last executing test programs: 22.137111428s ago: executing program 0 (id=407): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x3}}}, 0x32) getsockname(r0, 0x0, &(0x7f00000000c0)) 21.974722414s ago: executing program 0 (id=409): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) 21.505337858s ago: executing program 0 (id=411): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000009740)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001d40)="726e6c8dc15fc4d1232631b0d3519bcf4c953a35b96971213d5ca51e4b31c5d73cb7f8d6df7c9dcc5a08dcc9cd97ca9bac73a6c70551f763e5140fbf6a402ea735", 0x41}, {&(0x7f0000001e00)="d738495482190f7201b81c3b74694d5f3e38481a2d1ba28db587e898e11612cfb9bd2bf3ac873a916265ef0a9b731c675fff124fe0dbf018f39e77708ba50c18b1b433b251181448549fdbee034a4a661012fcc3fefb58718f7f459b88a4be7d27b7f4e24ba33b3c65bd1a99e3a423a80bc5737649641c4967d1e76fd2eab923059cfd176a42096fcf9ad77b6344bf2584c50789d35f0218d309e555e5ec4a806e98a99b14f065fc2512bc6cfb573ac6", 0xb0}, {&(0x7f0000001f40)="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", 0x1cf}], 0x3, 0x0, 0x0, 0x51}}], 0x1, 0x80) 21.233053446s ago: executing program 0 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 21.007597633s ago: executing program 0 (id=415): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) 20.405790032s ago: executing program 0 (id=419): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3fdd, @local, 'veth1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, 0x0, 0x0) 19.808729341s ago: executing program 32 (id=419): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3fdd, @local, 'veth1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, 0x0, 0x0) 18.771329374s ago: executing program 2 (id=427): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xfffffffd, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x40601) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) 18.329783107s ago: executing program 2 (id=429): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 17.724915376s ago: executing program 2 (id=431): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c00028005000100"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setresuid(0xee00, 0xee00, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac00000012000105"], 0xac}}, 0x4000) 17.457479404s ago: executing program 2 (id=432): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000006400)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303235342c6c6f6e6761642c756d61736b3d30303030303030303030303030303030303137373737372c646d6f64653d30303030303030303030303030303030303030303430302c756e686964652c73686f727461642c616e63686f723d30303030303030303030303030303030303030372c6e6f7374726963742c696f636861727365743d6b6f69382d72752c00263468691e626cd4f6d91d6fed4bb42a4515346a98d55253771fadd9bb31ceaa8d7647a551ee49f3b17bfc6ae1090b228307b8fdc1935c7e8cbbf9aea203bd"], 0x1, 0xc65, &(0x7f0000000f80)="$eJzs3U9sHNd5APDvjbjiUm4rJnYUJ42LTVuksmK5+hdRsQp3VdNsA8iyEIq5BeBKpNSFKZIgqUY20oJpDz30EKAoesiJQGsUSNHAaIqglwJM6wLJxYfCp56IFjaCoge2CJBTwGBm34pLirRpiZQo6/ezyW929nuz781bztAGv30BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83ssXTpxMD7sXAMCDdGn0qydOuf8DwGPliv/+BwAAAAAAAAAAAACA/S5FEU9GitlLq2m8etxRv9iu3bo9NjyydbOBVLU8UOWXX/WTp06f+dLZoXPdeLE9/QHtd9tn49XRKxcaL83cnJ2bnJ+fnGiMTbevzUxM7vgI99t+s2PVCWjcfO3WxPXr841Tz5/e8PTtwff7nzgyeH7o2ePPdHPHhkdGRtdT6r35fffckY7tKjwORhHHI8Vz3/tJakVEEfd/LuoPdu43G6gGcawaxNjwSDWQqXZreqF88nL3RBQRjZ5Gze452nouoq/2QMewvWbEYtn9ssPHyuGNzrbmWlenJhuXW3ML7YX2zPTl1OltOZ5GFHEuRSxFxEr/3YerRRF9keI7h1fT1Yg40D0PX6wKg7fvR7GHY9yBsp+NWsRS8QjM2T7WH0W8Eil++vbRuJavM9W15gsRr5TxBxFvlvHFiFS+Mc5EvLfF+4hHU18U8Rfl/J9fTRPV9aB7Xbn4tcZXpq/P9OR2rysf8f5w15XiId0fBjbFB2OfX5vqUUSruuKvpnv/ZQcAAAAAAAAAAAAAAACA3TYQRXwmUrz8H39U1RVHVZd++PzQ7w/+cm/N+NMfcpwy9/mIWCx2VpN7MBcGXk6XU3rItcSPs3oU8ce5/u9bD7szAAAAAAAAAAAAAAAAAAAAj7Ui3o0UL7xzNC1F75ri7ekbjSutq1OdVWG7a/9210xfW1tba6RObOY4nuNijks5Lue4kmMUuX0RUS/b58fjRUQ0G3eOv5T3L+e4kmMcyO1zbOY4nuNijks5Lue4kmP05fY5NnMcz3Exx6Ucl3NcyTH2ydq9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfJ0UU8fNI8e1vrKZIEdGMGI9OXO5/2L0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEr9qYjvR4rGHzTv7OuLiFT923G0/HYmmgfL+MloDpXxxWheyLFVxb7mtx5C/7k/tVTEjyNFf/2tOxOe57/WeXTnbRBvfnP90Wf7OvFA98nB9/ufOHL4/NDIrz293XbaqgPHLranb91ujA2PjIz27O7Lr/7Jnn2D+XWL3Rk6ETH/+huvtaamJuc+8sbB7kb5Fvjozbff6IvdOc7ub6S+3R3pxo3yPO7Ccbo/HfvijD3iG9G3L7rxcMbOY6C8/78XKX77nf/s3vA79/96/FLn0Z07fPzsT9bv/y9sPtCO7v+z797VgXz/L69aW93/n+zZ90L+baTWF1FfuDlbOxJRn3/9jePtm60bkzcmp8+cOPHloaEvnz5ROxhRv96emuzZ2o2zBQAAAAAAAAAAAAAAAPAApSJ+N1K0fryaGhFxu6rXGjw/9OzxZw7EgareakPd9qujVy40Xpq5OTs3OT8/OdEYm25fm5mY3OnL1atyr7HhkT0ZzIca2OP+D9Rfmpl9fa594w8Xtnz+UP3C1fmFuda1rZ+OgSgimr17jlUdHhseqTo91W5NV00vb1lM/9HVUhH/FSmunWmkz+d9uf5/c4X/hvr/xc0H2qP6/0/07CtfM6UifhYpfusvn47PV/08FHeds5z3t5Hi2LnP5bw4WOZ1+9D5XIFOZWCZ+3+R4h9/vjG3Ww/55HruyR2f2EdEOf+HI8X3//y78et538bPf9h6/g9tPtAezf9TPfsObfi8gvseOnn+j0eKF598K34j7/ugz//ofrrA0Zx85/M5Bt/v/7M9mP9P9ewbzK/7m7szdAAAAAAAAAAAgEdaLRXxd5HihyN96WzEWmUHf/83sflAm/7mq7ZLf//16Z59E/e1XlHvxr98YM6unFgAAAAA2AdqqYh3I8WNhbfu1FBvrP/uqf/8nfX6z+G06dnq//P9SvW5AbtZ/9lrML/u+P0PGwAAAAAAAAAAAAAAAAAAAPaVlIo4m9dTH6/q+Se2XU99OVK8/D/P5bx0pMzrrgM/WH2vX5qZPn5hamrmWmuhdXVqsjE627o2WbZ9KlKs/s3nctuiWl+9u958Z4339bXY5yLFyN93cztrsXfXJn9qPfdkmfuJSPHf/7Axt7uO9afWc0+VuX8dKb7+z1vnHlnPPV3mfjdS/OjrjW7uoTL3bM799Hru89dmij2YFQAAAAAAAAAAAAAAAAAAAB43tVTEn0aK/725dKeWP6//X+t5WHnzmz3r/W9yu1rnf7Ba/3+77XtZ/7/6XIHF7V4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+nlIU8UakmL20mpb7y8cd9Yvt6Vu3x4ZHtm42kKqWB6r88qt+8tTpM186O3SuGz+4/W77TLw6euVC46WZm7Nzk/PzkxONsen2tZmJyYiBnR2hp32Rd3Xa36Nj1Qlo3Hzt1sT16/ONU8+f3vD07cH3+584Mnh+6Nnjz3Rzx4ZHRkZ7cvpq9/zqd0nb7D8YRfxVpHjuez9JP+yPqMa+7bncmQ957+y1gWoQx6pBjA2PVAOZaremF8onL3dPRBHR6GnU7J6jBzAX96UZsVh2v+zwsXJ4o7OtudbVqcnG5dbcQnuhPTN9OXV6W46nEUWcSxFLEbHSf/fhalHEa5HiO4dX07/2RxzonocvXhr96olT2/ej2MMx7kDZz0YtYql4BOZsH+uPIv4pUvz07aPxb/0RfdH5ii9EvFLGH0S8GZ35TuUb40zEe1u8j3g09UUR/1/O//nV9HZ/eT3oXlcufq3xlenrMz253evKI39/eJD2+bWpHkX8qLrir6Z/93MNAAAAAAAAAAAAAAAAsI8U8auR4oV3jqaqPvhOTXF7+kbjSuvqVKesr1v7162ZXltbW2ukTmzmOJ7jYo5LOS7nuJJjFLl9js0y1tfWxvPjxRyXclzOcSXHOJDb59jMcTzHxRyXclzOcSXH6Mvtc2zmOJ7jYo5LOS7nuJJj7JPaPQAAAAAAAAAAAAAAAAAA4OOlqP5J8e1vrKa1/s760uPRicvWA/3Y+0UAAAD//1Zv8js=") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_off}]}) 16.161718865s ago: executing program 2 (id=434): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 12.347117634s ago: executing program 2 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x0, 0x0, {0x2, 0x0, 0x10, 0x4, 0x2, 0x0, 0xfe, 0x2, 0x700}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x30}}]}, 0x2c}, 0x1, 0xffffff7f, 0x0, 0x20048000}, 0x4048004) 11.761915093s ago: executing program 33 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x0, 0x0, {0x2, 0x0, 0x10, 0x4, 0x2, 0x0, 0xfe, 0x2, 0x700}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x30}}]}, 0x2c}, 0x1, 0xffffff7f, 0x0, 0x20048000}, 0x4048004) 6.365466691s ago: executing program 1 (id=457): unshare(0x42000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0xa4}}, 0x0) 4.034091774s ago: executing program 3 (id=460): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf31, &(0x7f0000001e80)="$eJzs3U9sHNX9APA3a6//xCZeAz8w8COk0IpAwQ5JpKanBoF6RFx6B4WERhiKGnog4k/oAVEJUSTEqeJAxYVSKUVqJVClCvXU9tSqt55QL1SqUimohzZS4sr2e+v1s4ddj+3Ztffzkb5+++bNzvc7WWszM559G4Ch1Vj5eeLEXBHCu5++8+jLTxW/WV52V3uNwys/i9hrhRCaHf0i297nccG1Ky+d3qwtwrGVn6kfHrvcfu5UCOFiOBw+C63w0cLilx++98iRj1+fuOWtC8+8sku735bvBwAA7EeX/rT4t/v+8ccHZq9eOnQqjLeXp+PzVuxPxeP+o/FAOR0vN8L6ftERncay9UZiNLL1RrL1RrM8oyX5mtl2miXrjXXJN9KxbLP9BAAAgL0onde2QtGYX9dvNObnV8/7l30+M1bMP3du8ez5PhUKAAAAVPbvV1duuhVCDHhMhv7XUF+Mrr1J9b0WIYTYrWgOQA1CCCEGIibrybM008eLDwAAAMBQyucL2+Dizs7U1d5aq7f8lx9ubP582AF1//7Lv7fyf/CadxwAAKrbb0eTaQbDtF/pODrNY5DPIziSPX+rx/+NbDujW6y3bF7BdcuLwX2ZyurP/10HVVn9W30d+6Ws/nw+zEFVVn8+T+egKqt/vOY6qiqrf6LmOqoqq3+y5jqqKqv/QM11VFVW/1TNdVRVVv90zXVUVVb/DTXXUVVZ/QdrrqOqsvr3ym21ZfW3aq6jqrL6Z2uuo6qy+m+suY6qyuq/qeY6qiqr/+aa6+iXO2Ob/h0OZeOd58/5Od1eOccDAACAYfdf8/8JIYQQG2LlPogBqEOI/R3FANQgviraf+8bgFqEENuPV/t69QEAAAAYBOlzAekD6EtRGh/pMj4aP0u0Mj6xtkIab3Z5/liX8fzz/vk4AAAAEMJv3zh729vF2uf8tzsfXse8UddDhXmM8onutpp/u/OebTf/Xpm3DAAAgOFSfPez6/c/+v4Ls1cvHTrVcfZ7PZ7vpnlAR+O1gU9iP90XMJ31i3QOfWp9nkbJevn1gRvKtvf4NncUAAAAhlg6f2+FojHfcd7dCo3G/Pza+fhcaBZnzy2eORr76ftZ/jDTHF9e/lDNdQMAAAC9Wzvf3/z8P32P71wYK+afO7d49vxqf7q9vNnovC4ws7a86Lwu0MqWHytZfjz20/d3fn9mcmX5/OkfLD610zsPAAAAQ+L8ixeeeXJx8cwPPfDAAw/aD/r9zgQAAOy0L754p/mj49O/W/38/9r8d+nz/4djvxXn9vtzXCHdJ5A+B7Dh8/pPrM8zU7be8+vXa2XrjcQYz+qe6NjOssnsebNl+VrrtzNWkm8qyzed5cvnKRjN1k/5DmbL8/kJ03oz2fJ8HsbRLEeR5b87AAAAQLmFF559fuH8ixcePPfsk0+fefrMc8ePnfz2yZNHH/rWQwsr9/UvdN7dDwAAAOxFazf99rsSAAAAAAAAAAAAAAAAAAAAGF51fJ1Yv/cRAAAAht2/Xg0hXBRicKIo+l+D2FIsjfe/BiGEEEIIIfZMrHy3e/15G/2+/gAAAAAMn2tXXjodwkQIYbndxMViR/O1t9Zaba5fWc2b2ukH/zq7HGm1yw+PrHv+gR2thmF3Lf7epXaDHf79l39v5f/gtZ3NP5Ee9Pz+l10yPlUt770Lv5jrzH/7aI/58/1/vFr+I1n+e0Nv+Zfez/I/US3/fVn+Az3m37D/z1fLf3/MPxf7R+7pNf/61388tmk/JnvM/81s/58KvebP9r/VY8LMAzE/AAyj/XoDQDpKSMfRU7Gf9jceboaR7HlbPf5vZNsZzVZfyhP0KG03HQfdGvvpeGk6y5tstf6pbHs3VKwzV3G3a1dWf/46Dqqy+ps111FVWf1jNddRVVn94zXXUVVZ/RM111FVWf29nof2W1n9e+W6cln9UzXXUVVZ/dM111FVWf1b/X+8X8rqP1hzHVWV1T9Tcx1VldVf8bJa7crqn625jqrK6r+x5jqqKqv/pprrqKqs/ptrrqNf7oht2flwOv+ciWOp38r645v8W+7XawsAAACw1/xzaOf/i1c6+l6HEEIIIfoZ39nGcycG/Vgi2ZXtj+7y9kXd8Z+lVf2uY0NMDkANYisx4n1hcGNpqd7rDQyW3f00MwCDyvv/cPP6Dzev/3Dz+vNV0j38RdZPRrqMj3YZb3YZH8vG89/X8S7jN2XbXUrXNaObu4z/X5fxg13Gb+0yPtdl/LYu47d3Gb+jyzgAAADD4ZbYOj8EAACA/evlX37y5q/vfeLK7NVLh06FsQ3zzh+N/fH4t/U3Yj+f9z5pxr/5/zj2fx7b38f279n67j8BAACA3Ze+J8bf/wEAAGD/St9T6vwfAAAA9q/Z2Dr/BwAAgP3rxtg6/wcAAIB9rJjYfHFs03WBu2Pb67x+AMDg+//Y3hnbQ7G9K7Zfi206Drgntl+vqT4AYOf87Hs/Ofl2sTbf//Fs/FpcntoNLq5eKSga62fyn4ztgdh+o8d68u8D6DV/crDHPLuVf2ab+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/aOx8vPEibkihHc/fefRn469+ZflZXe11zi88rOIvVYIodl+Xhpd6/8qrnjtykunO9vrsS3CsVCEor08PHa5nWkqhHAxHA6fhVb4aGHxyw/fe+TIx69P3PLWhWde2cV/gnX7BwAAAPvR/wIAAP//YgAcWw==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f00000005c0)='./file0\x00') 3.448015072s ago: executing program 3 (id=461): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6gretap0\x00', 0x10) sendto$inet(r0, &(0x7f0000000300)="8c", 0x1, 0x5, &(0x7f0000000100)={0x2, 0x4e02, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) 2.401424215s ago: executing program 3 (id=462): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setuid(0xee01) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2502"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 2.158825703s ago: executing program 3 (id=463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x11e, 0x0, 0xf7b}]}) 1.883895621s ago: executing program 1 (id=464): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000003380)={0x0, 0x3}, &(0x7f00000033c0)=0x8) 1.740053466s ago: executing program 3 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x20008004) close(0x3) 1.551401102s ago: executing program 1 (id=466): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x200c, 0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 1.416195086s ago: executing program 3 (id=467): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$eJzs3T9sVPcdAPDfe3aLTYHalIFKlXpSUVu1lWUz0RqpxhiMDS4VLQxdjrN9gJuzD9nnKAODoyxImSJliDKgRMrmCXnLRJZIGbNkJDNSMmSJFAnlort7Z99758MX4sMBfT4S/t37/be/9373e8PxixOVO0truaW1XGElV164tXY693q5tL5cDHHWp205+6Lr8TlQvYiT2B+cq+cv/ufG6RA+WfziSbVarYaa/rCrsZbX335zb6E1bYpbL95q9Lt7b/vlfyGEE23zqukLIQwkr88l6WSSDoYQjoUQohDCjXtv38zt02wePi6ezT+du781fmp288FW5989CuH90m//dnv5qz/0jX/5l30aHgAAAAAAAAAAAAAAAACAl9z0tavX/z06Fh5FoX8zav++7nSSdvp+bHXf/L73vywAAAAAAAAAAAAAAAAAAAD8TO18/z8XHd/l+/9TSTrRoX31n92N88efOE96Y+ZfV6cujI4l579HbeVnkqyvz/WF4eb56p91Pv/9XKb97ue/t4/zvJrza447FKJ4JHUdxyMjIXyYHPx+Mjocl8prlb/eKq+vLO7bNF5a6fg3Tu9PRSc50D8V/2ec/z+Z6b/35///pu3dVLu+uX9vsVdaOv59Het99Gb0jPj/crve+Uy7FxF/nl86/v31vMHWChONBaAW/3f6977/pzL99yr+x0IIuag211xqBajtYWr5nfYrpKXj/4t6XmrpTP6Qne7/7zLxv5Dp/6DW/43sBxG7Sse/sY4PpGrs3P/D8d73/8VM/wcR/9r8N3z+dyUd/0ONzP5Ulfpfstv1fzrTf6/ifz1O5nksSr0DNqNGfqf/r460dPwH2sp3nv/irvb/lzLtX9TzX3Pc5vNfc/n/c9R4/mN32/HfCk+q1cGO9bq9/2cy7Xq9/k/U939tzpzo5aCvkPT9f7iel947D9V/dop/NRP/2Uz/zxH/jzs/he6o70oGmvHfWU++P9TI/8D+ryvp+P+qkRm31tio/6zv/6K99/+XM/0fxP6vNv+NuLejvirS8T/SsV4t/p938fl/JdOu9/EPYbT5BmjfvrCHdPyPdqxXv/8H9o7/XKZdr+P/p152DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPASmEzSoRDFI6nrOB4ZCeF8cn0yHI7mC4v5+VJ54bW1EKaS/Fw4Ht0ulecLpfzSSnmxmC+USuWFEC4k5SfCQLRWKlfyy4W7F7f7GozuFAurlflioRJCmE7yfxeONvuaX6osF+6GEC5tl/06Lq/evVNYyS8urf5jdHR0NMxsz2E4Kr5RKa5UGqM3SkOY3W47FLVMrl58eXsuR6L/l9dXVwqlev6Vljal8kKh1NJmLil7NwxHldX1lYVCpZgvlW83xztIE0k6NXPtv9eujLWV34wa6eSLnRYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9Kj8b+/F0Lob1zFIYRclLyIkn8pDx8Xz+afzt3fGj81u/lg68ludQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4gR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs0j9KA0EUB+A3Y6Glx7BadjvbFUW0cEXwBHoMD6NH8RLewSJF2hQhkMxC2D+wTVJ9X/Ngfsy8B/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3jqJvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//9HQIRk=") openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xa0040, 0x2}, 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x120) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) 1.039951887s ago: executing program 1 (id=468): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r0, r1, 0x2f, 0x201c, 0x4, @value=r1}, 0x20) 769.855796ms ago: executing program 1 (id=469): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) unshare(0x6020400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x25, &(0x7f0000002d80)="f0c46000", 0x4) 435.612576ms ago: executing program 4 (id=422): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000005304"], 0x38}, 0x1, 0x0, 0x0, 0x28040800}, 0xc000) 428.472127ms ago: