ T7285] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 237.597860][ T7286] fido_id[7286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 238.128221][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 238.389292][ T7319] loop8: detected capacity change from 0 to 8 [ 238.436393][ T7319] Dev loop8: unable to read RDB block 8 [ 238.462815][ T7319] loop8: unable to read partition table [ 238.489232][ T7319] loop8: partition table beyond EOD, truncated [ 238.510265][ T7319] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 238.659790][ T5327] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 238.801003][ T7330] skbuff: bad partial csum: csum=65506/2 headroom=176 headlen=65526 [ 238.862222][ T5327] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.889344][ T5327] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.947659][ T5327] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.977733][ T5327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.987749][ T5327] usb 1-1: SerialNumber: syz [ 239.210668][ T5327] usb 1-1: 0:2 : does not exist [ 239.252840][ T5327] usb 1-1: USB disconnect, device number 18 [ 239.353240][ T7352] mmap: syz.9.792 (7352): VmData 42479616 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 239.501040][ T4466] udevd[4466]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.795599][ T5327] kernel read not supported for file /snd/midiC2D0 (pid: 5327 comm: kworker/1:13) [ 240.121999][ T7370] input: syz0 as /devices/virtual/input/input32 [ 240.295993][ T7375] loop3: detected capacity change from 0 to 2048 [ 240.359744][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 240.381978][ T7373] loop5: detected capacity change from 0 to 4096 [ 240.400272][ T7373] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 240.463579][ T7375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 240.706783][ T6233] EXT4-fs (loop3): unmounting filesystem. [ 241.160379][ T4286] Bluetooth: hci0: command 0x0405 tx timeout [ 241.229985][ T4952] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 241.267225][ T7412] device batadv_slave_1 entered promiscuous mode [ 241.287878][ T7411] device batadv_slave_1 left promiscuous mode [ 241.442341][ T4952] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.469682][ T129] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 241.498291][ T4952] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 255 [ 241.522633][ T4952] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.554112][ T4952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.576704][ T4952] usb 1-1: Product: syz [ 241.597516][ T4952] usb 1-1: Manufacturer: syz [ 241.608809][ T4952] usb 1-1: SerialNumber: syz [ 241.672820][ T129] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.693300][ T129] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.713843][ T129] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.734995][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.764441][ T7410] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 241.870115][ T7398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 241.919709][ T5327] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 241.940019][ T7425] loop6: detected capacity change from 0 to 128 [ 242.120143][ T5327] usb 10-1: Using ep0 maxpacket: 32 [ 242.128153][ T5327] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 242.185482][ T4354] usb 4-1: USB disconnect, device number 5 [ 242.209911][ T5327] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.292440][ T5327] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 242.541831][ T7398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.765406][ T4952] cdc_ncm 1-1:1.0: bind() failure [ 242.786019][ T4952] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 242.823376][ T4952] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 242.855047][ T4952] usbtest: probe of 1-1:1.1 failed with error -71 [ 242.913300][ T4952] usb 1-1: USB disconnect, device number 19 [ 243.145316][ T7442] loop3: detected capacity change from 0 to 4096 [ 243.217237][ T7444] loop5: detected capacity change from 0 to 2048 [ 243.298537][ T5327] gspca_nw80x: reg_w err -71 [ 243.322907][ T5327] nw80x: probe of 10-1:3.0 failed with error -71 [ 243.364319][ T5327] usb 10-1: USB disconnect, device number 4 [ 243.468086][ T7444] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.931638][ T7433] loop6: detected capacity change from 0 to 32768 [ 243.955369][ T6233] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 243.975538][ T6233] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 244.110779][ T7433] XFS (loop6): Mounting V5 Filesystem [ 244.179320][ T7454] overlayfs: upper fs needs to support d_type. [ 244.366552][ T7454] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 244.374485][ T7454] overlayfs: failed to set xattr on upper [ 244.381000][ T7454] overlayfs: ...falling back to index=off,metacopy=off. [ 244.423674][ T7433] XFS (loop6): Ending clean mount [ 244.622502][ T4684] XFS (loop6): Unmounting Filesystem [ 244.912612][ T4637] UDF-fs: error (device loop5): udf_read_inode: (ino 1410) failed !bh [ 244.997196][ T4637] UDF-fs: error (device loop5): udf_read_inode: (ino 1410) failed !bh [ 245.133914][ T7482] loop3: detected capacity change from 0 to 256 [ 245.194894][ T7482] exfat: Deprecated parameter 'namecase' [ 245.316410][ T7482] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 245.781041][ T7459] loop9: detected capacity change from 0 to 40427 [ 245.901441][ T7459] F2FS-fs (loop9): Found nat_bits in checkpoint [ 246.116372][ T7500] loop6: detected capacity change from 0 to 128 [ 246.149416][ T7459] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 246.241174][ T7500] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 246.338127][ T7500] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.520642][ T6132] syz-executor: attempt to access beyond end of device [ 246.520642][ T6132] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 246.726755][ T4684] EXT4-fs (loop6): unmounting filesystem. [ 248.184645][ T7512] loop6: detected capacity change from 0 to 32768 [ 248.283783][ T7512] XFS (loop6): Mounting V5 Filesystem [ 248.375860][ T7515] loop3: detected capacity change from 0 to 32768 [ 248.537980][ T27] audit: type=1800 audit(1772552200.126:142): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.839" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 248.685799][ T7512] XFS (loop6): Ending clean mount [ 248.898345][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.910971][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.943845][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.978047][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.001523][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 249.009681][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.338579][ T4684] XFS (loop6): Unmounting Filesystem [ 249.396196][ T7557] loop3: detected capacity change from 0 to 128 [ 249.472041][ T7557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 249.492728][ T7557] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 249.591600][ T7525] loop0: detected capacity change from 0 to 40427 [ 249.713164][ T7525] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 249.799854][ T7525] F2FS-fs (loop0): invalid crc value [ 249.861904][ T7525] F2FS-fs (loop0): Found nat_bits in checkpoint [ 250.051086][ T6233] EXT4-fs (loop3): unmounting filesystem. [ 250.159168][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 250.274367][ T7525] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 250.514540][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.580379][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.627002][ T7546] device bridge_slave_0 entered promiscuous mode [ 250.712601][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.768416][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.789306][ T7546] device bridge_slave_1 entered promiscuous mode [ 250.877700][ T7586] loop6: detected capacity change from 0 to 736 [ 250.905596][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.990456][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.010452][ T4268] syz-executor: attempt to access beyond end of device [ 251.010452][ T4268] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 251.068703][ T7586] rock: directory entry would overflow storage [ 251.079796][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 251.081838][ T7586] rock: sig=0x3b10, size=4, remaining=3 [ 251.128676][ T7546] team0: Port device team_slave_0 added [ 251.204877][ T7573] loop3: detected capacity change from 0 to 32768 [ 251.254934][ T7546] team0: Port device team_slave_1 added [ 251.395184][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.450605][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.547901][ T6233] ERROR: (device loop3): diFree: numfree > numinos [ 251.547901][ T6233] [ 251.563940][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.604414][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.622419][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.663581][ T6233] read_mapping_page failed! [ 251.686797][ T6233] ERROR: (device loop3): txCommit: [ 251.686797][ T6233] [ 251.700765][ T6233] read_mapping_page failed! [ 251.714428][ T7593] loop6: detected capacity change from 0 to 2048 [ 251.729731][ T6233] ERROR: (device loop3): txCommit: [ 251.729731][ T6233] [ 251.747927][ T7593] EXT4-fs: Ignoring removed i_version option [ 251.790775][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.881182][ T7593] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 251.923030][ T6729] ERROR: (device loop3): diFree: numfree > numinos [ 251.923030][ T6729] [ 251.949938][ T7593] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.970740][ T107] ERROR: (device loop3): diFree: numfree > numinos [ 251.970740][ T107] [ 252.089911][ T7593] EXT4-fs (loop6): shut down requested (2) [ 252.131937][ T7593] fs-verity: sha512 using implementation "sha512-avx2" [ 252.250076][ T7546] device hsr_slave_0 entered promiscuous mode [ 252.300204][ T7546] device hsr_slave_1 entered promiscuous mode [ 252.340363][ T7546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.348114][ T7546] Cannot create hsr debugfs directory [ 252.362892][ T4684] EXT4-fs (loop6): unmounting filesystem. [ 252.698929][ T4286] Bluetooth: hci3: link tx timeout [ 252.704305][ T4286] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.172418][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 253.239530][ T7619] 9pnet_fd: Insufficient options for proto=fd [ 253.275817][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.827759][ T7613] loop9: detected capacity change from 0 to 32768 [ 253.903964][ T7613] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.860 (7613) [ 253.923807][ T7631] loop6: detected capacity change from 0 to 512 [ 253.988832][ T7613] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.050666][ T7613] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 254.070395][ T7631] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 254.079719][ T7613] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 254.089182][ T7613] BTRFS info (device loop9): force zstd compression, level 3 [ 254.099959][ T7613] BTRFS info (device loop9): turning on sync discard [ 254.106830][ T7613] BTRFS info (device loop9): force clearing of disk cache [ 254.133940][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.172037][ T7631] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.200475][ T7613] BTRFS info (device loop9): enabling disk space caching [ 254.207627][ T7613] BTRFS info (device loop9): turning off discard [ 254.310399][ T7613] BTRFS info (device loop9): disk space caching is enabled [ 254.538739][ T4684] EXT4-fs (loop6): unmounting filesystem. [ 254.649858][ T7613] BTRFS info (device loop9): enabling ssd optimizations [ 254.658514][ T7613] BTRFS info (device loop9): rebuilding free space tree [ 254.686461][ T7613] BTRFS info (device loop9): disabling free space tree [ 254.694311][ T7613] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 254.705458][ T7613] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 254.956159][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.240498][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 255.337407][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.350047][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.362483][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.370588][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.381153][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.406113][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.508996][ T6132] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.586999][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.615496][ T7667] loop6: detected capacity change from 0 to 512 [ 255.658026][ T7667] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 255.703028][ T7667] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.890913][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.897797][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.963113][ T4466] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop9 scanned by udevd (4466) [ 256.144240][ T4684] EXT4-fs (loop6): unmounting filesystem. [ 256.451007][ T4354] kernel write not supported for file bpf-prog (pid: 4354 comm: kworker/0:7) [ 256.996055][ T7694] loop9: detected capacity change from 0 to 7 [ 257.094647][ T4466] Dev loop9: unable to read RDB block 7 [ 257.119431][ T4466] loop9: unable to read partition table [ 257.149655][ T4466] loop9: partition table beyond EOD, truncated [ 257.255020][ T7663] chnl_net:caif_netlink_parms(): no params data found [ 257.319728][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 257.484227][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 257.529142][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.562323][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.571364][ T7663] device bridge_slave_0 entered promiscuous mode [ 257.582290][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.589756][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.624266][ T7663] device bridge_slave_1 entered promiscuous mode [ 257.632810][ T7694] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.729773][ T7694] buffer_io_error: 6 callbacks suppressed [ 257.729791][ T7694] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.753560][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.778803][ T7694] ldm_validate_partition_table(): Disk read failed. [ 257.821590][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.839854][ T7694] Dev loop9: unable to read RDB block 0 [ 257.863884][ T7694] loop9: unable to read partition table [ 257.883301][ T7694] loop9: partition table beyond EOD, truncated [ 257.892245][ T7694] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 258.021928][ T7687] loop9: detected capacity change from 0 to 40427 [ 258.049477][ T7687] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 258.059356][ T7687] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 258.094404][ T7687] F2FS-fs (loop9): invalid crc_offset: 33558524 [ 258.116993][ T7663] team0: Port device team_slave_0 added [ 258.144716][ T7687] F2FS-fs (loop9): Found nat_bits in checkpoint [ 258.190565][ T7663] team0: Port device team_slave_1 added [ 258.247948][ T7687] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 258.269743][ T7687] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 258.295471][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.333572][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.387425][ T27] audit: type=1800 audit(1772552209.976:143): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.878" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 258.411889][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.443197][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.455173][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.490276][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.618390][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 