executing program 1 (id=476): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x604, &(0x7f0000000040)={r1, 0x4, 0x8, 0xb}) 126.317676ms ago: executing program 4 (id=470): r0 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) unshare(0x8040600) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 0s ago: executing program 4 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 63.383542][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.402829][ T5436] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. syzkaller login: [ 84.294494][ T5763] cgroup: Unknown subsys name 'net' [ 84.464030][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.230430][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.075664][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.096771][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.115263][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.135511][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.154935][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.164716][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.175500][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.189652][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.204940][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.212774][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.221630][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.230925][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.239817][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.248342][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.256522][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.272814][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.284009][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.293067][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.328139][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.339757][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.350137][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.378656][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.389855][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.398100][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.892133][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 89.020674][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 89.083081][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.091319][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.101157][ T5788] bridge_slave_0: entered allmulticast mode [ 89.109801][ T5788] bridge_slave_0: entered promiscuous mode [ 89.145983][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.153283][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.161467][ T5788] bridge_slave_1: entered allmulticast mode [ 89.169226][ T5788] bridge_slave_1: entered promiscuous mode [ 89.177040][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 89.241527][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 89.256065][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.276834][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.363213][ T5788] team0: Port device team_slave_0 added [ 89.402440][ T5788] team0: Port device team_slave_1 added [ 89.458543][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.469269][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.476859][ T5784] bridge_slave_0: entered allmulticast mode [ 89.484023][ T5784] bridge_slave_0: entered promiscuous mode [ 89.494037][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.501852][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.509231][ T5784] bridge_slave_1: entered allmulticast mode [ 89.517858][ T5784] bridge_slave_1: entered promiscuous mode [ 89.541772][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.549085][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.575381][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.600303][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.610029][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.642902][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.708186][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.716999][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.725480][ T5779] bridge_slave_0: entered allmulticast mode [ 89.733553][ T5779] bridge_slave_0: entered promiscuous mode [ 89.756894][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.771178][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.782511][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.790435][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.798401][ T5779] bridge_slave_1: entered allmulticast mode [ 89.806302][ T5779] bridge_slave_1: entered promiscuous mode [ 89.813518][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.821129][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.829396][ T5775] bridge_slave_0: entered allmulticast mode [ 89.836784][ T5775] bridge_slave_0: entered promiscuous mode [ 89.845692][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.853155][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.861143][ T5775] bridge_slave_1: entered allmulticast mode [ 89.868963][ T5775] bridge_slave_1: entered promiscuous mode [ 89.953249][ T5784] team0: Port device team_slave_0 added [ 89.978203][ T5788] hsr_slave_0: entered promiscuous mode [ 89.985559][ T5788] hsr_slave_1: entered promiscuous mode [ 90.008916][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.021979][ T5784] team0: Port device team_slave_1 added [ 90.042448][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.056638][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.068283][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.141616][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.151780][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.178657][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.216381][ T5775] team0: Port device team_slave_0 added [ 90.223373][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.230920][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.247306][ T5782] Bluetooth: hci0: command tx timeout [ 90.257500][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.278116][ T5779] team0: Port device team_slave_0 added [ 90.288460][ T5779] team0: Port device team_slave_1 added [ 90.303594][ T5775] team0: Port device team_slave_1 added [ 90.334478][ T5776] Bluetooth: hci1: command tx timeout [ 90.340523][ T5782] Bluetooth: hci2: command tx timeout [ 90.429258][ T5784] hsr_slave_0: entered promiscuous mode [ 90.436701][ T5784] hsr_slave_1: entered promiscuous mode [ 90.443008][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.451648][ T5784] Cannot create hsr debugfs directory [ 90.459284][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.468804][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.496493][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.507973][ T5782] Bluetooth: hci3: command tx timeout [ 90.516053][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.523084][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.550783][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.573821][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.581286][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.609912][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.667514][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.675074][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.703937][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.792871][ T5779] hsr_slave_0: entered promiscuous mode [ 90.800641][ T5779] hsr_slave_1: entered promiscuous mode [ 90.807681][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.815525][ T5779] Cannot create hsr debugfs directory [ 90.894415][ T5775] hsr_slave_0: entered promiscuous mode [ 90.901292][ T5775] hsr_slave_1: entered promiscuous mode [ 90.910316][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.918153][ T5775] Cannot create hsr debugfs directory [ 91.239174][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.287571][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.300265][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.318142][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.382062][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.396002][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.416580][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.437979][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.535018][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.564326][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.580530][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.592625][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.718515][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.730274][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.743574][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.766774][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.786058][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.839565][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.866908][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.875544][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.918127][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.926112][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.017577][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.122951][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.140696][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.183638][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.190934][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.220317][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.252955][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.260249][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.307562][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.326158][ T5782] Bluetooth: hci0: command tx timeout [ 92.349083][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.356353][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.400003][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.411931][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.422418][ T5782] Bluetooth: hci2: command tx timeout [ 92.422429][ T5776] Bluetooth: hci1: command tx timeout [ 92.438868][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.525314][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.533170][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.565225][ T5776] Bluetooth: hci3: command tx timeout [ 92.577561][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.585115][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.630596][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.906971][ T5788] veth0_vlan: entered promiscuous mode [ 92.953559][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.970915][ T5788] veth1_vlan: entered promiscuous mode [ 93.110163][ T5788] veth0_macvtap: entered promiscuous mode [ 93.149498][ T5784] veth0_vlan: entered promiscuous mode [ 93.169438][ T5788] veth1_macvtap: entered promiscuous mode [ 93.192635][ T5784] veth1_vlan: entered promiscuous mode [ 93.261163][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.301949][ T5784] veth0_macvtap: entered promiscuous mode [ 93.332008][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.352720][ T5784] veth1_macvtap: entered promiscuous mode [ 93.374105][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.384882][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.395510][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.406469][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.426405][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.478722][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.499741][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.512543][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.528101][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.581198][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.596341][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.610582][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.623764][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.635875][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.645045][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.653897][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.789760][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.815408][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.828720][ T5779] veth0_vlan: entered promiscuous mode [ 93.879206][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.893469][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.954879][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.970131][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.993655][ T5775] veth0_vlan: entered promiscuous mode [ 94.014062][ T5779] veth1_vlan: entered promiscuous mode [ 94.054693][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.070547][ T5775] veth1_vlan: entered promiscuous mode [ 94.079542][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.178920][ T5779] veth0_macvtap: entered promiscuous mode [ 94.208795][ T5779] veth1_macvtap: entered promiscuous mode [ 94.301261][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.357645][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.379788][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.379849][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.381755][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.408806][ T5776] Bluetooth: hci0: command tx timeout [ 