258.661171][ T7723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.918492][ T7663] device hsr_slave_0 entered promiscuous mode [ 258.970110][ T7663] device hsr_slave_1 entered promiscuous mode [ 258.986789][ T7663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.019956][ T7663] Cannot create hsr debugfs directory [ 259.049374][ T7728] loop4: detected capacity change from 0 to 7 [ 259.108241][ T7728] Dev loop4: unable to read RDB block 7 [ 259.114261][ T7728] loop4: AHDI p1 p3 [ 259.130700][ T7546] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.142638][ T7728] loop4: partition table partially beyond EOD, truncated [ 259.206516][ T7546] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.369062][ T7546] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.492328][ T7546] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.560030][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 259.856087][ T7726] loop6: detected capacity change from 0 to 40427 [ 259.892914][ T7726] F2FS-fs (loop6): invalid crc value [ 259.945016][ T7726] F2FS-fs (loop6): Found nat_bits in checkpoint [ 260.111160][ T7726] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 260.149859][ T5332] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 260.352076][ T5332] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.369703][ T5332] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.408227][ T5332] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 260.417742][ T5332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 260.426829][ T5332] usb 1-1: SerialNumber: syz [ 260.671287][ T5332] usb 1-1: 0:2 : does not exist [ 260.724035][ T5332] usb 1-1: USB disconnect, device number 20 [ 260.999278][ T4466] udevd[4466]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.245493][ T65] device hsr_slave_0 left promiscuous mode [ 261.269462][ T65] device hsr_slave_1 left promiscuous mode [ 261.304507][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.318346][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.340111][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.368634][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.388987][ T65] device bridge_slave_1 left promiscuous mode [ 261.407088][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.419325][ T65] device bridge_slave_0 left promiscuous mode [ 261.429910][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.504700][ T65] device veth1_macvtap left promiscuous mode [ 261.519982][ T65] device veth0_macvtap left promiscuous mode [ 261.527119][ T65] device veth1_vlan left promiscuous mode [ 261.534448][ T65] device veth0_vlan left promiscuous mode [ 261.644424][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 261.749758][ T4952] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 261.988886][ T4952] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 262.007331][ T4952] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.017660][ T4952] usb 10-1: Product: syz [ 262.022435][ T4952] usb 10-1: Manufacturer: syz [ 262.027343][ T4952] usb 10-1: SerialNumber: syz [ 262.047218][ T7768] loop0: detected capacity change from 0 to 512 [ 262.063186][ T7768] EXT4-fs: Ignoring removed bh option [ 262.097215][ T7768] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 262.227814][ T7768] EXT4-fs (loop0): 1 truncate cleaned up [ 262.234189][ T7768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 262.274198][ T4952] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 262.322429][ T4952] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 262.336442][ T4952] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 262.355638][ T4952] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 262.383210][ T4952] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 262.425137][ T7768] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 50331648 > max in inode 15 [ 262.440822][ T4952] lan78xx: probe of 10-1:1.0 failed with error -71 [ 262.454101][ T4952] usb 10-1: USB disconnect, device number 5 [ 262.575182][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 263.153575][ T65] team0 (unregistering): Port device team_slave_1 removed [ 263.218934][ T65] team0 (unregistering): Port device team_slave_0 removed [ 263.279483][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.346074][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.735420][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 263.841775][ T65] bond0 (unregistering): Released all slaves [ 264.141306][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.230149][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.238481][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.303529][ T7546] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.305848][ T7780] loop0: detected capacity change from 0 to 128 [ 264.320801][ T7779] loop9: detected capacity change from 0 to 512 [ 264.350284][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.389373][ T7780] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 264.407823][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.463274][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.470516][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.482462][ T7780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.541930][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.576243][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.590863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.615809][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.623083][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.671472][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.722612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.771999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.792586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.810233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.822467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.838585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.886052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.921242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.960015][ T4949] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 264.992897][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.011691][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.056616][ T7546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.091742][ T7663] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.121441][ T7663] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.169740][ T4949] usb 10-1: Using ep0 maxpacket: 8 [ 265.178577][ T4949] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.213812][ T4949] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.240718][ T4949] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.254114][ T7663] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.263199][ T4949] usb 10-1: config 0 descriptor?? [ 265.288938][ T7663] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.475448][ T4949] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 265.633783][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.677983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.684922][ T7785] loop0: detected capacity change from 0 to 32768 [ 265.703878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.724624][ T7663] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.738357][ T4952] usb 10-1: USB disconnect, device number 6 [ 265.818169][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.843378][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.876607][ T7785] XFS (loop0): Mounting V5 Filesystem [ 265.924230][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.931632][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.957583][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.978801][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.017050][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.068319][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.075739][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.106460][ T7785] XFS (loop0): Ending clean mount [ 266.114881][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.194044][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.241686][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.290575][ T4268] XFS (loop0): Unmounting Filesystem [ 266.302417][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.353173][ T7805] loop6: detected capacity change from 0 to 1024 [ 266.374626][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.418581][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.467606][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.516339][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.590737][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.607899][ T7663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.700088][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.741071][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.762752][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.827706][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.840726][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.876138][ T7546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.290365][ T7822] device syzkaller1 entered promiscuous mode [ 267.941495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.954794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.996038][ T7663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.086969][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.106394][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.185994][ T7818] loop9: detected capacity change from 0 to 32768 [ 268.210722][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.230747][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.276983][ T7663] device veth0_vlan entered promiscuous mode [ 268.290044][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.298598][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.316346][ T7663] device veth1_vlan entered promiscuous mode [ 268.360610][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.380761][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.404071][ T7663] device veth0_macvtap entered promiscuous mode [ 268.413593][ T7818] XFS (loop9): Mounting V5 Filesystem [ 268.431872][ T7663] device veth1_macvtap entered promiscuous mode [ 268.505468][ T7818] XFS (loop9): Ending clean mount [ 268.522673][ T7818] XFS (loop9): Quotacheck needed: Please wait. [ 268.531592][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.639880][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.720009][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.744650][ T7818] XFS (loop9): Quotacheck: Done. [ 268.800530][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.810313][ T7818] XFS (loop9): User initiated shutdown received. [ 268.839037][ T7818] XFS (loop9): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 268.849789][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.892187][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.905567][ T7818] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 268.940308][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.959663][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.991348][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.010707][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.019213][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.051562][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.078175][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.121702][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.165823][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.226530][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.246955][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.278245][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.296965][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.313102][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.357830][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.390190][ T6132] XFS (loop9): Unmounting Filesystem [ 269.456168][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.474514][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.495169][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.531102][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.543468][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.610031][ T7663] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.667180][ T7663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.703060][ T7663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.745041][ T7663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.790363][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.846560][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.869801][ T7859] loop6: detected capacity change from 0 to 128 [ 269.884348][ T7859] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.900713][ T7546] device veth0_vlan entered promiscuous mode [ 269.938159][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.972792][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.982261][ T7859] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.061469][ T7546] device veth1_vlan entered promiscuous mode [ 270.264874][ T4977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.286094][ T4977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.346575][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.360611][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.391368][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.420857][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.450622][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.479040][ T7546] device veth0_macvtap entered promiscuous mode [ 270.516732][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.574483][ T7546] device veth1_macvtap entered promiscuous mode [ 270.618449][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.660513][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.686044][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.718113][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.738850][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.755074][ T7872] loop9: detected capacity change from 0 to 1024 [ 270.778993][ T7872] EXT4-fs: Ignoring removed orlov option [ 270.791889][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.816724][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.842204][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.857618][ T7872] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 270.918543][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.995749][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.044951][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.069723][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.082479][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.090764][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.100915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.111185][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.120913][ T6132] EXT4-fs (loop9): unmounting filesystem. [ 271.464298][ T7879] team0 (unregistering): Port device team_slave_0 removed [ 271.503756][ T7879] team0 (unregistering): Port device team_slave_1 removed [ 271.534577][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.568556][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.589721][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.603854][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.621278][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.641833][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.666920][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.690810][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.721947][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.750233][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.790261][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.837722][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.9.923'. [ 271.960598][ T7883] device bond1 entered promiscuous mode [ 271.966623][ T7883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.082953][ T7884] device veth3 entered promiscuous mode [ 272.089442][ T7884] bond1: (slave veth3): Enslaving as an active interface with an up link [ 272.252401][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.285933][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.345830][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 272.370501][ T27] audit: type=1326 audit(1772552223.956:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7895 comm="syz.1.928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb5c19c799 code=0x0 [ 272.447574][ T7546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.480147][ T7546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.489016][ T7546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.569147][ T7546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.924038][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.953306][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.026646][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.062679][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.081613][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.089360][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.237070][ T7911] loop6: detected capacity change from 0 to 256 [ 273.385075][ T7911] FAT-fs (loop6): Directory bread(block 64) failed [ 273.408141][ T7911] FAT-fs (loop6): Directory bread(block 65) failed [ 273.442260][ T7911] FAT-fs (loop6): Directory bread(block 66) failed [ 273.448981][ T7911] FAT-fs (loop6): Directory bread(block 67) failed [ 273.481138][ T7919] loop4: detected capacity change from 0 to 1024 [ 273.498162][ T7911] FAT-fs (loop6): Directory bread(block 68) failed [ 273.527959][ T7911] FAT-fs (loop6): Directory bread(block 69) failed [ 273.564241][ T7911] FAT-fs (loop6): Directory bread(block 70) failed [ 273.602937][ T7911] FAT-fs (loop6): Directory bread(block 71) failed [ 273.642323][ T7911] FAT-fs (loop6): Directory bread(block 72) failed [ 273.671422][ T7911] FAT-fs (loop6): Directory bread(block 73) failed [ 274.059756][ T4324] hfsplus: b-tree write err: -5, ino 4 [ 274.088527][ T7934] loop9: detected capacity change from 0 to 16 [ 274.152063][ T7936] loop0: detected capacity change from 0 to 128 [ 274.159507][ T7934] erofs: (device loop9): mounted with root inode @ nid 36. [ 274.231682][ T7936] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.259375][ T7939] loop6: detected capacity change from 0 to 256 [ 275.554998][ T7968] loop4: detected capacity change from 0 to 256 [ 275.769223][ T7968] FAT-fs (loop4): Directory bread(block 64) failed [ 275.809977][ T7968] FAT-fs (loop4): Directory bread(block 65) failed [ 275.816762][ T7968] FAT-fs (loop4): Directory bread(block 66) failed [ 275.880413][ T7968] FAT-fs (loop4): Directory bread(block 67) failed [ 275.887377][ T7968] FAT-fs (loop4): Directory bread(block 68) failed [ 275.925344][ T7968] FAT-fs (loop4): Directory bread(block 69) failed [ 275.956837][ T7968] FAT-fs (loop4): Directory bread(block 70) failed [ 276.020091][ T7968] FAT-fs (loop4): Directory bread(block 71) failed [ 276.026837][ T7968] FAT-fs (loop4): Directory bread(block 72) failed [ 276.076788][ T7968] FAT-fs (loop4): Directory bread(block 73) failed [ 276.721652][ T7997] netlink: 84 bytes leftover after parsing attributes in process `syz.0.960'. [ 276.769811][ T7999] netlink: 'syz.9.958': attribute type 21 has an invalid length. [ 276.793905][ T7999] netlink: 14548 bytes leftover after parsing attributes in process `syz.9.958'. [ 276.867749][ T7994] loop6: detected capacity change from 0 to 4096 [ 277.590767][ T8008] loop9: detected capacity change from 0 to 65536 [ 277.732964][ T4949] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 277.752706][ T8008] XFS (loop9): Mounting V5 Filesystem [ 277.891113][ T8008] XFS (loop9): Ending clean mount [ 277.906849][ T8008] XFS (loop9): syz.9.964 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 277.949942][ T4949] usb 7-1: Using ep0 maxpacket: 16 [ 277.981181][ T4949] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.033589][ T4949] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 278.072396][ T4949] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 278.092769][ T6132] XFS (loop9): Unmounting Filesystem [ 278.129015][ T4949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.147539][ T4949] usb 7-1: Product: syz [ 278.156344][ T4949] usb 7-1: Manufacturer: syz [ 278.169798][ T4949] usb 7-1: SerialNumber: syz [ 278.212835][ T4949] r8152-cfgselector 7-1: config 0 descriptor?? [ 278.417635][ T8030] overlayfs: failed to resolve './file1': -2 [ 278.474923][ T4949] usbip-host 7-1: 7-1 is not in match_busid table... skip! [ 278.650588][ T8034] capability: warning: `syz.0.981' uses deprecated v2 capabilities in a way that may be insecure [ 278.692173][ T8010] kAFS: No cell specified [ 278.722773][ T129] usb 7-1: USB disconnect, device number 8 [ 279.021917][ T8043] loop0: detected capacity change from 0 to 512 [ 279.127004][ T8039] team0 (unregistering): Port device team_slave_0 removed [ 279.147025][ T8043] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.973: inode has both inline data and extents flags [ 279.168554][ T8043] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.973: couldn't read orphan inode 15 (err -117) [ 279.182481][ T8043] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 279.280123][ T8039] team0 (unregistering): Port device team_slave_1 removed [ 279.466272][ T4949] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 279.675826][ T4949] usb 1-1: config 1 has an invalid descriptor of length 138, skipping remainder of the config [ 279.719788][ T4949] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.770015][ T4949] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 279.795073][ T4949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 279.809704][ T4949] usb 1-1: SerialNumber: syz [ 280.049838][ T4949] usb 1-1: 0:2 : does not exist [ 280.106610][ T4949] usb 1-1: USB disconnect, device number 21 [ 280.372391][ T4466] udevd[4466]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.651967][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 281.794224][ T8116] loop0: detected capacity change from 0 to 24 [ 281.826185][ T8116] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 281.880849][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.954096][ T8116] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 282.129218][ T4954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.137766][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.490129][ T6850] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 282.685960][ T6850] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 282.722589][ T6850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.781773][ T6850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.799971][ T4954] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 282.812506][ T6850] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 282.868013][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.870964][ T6850] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 282.921449][ T6850] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 282.952671][ T6850] usb 2-1: Manufacturer: syz [ 282.988412][ T6850] usb 2-1: config 0 descriptor?? [ 283.010001][ T4954] usb 10-1: Using ep0 maxpacket: 32 [ 283.020732][ T4954] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.035669][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.062795][ T4954] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.105017][ T4954] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 283.143204][ T4954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.181017][ T4954] usb 10-1: config 0 descriptor?? [ 