94.448657][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.448681][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.448691][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.448703][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.450044][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.461047][ T5775] veth0_macvtap: entered promiscuous mode [ 94.472745][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.472811][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.472838][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.472864][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.478156][ T5775] veth1_macvtap: entered promiscuous mode [ 94.485916][ T5782] Bluetooth: hci2: command tx timeout [ 94.486031][ T5776] Bluetooth: hci1: command tx timeout [ 94.557765][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.557790][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.557813][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.557828][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.557839][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.557854][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.559603][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.596593][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.596616][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.596626][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.596641][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.596652][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.596667][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.598558][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.644685][ T5776] Bluetooth: hci3: command tx timeout [ 94.659731][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.659775][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.659801][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.659827][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.797648][ T5844] syz.1.5[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.149382][ T5844] loop1: detected capacity change from 0 to 2048 [ 95.156339][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.183318][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.277038][ T5844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.293499][ T5844] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.417008][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.439267][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.458215][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.495403][ T5850] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6'. [ 95.668405][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.711463][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.799667][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.836589][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.940604][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.484342][ T5776] Bluetooth: hci0: command tx timeout [ 96.565152][ T5782] Bluetooth: hci2: command tx timeout [ 96.570653][ T5776] Bluetooth: hci1: command tx timeout [ 96.725489][ T5776] Bluetooth: hci3: command tx timeout [ 97.467235][ T9] cfg80211: failed to load regulatory.db [ 97.609448][ T5898] netlink: 112 bytes leftover after parsing attributes in process `syz.0.21'. [ 97.624738][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.871806][ T5816] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 97.895308][ T5816] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.910767][ T5816] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.931604][ T5816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.949868][ T5816] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.968136][ T5816] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.987053][ T5816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.016868][ T5816] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.044023][ T5816] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.063805][ T5816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.074607][ T5816] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.098983][ T5816] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.121146][ T5816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.130385][ T5816] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.145963][ T5816] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.161060][ T5816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.175686][ T5816] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.190037][ T5816] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.205401][ T5816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.226086][ T5816] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.240440][ T5816] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.263967][ T5816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.274262][ T5816] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.296465][ T5816] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.330282][ T5816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.349197][ T5816] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 98.379084][ T5816] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 98.392669][ T5882] loop2: detected capacity change from 0 to 32768 [ 98.412877][ T5816] usb 2-1: Product: syz [ 98.421961][ T5882] ======================================================= [ 98.421961][ T5882] WARNING: The mand mount option has been deprecated and [ 98.421961][ T5882] and is ignored by this kernel. Remove the mand [ 98.421961][ T5882] option from the mount to silence this warning. [ 98.421961][ T5882] ======================================================= [ 98.436496][ T5816] usb 2-1: Manufacturer: syz [ 98.561736][ T5882] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 98.582236][ T5816] usb 2-1: SerialNumber: syz [ 98.607586][ T5816] usb 2-1: config 0 descriptor?? [ 98.666920][ T5882] XFS (loop2): Ending clean mount [ 98.747640][ T5816] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 99.156228][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 99.168076][ T8] usb 2-1: USB disconnect, device number 2 [ 99.208821][ T8] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 99.250850][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.755059][ T5816] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.917950][ T5950] capability: warning: `syz.1.32' uses 32-bit capabilities (legacy support in use) [ 99.965672][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 99.978333][ T5816] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 100.001419][ T5950] program syz.1.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.004587][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.039414][ T5816] usb 1-1: Product: syz [ 100.043914][ T5816] usb 1-1: Manufacturer: syz [ 100.049077][ T5816] usb 1-1: SerialNumber: syz [ 100.059830][ T5816] usb 1-1: config 0 descriptor?? [ 100.303584][ T5816] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 100.485038][ T5944] loop3: detected capacity change from 0 to 32768 [ 100.554317][ T5944] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 100.567993][ T5958] loop1: detected capacity change from 0 to 4096 [ 100.576032][ T5944] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.668859][ T5958] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 100.682285][ T5958] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 100.730981][ T5944] XFS (loop3): Ending clean mount [ 100.766332][ T5944] XFS (loop3): Quotacheck needed: Please wait. [ 100.791691][ T5958] ntfs: volume version 3.1. [ 100.902776][ T5944] XFS (loop3): Quotacheck: Done. [ 100.918649][ T5816] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 100.984490][ T5816] usb 1-1: USB disconnect, device number 2 [ 101.277806][ T5788] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.569568][ T5975] loop1: detected capacity change from 0 to 256 [ 101.596999][ T5975] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.824679][ T5968] loop2: detected capacity change from 0 to 40427 [ 101.880674][ T5968] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 101.904419][ T5968] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 101.920397][ T5983] loop1: detected capacity change from 0 to 64 [ 101.938218][ T5968] F2FS-fs (loop2): invalid crc value [ 101.958910][ T5983] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 102.291052][ T5968] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 102.301309][ T5968] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.642043][ T5779] syz-executor: attempt to access beyond end of device [ 102.642043][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.685868][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 103.621099][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 103.634393][ T6024] team0: Port device batadv1 added [ 104.004025][ T6037] loop0: detected capacity change from 0 to 4096 [ 104.255211][ T6039] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.436970][ T6037] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 104.530378][ T6043] loop3: detected capacity change from 0 to 512 [ 104.540790][ T6043] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.562444][ T6037] Remounting filesystem read-only [ 104.571988][ T6044] loop1: detected capacity change from 0 to 64 [ 104.602310][ T6043] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.63: Attempting to read directory block (0) that is past i_size (256) [ 104.653151][ T6043] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 104.672526][ T6043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.700670][ T5775] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 104.734601][ T5775] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 104.743400][ T5775] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 104.763209][ T5775] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 104.776043][ T6033] loop2: detected capacity change from 0 to 32768 [ 104.794465][ T5775] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 104.834118][ T28] audit: type=1800 audit(1782220732.154:2): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.68" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 104.863820][ T5775] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 104.902037][ T5775] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 104.932901][ T5775] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 104.962569][ T5775] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 104.972244][ T5775] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 104.980195][ T5775] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 104.990288][ T5775] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 104.998008][ T5775] NILFS (loop0): discard dirty block: blocknr=28, size=4096 [ 105.005863][ T5775] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 105.013146][ T5775] NILFS (loop0): discard dirty block: blocknr=29, size=4096 [ 105.020594][ T5775] NILFS (loop0): discard dirty page: offset=270336, ino=3 [ 105.028057][ T5775] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 105.038891][ T6033] JBD2: Ignoring recovery information on journal [ 105.153043][ T6049] netlink: 132 bytes leftover after parsing attributes in process `syz.0.69'. [ 105.213493][ T5784] hfs: node 4:3 still has 1 user(s)! [ 105.239147][ T6033] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.527259][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.860232][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 106.098660][ T6070] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 106.200585][ T6072] bridge0: port 2(bridge_slave_1) entered listening state [ 106.343638][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.062693][ T6095] loop0: detected capacity change from 0 to 2048 [ 107.099007][ T6095] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 107.115231][ T6095] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 107.123579][ T6095] UDF-fs: Scanning with blocksize 512 failed [ 107.184602][ T6095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.204439][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.418481][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 107.450740][ T8] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 107.481215][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.506128][ T8] usb 2-1: config 0 descriptor?? [ 107.523127][ T6093] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.007001][ T8] hid (null): unknown global tag 0x75 [ 108.062264][ T8] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 108.084508][ T8] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 108.114887][ T8] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 108.115079][ T8] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 108.115107][ T8] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 108.115134][ T8] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 108.115159][ T8] asus 0003:0B05:1ABE.0001: unexpected long global item [ 108.116158][ T8] asus 0003:0B05:1ABE.0001: Asus hid parse failed: -22 [ 108.116338][ T8] asus: probe of 0003:0B05:1ABE.0001 failed with error -22 [ 108.278910][ T27] usb 2-1: USB disconnect, device number 3 [ 108.625504][ T6127] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.106665][ T6137] loop1: detected capacity change from 0 to 256 [ 109.118676][ T6123] loop0: detected capacity change from 0 to 32768 [ 109.150890][ T6123] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 109.227993][ T6137] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 109.330848][ T6123] XFS (loop0): Ending clean mount [ 109.520777][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 110.085631][ T6135] loop3: detected capacity change from 0 to 40427 [ 110.126023][ T6135] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 110.133931][ T6135] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 110.169746][ T6135] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.330814][ T6135] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 110.367619][ T6135] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.563636][ T5788] syz-executor: attempt to access beyond end of device [ 110.563636][ T5788] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.605291][ T5788] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 110.896381][ T28] audit: type=1326 audit(1782220738.224:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.0.120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cb19ce59 code=0x7ffc0000 [ 110.984559][ T28] audit: type=1326 audit(1782220738.224:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.0.120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cb19ce59 code=0x7ffc0000 [ 111.055117][ T28] audit: type=1326 audit(1782220738.224:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.0.120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cb19ce59 code=0x7ffc0000 [ 111.139707][ T28] audit: type=1326 audit(1782220738.224:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.0.120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cb19ce59 code=0x7ffc0000 [ 111.234301][ T28] audit: type=1326 audit(1782220738.224:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.0.120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f19cb19ce59 code=0x7ffc0000 [ 111.316610][ T6178] loop1: detected capacity change from 0 to 128 [ 111.338662][ T28] audit: type=1326 audit(1782220738.224:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.0.120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cb19ce59 code=0x7ffc0000 [ 111.380073][ T6178] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 111.408596][ T6178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.416901][ T28] audit: type=1326 audit(1782220738.224:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.0.120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cb19ce59 code=0x7ffc0000 [ 111.534222][ T28] audit: type=1326 audit(1782220738.224:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.0.120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cb19ce59 code=0x7ffc0000 [ 111.559464][ T28] audit: type=1326 audit(1782220738.224:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.0.120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cb19ce59 code=0x7ffc0000 [ 111.583534][ T28] audit: type=1326 audit(1782220738.224:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.0.120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19cb19ce59 code=0x7ffc0000 [ 112.000355][ T6194] netlink: 'syz.0.128': attribute type 8 has an invalid length. [ 112.015221][ T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.016876][ T6194] netlink: 56 bytes leftover after parsing attributes in process `syz.0.128'. [ 112.052648][ T6194] netlink: 64 bytes leftover after parsing attributes in process `syz.0.128'. [ 112.129856][ T6198] loop3: detected capacity change from 0 to 128 [ 112.166177][ T6198] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 112.239566][ T788] usb 3-1: config 0 has no interfaces? [ 112.250147][ T788] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 112.275234][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.309807][ T788] usb 3-1: config 0 descriptor?? [ 112.511180][ T6204] loop3: detected capacity change from 0 to 4096 [ 112.559877][ T6209] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.572778][ T6204] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 112.596606][ T6204] NILFS (loop3): mounting fs with errors [ 112.597175][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.664989][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.687022][ T6204] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 159744 [ 112.711658][ T5815] usb 3-1: USB disconnect, device number 2 [ 112.719642][ T6204] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 112.769524][ T6204] NILFS (loop3): error -5 truncating bmap (ino=15) [ 113.031607][ T6218] loop0: detected capacity change from 0 to 256 [ 113.249899][ T5837] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.389483][ T6223] loop0: detected capacity change from 0 to 256 [ 113.454400][ T5837] usb 3-1: Using ep0 maxpacket: 8 [ 113.469134][ T5837] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.486433][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.517955][ T5837] usb 3-1: config 0 has no interface number 0 [ 113.539946][ T5837] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.568494][ T6223] FAT-fs (loop0): Directory bread(block 64) failed [ 113.575221][ T5837] usb 3-1: config 0 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.575257][ T5837] usb 3-1: config 0 interface 1 has no altsetting 0 [ 113.575299][ T5837] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 113.644824][ T6223] FAT-fs (loop0): Directory bread(block 65) failed [ 113.662917][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.678667][ T6223] FAT-fs (loop0): Directory bread(block 66) failed [ 113.691622][ T6225] loop3: detected capacity change from 0 to 256 [ 113.705516][ T5837] usb 3-1: config 0 descriptor?? [ 113.729770][ T6223] FAT-fs (loop0): Directory bread(block 67) failed [ 113.748865][ T5837] hso 3-1:0.1: Failed to find BULK IN ep [ 113.765268][ T6223] FAT-fs (loop0): Directory bread(block 68) failed [ 113.800352][ T6223] FAT-fs (loop0): Directory bread(block 69) failed [ 113.835227][ T6223] FAT-fs (loop0): Directory bread(block 70) failed [ 113.852208][ T6223] FAT-fs (loop0): Directory bread(block 71) failed [ 113.871022][ T6223] FAT-fs (loop0): Directory bread(block 72) failed [ 113.880975][ T6216] loop1: detected capacity change from 0 to 32768 [ 113.890294][ T6223] FAT-fs (loop0): Directory bread(block 73) failed [ 114.011945][ T27] usb 3-1: USB disconnect, device number 3 [ 114.048532][ T6216] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.255500][ T6216] XFS (loop1): Ending clean mount [ 114.316142][ T6240] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 114.316142][ T6240] The task syz.0.144 (6240) triggered the difference, watch for misbehavior. [ 114.456042][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.875895][ T6248] bond1: entered promiscuous mode [ 115.456170][ T6269] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 115.463471][ T6269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.530999][ T6269] vhci_hcd vhci_hcd.0: Device attached [ 115.709806][ T6277] loop3: detected capacity change from 0 to 4096 [ 115.794662][ T788] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 115.806017][ T6284] loop1: detected capacity change from 0 to 512 [ 115.824296][ T5837] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.919890][ T6284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.975227][ T6284] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.024279][ T5837] usb 1-1: config 0 has no interfaces? [ 116.041289][ T5837] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 116.074302][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.096140][ T5837] usb 1-1: config 0 descriptor?? [ 116.213525][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.363544][ T6271] usb 33-1: recv xbuf, 0 [ 116.374952][ T8] usb 1-1: USB disconnect, device number 3 [ 116.398601][ T60] vhci_hcd: stop threads [ 116.434421][ T60] vhci_hcd: release socket [ 116.465694][ T60] vhci_hcd: disconnect device [ 116.751018][ T6283] loop2: detected capacity change from 0 to 40427 [ 116.817585][ T6283] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.936531][ T6283] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.996404][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.113274][ T6311] Zero length message leads to an empty skb [ 117.232371][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 117.275158][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.293564][ T5779] syz-executor: attempt to access beyond end of device [ 117.293564][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.304395][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.320051][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 117.339301][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 117.368906][ T8] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 117.370683][ T6315] loop0: detected capacity change from 0 to 512 [ 117.393092][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.439030][ T8] usb 4-1: config 0 descriptor?? [ 117.542414][ T6315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.563808][ T6315] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.706433][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 117.706449][ T28] audit: type=1800 audit(1782220745.034:21): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.171" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 117.886868][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.957305][ T8] holtek_kbd 0003:04D9:A055.0002: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 118.211925][ T5837] usb 4-1: USB disconnect, device number 2 [ 118.247476][ T6322] fido_id[6322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 118.657651][ T6334] loop0: detected capacity change from 0 to 64 [ 118.764437][ T28] audit: type=1800 audit(1782220746.084:22): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.179" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 118.818755][ T5815] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.830900][ T6334] syz.0.179: attempt to access beyond end of device [ 118.830900][ T6334] loop0: rw=34817, sector=57, nr_sectors = 8 limit=64 [ 118.849471][ T6338] warning: `syz.1.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.024290][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 119.031867][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.050475][ T5815] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.083048][ T5815] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.104263][ T5815] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.129257][ T5815] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.144364][ T5815] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 119.163934][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.194027][ T5815] usb 3-1: config 0 descriptor?? [ 119.681032][ T5815] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 119.787434][ T5815] corsair-cpro: probe of 0003:1B1C:0C10.0003 failed with error -38 [ 119.847426][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 119.962758][ T8] usb 3-1: USB disconnect, device number 4 [ 120.808789][ T6377] loop3: detected capacity change from 0 to 1024 [ 120.863450][ T6379] loop1: detected capacity change from 0 to 512 [ 120.949972][ T6379] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 121.013760][ T6381] loop0: detected capacity change from 0 to 2048 [ 121.078649][ T6381] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 121.145322][ T6381] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 121.180360][ T6377] hfsplus: xattr searching failed [ 121.210460][ T6381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.413970][ T1128] hfsplus: b-tree write err: -5, ino 3 [ 121.488114][ T6385] loop1: detected capacity change from 0 to 512 [ 121.591719][ T6385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 121.705744][ T6385] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.201: Unimplemented hash flags: 0x0001 [ 121.793299][ T6385] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.201: Corrupt directory, running e2fsck is recommended [ 121.949024][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.970574][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 122.381249][ T6383] loop2: detected capacity change from 0 to 40427 [ 122.436536][ T6383] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 122.464850][ T6383] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 122.495829][ T6383] F2FS-fs (loop2): invalid crc value [ 122.525743][ T6383] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.652257][ T6383] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 122.665576][ T6410] loop1: detected capacity change from 0 to 512 [ 122.709431][ T6410] EXT4-fs (loop1): Test dummy encryption mode enabled [ 122.748159][ T6383] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.827355][ T6383] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 122.835174][ T6410] EXT4-fs (loop1): 1 truncate cleaned up [ 122.889413][ T6410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.906590][ T6383] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x13a/0xbc0 [ 123.072524][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.261598][ T6420] loop1: detected capacity change from 0 to 1024 [ 123.335104][ T6420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 123.362250][ T6420] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.472188][ T6420] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.214: lblock 3 mapped to illegal pblock 3 (length 2) [ 123.525278][ T6420] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.214: lblock 0 mapped to illegal pblock 0 (length 3) [ 123.591262][ T6420] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 123.651325][ T6420] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.651325][ T6420] [ 123.801814][ T1128] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:6: lblock 4 mapped to illegal pblock 4 (length 1) [ 123.840311][ T1128] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 123.860799][ T1128] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.860799][ T1128] [ 123.884093][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.436856][ T6442] loop3: detected capacity change from 0 to 164 [ 124.452897][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 124.525157][ T6445] ipvlan2: entered allmulticast mode [ 124.534334][ T6445] syz_tun: entered allmulticast mode [ 124.925750][ T6457] netlink: 27 bytes leftover after parsing attributes in process `syz.0.230'. [ 125.024348][ T6459] capability: warning: `syz.2.231' uses deprecated v2 capabilities in a way that may be insecure [ 125.553056][ T6453] loop3: detected capacity change from 0 to 32768 [ 125.652075][ T6453] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 125.911843][ T6469] loop1: detected capacity change from 0 to 40427 [ 125.948084][ T6469] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 125.963709][ T6469] F2FS-fs (loop1): invalid crc value [ 125.989446][ T6469] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.102723][ T6453] syz.3.228 (6453) used greatest stack depth: 18840 bytes left [ 126.155306][ T6469] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.158306][ T6480] loop0: detected capacity change from 0 to 1024 [ 126.255597][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 126.465782][ T5784] syz-executor: attempt to access beyond end of device [ 126.465782][ T5784] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.522796][ T5784] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 127.210387][ T6483] loop2: detected capacity change from 0 to 32768 [ 127.289348][ T6483] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.437345][ T6483] XFS (loop2): Ending clean mount [ 127.645091][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.660385][ T6507] loop0: detected capacity change from 0 to 4096 [ 128.457707][ T6524] loop0: detected capacity change from 0 to 256 [ 128.806779][ T6530] loop3: detected capacity change from 0 to 1024 [ 129.551133][ T6545] loop0: detected capacity change from 0 to 256 [ 129.596097][ T6545] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 130.289698][ T6561] block nbd0: shutting down sockets [ 131.271254][ T6585] loop3: detected capacity change from 0 to 4096 [ 131.351884][ T6585] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.422315][ T6585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.722510][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.978980][ T6587] loop2: detected capacity change from 0 to 32768 [ 132.284281][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.494496][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 132.511054][ T5817] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 132.524539][ T5817] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.540359][ T5817] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.552078][ T5817] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.562830][ T5817] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.577700][ T5817] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.588274][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.648258][ T6606] loop1: detected capacity change from 0 to 8192 [ 132.676804][ T6606] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.696695][ T6606] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 132.707713][ T6606] REISERFS (device loop1): using ordered data mode [ 132.715052][ T6606] reiserfs: using flush barriers [ 132.737805][ T6606] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.763140][ T6606] REISERFS (device loop1): checking transaction log (loop1) [ 132.785761][ T6606] REISERFS (device loop1): Using r5 hash to sort names [ 132.801363][ T6606] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 132.877584][ T5817] usb 4-1: GET_CAPABILITIES returned 0 [ 132.883274][ T5817] usbtmc 4-1:16.0: can't read capabilities [ 132.952476][ T6609] loop0: detected capacity change from 0 to 512 [ 133.143021][ T6601] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 133.175418][ T27] usb 4-1: USB disconnect, device number 3 [ 133.291647][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.298633][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.732659][ T6626] loop1: detected capacity change from 0 to 128 [ 133.817505][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.021318][ T6631] loop1: detected capacity change from 0 to 512 [ 134.043610][ T6631] EXT4-fs: Ignoring removed oldalloc option [ 134.103191][ T6631] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.297: invalid indirect mapped block 4294967295 (level 1) [ 134.134771][ T6631] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.297: invalid indirect mapped block 4294967295 (level 1) [ 134.225871][ T6631] EXT4-fs (loop1): 2 truncates cleaned up [ 134.233956][ T6631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.270610][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 134.316137][ T6637] vlan2: entered allmulticast mode [ 134.334885][ T6637] veth0_to_bond: entered allmulticast mode [ 134.363150][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.807875][ T6649] loop1: detected capacity change from 0 to 128 [ 135.035477][ T6649] EXT4-fs (loop1): Test dummy encryption mode enabled [ 135.068105][ T6649] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.125384][ T6649] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.326576][ T6639] loop0: detected capacity change from 0 to 32768 [ 135.343680][ T6649] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 135.395842][ T6639] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 135.415418][ T6639] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.521611][ T5784] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.544514][ T6639] XFS (loop0): Ending clean mount [ 135.622685][ T6639] XFS (loop0): Quotacheck needed: Please wait. [ 135.783280][ T6644] loop2: detected capacity change from 0 to 40427 [ 135.793066][ T6639] XFS (loop0): Quotacheck: Done. [ 135.826601][ T6644] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 135.833294][ T6644] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 135.922339][ T6644] F2FS-fs (loop2): invalid crc_offset: 1 [ 136.023033][ T6673] mmap: syz.1.307 (6673) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.053343][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 136.246523][ T6644] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 136.277415][ T6644] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.567345][ T5779] syz-executor: attempt to access beyond end of device [ 136.567345][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.615168][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 136.894329][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.103002][ T6682] loop0: detected capacity change from 0 to 32768 [ 137.109834][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.109867][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.109893][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.135727][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 137.180409][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 137.191622][ T27] usb 4-1: Product: syz [ 137.225152][ T27] usb 4-1: Manufacturer: syz [ 137.230092][ T27] usb 4-1: SerialNumber: syz [ 137.246084][ T6682] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.368563][ T6682] XFS (loop0): Ending clean mount [ 137.508272][ T27] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 137.558012][ T5775] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.594265][ T6696] loop1: detected capacity change from 0 to 16 [ 137.734960][ T6696] erofs: (device loop1): mounted with root inode @ nid 36. [ 137.807236][ T27] usb 4-1: USB disconnect, device number 4 [ 137.817236][ T27] usblp0: removed [ 137.851512][ T6696] overlayfs: failed to get redirect (-117) [ 138.101175][ T6701] loop1: detected capacity change from 0 to 512 [ 138.183065][ T6701] EXT4-fs (loop1): 1 truncate cleaned up [ 138.221114][ T6701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.421965][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.830145][ T6704] loop0: detected capacity change from 0 to 32768 [ 138.893140][ T6704] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.982247][ T6704] XFS (loop0): Ending clean mount [ 139.221374][ T5775] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.873489][ T6741] loop2: detected capacity change from 0 to 128 [ 139.955711][ T6741] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.978720][ T6732] loop3: detected capacity change from 0 to 32768 [ 139.994672][ T6741] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.046844][ T28] audit: type=1800 audit(1782221023.377:23): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.331" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 140.123877][ T6732] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.326 (6732) [ 140.169508][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.238964][ T6732] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 140.263644][ T6732] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 140.274791][ T6732] BTRFS info (device loop3): enabling disk space caching [ 140.281929][ T6732] BTRFS info (device loop3): force clearing of disk cache [ 140.293567][ T6732] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 140.304093][ T6732] BTRFS info (device loop3): use zstd compression, level 3 [ 140.313669][ T6732] BTRFS info (device loop3): disk space caching is enabled [ 140.614399][ T6732] BTRFS info (device loop3): enabling ssd optimizations [ 140.622246][ T6732] BTRFS info (device loop3): auto enabling async discard [ 140.696492][ T6732] BTRFS info (device loop3): rebuilding free space tree [ 140.897021][ T6732] BTRFS info (device loop3): disabling free space tree [ 140.923522][ T6732] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.954235][ T6732] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.164332][ T5816] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.279627][ T6780] loop0: detected capacity change from 0 to 256 [ 141.317904][ T6780] FAT-fs (loop0): Directory bread(block 64) failed [ 141.330821][ T6780] FAT-fs (loop0): Directory bread(block 65) failed [ 141.339166][ T6780] FAT-fs (loop0): Directory bread(block 66) failed [ 141.357009][ T5816] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.370085][ T6780] FAT-fs (loop0): Directory bread(block 67) failed [ 141.391769][ T5816] usb 2-1: config 0 has no interface number 0 [ 141.400677][ T6780] FAT-fs (loop0): Directory bread(block 68) failed [ 141.412754][ T5816] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 141.424370][ T6780] FAT-fs (loop0): Directory bread(block 69) failed [ 141.448415][ T6780] FAT-fs (loop0): Directory bread(block 70) failed [ 141.454826][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.463324][ T5816] usb 2-1: Product: syz [ 141.468867][ T6780] FAT-fs (loop0): Directory bread(block 71) failed [ 141.489616][ T6780] FAT-fs (loop0): Directory bread(block 72) failed [ 141.511519][ T5816] usb 2-1: Manufacturer: syz [ 141.517015][ T6780] FAT-fs (loop0): Directory bread(block 73) failed [ 141.528476][ T5816] usb 2-1: SerialNumber: syz [ 141.564374][ T5816] usb 2-1: config 0 descriptor?? [ 141.663927][ T5788] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 141.807958][ T5816] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 141.868835][ T5816] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.883880][ T6755] loop2: detected capacity change from 0 to 40427 [ 141.939862][ T5816] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 141.965288][ T6755] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 141.986269][ T5816] usb 2-1: media controller created [ 142.002554][ T6755] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 142.052044][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.077890][ T6755] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.277898][ T5816] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 142.319401][ T6755] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.339562][ T6755] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.390362][ T6787] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 142.568785][ T5816] usb 2-1: USB disconnect, device number 4 [ 142.656904][ T5779] syz-executor: attempt to access beyond end of device [ 142.656904][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.696508][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 143.749690][ T6795] loop3: detected capacity change from 0 to 32768 [ 143.834887][ T6795] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.875214][ T6798] loop1: detected capacity change from 0 to 32768 [ 143.960409][ T6798] JBD2: Ignoring recovery information on journal [ 144.005625][ T6795] XFS (loop3): Ending clean mount [ 144.125720][ T6799] loop0: detected capacity change from 0 to 40427 [ 144.136737][ T6798] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 144.161526][ T6799] F2FS-fs (loop0): Invalid log blocks per segment (1) [ 144.205949][ T6799] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 144.268506][ T6799] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 144.318335][ T6799] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 144.350031][ T6799] F2FS-fs (loop0): Image doesn't support compression [ 144.389518][ T6799] F2FS-fs (loop0): invalid crc value [ 144.406568][ T5788] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.452946][ T6799] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.585228][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 144.677576][ T6799] F2FS-fs (loop0): Start checkpoint disabled! [ 144.770382][ T6799] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 144.784266][ T6799] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 145.342243][ T1146] kworker/u4:7: attempt to access beyond end of device [ 145.342243][ T1146] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 145.387089][ T1146] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 145.408181][ T1146] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 146.387672][ T6838] loop1: detected capacity change from 0 to 32768 [ 146.429549][ T6838] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 146.466858][ T6838] JBD2: Ignoring recovery information on journal [ 146.595240][ T6842] loop2: detected capacity change from 0 to 40427 [ 146.607625][ T6842] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 146.620381][ T6842] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 146.636712][ T6842] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 146.652873][ T6838] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 146.706304][ T6842] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.851551][ T6842] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 146.891182][ T6842] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 147.011459][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 147.046331][ T6861] loop3: detected capacity change from 0 to 512 [ 147.065726][ T6861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.210194][ T6861] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 147.238093][ T6861] EXT4-fs (loop3): 1 truncate cleaned up [ 147.247063][ T6865] netlink: 64 bytes leftover after parsing attributes in process `syz.0.371'. [ 147.249469][ T6861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.298897][ T6861] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.369: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 147.344348][ T6861] EXT4-fs (loop3): Remounting filesystem read-only [ 147.434780][ T28] audit: type=1800 audit(1782221030.747:24): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.364" name="file1" dev="loop2" ino=455 res=0 errno=0 [ 147.528692][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.901888][ T6876] netlink: 256 bytes leftover after parsing attributes in process `syz.1.376'. [ 147.944478][ T6876] netlink: 56 bytes leftover after parsing attributes in process `syz.1.376'. [ 148.037919][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 148.142619][ T6882] loop1: detected capacity change from 0 to 1024 [ 148.269027][ T5816] usb 1-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 148.298920][ T5816] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.354737][ T5816] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.390624][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 148.428170][ T5816] usb 1-1: SerialNumber: syz [ 148.600823][ T6892] process 'syz.1.381' launched './file1' with NULL argv: empty string added [ 148.682283][ T5816] usb 1-1: 0:2 : does not exist [ 148.793680][ T5816] usb 1-1: USB disconnect, device number 4 [ 148.942860][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.136098][ T6894] loop3: detected capacity change from 0 to 8192 [ 149.175796][ T6894] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 149.244281][ T6894] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 149.253803][ T6894] REISERFS (device loop3): using ordered data mode [ 149.339654][ T6894] reiserfs: using flush barriers [ 149.369563][ T6894] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.454845][ T6894] REISERFS (device loop3): checking transaction log (loop3) [ 149.772038][ T6894] REISERFS (device loop3): Using tea hash to sort names [ 149.790076][ T6894] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 149.967325][ T6894] overlayfs: upper fs needs to support d_type. [ 149.988839][ T6894] overlayfs: upper fs does not support tmpfile. [ 150.001280][ T6894] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 150.062649][ T6894] overlayfs: conflicting lowerdir path [ 150.126447][ T6898] loop2: detected capacity change from 0 to 32768 [ 150.160878][ T6898] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.385 (6898) [ 150.238342][ T6898] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.257199][ T6898] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 150.268915][ T6898] BTRFS info (device loop2): using free space tree [ 150.479804][ T6898] BTRFS info (device loop2): enabling ssd optimizations [ 150.511751][ T6898] BTRFS info (device loop2): auto enabling async discard [ 150.770424][ T5779] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.708094][ T6928] loop1: detected capacity change from 0 to 32768 [ 151.794385][ T6928] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.047124][ T6928] XFS (loop1): Ending clean mount [ 152.264792][ T5784] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.570180][ T6942] loop3: detected capacity change from 0 to 32768 [ 152.672249][ T6942] JBD2: Ignoring recovery information on journal [ 152.727307][ T6946] loop2: detected capacity change from 0 to 32768 [ 152.807256][ T6942] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 152.855386][ T6946] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.044364][ T28] audit: type=1800 audit(1782221036.367:25): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.397" name="file2" dev="loop3" ino=17058 res=0 errno=0 [ 153.180903][ T6946] XFS (loop2): Ending clean mount [ 153.227661][ T6946] XFS (loop2): Quotacheck needed: Please wait. [ 153.255691][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 153.377318][ T6946] XFS (loop2): Quotacheck: Done. [ 153.710133][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.754539][ T6980] sctp: [Deprecated]: syz.1.406 (pid 6980) Use of int in maxseg socket option. [ 153.754539][ T6980] Use struct sctp_assoc_value instead [ 153.812635][ T6984] loop3: detected capacity change from 0 to 256 [ 153.913430][ T6984] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.975069][ T6984] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 154.036702][ T6984] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 154.420906][ T6993] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 154.801611][ T6988] loop1: detected capacity change from 0 to 32768 [ 154.823185][ T6988] (syz.1.410,6988,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 154.863564][ T6988] (syz.1.410,6988,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 155.012450][ T6988] JBD2: Ignoring recovery information on journal [ 155.101446][ T6988] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 155.540877][ T1146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.559093][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 155.730389][ T1146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.874244][ T1146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.942754][ T7007] loop3: detected capacity change from 0 to 40427 [ 155.980223][ T7007] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 156.004014][ T7007] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 156.070269][ T7007] F2FS-fs (loop3): Found nat_bits in checkpoint [ 156.101059][ T1146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.307175][ T7007] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 156.355058][ T7007] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 156.506579][ T7024] loop1: detected capacity change from 0 to 64 [ 156.553381][ T7024] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 157.165303][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.177066][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.186059][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.213009][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.258128][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.275369][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.503683][ T7057] loop1: detected capacity change from 0 to 32768 [ 158.525778][ T7057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.430 (7057) [ 158.569161][ T7065] loop2: detected capacity change from 0 to 2048 [ 158.579414][ T7057] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.637259][ T7057] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 158.678862][ T7057] BTRFS info (device loop1): using free space tree [ 158.722228][ T7065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.029771][ T7057] BTRFS info (device loop1): enabling ssd optimizations [ 159.048977][ T7065] overlayfs: upper fs needs to support d_type. [ 159.067910][ T7057] BTRFS info (device loop1): auto enabling async discard [ 159.089486][ T7087] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 159.090528][ T7065] overlayfs: cleanup of 'work/#5' failed (-2) [ 159.137892][ T7037] chnl_net:caif_netlink_parms(): no params data found [ 159.186323][ T7087] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 159.190473][ T7065] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 159.210771][ T7066] loop3: detected capacity change from 0 to 40427 [ 159.279684][ T7066] F2FS-fs (loop3): invalid crc value [ 159.307429][ T7065] overlayfs: failed to set xattr on upper [ 159.325323][ T7066] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.336950][ T7087] overlayfs: cleanup of 'bus/work' failed (-2) [ 159.343476][ T7087] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 159.364451][ T5776] Bluetooth: hci0: command tx timeout [ 159.385157][ T7087] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 159.416131][ T7065] overlayfs: ...falling back to redirect_dir=nofollow. [ 159.465530][ T7065] overlayfs: ...falling back to index=off. [ 159.517585][ T7065] overlayfs: ...falling back to uuid=null. [ 159.581544][ T7066] F2FS-fs (loop3): Start checkpoint disabled! [ 159.644552][ T5779] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 159.691612][ T5779] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 159.714045][ T7066] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 159.793389][ T5784] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.811261][ T1146] hsr_slave_0: left promiscuous mode [ 159.867538][ T1146] hsr_slave_1: left promiscuous mode [ 159.933218][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.980101][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.084866][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.092395][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.104505][ T5783] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5783) [ 160.126657][ T1146] bridge_slave_1: left promiscuous mode [ 160.134954][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.209161][ T1146] bridge_slave_0: left allmulticast mode [ 160.224802][ T1146] bridge_slave_0: left promiscuous mode [ 160.251746][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.292518][ T11] kworker/u4:0: attempt to access beyond end of device [ 160.292518][ T11] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 160.338031][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 160.365660][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 160.403551][ T1146] veth1_macvtap: left promiscuous mode [ 160.431293][ T1146] veth0_macvtap: left promiscuous mode [ 160.464433][ T1146] veth1_vlan: left promiscuous mode [ 160.504387][ T1146] veth0_vlan: left promiscuous mode [ 161.198308][ T1146] team0 (unregistering): Port device batadv1 removed [ 161.446760][ T5776] Bluetooth: hci0: command tx timeout [ 162.199784][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 162.276895][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 162.351686][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.411866][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.928771][ T1146] bond0 (unregistering): Released all slaves [ 163.339010][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.368506][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.383821][ T7037] bridge_slave_0: entered allmulticast mode [ 163.402869][ T7037] bridge_slave_0: entered promiscuous mode [ 163.441238][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.484358][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.491702][ T7037] bridge_slave_1: entered allmulticast mode [ 163.524383][ T5776] Bluetooth: hci0: command tx timeout [ 163.533247][ T7037] bridge_slave_1: entered promiscuous mode [ 163.564546][ T5815] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.758487][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.805289][ T5815] usb 2-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 163.820761][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.824902][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.900789][ T5815] usb-storage 2-1:32.0: USB Mass Storage device detected [ 163.943145][ T5815] usb-storage 2-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 164.027293][ T7037] team0: Port device team_slave_0 added [ 164.096197][ T7037] team0: Port device team_slave_1 added [ 164.174193][ T5815] usb 2-1: USB disconnect, device number 5 [ 164.285545][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.310255][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.374346][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.407877][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.422043][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.461524][ T7142] (null): rxe_set_mtu: Set mtu to 4096 [ 164.474757][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.488572][ T7142] lo speed is