283.432947][ T6850] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 283.469208][ T6850] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 283.501822][ T6850] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 283.633004][ T4954] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 283.666544][ T4954] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 283.703510][ T4954] ft260 0003:0403:6030.0011: hidraw1: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0 [ 283.733446][ T6850] usb 2-1: USB disconnect, device number 3 [ 283.841319][ T4954] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 283.849481][ T8169] loop0: detected capacity change from 0 to 1024 [ 283.931139][ T8169] EXT4-fs: Ignoring removed orlov option [ 283.943054][ T8164] fido_id[8164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 284.059699][ T6850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.095614][ T8169] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.249989][ T4954] ft260 0003:0403:6030.0011: failed to retrieve status: -71 [ 284.274347][ T4954] ft260 0003:0403:6030.0011: failed to reset I2C controller: -71 [ 284.350569][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 284.489838][ T4954] usb 10-1: USB disconnect, device number 7 [ 284.530516][ T8185] [ 284.532922][ T8185] ===================================================== [ 284.540010][ T8185] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 284.547533][ T8185] syzkaller #0 Not tainted [ 284.552044][ T8185] ----------------------------------------------------- [ 284.559160][ T8185] syz.1.1025/8185 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 284.567113][ T8185] ffffffff8c80a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xec/0x3c0 [ 284.575968][ T8185] [ 284.575968][ T8185] and this task is already holding: [ 284.584184][ T8185] ffff88807f406130 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x3c0 [ 284.593855][ T8185] which would create a new lock dependency: [ 284.599778][ T8185] (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 284.607941][ T8185] [ 284.607941][ T8185] but this new dependency connects a HARDIRQ-irq-safe lock: [ 284.617573][ T8185] (&dev->event_lock#2){-.-.}-{2:2} [ 284.617612][ T8185] [ 284.617612][ T8185] ... which became HARDIRQ-irq-safe at: [ 284.630939][ T8185] lock_acquire+0x1bb/0x4a0 [ 284.635582][ T8185] _raw_spin_lock_irqsave+0xb0/0x100 [ 284.641012][ T8185] input_event+0x76/0xb0 [ 284.645400][ T8185] psmouse_report_standard_packet+0x4f/0x200 [ 284.651530][ T8185] psmouse_process_byte+0x42b/0x620 [ 284.657083][ T8185] psmouse_handle_byte+0x43/0x490 [ 284.662264][ T8185] psmouse_interrupt+0x699/0x1130 [ 284.667531][ T8185] serio_interrupt+0x87/0x130 [ 284.672348][ T8185] i8042_interrupt+0x365/0x710 [ 284.677286][ T8185] __handle_irq_event_percpu+0x293/0xa50 [ 284.683053][ T8185] handle_irq_event+0x87/0x1e0 [ 284.687968][ T8185] handle_edge_irq+0x243/0xb20 [ 284.692873][ T8185] __common_interrupt+0xd7/0x1e0 [ 284.698038][ T8185] common_interrupt+0xb0/0xd0 [ 284.702852][ T8185] asm_common_interrupt+0x22/0x40 [ 284.708019][ T8185] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 284.714046][ T8185] klist_next+0x272/0x2f0 [ 284.718617][ T8185] bus_for_each_dev+0x153/0x1f0 [ 284.723613][ T8185] bus_add_driver+0x30a/0x5a0 [ 284.728448][ T8185] driver_register+0x32d/0x430 [ 284.733348][ T8185] usb_register_driver+0x202/0x3d0 [ 284.738577][ T8185] do_one_initcall+0x26a/0x840 [ 284.743511][ T8185] do_initcall_level+0x137/0x1e4 [ 284.748685][ T8185] do_initcalls+0x4b/0x8a [ 284.753234][ T8185] kernel_init_freeable+0x415/0x5be [ 284.758566][ T8185] kernel_init+0x19/0x1b0 [ 284.763019][ T8185] ret_from_fork+0x1f/0x30 [ 284.767551][ T8185] [ 284.767551][ T8185] to a HARDIRQ-irq-unsafe lock: [ 284.774598][ T8185] (tasklist_lock){.+.+}-{2:2} [ 284.774627][ T8185] [ 284.774627][ T8185] ... which became HARDIRQ-irq-unsafe at: [ 284.788067][ T8185] ... [ 284.788079][ T8185] lock_acquire+0x1bb/0x4a0 [ 284.795357][ T8185] _raw_read_lock+0x32/0x40 [ 284.800014][ T8185] do_wait+0x2b6/0xb60 [ 284.804258][ T8185] kernel_wait+0xd3/0x1c0 [ 284.808888][ T8185] call_usermodehelper_exec_work+0xb5/0x220 [ 284.815007][ T8185] process_one_work+0x8a2/0x1160 [ 284.820066][ T8185] worker_thread+0xaa2/0x1270 [ 284.824870][ T8185] kthread+0x29d/0x330 [ 284.829057][ T8185] ret_from_fork+0x1f/0x30 [ 284.833702][ T8185] [ 284.833702][ T8185] other info that might help us debug this: [ 284.833702][ T8185] [ 284.844933][ T8185] Chain exists of: [ 284.844933][ T8185] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 284.844933][ T8185] [ 284.858993][ T8185] Possible interrupt unsafe locking scenario: [ 284.858993][ T8185] [ 284.867459][ T8185] CPU0 CPU1 [ 284.873121][ T8185] ---- ---- [ 284.878695][ T8185] lock(tasklist_lock); [ 284.882976][ T8185] local_irq_disable(); [ 284.890024][ T8185] lock(&dev->event_lock#2); [ 284.897450][ T8185] lock(&f->f_owner.lock); [ 284.904533][ T8185] [ 284.908039][ T8185] lock(&dev->event_lock#2); [ 284.913222][ T8185] [ 284.913222][ T8185] *** DEADLOCK *** [ 284.913222][ T8185] [ 284.921514][ T8185] 2 locks held by syz.1.1025/8185: [ 284.926841][ T8185] #0: ffff88807c2f0e80 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x1de/0x4f0 [ 284.935784][ T8185] #1: ffff88807f406130 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x3c0 [ 284.945250][ T8185] [ 284.945250][ T8185] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 284.955781][ T8185] -> (&dev->event_lock#2){-.-.}-{2:2} { [ 284.961698][ T8185] IN-HARDIRQ-W at: [ 284.966706][ T8185] lock_acquire+0x1bb/0x4a0 [ 284.973338][ T8185] _raw_spin_lock_irqsave+0xb0/0x100 [ 284.980647][ T8185] input_event+0x76/0xb0 [ 284.986940][ T8185] psmouse_report_standard_packet+0x4f/0x200 [ 284.995046][ T8185] psmouse_process_byte+0x42b/0x620 [ 285.002358][ T8185] psmouse_handle_byte+0x43/0x490 [ 285.009444][ T8185] psmouse_interrupt+0x699/0x1130 [ 285.016694][ T8185] serio_interrupt+0x87/0x130 [ 285.023421][ T8185] i8042_interrupt+0x365/0x710 [ 285.030314][ T8185] __handle_irq_event_percpu+0x293/0xa50 [ 285.038006][ T8185] handle_irq_event+0x87/0x1e0 [ 285.044821][ T8185] handle_edge_irq+0x243/0xb20 [ 285.052153][ T8185] __common_interrupt+0xd7/0x1e0 [ 285.059130][ T8185] common_interrupt+0xb0/0xd0 [ 285.065940][ T8185] asm_common_interrupt+0x22/0x40 [ 285.073016][ T8185] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 285.080967][ T8185] klist_next+0x272/0x2f0 [ 285.087346][ T8185] bus_for_each_dev+0x153/0x1f0 [ 285.094429][ T8185] bus_add_driver+0x30a/0x5a0 [ 285.101140][ T8185] driver_register+0x32d/0x430 [ 285.108197][ T8185] usb_register_driver+0x202/0x3d0 [ 285.115526][ T8185] do_one_initcall+0x26a/0x840 [ 285.122347][ T8185] do_initcall_level+0x137/0x1e4 [ 285.129512][ T8185] do_initcalls+0x4b/0x8a [ 285.135991][ T8185] kernel_init_freeable+0x415/0x5be [ 285.143343][ T8185] kernel_init+0x19/0x1b0 [ 285.149731][ T8185] ret_from_fork+0x1f/0x30 [ 285.156482][ T8185] IN-SOFTIRQ-W at: [ 285.160769][ T8185] lock_acquire+0x1bb/0x4a0 [ 285.167345][ T8185] _raw_spin_lock_irqsave+0xb0/0x100 [ 285.174762][ T8185] input_event+0x76/0xb0 [ 285.181061][ T8185] hidinput_report_event+0x9d/0xf0 [ 285.188439][ T8185] hid_report_raw_event+0x155d/0x1760 [ 285.196033][ T8185] hid_input_report+0x420/0x4e0 [ 285.202930][ T8185] hid_irq_in+0x435/0x690 [ 285.209503][ T8185] __usb_hcd_giveback_urb+0x35f/0x520 [ 285.217030][ T8185] dummy_timer+0xbf6/0x3090 [ 285.223768][ T8185] __hrtimer_run_queues+0x560/0xd70 [ 285.231011][ T8185] hrtimer_run_softirq+0x183/0x2a0 [ 285.238176][ T8185] handle_softirqs+0x2a1/0x930 [ 285.245086][ T8185] __irq_exit_rcu+0x13b/0x230 [ 285.251800][ T8185] irq_exit_rcu+0x5/0x20 [ 285.258062][ T8185] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 285.265727][ T8185] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.273903][ T8185] __sanitizer_cov_trace_pc+0x0/0x60 [ 285.281214][ T8185] pidff_find_reports+0x558/0x570 [ 285.288532][ T8185] hid_pidff_init+0x161/0x44c0 [ 285.295376][ T8185] hid_connect+0x1208/0x1970 [ 285.302038][ T8185] hid_hw_start+0x99/0x100 [ 285.308604][ T8185] hid_device_probe+0x2e6/0x350 [ 285.315517][ T8185] really_probe+0x2aa/0xc70 [ 285.322073][ T8185] __driver_probe_device+0x18c/0x330 [ 285.329453][ T8185] driver_probe_device+0x4f/0x420 [ 285.336871][ T8185] __device_attach_driver+0x2c6/0x510 [ 285.344558][ T8185] bus_for_each_drv+0x184/0x210 [ 285.351631][ T8185] __device_attach+0x2a8/0x480 [ 285.358640][ T8185] bus_probe_device+0xbc/0x1e0 [ 285.365837][ T8185] device_add+0xa00/0xfb0 [ 285.372232][ T8185] hid_add_device+0x389/0x530 [ 285.378970][ T8185] usbhid_probe+0xc09/0xfe0 [ 285.385614][ T8185] usb_probe_interface+0x5c5/0xb20 [ 285.392809][ T8185] really_probe+0x2aa/0xc70 [ 285.399543][ T8185] __driver_probe_device+0x18c/0x330 [ 285.406939][ T8185] driver_probe_device+0x4f/0x420 [ 285.414015][ T8185] __device_attach_driver+0x2c6/0x510 [ 285.421446][ T8185] bus_for_each_drv+0x184/0x210 [ 285.428329][ T8185] __device_attach+0x2a8/0x480 [ 285.435223][ T8185] bus_probe_device+0xbc/0x1e0 [ 285.442031][ T8185] device_add+0xa00/0xfb0 [ 285.448410][ T8185] usb_set_configuration+0x1991/0x1fd0 [ 285.456012][ T8185] usb_generic_driver_probe+0x89/0x150 [ 285.463523][ T8185] usb_probe_device+0x139/0x270 [ 285.470510][ T8185] really_probe+0x2aa/0xc70 [ 285.477149][ T8185] __driver_probe_device+0x18c/0x330 [ 285.484738][ T8185] driver_probe_device+0x4f/0x420 [ 285.491832][ T8185] __device_attach_driver+0x2c6/0x510 [ 285.499332][ T8185] bus_for_each_drv+0x184/0x210 [ 285.506316][ T8185] __device_attach+0x2a8/0x480 [ 285.513574][ T8185] bus_probe_device+0xbc/0x1e0 [ 285.520488][ T8185] device_add+0xa00/0xfb0 [ 285.526882][ T8185] usb_new_device+0xd66/0x1650 [ 285.533687][ T8185] hub_event+0x2dcf/0x5560 [ 285.540159][ T8185] process_one_work+0x8a2/0x1160 [ 285.548286][ T8185] worker_thread+0xaa2/0x1270 [ 285.555000][ T8185] kthread+0x29d/0x330 [ 285.561110][ T8185] ret_from_fork+0x1f/0x30 [ 285.567674][ T8185] INITIAL USE at: [ 285.571776][ T8185] lock_acquire+0x1bb/0x4a0 [ 285.578250][ T8185] _raw_spin_lock_irqsave+0xb0/0x100 [ 285.585505][ T8185] input_inject_event+0xa7/0x310 [ 285.592529][ T8185] led_trigger_event+0x12f/0x210 [ 285.599430][ T8185] kbd_led_trigger_activate+0xb9/0x100 [ 285.607029][ T8185] led_trigger_set+0x50c/0x910 [ 285.613754][ T8185] led_trigger_set_default+0x19c/0x1e0 [ 285.621702][ T8185] led_classdev_register_ext+0x625/0x860 [ 285.629395][ T8185] input_leds_connect+0x4e7/0x6b0 [ 285.636483][ T8185] input_register_device+0xdfd/0x1310 [ 285.644019][ T8185] atkbd_connect+0x6f8/0x9a0 [ 285.650768][ T8185] serio_driver_probe+0x76/0x90 [ 285.657603][ T8185] really_probe+0x2aa/0xc70 [ 285.664095][ T8185] __driver_probe_device+0x18c/0x330 [ 285.671339][ T8185] driver_probe_device+0x4f/0x420 [ 285.678514][ T8185] __driver_attach+0x44a/0x6e0 [ 285.685414][ T8185] bus_for_each_dev+0x182/0x1f0 [ 285.692250][ T8185] serio_handle_event+0x29c/0x840 [ 285.699527][ T8185] process_one_work+0x8a2/0x1160 [ 285.706592][ T8185] worker_thread+0xaa2/0x1270 [ 285.713246][ T8185] kthread+0x29d/0x330 [ 285.719262][ T8185] ret_from_fork+0x1f/0x30 [ 285.725735][ T8185] } [ 285.728452][ T8185] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 285.737818][ T8185] -> (&new->fa_lock){....}-{2:2} { [ 285.743094][ T8185] INITIAL USE at: [ 285.747120][ T8185] lock_acquire+0x1bb/0x4a0 [ 285.753854][ T8185] _raw_write_lock_irq+0xab/0xf0 [ 285.760802][ T8185] fasync_remove_entry+0xf0/0x1c0 [ 285.767630][ T8185] lease_modify+0x1a2/0x390 [ 285.773932][ T8185] locks_remove_file+0x52f/0xec0 [ 285.780752][ T8185] __fput+0x188/0x920 [ 285.786528][ T8185] task_work_run+0x1d0/0x260 [ 285.793017][ T8185] exit_to_user_mode_loop+0xe6/0x110 [ 285.800242][ T8185] exit_to_user_mode_prepare+0xee/0x180 [ 285.807666][ T8185] syscall_exit_to_user_mode+0x16/0x40 [ 285.815001][ T8185] do_syscall_64+0x58/0xa0 [ 285.821222][ T8185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.828989][ T8185] INITIAL READ USE at: [ 285.833446][ T8185] lock_acquire+0x1bb/0x4a0 [ 285.840174][ T8185] _raw_read_lock_irqsave+0xb8/0x100 [ 285.847789][ T8185] kill_fasync+0x18e/0x4b0 [ 285.854429][ T8185] do_splice+0x1284/0x1630 [ 285.861070][ T8185] __se_sys_splice+0x34d/0x440 [ 285.868281][ T8185] do_syscall_64+0x4c/0xa0 [ 285.874934][ T8185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.884091][ T8185] } [ 285.886791][ T8185] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 285.895606][ T8185] ... acquired at: [ 285.899651][ T8185] _raw_read_lock_irqsave+0xb8/0x100 [ 285.905255][ T8185] kill_fasync+0x18e/0x4b0 [ 285.910332][ T8185] mousedev_notify_readers+0x6eb/0xc00 [ 285.916436][ T8185] mousedev_event+0x568/0x11f0 [ 285.921420][ T8185] input_pass_values+0x9c7/0x12f0 [ 285.926673][ T8185] input_event_dispose+0x346/0x6c0 [ 285.932017][ T8185] input_inject_event+0x1f5/0x310 [ 285.937269][ T8185] evdev_write+0x35b/0x490 [ 285.941904][ T8185] vfs_write+0x2e6/0xa30 [ 285.946362][ T8185] ksys_write+0x14c/0x250 [ 285.950905][ T8185] do_syscall_64+0x4c/0xa0 [ 285.955554][ T8185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.961743][ T8185] [ 285.964645][ T8185] -> (&f->f_owner.lock){....}-{2:2} { [ 285.970079][ T8185] INITIAL USE at: [ 285.974099][ T8185] lock_acquire+0x1bb/0x4a0 [ 285.980395][ T8185] _raw_write_lock_irq+0xab/0xf0 [ 285.987040][ T8185] __f_setown+0x37/0x330 [ 285.992907][ T8185] fcntl_dirnotify+0x6de/0x8f0 [ 285.999289][ T8185] do_fcntl+0x5ed/0x1270 [ 286.005144][ T8185] __se_sys_fcntl+0xc9/0x190 [ 286.011351][ T8185] do_syscall_64+0x4c/0xa0 [ 286.017379][ T8185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.024896][ T8185] INITIAL READ USE at: [ 286.029400][ T8185] lock_acquire+0x1bb/0x4a0 [ 286.036009][ T8185] _raw_read_lock_irqsave+0xb8/0x100 [ 286.043351][ T8185] send_sigurg+0x25/0x3c0 [ 286.049727][ T8185] sk_send_sigurg+0x6b/0xc0 [ 286.056379][ T8185] tcp_check_urg+0x200/0x750 [ 286.063070][ T8185] tcp_urg+0x160/0x400 [ 286.069195][ T8185] tcp_rcv_established+0xdef/0x1d50 [ 286.076489][ T8185] tcp_v4_do_rcv+0x48d/0xb00 [ 286.083217][ T8185] __release_sock+0x1e1/0x450 [ 286.089950][ T8185] release_sock+0x5b/0x1b0 [ 286.096617][ T8185] tcp_sendmsg+0x35/0x40 [ 286.102920][ T8185] __sys_sendto+0x497/0x650 [ 286.109479][ T8185] __x64_sys_sendto+0xda/0xf0 [ 286.116302][ T8185] do_syscall_64+0x4c/0xa0 [ 286.122845][ T8185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.130887][ T8185] } [ 286.133414][ T8185] ... key at: [] __alloc_file.__key+0x0/0x10 [ 286.141623][ T8185] ... acquired at: [ 286.145469][ T8185] _raw_read_lock_irqsave+0xb8/0x100 [ 286.150978][ T8185] send_sigio+0x2f/0x360 [ 286.155440][ T8185] kill_fasync+0x224/0x4b0 [ 286.160082][ T8185] do_splice+0x1284/0x1630 [ 286.164751][ T8185] __se_sys_splice+0x34d/0x440 [ 286.169878][ T8185] do_syscall_64+0x4c/0xa0 [ 286.175122][ T8185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.181325][ T8185] [ 286.183679][ T8185] [ 286.183679][ T8185] the dependencies between the lock to be acquired [ 286.183689][ T8185] and HARDIRQ-irq-unsafe lock: [ 286.197456][ T8185] -> (tasklist_lock){.+.