unknown, defaulting to 1000 [ 164.584285][ T7142] lo speed is unknown, defaulting to 1000 [ 164.618733][ T7037] hsr_slave_0: entered promiscuous mode [ 164.633817][ T7037] hsr_slave_1: entered promiscuous mode [ 164.642502][ T7037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.661650][ T7037] Cannot create hsr debugfs directory [ 164.673253][ T7142] lo speed is unknown, defaulting to 1000 [ 164.971736][ T1146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.040038][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.050281][ T7149] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 165.068026][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.087539][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.095794][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.103761][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.116046][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.133463][ T7149] bridge0: entered allmulticast mode [ 165.139821][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 165.147714][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.273176][ T1146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.427608][ T7142] infiniband syz1: set active [ 165.433350][ T7142] infiniband syz1: added lo [ 165.442240][ T1146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.453336][ T7142] syz1: rxe_create_cq: returned err = -12 [ 165.460467][ T7142] infiniband syz1: Couldn't create ib_mad CQ [ 165.468129][ T7142] infiniband syz1: Couldn't open port 1 [ 165.537318][ T5817] lo speed is unknown, defaulting to 1000 [ 165.573493][ T7142] RDS/IB: syz1: added [ 165.614686][ T7142] smc: adding ib device syz1 with port count 1 [ 165.621283][ T7142] smc: ib device syz1 port 1 has pnetid [ 165.627568][ T5776] Bluetooth: hci0: command tx timeout [ 165.638554][ T1146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.734024][ T5817] lo speed is unknown, defaulting to 1000 [ 165.767730][ T7142] lo speed is unknown, defaulting to 1000 [ 166.192310][ T7160] loop1: detected capacity change from 0 to 4096 [ 166.223079][ T7037] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.254411][ T7160] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 166.311213][ T7037] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.346600][ T7037] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.523404][ T7037] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.532808][ T7150] lo speed is unknown, defaulting to 1000 [ 166.988152][ T7142] lo speed is unknown, defaulting to 1000 [ 167.086126][ T7173] loop1: detected capacity change from 0 to 4096 [ 167.188928][ T7173] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 167.214707][ T5776] Bluetooth: hci1: command tx timeout [ 167.279424][ T7173] ntfs3: loop1: Failed to load $Extend (-22). [ 167.323394][ T7173] ntfs3: loop1: Failed to initialize $Extend. [ 167.339892][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.481494][ T7142] lo speed is unknown, defaulting to 1000 [ 167.548870][ T7037] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.744446][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.751821][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.008779][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.016061][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.184353][ T7142] lo speed is unknown, defaulting to 1000 [ 168.271373][ T7150] chnl_net:caif_netlink_parms(): no params data found [ 168.553682][ T7150] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.577165][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.603982][ T7150] bridge_slave_0: entered allmulticast mode [ 168.656928][ T7150] bridge_slave_0: entered promiscuous mode [ 168.721045][ T7150] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.734740][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.742262][ T7150] bridge_slave_1: entered allmulticast mode [ 168.825973][ T7150] bridge_slave_1: entered promiscuous mode [ 169.003422][ T7150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.066777][ T1146] hsr_slave_0: left promiscuous mode [ 169.073199][ T1146] hsr_slave_1: left promiscuous mode [ 169.080828][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.104882][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.125577][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.133073][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.175518][ T1146] bridge_slave_1: left allmulticast mode [ 169.181552][ T1146] bridge_slave_1: left promiscuous mode [ 169.204743][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.238161][ T7202] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 169.252829][ T1146] bridge_slave_0: left allmulticast mode [ 169.258744][ T1146] bridge_slave_0: left promiscuous mode [ 169.276334][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.285064][ T5776] Bluetooth: hci1: command tx timeout [ 169.422631][ T1146] veth1_macvtap: left promiscuous mode [ 169.454026][ T1146] veth0_macvtap: left promiscuous mode [ 169.464556][ T1146] veth1_vlan: left promiscuous mode [ 169.471865][ T1146] veth0_vlan: left promiscuous mode [ 169.874295][ T56] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.078644][ T56] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.105645][ T56] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 170.125535][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.138300][ T56] usb 2-1: config 0 descriptor?? [ 170.165945][ T56] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 170.172503][ T5817] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.437576][ T5817] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 170.446249][ T5817] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 170.469969][ T5817] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 170.491859][ T5817] usb 4-1: config 220 has no interface number 2 [ 170.500463][ T5817] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 170.515660][ T5817] usb 4-1: config 220 interface 0 has no altsetting 0 [ 170.522532][ T5817] usb 4-1: config 220 interface 76 has no altsetting 0 [ 170.530025][ T5817] usb 4-1: config 220 interface 1 has no altsetting 0 [ 170.544913][ T5817] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 170.557075][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 170.564956][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.573001][ T5817] usb 4-1: Product: syz [ 170.591419][ T5817] usb 4-1: Manufacturer: syz [ 170.596311][ T5817] usb 4-1: SerialNumber: syz [ 170.638195][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 170.709009][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.784860][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.952921][ T5817] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 170.964248][ T5817] usb 4-1: No valid video chain found. [ 170.969899][ T5817] usb 4-1: selecting invalid altsetting 0 [ 171.008721][ T5817] usb 4-1: selecting invalid altsetting 0 [ 171.014624][ T5817] usbtest: probe of 4-1:220.1 failed with error -22 [ 171.049720][ T5817] usb 4-1: USB disconnect, device number 5 [ 171.374559][ T5776] Bluetooth: hci1: command tx timeout [ 171.403993][ T1146] bond0 (unregistering): Released all slaves [ 171.556008][ T7150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.585723][ T7212] netlink: 27 bytes leftover after parsing attributes in process `syz.3.459'. [ 171.695885][ T7207] lo speed is unknown, defaulting to 1000 [ 171.806866][ T7150] team0: Port device team_slave_0 added [ 171.848457][ T7150] team0: Port device team_slave_1 added [ 171.968415][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.980351][ T7217] loop3: detected capacity change from 0 to 4096 [ 171.998516][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.026938][ T7150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.051762][ T7218] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.066892][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.073903][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.134637][ T7150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.388651][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.581924][ T7150] hsr_slave_0: entered promiscuous mode [ 172.604762][ T7150] hsr_slave_1: entered promiscuous mode [ 172.631594][ T7150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.647941][ T7150] Cannot create hsr debugfs directory [ 173.336454][ T7150] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.351114][ T7150] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.403124][ T7150] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.445929][ T5776] Bluetooth: hci1: command tx timeout [ 173.457962][ T7150] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.558366][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 173.571353][ T7037] veth0_vlan: entered promiscuous mode [ 173.649066][ T7037] veth1_vlan: entered promiscuous mode [ 173.808305][ T7150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.830977][ T7245] kvm: kvm [7244]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xf7b [ 173.855558][ T5817] usb 2-1: USB disconnect, device number 6 [ 173.868026][ T7037] veth0_macvtap: entered promiscuous mode [ 173.914096][ T7037] veth1_macvtap: entered promiscuous mode [ 173.961766][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.014202][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.042205][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.064287][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.097018][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.158348][ T7150] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.177867][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.211910][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.229431][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.252674][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.267857][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.294716][ T7037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.303832][ T7037] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.360943][ T7037] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.404357][ T7037] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.457474][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.464976][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.516422][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.523698][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.976983][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.013919][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.117715][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.136898][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.381179][ T7150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.518541][ T28] audit: type=1107 audit(1782221058.847:26): pid=7280 uid=0 auid=0 ses=1 subj=unconfined msg='' [ 175.549804][ T7260] loop3: detected capacity change from 0 to 32768 [ 175.594974][ T7260] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 175.670920][ T7260] JBD2: Ignoring recovery information on journal [ 175.734510][ T788] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.846148][ T7260] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 176.005290][ T788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.033072][ T788] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.039997][ T7294] Set syz1 is full, maxelem 1029 reached [ 176.074866][ T788] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.117288][ T788] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 176.138413][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 176.164909][ T788] usb 2-1: Product: syz [ 176.180386][ T788] usb 2-1: Manufacturer: syz [ 176.195047][ T788] usb 2-1: SerialNumber: syz [ 176.229426][ T7296] [ 176.231910][ T7296] ====================================================== [ 176.238972][ T7296] WARNING: possible circular locking dependency detected [ 176.246304][ T7296] syzkaller #0 Not tainted [ 176.250752][ T7296] ------------------------------------------------------ [ 176.257791][ T7296] syz.3.467/7296 is trying to acquire lock: [ 176.263702][ T7296] ffff88805ca6a2e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 176.275310][ T7296] [ 176.275310][ T7296] but task is already holding lock: [ 176.282689][ T7296] ffff88805ca6a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 176.293345][ T7296] [ 176.293345][ T7296] which lock already depends on the new lock. [ 176.293345][ T7296] [ 176.303761][ T7296] [ 176.303761][ T7296] the existing dependency chain (in reverse order) is: [ 176.312787][ T7296] [ 176.312787][ T7296] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 176.320632][ T7296] down_read+0x46/0x2e0 [ 176.325350][ T7296] ocfs2_init_acl+0x30a/0x770 [ 176.330575][ T7296] ocfs2_mknod+0x1427/0x2310 [ 176.335712][ T7296] ocfs2_create+0x196/0x430 [ 176.340833][ T7296] path_openat+0x1705/0x3270 [ 176.345970][ T7296] do_filp_open+0x1f2/0x430 [ 176.351018][ T7296] do_sys_openat2+0x134/0x1d0 [ 176.356418][ T7296] __x64_sys_openat+0x139/0x160 [ 176.361812][ T7296] do_syscall_64+0x55/0xb0 [ 176.366769][ T7296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.373233][ T7296] [ 176.373233][ T7296] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 176.381768][ T7296] down_read+0x46/0x2e0 [ 176.386474][ T7296] ocfs2_start_trans+0x3a8/0x6f0 [ 176.391985][ T7296] ocfs2_mknod+0xf33/0x2310 [ 176.397040][ T7296] ocfs2_mkdir+0x196/0x430 [ 176.402001][ T7296] vfs_mkdir+0x2a5/0x470 [ 176.406790][ T7296] do_mkdirat+0x1dc/0x450 [ 176.411661][ T7296] __x64_sys_mkdirat+0x89/0xa0 [ 176.416965][ T7296] do_syscall_64+0x55/0xb0 [ 176.421953][ T7296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.428401][ T7296] [ 176.428401][ T7296] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 176.435921][ T7296] ocfs2_start_trans+0x2a9/0x6f0 [ 176.441428][ T7296] ocfs2_truncate_file+0x645/0x1530 [ 176.447187][ T7296] ocfs2_setattr+0x15b8/0x1bf0 [ 176.452510][ T7296] notify_change+0xb05/0xde0 [ 176.457655][ T7296] do_truncate+0x1b0/0x240 [ 176.462621][ T7296] path_openat+0x2a7e/0x3270 [ 176.467753][ T7296] do_filp_open+0x1f2/0x430 [ 176.472799][ T7296] do_sys_openat2+0x134/0x1d0 [ 176.478020][ T7296] __x64_sys_creat+0x90/0xb0 [ 176.483167][ T7296] do_syscall_64+0x55/0xb0 [ 176.488152][ T7296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.495338][ T7296] [ 176.495338][ T7296] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 176.504171][ T7296] __lock_acquire+0x37ef/0x7d80 [ 176.509587][ T7296] lock_acquire+0x19e/0x420 [ 176.514642][ T7296] down_write+0x97/0x200 [ 176.519443][ T7296] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 176.526071][ T7296] ocfs2_truncate_file+0xe87/0x1530 [ 176.531842][ T7296] ocfs2_setattr+0x15b8/0x1bf0 [ 176.537169][ T7296] notify_change+0xb05/0xde0 [ 176.542345][ T7296] do_truncate+0x1b0/0x240 [ 176.547412][ T7296] path_openat+0x2a7e/0x3270 [ 176.552558][ T7296] do_filp_open+0x1f2/0x430 [ 176.557631][ T7296] do_sys_openat2+0x134/0x1d0 [ 176.562879][ T7296] __x64_sys_creat+0x90/0xb0 [ 176.568197][ T7296] do_syscall_64+0x55/0xb0 [ 176.573179][ T7296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.579687][ T7296] [ 176.579687][ T7296] other info that might help us debug this: [ 176.579687][ T7296] [ 176.589947][ T7296] Chain exists of: [ 176.589947][ T7296] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 176.589947][ T7296] [ 176.605398][ T7296] Possible unsafe locking scenario: [ 176.605398][ T7296] [ 176.612861][ T7296] CPU0 CPU1 [ 176.618248][ T7296] ---- ---- [ 176.623741][ T7296] lock(&oi->ip_xattr_sem); [ 176.628358][ T7296] lock(&journal->j_trans_barrier); [ 176.636197][ T7296] lock(&oi->ip_xattr_sem); [ 176.643341][ T7296] lock(&ocfs2_file_ip_alloc_sem_key); [ 176.649000][ T7296] [ 176.649000][ T7296] *** DEADLOCK *** [ 176.649000][ T7296] [ 176.657166][ T7296] 3 locks held by syz.3.467/7296: [ 176.662219][ T7296] #0: ffff88801d794418 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 176.671515][ T7296] #1: ffff88805ca6a658 (&sb->s_type->i_mutex_key#36){+.+.}-{3:3}, at: do_truncate+0x19c/0x240 [ 176.682131][ T7296] #2: ffff88805ca6a378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 176.693253][ T7296] [ 176.693253][ T7296] stack backtrace: [ 176.699184][ T7296] CPU: 0 PID: 7296 Comm: syz.3.467 Not tainted syzkaller #0 [ 176.706493][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.716607][ T7296] Call Trace: [ 176.719915][ T7296] [ 176.722877][ T7296] dump_stack_lvl+0x18c/0x250 [ 176.727595][ T7296] ? load_image+0x420/0x420 [ 176.732120][ T7296] ? show_regs_print_info+0x20/0x20 [ 176.737463][ T7296] ? print_circular_bug+0x12b/0x1a0 [ 176.742871][ T7296] check_noncircular+0x2fc/0x400 [ 176.747851][ T7296] ? print_deadlock_bug+0x5d0/0x5d0 [ 176.753162][ T7296] ? lockdep_lock+0xf5/0x230 [ 176.758215][ T7296] ? lockdep_unlock+0x146/0x2e0 [ 176.763314][ T7296] ? _find_first_zero_bit+0xd6/0x100 [ 176.769483][ T7296] __lock_acquire+0x37ef/0x7d80 [ 176.774997][ T7296] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 176.781811][ T7296] ? verify_lock_unused+0x140/0x140 [ 176.787063][ T7296] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.793347][ T7296] ? lockdep_hardirqs_on+0x98/0x150 [ 176.798803][ T7296] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.805204][ T7296] lock_acquire+0x19e/0x420 [ 176.809747][ T7296] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 176.816037][ T7296] ? __might_sleep+0xe0/0xe0 [ 176.822057][ T7296] ? read_lock_is_recursive+0x20/0x20 [ 176.827572][ T7296] ? mapping_evict_folio+0x530/0x530 [ 176.832920][ T7296] down_write+0x97/0x200 [ 176.837309][ T7296] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 176.843771][ T7296] ? down_read_killable+0x340/0x340 [ 176.849020][ T7296] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 176.855042][ T7296] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 176.860961][ T7296] ? up_write+0x1be/0x410 [ 176.865323][ T7296] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 176.871077][ T7296] ocfs2_truncate_file+0xe87/0x1530 [ 176.876326][ T7296] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 176.882168][ T7296] ? do_raw_spin_unlock+0x121/0x230 [ 176.887430][ T7296] ? _raw_spin_unlock+0x28/0x40 [ 176.892324][ T7296] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 176.898082][ T7296] ? ocfs2_inode_lock_atime+0x530/0x530 [ 176.903664][ T7296] ? ocfs2_rw_lock+0x138/0x250 [ 176.908463][ T7296] ? dquot_initialize+0x20/0x20 [ 176.913355][ T7296] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 176.919538][ T7296] ? setattr_prepare+0x1e5/0xac0 [ 176.924506][ T7296] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 176.931123][ T7296] ocfs2_setattr+0x15b8/0x1bf0 [ 176.935936][ T7296] ? ocfs2_extend_allocation+0x1830/0x1830 [ 176.942230][ T7296] ? ktime_get_coarse_real_ts64+0x2f/0x120 [ 176.948098][ T7296] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 176.954370][ T7296] ? ktime_get_coarse_real_ts64+0x10a/0x120 [ 176.960295][ T7296] ? current_time+0x196/0x290 [ 176.965094][ T7296] ? inode_set_ctime_current+0x2e0/0x2e0 [ 176.970761][ T7296] ? evm_inode_setattr+0x10a/0x6c0 [ 176.975917][ T7296] ? security_inode_setattr+0xdc/0x140 [ 176.981609][ T7296] ? try_break_deleg+0x79/0x120 [ 176.986500][ T7296] ? ocfs2_extend_allocation+0x1830/0x1830 [ 176.992349][ T7296] notify_change+0xb05/0xde0 [ 176.996982][ T7296] do_truncate+0x1b0/0x240 [ 177.001429][ T7296] ? put_page_bootmem+0x2b0/0x2b0 [ 177.006484][ T7296] ? apparmor_file_truncate+0x24a/0x2e0 [ 177.012062][ T7296] ? ima_bprm_check+0x200/0x200 [ 177.016946][ T7296] path_openat+0x2a7e/0x3270 [ 177.021746][ T7296] ? do_sys_openat2+0xda/0x1d0 [ 177.026834][ T7296] ? do_filp_open+0x430/0x430 [ 177.031581][ T7296] do_filp_open+0x1f2/0x430 [ 177.036164][ T7296] ? vfs_tmpfile+0x480/0x480 [ 177.040884][ T7296] ? _raw_spin_unlock+0x28/0x40 [ 177.045775][ T7296] ? alloc_fd+0x590/0x640 [ 177.050172][ T7296] do_sys_openat2+0x134/0x1d0 [ 177.054916][ T7296] ? do_sys_open+0xe0/0xe0 [ 177.059480][ T7296] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 177.065504][ T7296] ? lock_chain_count+0x20/0x20 [ 177.070524][ T7296] __x64_sys_creat+0x90/0xb0 [ 177.075163][ T7296] do_syscall_64+0x55/0xb0 [ 177.079651][ T7296] ? clear_bhb_loop+0x40/0x90 [ 177.084551][ T7296] ? clear_bhb_loop+0x40/0x90 [ 177.089299][ T7296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.095388][ T7296] RIP: 0033:0x7fa1c4f9ce59 [ 177.099856][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.119804][ T7296] RSP: 002b:00007fa1c5e5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 177.128277][ T7296] RAX: ffffffffffffffda RBX: 00007fa1c5216090 RCX: 00007fa1c4f9ce59 [ 177.136279][ T7296] RDX: 0000000000000000 RSI: 0000000000000120 RDI: 0000200000000040 [ 177.144308][ T7296] RBP: 00007fa1c5032e6f R08: 0000000000000000 R09: 0000000000000000 [ 177.152309][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.160326][ T7296] R13: 00007fa1c5216128 R14: 00007fa1c5216090 R15: 00007ffface01948 [ 177.168344][ T7296] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 177.312912][ T788] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 177.322338][ T28] audit: type=1804 audit(1782221060.617:27): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.467" name="/newroot/126/file0/file0" dev="loop3" ino=17058 res=1 errno=0 [ 177.946484][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.043238][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.260991][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.350243][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.446151][ T788] usb 2-1: USB disconnect, device number 7 [ 178.462411][ T788] usblp0: removed [ 178.595595][ T7259] ocfs2: Unmounting device (7,3) on (node local) [ 179.389211][ T11] hsr_slave_0: left promiscuous mode [ 179.395305][ T11] hsr_slave_1: left promiscuous mode [ 179.401370][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.454310][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.473770][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.483062][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.490993][ T11] bridge_slave_1: left allmulticast mode [ 179.498330][ T11] bridge_slave_1: left promiscuous mode [ 179.504194][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.513490][ T11] bridge_slave_0: left allmulticast mode [ 179.521058][ T11] bridge_slave_0: left promiscuous mode [ 179.527994][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.540607][ T11] veth1_macvtap: left promiscuous mode [ 179.547137][ T11] veth0_macvtap: left promiscuous mode [ 179.552819][ T11] veth1_vlan: left promiscuous mode [ 179.558245][ T11] veth0_vlan: left promiscuous mode [ 179.823621][ T11] team0 (unregistering): Port device team_slave_1 removed [ 179.867695][ T11] team0 (unregistering): Port device team_slave_0 removed [ 179.899917][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.935637][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.030277][ T11] bond0 (unregistering): Released all slaves [ 180.511374][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.582452][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.629888][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.681556][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.809861][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.880869][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.932430][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.983329][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.794684][ T11] hsr_slave_0: left promiscuous mode [ 182.800799][ T11] hsr_slave_1: left promiscuous mode [ 182.807952][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.824284][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.834830][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.842305][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.850708][ T11] bridge_slave_1: left allmulticast mode [ 182.856865][ T11] bridge_slave_1: left promiscuous mode [ 182.862634][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.872219][ T11] bridge_slave_0: left allmulticast mode [ 182.878367][ T11] bridge_slave_0: left promiscuous mode [ 182.885310][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.899017][ T11] hsr_slave_0: left promiscuous mode [ 182.906022][ T11] hsr_slave_1: left promiscuous mode [ 182.912239][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.920155][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.928907][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.937474][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.947191][ T11] bridge_slave_1: left allmulticast mode [ 182.953634][ T11] bridge_slave_1: left promiscuous mode [ 182.960347][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.969459][ T11] bridge_slave_0: left allmulticast mode [ 182.975209][ T11] bridge_slave_0: left promiscuous mode [ 182.981021][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.995128][ T11] hsr_slave_0: left promiscuous mode [ 183.001403][ T11] hsr_slave_1: left promiscuous mode [ 183.009666][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.017815][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.027717][ T11] bridge_slave_1: left allmulticast mode [ 183.033429][ T11] bridge_slave_1: left promiscuous mode [ 183.039635][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.050982][ T11] bridge_slave_0: left allmulticast mode [ 183.057068][ T11] bridge_slave_0: left promiscuous mode [ 183.063192][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.079487][ T11] veth1_macvtap: left promiscuous mode [ 183.085999][ T11] veth0_macvtap: left promiscuous mode [ 183.092322][ T11] veth1_vlan: left promiscuous mode [ 183.098336][ T11] veth0_vlan: left promiscuous mode [ 183.106653][ T11] veth1_macvtap: left promiscuous mode [ 183.112293][ T11] veth0_macvtap: left promiscuous mode [ 183.118757][ T11] veth1_vlan: left promiscuous mode [ 183.125042][ T11] veth0_vlan: left promiscuous mode [ 183.221539][ T11] infiniband syz1: set down [ 183.492594][ T11] team0 (unregistering): Port device team_slave_1 removed [ 183.526124][ T11] team0 (unregistering): Port device team_slave_0 removed [ 183.565993][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.606370][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.728421][ T11] bond0 (unregistering): Released all slaves [ 183.802090][ T3472] smc: removing ib device syz1 [ 183.808723][ T11] bond1 (unregistering): Released all slaves [ 184.071251][ T11] team0 (unregistering): Port device team_slave_1 removed [ 184.098175][ T11] team0 (unregistering): Port device team_slave_0 removed [ 184.134944][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.170774][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.258917][ T11] bond0 (unregistering): Released all slaves [ 184.508119][ T11] team0 (unregistering): Port device team_slave_1 removed [ 184.548135][ T11] team0 (unregistering): Port device team_slave_0 removed [ 184.589531][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.607334][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.696331][ T11] bond0 (unregistering): Released all slaves [ 184.783071][ T9] lo speed is unknown, defaulting to 1000