+}-{2:2} { [ 286.202642][ T8185] HARDIRQ-ON-R at: [ 286.206667][ T8185] lock_acquire+0x1bb/0x4a0 [ 286.212888][ T8185] _raw_read_lock+0x32/0x40 [ 286.219274][ T8185] do_wait+0x2b6/0xb60 [ 286.225420][ T8185] kernel_wait+0xd3/0x1c0 [ 286.231458][ T8185] call_usermodehelper_exec_work+0xb5/0x220 [ 286.239143][ T8185] process_one_work+0x8a2/0x1160 [ 286.245964][ T8185] worker_thread+0xaa2/0x1270 [ 286.252689][ T8185] kthread+0x29d/0x330 [ 286.259005][ T8185] ret_from_fork+0x1f/0x30 [ 286.265165][ T8185] SOFTIRQ-ON-R at: [ 286.269403][ T8185] lock_acquire+0x1bb/0x4a0 [ 286.275806][ T8185] _raw_read_lock+0x32/0x40 [ 286.282210][ T8185] do_wait+0x2b6/0xb60 [ 286.288192][ T8185] kernel_wait+0xd3/0x1c0 [ 286.294225][ T8185] call_usermodehelper_exec_work+0xb5/0x220 [ 286.301830][ T8185] process_one_work+0x8a2/0x1160 [ 286.308657][ T8185] worker_thread+0xaa2/0x1270 [ 286.315124][ T8185] kthread+0x29d/0x330 [ 286.321311][ T8185] ret_from_fork+0x1f/0x30 [ 286.327519][ T8185] INITIAL USE at: [ 286.331666][ T8185] lock_acquire+0x1bb/0x4a0 [ 286.338139][ T8185] _raw_write_lock_irq+0xab/0xf0 [ 286.344790][ T8185] copy_process+0x2557/0x4030 [ 286.351784][ T8185] kernel_clone+0x24b/0x900 [ 286.357913][ T8185] user_mode_thread+0x10d/0x180 [ 286.365006][ T8185] rest_init+0x23/0x300 [ 286.370784][ T8185] start_kernel+0x0/0x53c [ 286.376914][ T8185] start_kernel+0x493/0x53c [ 286.383241][ T8185] secondary_startup_64_no_verify+0xcf/0xdb [ 286.391019][ T8185] INITIAL READ USE at: [ 286.395389][ T8185] lock_acquire+0x1bb/0x4a0 [ 286.402441][ T8185] _raw_read_lock+0x32/0x40 [ 286.409093][ T8185] do_wait+0x2b6/0xb60 [ 286.415475][ T8185] kernel_wait+0xd3/0x1c0 [ 286.422216][ T8185] call_usermodehelper_exec_work+0xb5/0x220 [ 286.430351][ T8185] process_one_work+0x8a2/0x1160 [ 286.437959][ T8185] worker_thread+0xaa2/0x1270 [ 286.445425][ T8185] kthread+0x29d/0x330 [ 286.451635][ T8185] ret_from_fork+0x1f/0x30 [ 286.458107][ T8185] } [ 286.460646][ T8185] ... key at: [] tasklist_lock+0x18/0x40 [ 286.468518][ T8185] ... acquired at: [ 286.472669][ T8185] _raw_read_lock+0x32/0x40 [ 286.477536][ T8185] send_sigurg+0xec/0x3c0 [ 286.482190][ T8185] sk_send_sigurg+0x6b/0xc0 [ 286.486923][ T8185] queue_oob+0x3ed/0x4f0 [ 286.491388][ T8185] unix_stream_sendmsg+0x8cf/0xa70 [ 286.496734][ T8185] ____sys_sendmsg+0x5be/0x970 [ 286.501918][ T8185] ___sys_sendmsg+0x2a2/0x360 [ 286.506911][ T8185] __sys_sendmmsg+0x2c3/0x510 [ 286.511814][ T8185] __x64_sys_sendmmsg+0x9c/0xb0 [ 286.516897][ T8185] do_syscall_64+0x4c/0xa0 [ 286.521541][ T8185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.527730][ T8185] [ 286.530088][ T8185] [ 286.530088][ T8185] stack backtrace: [ 286.536049][ T8185] CPU: 1 PID: 8185 Comm: syz.1.1025 Not tainted syzkaller #0 [ 286.543460][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.553647][ T8185] Call Trace: [ 286.557002][ T8185] [ 286.560011][ T8185] dump_stack_lvl+0x188/0x24e [ 286.564736][ T8185] ? load_image+0x400/0x400 [ 286.569276][ T8185] ? show_regs_print_info+0x12/0x12 [ 286.574557][ T8185] ? load_image+0x400/0x400 [ 286.579129][ T8185] ? print_shortest_lock_dependencies+0xf0/0x160 [ 286.585618][ T8185] __lock_acquire+0x66c8/0x7d10 [ 286.591008][ T8185] ? verify_lock_unused+0x140/0x140 [ 286.596919][ T8185] ? verify_lock_unused+0x140/0x140 [ 286.602455][ T8185] lock_acquire+0x1bb/0x4a0 [ 286.607346][ T8185] ? send_sigurg+0xec/0x3c0 [ 286.612438][ T8185] ? read_lock_is_recursive+0x10/0x10 [ 286.617987][ T8185] ? do_raw_read_lock+0x39/0x80 [ 286.622986][ T8185] ? _raw_read_lock_irqsave+0xc4/0x100 [ 286.628609][ T8185] ? _raw_read_lock+0x40/0x40 [ 286.633370][ T8185] ? __lock_acquire+0x7d10/0x7d10 [ 286.638466][ T8185] ? do_raw_spin_lock+0x128/0x2f0 [ 286.643671][ T8185] _raw_read_lock+0x32/0x40 [ 286.648305][ T8185] ? send_sigurg+0xec/0x3c0 [ 286.652859][ T8185] send_sigurg+0xec/0x3c0 [ 286.657506][ T8185] sk_send_sigurg+0x6b/0xc0 [ 286.662505][ T8185] queue_oob+0x3ed/0x4f0 [ 286.666967][ T8185] ? scm_stat_add+0xc0/0xc0 [ 286.671504][ T8185] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 286.677704][ T8185] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 286.684371][ T8185] unix_stream_sendmsg+0x8cf/0xa70 [ 286.689554][ T8185] ? __might_fault+0xa6/0x120 [ 286.694286][ T8185] ? unix_show_fdinfo+0x2c0/0x2c0 [ 286.699369][ T8185] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 286.705952][ T8185] ? aa_sock_msg_perm+0x94/0x150 [ 286.711030][ T8185] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 286.716472][ T8185] ? security_socket_sendmsg+0x7c/0xa0 [ 286.722017][ T8185] ? unix_show_fdinfo+0x2c0/0x2c0 [ 286.727143][ T8185] ____sys_sendmsg+0x5be/0x970 [ 286.732071][ T8185] ? __sys_sendmsg_sock+0x30/0x30 [ 286.737677][ T8185] ? __import_iovec+0x315/0x500 [ 286.742725][ T8185] ? import_iovec+0x6f/0xa0 [ 286.747748][ T8185] ___sys_sendmsg+0x2a2/0x360 [ 286.752476][ T8185] ? __sched_text_start+0x8/0x8 [ 286.757464][ T8185] ? __sys_sendmsg+0x290/0x290 [ 286.762554][ T8185] __sys_sendmmsg+0x2c3/0x510 [ 286.767501][ T8185] ? __ia32_sys_sendmsg+0x80/0x80 [ 286.772960][ T8185] ? __ia32_sys_get_robust_list+0x100/0x100 [ 286.778929][ T8185] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 286.784960][ T8185] ? lock_chain_count+0x20/0x20 [ 286.789877][ T8185] __x64_sys_sendmmsg+0x9c/0xb0 [ 286.794842][ T8185] do_syscall_64+0x4c/0xa0 [ 286.799295][ T8185] ? clear_bhb_loop+0x60/0xb0 [ 286.804030][ T8185] ? clear_bhb_loop+0x60/0xb0 [ 286.808793][ T8185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.814825][ T8185] RIP: 0033:0x7ffb5c19c799 [ 286.819327][ T8185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.839338][ T8185] RSP: 002b:00007ffb5cf7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 286.847916][ T8185] RAX: ffffffffffffffda RBX: 00007ffb5c415fa0 RCX: 00007ffb5c19c799 [ 286.856027][ T8185] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 286.864248][ T8185] RBP: 00007ffb5c232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 286.872399][ T8185] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 286.880423][ T8185] R13: 00007ffb5c416038 R14: 00007ffb5c415fa0 R15: 00007ffc942703a8 [ 286.888554][ T8185] [ 286.892274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.901673][ T4949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.910695][ T6850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.919173][ T6850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.135362][ T8187] fido_id[8187]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 287.963127][ T6850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.002678][ T6850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.960017][ T4954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.043535][ T6850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.080660][ T6850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.729013][ T4325] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.774678][ T4325] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.877018][ T4325] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.927136][ T4325] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.083271][ T4325] tipc: Left network mode [ 292.122462][ T6850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.360399][ T4949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.929213][ T4325] device hsr_slave_0 left promiscuous mode [ 292.936283][ T4325] device hsr_slave_1 left promiscuous mode [ 292.942925][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.959668][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.968049][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.976261][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.991805][ T4325] device vlan2 left promiscuous mode [ 292.997280][ T4325] device macvtap0 left promiscuous mode [ 293.003267][ T4949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.004626][ T4325] bridge0: port 3(vlan2) entered disabled state [ 293.038051][ T4325] device bridge_slave_1 left promiscuous mode [ 293.044578][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.060543][ T4325] device bridge_slave_0 left promiscuous mode [ 293.067020][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.078584][ T4325] device veth1_macvtap left promiscuous mode [ 293.085271][ T4325] device veth0_macvtap left promiscuous mode [ 293.091714][ T4325] device veth1_vlan left promiscuous mode [ 293.097841][ T4325] device veth0_vlan left promiscuous mode [ 293.163330][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.362287][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 293.411165][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 293.470715][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.518893][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.636613][ T4325] bond0 (unregistering): Released all slaves [ 293.648570][ T4949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.210325][ T6850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog