last executing test programs: 4.844932688s ago: executing program 2 (id=447): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4c04, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x22}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) 4.233764705s ago: executing program 2 (id=462): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/77, 0x4d}, 0x21200}], 0x1, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.988595092s ago: executing program 0 (id=469): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x1, 0x1ff, &(0x7f00000005c0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a62438, &(0x7f0000000f80)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESOCT, @ANYRES16, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYRESDEC, @ANYBLOB="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", @ANYRESHEX, @ANYRES8, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC, @ANYRES16], 0xb, 0x0, &(0x7f0000000100)) write(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f00000003c0)='./file2\x00', 0x1bfc) 3.926291973s ago: executing program 2 (id=471): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x4}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 3.815047946s ago: executing program 2 (id=474): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.362138228s ago: executing program 0 (id=480): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 2.19366854s ago: executing program 3 (id=488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x20f, 0x0, 0x14d}]}) 2.132747002s ago: executing program 3 (id=490): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000046", 0x6}], 0x1, 0x0, 0x0) 2.005875795s ago: executing program 3 (id=492): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4c04, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x22}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) 1.791207491s ago: executing program 3 (id=496): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x112}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.784466951s ago: executing program 2 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040844}, 0x4000) 1.705192964s ago: executing program 2 (id=499): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040e704300000000000000109022400010000000009041600010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x8, "72d3"}, @global=@item_012={0x2, 0x1, 0x4, "d056"}, @local=@item_012={0x1, 0x2, 0x8, "eb"}]}}, 0x0}, 0x0) 1.675418504s ago: executing program 3 (id=500): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 1.572695797s ago: executing program 3 (id=501): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="000d05"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x88, @lang_id={0x0, 0x3, 0x437}}, 0x0, 0x0}, 0x0) 1.477614209s ago: executing program 1 (id=502): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) 1.393816742s ago: executing program 0 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x20f, 0x0, 0x14d}]}) 1.354622733s ago: executing program 0 (id=504): writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1) r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000000)='./file1\x00', 0x8c0, &(0x7f00000003c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x0, 0x441f, &(0x7f0000008940)="$eJzs3c9PHFUcAPA3A1qobYXaQ01M3MQmGjUEelJpIqW0FFqsqbYxXrYLbFt0YRtYjIce8NbEk4kH46HRxBunhoPX+id48VjPTfTgxcSkEbO7s8AMbFmRBdt8PkkZ5v1mvzNv3xymL05Ubs4s5GYWcoW5XHnq+sLJ3Gfl0uJsMcR7ZL/7pzXtiJPY759LZ859cPVkCD9N//JwdfVAeJyBDb//+cftqY3HhjhTp9ruYxv9zz4OIRzbNK6qjhDCRz+GEIUQTidpw8mxO4RwJNTzrt7+8lpul0Zz70HxVP7RxJ2VwRPjy3dXmv/tUQjfll5888bsb690DP76+i51DwAAAAAAAAAAAAAAAADAE2708qUr7/cPhPtR6FyONr+vO5ocm70fu7prXm7/HwsAAAAAAAAAAAAAAAAAAAD/U+vv/+eio1u8/z+SHIea1F99t/1jpH3G3rs0crZ/INn/PdqU/1aS9PvpjtC7xb7v2f3fT2fqb73/++Z+dqoxvka/PSGK+1LncdzXF8L3ycbvx6ODcam8UHnjenlxbnrXhvHESse/vnt/KjrJhv6txn8403779/9/YdPVVD2/tnuX2FMtHf+OpuV++CJqKf5nMvX2Iv7sXDr+nbW07o0FhuoTQDX+X3VuH/+RTPvtiv+REEIuqo41tz4DNC7fqPl6hbR0/J+ppUXr0/7aB9ns/v8rE/+zmfb3a/5fyn4RsaV0/J+tpXWlSqzf/73x9vf/uUz7+xH/6viXfP+3JB3/A/XEzlSR2ifZ6vw/mmm/XfG/EifjPBKlroDlqJ7e7P+rIy0d/65N+evPf3FL67/zmfp79fzX6Lfx/NeY/l+L6s9/bC0d/+6m5Vq9/8cy9do9/w/V1n/sVDr+B2tp6bVzT+1nq/Efz7TfrvjXViVdjfivzyd/H6inf2f915J0/J+rJ8YbSyzVftbWf9H26/8Lmfb3Y/1XHf9S3N5enxbp+B9qWq4a/59b+P6/mKnX/viH0G+tv2Pp+B9uWq52/3dtH/+JTL12x//VdjYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AQYTo49IYr7Uudx3NcXwpnk/Hg4GE0WpvOTpfLUpwshjCTpuXA0ulEqTxZK+Zm58nQxXyiVylMhnE3yj4WuaKFUruRnC7fOrbXVHd0sFuYrk8VCJYQwmqS/FA432pqcqcwWboUQzq/lPR+X52/dLMzlp2fm3+nv7+8PY2tj6I2Kn1eKc5V67/XcEMbX6vZEGwZXy76wNpZD0Sflxfm5QqmWfnFDnVJ5qlDaUGciyfs69EaV+cW5qUKlmC+VbzT6209DyXFk7PKHly8ObMq/FtWPw3s7LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+pfuDb38TQuisn8UhhFyU/BIl/1LuPSieyj+auLMyeGJ8+e7Kw63KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/sAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYVdOkaJGIjCAPxmRLT0GFYh6WwjimhhRPAEegwPo0fxEt7BwsLWYlnYTCAkG0izW31f80h+Zt6DeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsN7dc/fyVDcRKc43ZxFfb98/4/yh1I/r/edPjjAjh3P/2N3c1k159zTLr8qv3zbv0v+/99fo62mMvgefkz2Z7lNv3mdqad+W5hv6XkTKVUS0Jb9MOVfVursAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC07cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKwAA//8hvRzL") setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40186f04, &(0x7f0000000200)={0x0, 0x0, 0x39, 0x2}) 1.198540617s ago: executing program 1 (id=505): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0xa, 0x4e21, 0x1ff, @remote}, r1}}, 0x38) 1.163013058s ago: executing program 1 (id=506): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x800000, @local, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) 1.123963719s ago: executing program 1 (id=507): syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x14a, &(0x7f0000000a00)="$eJzszk9LYlEcxvHvmat3/uk4Aw44i3GE2VySqK5QqyCLJIMKCjethLxRoCgK5VKJdu3auqiEVuJbMKpNUhBtegtt3AUti+P1JkH0Cn6f3Xnuc85z56dvLGLwFKJvrlgolZ1KxcnFVleWUmsPnU5S5ybwpf99sVR2VMXJuf2zJGzxGfy8ugjC5nbeURTzutZLggXMfmdG5+MoenX4prOw253QvTpY/+H8t5vZ72SJQWbou6Hh5vMx+HT2a/jeI1BtxNut7vL1VXp05PSvwX46/s/7VS+POgd26k8zEDHIOJcn3KtuwG3cjrVbd6D6h4RtTyqoDY7UTHwLgR1YV293TCJRXwb2FBwqvlYbPVMF9Q2g8GPqaLBf2zVioKqNjWzE38yGf37CsLzXNW8IIYQQQgghhBBCCCGEEEIIIYQQ4mMvAQAA//9WkFLW") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getdents(r0, 0x0, 0x0) 958.290654ms ago: executing program 0 (id=508): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1], [0x0, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xffffffff, 0x0, 0x3fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x19c, 0x8, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80007, 0x400008, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 903.972835ms ago: executing program 1 (id=509): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000008000000018000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 733.90566ms ago: executing program 1 (id=510): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904020001030000000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 633.850022ms ago: executing program 0 (id=511): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000d240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x40, 0x17}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 258.259323ms ago: executing program 4 (id=513): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$FUSE_INIT(r1, 0x0, 0x0) 215.791634ms ago: executing program 4 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x439, 0xfffffffe, 0x20000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x88}]}, 0x24}}, 0x4004000) 183.570855ms ago: executing program 4 (id=515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000098, 0xec000000}]}) 104.300287ms ago: executing program 4 (id=516): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x24) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x2) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa4ea8da6b7a4db55, 0x11, r0, 0x0) 74.866778ms ago: executing program 4 (id=517): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x40000100, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@random="d9ea693249ca", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 0s ago: executing program 4 (id=518): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001ac0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. [ 46.642072][ T4171] cgroup: Unknown subsys name 'net' [ 46.778879][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.080882][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.236703][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 49.273883][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 49.358618][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.365796][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.374354][ T4188] device bridge_slave_0 entered promiscuous mode [ 49.383176][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.391039][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.399260][ T4188] device bridge_slave_1 entered promiscuous mode [ 49.439483][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.457201][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.465299][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.473780][ T4184] device bridge_slave_0 entered promiscuous mode [ 49.482430][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.503689][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.511120][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.518881][ T4184] device bridge_slave_1 entered promiscuous mode [ 49.539411][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 49.568957][ T4188] team0: Port device team_slave_0 added [ 49.577690][ T4188] team0: Port device team_slave_1 added [ 49.604939][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.624978][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 49.643373][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.689119][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.696319][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.722787][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.741624][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.748686][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.775332][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.822866][ T4184] team0: Port device team_slave_0 added [ 49.829032][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.836224][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.844376][ T4190] device bridge_slave_0 entered promiscuous mode [ 49.877637][ T4188] device hsr_slave_0 entered promiscuous mode [ 49.884884][ T4188] device hsr_slave_1 entered promiscuous mode [ 49.892909][ T4184] team0: Port device team_slave_1 added [ 49.900068][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.907559][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.915662][ T4190] device bridge_slave_1 entered promiscuous mode [ 49.922787][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 49.972937][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.984385][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.991700][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.999636][ T4191] device bridge_slave_0 entered promiscuous mode [ 50.012944][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.020138][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.028429][ T4191] device bridge_slave_1 entered promiscuous mode [ 50.044462][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.054316][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.061282][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.087483][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.116306][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.123460][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.149504][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.197315][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.220797][ T4190] team0: Port device team_slave_0 added [ 50.228405][ T4190] team0: Port device team_slave_1 added [ 50.239991][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.261523][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.268916][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.277018][ T4193] device bridge_slave_0 entered promiscuous mode [ 50.320467][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.328731][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.336576][ T4193] device bridge_slave_1 entered promiscuous mode [ 50.368286][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.375521][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.401559][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.420984][ T4184] device hsr_slave_0 entered promiscuous mode [ 50.427743][ T4184] device hsr_slave_1 entered promiscuous mode [ 50.434726][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.442708][ T4184] Cannot create hsr debugfs directory [ 50.451039][ T4191] team0: Port device team_slave_0 added [ 50.458669][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.468567][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.475553][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.501794][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.528619][ T4191] team0: Port device team_slave_1 added [ 50.535585][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.584974][ T4193] team0: Port device team_slave_0 added [ 50.591184][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.598473][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.624880][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.642220][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.649312][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.676114][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.694757][ T4193] team0: Port device team_slave_1 added [ 50.704014][ T4190] device hsr_slave_0 entered promiscuous mode [ 50.710832][ T4190] device hsr_slave_1 entered promiscuous mode [ 50.717733][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.725318][ T4190] Cannot create hsr debugfs directory [ 50.766457][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.773446][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.800141][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.830985][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.838063][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.864566][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.892390][ T4191] device hsr_slave_0 entered promiscuous mode [ 50.899345][ T4191] device hsr_slave_1 entered promiscuous mode [ 50.906226][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.913840][ T4191] Cannot create hsr debugfs directory [ 50.978938][ T4193] device hsr_slave_0 entered promiscuous mode [ 50.985610][ T4193] device hsr_slave_1 entered promiscuous mode [ 50.992039][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.999803][ T4193] Cannot create hsr debugfs directory [ 51.006109][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 51.012732][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 51.078041][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.085137][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 51.118274][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.149770][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.163862][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 51.173444][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 51.185953][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.239497][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.249407][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.269154][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.277962][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.327772][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.336635][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.357657][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.367538][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.460812][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.469092][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.495116][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.508676][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.518844][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.528951][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.538513][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.549732][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.578247][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.587721][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.605107][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.616878][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.625737][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.635612][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.642988][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.651743][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.660033][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.668059][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.678066][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.686767][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.694277][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.702130][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.719335][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.729417][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.742508][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.750612][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.758828][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.769142][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.778380][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.785638][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.794245][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.805171][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.814724][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.821783][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.836292][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.846766][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.866402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.900333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.908768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.917085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.926888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.936261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.946740][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.964621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.972460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.981628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.991459][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.998792][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.007414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.016501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.025278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.046144][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.055231][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.064709][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.074170][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.083062][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.091815][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.100594][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.109431][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.120444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.130211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.143401][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.172981][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.182681][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.197658][ T533] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.204796][ T533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.221440][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.229938][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.238654][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.252297][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.266169][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.285870][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.295267][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.303996][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.312679][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.322708][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.358341][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.366024][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.375244][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.387452][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.396579][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.405938][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.415015][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.424098][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.441908][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.461149][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.489546][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.508265][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.524182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.531910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.549600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.559602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.584122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.595726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.610222][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.635656][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.646236][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.654367][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.663128][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.673163][ T533] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.680376][ T533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.689152][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.698029][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.706785][ T533] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.714063][ T533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.721936][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.731462][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.741045][ T533] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.748223][ T533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.756813][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.772127][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.782219][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.791256][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.801715][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.810874][ T533] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.818020][ T533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.826433][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.845329][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.853042][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.874724][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.885713][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.897414][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.912743][ T4184] device veth0_vlan entered promiscuous mode [ 52.932909][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.942466][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.951573][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.960428][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.969683][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.978796][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.987157][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.995100][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.006186][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.015213][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.023521][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.043411][ T4184] device veth1_vlan entered promiscuous mode [ 53.058406][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.070697][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.087988][ T4225] Bluetooth: hci0: command 0x041b tx timeout [ 53.093615][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 53.101882][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.119150][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.130425][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.143162][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.152230][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.161814][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.163587][ T4225] Bluetooth: hci2: command 0x041b tx timeout [ 53.171591][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.187399][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.196720][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.205817][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.216235][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.225209][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.233932][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.242922][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.252086][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 53.254443][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.258581][ T4225] Bluetooth: hci3: command 0x041b tx timeout [ 53.272160][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.281192][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.290076][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.299025][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.307379][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.315739][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.331504][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.340220][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.351215][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.359593][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.386327][ T4188] device veth0_vlan entered promiscuous mode [ 53.416960][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.436086][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.461197][ T4184] device veth0_macvtap entered promiscuous mode [ 53.485177][ T4188] device veth1_vlan entered promiscuous mode [ 53.498281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.512368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.521993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.536801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.558054][ T4184] device veth1_macvtap entered promiscuous mode [ 53.584571][ T4191] device veth0_vlan entered promiscuous mode [ 53.596515][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.614312][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.623021][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.632117][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.649984][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.676834][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.689383][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.698644][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.707111][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.718003][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.728699][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.736740][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.747944][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.761024][ T4191] device veth1_vlan entered promiscuous mode [ 53.780006][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.790726][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.803013][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.817066][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.826700][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.835919][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.843528][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.852260][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.861590][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.871653][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.882080][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.894418][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.906148][ T4188] device veth0_macvtap entered promiscuous mode [ 53.935365][ T4188] device veth1_macvtap entered promiscuous mode [ 53.974930][ T4191] device veth0_macvtap entered promiscuous mode [ 53.982490][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.997120][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.006040][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.014288][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.022701][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.047639][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.056004][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.067824][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.110323][ T4191] device veth1_macvtap entered promiscuous mode [ 54.123218][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.135852][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.147753][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.177124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.185729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.195175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.205070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.214387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.223056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.232965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.245649][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.256838][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.268528][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.276868][ T4190] device veth0_vlan entered promiscuous mode [ 54.291773][ T4190] device veth1_vlan entered promiscuous mode [ 54.315883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.324115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.331790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.341693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.351039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.363590][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.372570][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.382945][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.392123][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.405908][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.417455][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.427391][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.438550][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.450205][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.460834][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.471630][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.481890][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.492578][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.503519][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.520751][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.535888][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.540757][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.552933][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.562152][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.571267][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.581399][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.590187][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.600299][ T4193] device veth0_vlan entered promiscuous mode [ 54.612168][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.621256][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.631303][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.640833][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.662481][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.672519][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.680888][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.717438][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.732715][ T4193] device veth1_vlan entered promiscuous mode [ 54.739607][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.751468][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.760338][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.768998][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.781679][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.792310][ T4190] device veth0_macvtap entered promiscuous mode [ 54.806428][ T4190] device veth1_macvtap entered promiscuous mode [ 54.852498][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.870052][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.880880][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.891644][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.902907][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.913624][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.927039][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.950784][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.959432][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.968534][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.989525][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.002780][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.065776][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.081077][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.092254][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.104668][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.115762][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.144844][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.157270][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.167442][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 55.179344][ T4193] device veth0_macvtap entered promiscuous mode [ 55.190843][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.196253][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 55.206679][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.221668][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.221736][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.241809][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.251949][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 55.255325][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.267078][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.275263][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.295508][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.298386][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.318035][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.318897][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.327356][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 55.340714][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 55.342071][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.357469][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.370281][ T4193] device veth1_macvtap entered promiscuous mode [ 55.397933][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.408315][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.429358][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.453087][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.468242][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.507935][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.519749][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.544294][ T4269] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 55.551245][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.582625][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.593339][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.603996][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.618026][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.637747][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.665157][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.698789][ T533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.717362][ T533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.739889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.755645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.773113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.713303][ C1] sched: RT throttling activated [ 56.724805][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.739100][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.749522][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.766383][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.779049][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.793063][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.805480][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.814065][ T4276] loop2: detected capacity change from 0 to 262144 [ 56.821065][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.834255][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.846482][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.855697][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.864767][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.874070][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.918908][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.932164][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.968272][ T4276] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.024182][ T4276] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 57.025507][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.079103][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.139785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.159973][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.184132][ T533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.191969][ T533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.214183][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.243612][ T4209] Bluetooth: hci0: command 0x0419 tx timeout [ 57.253431][ T4209] Bluetooth: hci1: command 0x0419 tx timeout [ 57.275288][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.283158][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.323911][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 57.343613][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.354987][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.377388][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.421521][ T4209] Bluetooth: hci4: command 0x0419 tx timeout [ 57.443709][ T4209] Bluetooth: hci3: command 0x0419 tx timeout [ 57.584454][ T4295] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 57.904731][ T4306] loop2: detected capacity change from 0 to 4096 [ 58.079444][ T4320] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.105272][ T4306] NILFS (loop2): corrupt root inode [ 58.155918][ T4319] loop3: detected capacity change from 0 to 1024 [ 58.189817][ T4319] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 58.343837][ T4227] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 58.366665][ T4319] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 58.549479][ T4332] loop2: detected capacity change from 0 to 32768 [ 58.599415][ T4332] loop2: p3 < p5 p6 p7 p8 > p4 < p9 p10 > [ 58.611674][ T4332] loop2: p6 start 50334720 is beyond EOD, truncated [ 58.619129][ T4332] loop2: p7 start 68608 is beyond EOD, truncated [ 58.625822][ T4332] loop2: p8 size 33554432 extends beyond EOD, truncated [ 58.626670][ T4319] netlink: 277 bytes leftover after parsing attributes in process `syz.3.24'. [ 58.646865][ T4332] loop2: p10 start 50334720 is beyond EOD, truncated [ 58.709867][ T3560] loop2: p3 < p5 p6 p7 p8 > p4 < p9 p10 > [ 58.721191][ T3560] loop2: p6 start 50334720 is beyond EOD, truncated [ 58.731405][ T3560] loop2: p7 start 68608 is beyond EOD, truncated [ 58.759129][ T3560] loop2: p8 size 33554432 extends beyond EOD, truncated [ 58.786158][ T4227] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 58.802704][ T3560] loop2: p10 start 50334720 is beyond EOD, truncated [ 58.809580][ T4227] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.830112][ T4227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 58.850944][ T4227] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 58.870312][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.924904][ T4227] usb 5-1: config 0 descriptor?? [ 58.939495][ T4343] loop2: detected capacity change from 0 to 256 [ 58.974893][ T4315] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 59.035102][ T4343] exfat: Deprecated parameter 'utf8' [ 59.050625][ T4343] exfat: Deprecated parameter 'utf8' [ 59.105225][ T4343] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 59.303730][ T4347] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.34'. [ 59.355753][ T4349] binder: 4348:4349 ioctl c0306201 0 returned -14 [ 59.444783][ T4227] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 59.474880][ T4227] holtek_kbd 0003:04D9:A055.0001: unbalanced collection at end of report description [ 59.496285][ T4341] loop3: detected capacity change from 0 to 32768 [ 59.504449][ T4227] holtek_kbd: probe of 0003:04D9:A055.0001 failed with error -22 [ 59.523395][ T4341] ======================================================= [ 59.523395][ T4341] WARNING: The mand mount option has been deprecated and [ 59.523395][ T4341] and is ignored by this kernel. Remove the mand [ 59.523395][ T4341] option from the mount to silence this warning. [ 59.523395][ T4341] ======================================================= [ 59.606402][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 59.606837][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 59.644290][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 59.662591][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 59.672324][ T4357] udevd[4357]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 59.743652][ T4227] usb 5-1: USB disconnect, device number 2 [ 59.800390][ T4341] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 59.835391][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 59.847925][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 59.850252][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 59.861604][ T4357] udevd[4357]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 59.885186][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 59.888678][ T4341] JBD2: Ignoring recovery information on journal [ 59.931173][ T4341] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 60.216396][ T4381] loop0: detected capacity change from 0 to 1024 [ 60.241864][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 60.248859][ T4383] capability: warning: `syz.2.49' uses deprecated v2 capabilities in a way that may be insecure [ 60.333676][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.528680][ T4389] trusted_key: encrypted_key: key user:syz not found [ 60.653600][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 60.720892][ T4403] loop0: detected capacity change from 0 to 512 [ 60.760921][ T4405] netlink: 316 bytes leftover after parsing attributes in process `syz.3.59'. [ 60.804142][ T4403] FAT-fs (loop0): Directory bread(block 199916) failed [ 60.825146][ T4403] FAT-fs (loop0): Directory bread(block 199917) failed [ 60.837729][ T4403] FAT-fs (loop0): Directory bread(block 199918) failed [ 60.839127][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.852681][ T4403] FAT-fs (loop0): Directory bread(block 199919) failed [ 60.860549][ T4408] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 60.884087][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.897403][ T4403] FAT-fs (loop0): Directory bread(block 199920) failed [ 60.898474][ T13] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 60.923000][ T4403] FAT-fs (loop0): Directory bread(block 199921) failed [ 60.947037][ T4403] FAT-fs (loop0): Directory bread(block 199922) failed [ 60.958640][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.963882][ T4403] FAT-fs (loop0): Directory bread(block 199923) failed [ 60.983363][ T4227] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.984340][ T13] usb 2-1: config 0 descriptor?? [ 61.055916][ T13] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 61.065041][ T4403] FAT-fs (loop0): Directory bread(block 199916) failed [ 61.072173][ T4403] FAT-fs (loop0): Directory bread(block 199917) failed [ 61.249608][ T4414] loop3: detected capacity change from 0 to 32768 [ 61.338343][ T4374] netlink: 'syz.1.44': attribute type 287 has an invalid length. [ 61.354664][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.360117][ T4414] XFS (loop3): Mounting V5 Filesystem [ 61.375305][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.409561][ T4227] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 61.475843][ T4227] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 61.487954][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.511984][ T4227] usb 5-1: config 0 descriptor?? [ 61.527165][ T21] usb 2-1: USB disconnect, device number 2 [ 61.543664][ T4414] XFS (loop3): Ending clean mount [ 61.560961][ T4414] XFS (loop3): Quotacheck needed: Please wait. [ 61.598048][ T4414] XFS (loop3): Quotacheck: Done. [ 61.647607][ T4414] 9pnet_virtio: no channels available for device syz [ 61.696977][ T4191] XFS (loop3): Unmounting Filesystem [ 61.868875][ T4431] loop2: detected capacity change from 0 to 16 [ 61.918267][ T4431] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700) [ 61.995272][ T4227] steelseries_srws1 0003:1038:1410.0002: item fetching failed at offset 5/7 [ 62.006710][ T4227] steelseries_srws1 0003:1038:1410.0002: parse failed [ 62.021241][ T4227] steelseries_srws1: probe of 0003:1038:1410.0002 failed with error -22 [ 62.164383][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 62.242523][ T21] usb 5-1: USB disconnect, device number 3 [ 62.382771][ T4452] loop0: detected capacity change from 0 to 128 [ 62.423367][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 62.524873][ T4452] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.566373][ T4452] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.577154][ T13] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 62.589524][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.624272][ T13] usb 2-1: config 0 descriptor?? [ 62.726855][ T4440] loop3: detected capacity change from 0 to 32768 [ 62.759318][ T4440] gfs2: Unknown parameter '' [ 62.872257][ T4467] loop0: detected capacity change from 0 to 4096 [ 62.941797][ T4467] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 62.941797][ T4467] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 62.941797][ T4467] [ 62.961425][ T13] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 62.999236][ T4474] sctp: [Deprecated]: syz.2.82 (pid 4474) Use of int in max_burst socket option deprecated. [ 62.999236][ T4474] Use struct sctp_assoc_value instead [ 63.000207][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 63.104570][ T13] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 63.127400][ T4467] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouser_xattr,debug_want_extra_isize=0x0000000000000010,noquota,errors=remount-ro,grpjquota=,sysvgroups,noauto_da_alloc,minixdf,. Quota mode: writeback. [ 63.150184][ T13] usb 2-1: media controller created [ 63.173022][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 63.219154][ T4484] netlink: 884 bytes leftover after parsing attributes in process `syz.4.86'. [ 63.223718][ T13] az6027: usb out operation failed. (-71) [ 63.253579][ T13] az6027: usb out operation failed. (-71) [ 63.259332][ T13] stb0899_attach: Driver disabled by Kconfig [ 63.273810][ T13] az6027: no front-end attached [ 63.273810][ T13] [ 63.304085][ T13] az6027: usb out operation failed. (-71) [ 63.309857][ T13] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 63.321917][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 63.349080][ T13] dvb-usb: schedule remote query interval to 400 msecs. [ 63.376853][ T13] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 63.394183][ T13] usb 2-1: USB disconnect, device number 3 [ 63.569675][ T4498] loop3: detected capacity change from 0 to 256 [ 63.578764][ T13] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 63.641761][ T4503] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.95'. [ 63.679268][ T4498] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.725950][ T4503] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.95'. [ 64.118886][ T4517] loop1: detected capacity change from 0 to 1024 [ 64.122418][ T4501] loop4: detected capacity change from 0 to 32768 [ 64.169592][ T4521] Set syz1 is full, maxelem 0 reached [ 64.197536][ T4517] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 64.229580][ T4517] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #32: comm syz.1.102: iget: special inode unallocated [ 64.306158][ T4501] XFS (loop4): Mounting V5 Filesystem [ 64.365367][ T4517] EXT4-fs (loop1): no journal found [ 64.393043][ T4513] loop3: detected capacity change from 0 to 32768 [ 64.409938][ T4517] EXT4-fs (loop1): can't get journal size [ 64.435187][ T4501] XFS (loop4): Ending clean mount [ 64.457877][ T4517] EXT4-fs (loop1): filesystem is read-only [ 64.463890][ T4517] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 64.495378][ T4535] loop0: detected capacity change from 0 to 256 [ 64.547548][ T4535] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 64.702902][ T4193] XFS (loop4): Unmounting Filesystem [ 64.779421][ T4227] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.023417][ T4227] usb 3-1: Using ep0 maxpacket: 8 [ 65.093183][ T4549] loop3: detected capacity change from 0 to 128 [ 65.155241][ T4549] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 65.169390][ T4549] hpfs: filesystem error: improperly stopped [ 65.177364][ T4549] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 65.187620][ T4549] hpfs: You really don't want any checks? You are crazy... [ 65.197652][ T4549] hpfs: hpfs_map_sector(): read error [ 65.203168][ T4549] hpfs: code page support is disabled [ 65.209890][ T4549] hpfs: hpfs_map_4sectors(): unaligned read [ 65.217282][ T4549] hpfs: hpfs_map_4sectors(): unaligned read [ 65.223549][ T4549] hpfs: filesystem error: unable to find root dir [ 65.225182][ T4173] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 65.258035][ T4549] hpfs: hpfs_map_4sectors(): unaligned read [ 65.265668][ T4549] hpfs: hpfs_map_sector(): read error [ 65.271170][ T4549] hpfs: hpfs_map_sector(): read error [ 65.303721][ T4227] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 65.312922][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.322081][ T4227] usb 3-1: Product: syz [ 65.326601][ T4227] usb 3-1: Manufacturer: syz [ 65.331315][ T4227] usb 3-1: SerialNumber: syz [ 65.369770][ T4227] usb 3-1: config 0 descriptor?? [ 65.416006][ T4227] gspca_main: se401-2.14.0 probing 047d:5003 [ 65.753682][ T4173] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 65.776370][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.784983][ T4173] usb 1-1: Product: syz [ 65.789259][ T4173] usb 1-1: Manufacturer: syz [ 65.809299][ T4173] usb 1-1: SerialNumber: syz [ 65.843483][ T4227] gspca_se401: Bayer format not supported! [ 65.928779][ T4209] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.993441][ T1325] kernel write not supported for file /input/mice (pid: 1325 comm: kworker/0:2) [ 66.084568][ T13] usb 3-1: USB disconnect, device number 2 [ 66.126938][ T4588] device bridge_slave_0 left promiscuous mode [ 66.149143][ T4588] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.173388][ T4209] usb 4-1: Using ep0 maxpacket: 8 [ 66.453481][ T4209] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 66.471845][ T4193] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 66.477765][ T4209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.484170][ T4193] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 66.492051][ T4209] usb 4-1: Product: syz [ 66.498609][ T4209] usb 4-1: Manufacturer: syz [ 66.503223][ T4209] usb 4-1: SerialNumber: syz [ 66.508199][ T4173] usb 1-1: MIDIStreaming interface descriptor not found [ 66.521497][ T4209] usb 4-1: config 0 descriptor?? [ 66.585281][ T4209] gspca_main: sq930x-2.14.0 probing 2770:930c [ 66.678932][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 66.760416][ T4607] cgroup: noprefix used incorrectly [ 66.792919][ T13] usb 1-1: USB disconnect, device number 2 [ 66.879465][ T4611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 67.091152][ T4601] Set syz1 is full, maxelem 6117 reached [ 67.150913][ T4611] syz.1.142 (4611) used greatest stack depth: 20784 bytes left [ 67.205539][ T4615] set_capacity_and_notify: 1 callbacks suppressed [ 67.205553][ T4615] loop1: detected capacity change from 0 to 256 [ 67.282879][ T4615] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 67.318547][ T4619] Zero length message leads to an empty skb [ 67.463464][ T4209] gspca_sq930x: ucbus_write failed -71 [ 67.470565][ T4209] sq930x: probe of 4-1:0.0 failed with error -71 [ 67.486839][ T4209] usb 4-1: USB disconnect, device number 2 [ 67.496032][ T4225] kernel write not supported for file /uinput (pid: 4225 comm: kworker/1:5) [ 67.722325][ T4227] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.801839][ T4642] loop4: detected capacity change from 0 to 4096 [ 67.824551][ T4642] EXT4-fs (loop4): Unrecognized mount option "dont_appraise" or missing value [ 67.936324][ T4652] loop2: detected capacity change from 0 to 128 [ 67.957156][ T4654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 67.966483][ T4654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 67.976593][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 67.981356][ T4654] netlink: 'syz.4.161': attribute type 20 has an invalid length. [ 68.083600][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.100102][ T4227] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 68.194292][ T4662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.165'. [ 68.257995][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 68.283936][ T4227] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.298724][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.333091][ T4227] usb 1-1: Product: syz [ 68.342008][ T4227] usb 1-1: Manufacturer: syz [ 68.356986][ T4227] usb 1-1: SerialNumber: syz [ 68.409861][ T13] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.426013][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 68.448372][ T13] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 68.496133][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.521255][ T13] usb 2-1: config 0 descriptor?? [ 68.552817][ T4684] loop3: detected capacity change from 0 to 4096 [ 68.637546][ T4628] udc-core: couldn't find an available UDC or it's busy [ 68.649239][ T4628] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 68.680602][ T4696] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.704987][ T4227] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 68.727387][ T4227] usb 1-1: USB disconnect, device number 3 [ 69.009372][ T13] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 69.303373][ T4227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 69.306753][ T4707] loop2: detected capacity change from 0 to 32768 [ 69.353484][ T4228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.434579][ T1325] usb 2-1: USB disconnect, device number 4 [ 69.509071][ T4716] loop4: detected capacity change from 0 to 40427 [ 69.552001][ T4707] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 69.552001][ T4707] [ 69.563093][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 69.569203][ T4707] ERROR: (device loop2): remounting filesystem as read-only [ 69.579640][ T4707] ialloc: diAlloc returned -5! [ 69.582286][ T4716] F2FS-fs (loop4): invalid crc value [ 69.603248][ T4716] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.638677][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 69.673471][ T4716] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 69.683627][ T4227] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 69.691848][ T4227] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 69.702485][ T4227] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.712373][ T4227] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.723062][ T4227] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 69.731087][ T4716] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 69.739453][ T4227] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.742858][ T4716] CPU: 0 PID: 4716 Comm: syz.4.187 Not tainted syzkaller #0 [ 69.753084][ T4227] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.759811][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.759838][ T4716] Call Trace: [ 69.759847][ T4716] [ 69.759854][ T4716] dump_stack_lvl+0x188/0x250 [ 69.759881][ T4716] ? show_regs_print_info+0x20/0x20 [ 69.759899][ T4716] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 69.759925][ T4716] ? unlock_page+0x17c/0x1f0 [ 69.759947][ T4716] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 69.759975][ T4716] f2fs_get_read_data_page+0x2c4/0x580 [ 69.759996][ T4716] ? f2fs_get_block+0x2a0/0x2a0 [ 69.760027][ T4716] f2fs_find_data_page+0x1c2/0x5d0 [ 69.776384][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.779091][ T4716] f2fs_readdir+0x4b3/0xda0 [ 69.838626][ T4716] ? f2fs_fill_dentries+0xd10/0xd10 [ 69.843833][ T4716] ? mutex_lock_io_nested+0x60/0x60 [ 69.849047][ T4716] ? end_current_label_crit_section+0x14b/0x170 [ 69.855277][ T4716] ? iterate_dir+0x10d/0x560 [ 69.859865][ T4716] ? down_read_killable+0x1ce/0x340 [ 69.865058][ T4716] ? fsnotify_perm+0x254/0x560 [ 69.869842][ T4716] iterate_dir+0x218/0x560 [ 69.874248][ T4716] ? f2fs_fill_dentries+0xd10/0xd10 [ 69.879458][ T4716] __se_sys_getdents64+0xf2/0x270 [ 69.884486][ T4716] ? __x64_sys_getdents64+0x80/0x80 [ 69.890210][ T4716] ? filldir+0x720/0x720 [ 69.894452][ T4716] ? vtime_user_exit+0x2c8/0x3e0 [ 69.899404][ T4716] ? lockdep_hardirqs_on+0x94/0x140 [ 69.904607][ T4716] do_syscall_64+0x4c/0xa0 [ 69.909015][ T4716] ? clear_bhb_loop+0x30/0x80 [ 69.913736][ T4716] ? clear_bhb_loop+0x30/0x80 [ 69.918411][ T4716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.924305][ T4716] RIP: 0033:0x7f8b86090dd9 [ 69.928735][ T4716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.948355][ T4716] RSP: 002b:00007f8b842ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 69.956772][ T4716] RAX: ffffffffffffffda RBX: 00007f8b86309fa0 RCX: 00007f8b86090dd9 [ 69.964731][ T4716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 69.972736][ T4716] RBP: 00007f8b86126d69 R08: 0000000000000000 R09: 0000000000000000 [ 69.980697][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.988655][ T4716] R13: 00007f8b8630a038 R14: 00007f8b86309fa0 R15: 00007ffc3249bb78 [ 69.996766][ T4716] [ 70.023495][ T4228] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 70.032649][ T4228] usb 4-1: config 0 has no interface number 0 [ 70.033530][ T4227] usb 1-1: usb_control_msg returned -71 [ 70.046906][ T4227] usbtmc 1-1:16.0: can't read capabilities [ 70.118200][ T4227] usb 1-1: USB disconnect, device number 4 [ 70.234756][ T4228] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 70.254214][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.285380][ T4228] usb 4-1: Product: syz [ 70.289571][ T4228] usb 4-1: Manufacturer: syz [ 70.323421][ T4228] usb 4-1: SerialNumber: syz [ 70.346737][ T4228] usb 4-1: config 0 descriptor?? [ 70.394376][ T4228] smsc95xx v2.0.0 [ 70.633342][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 71.070026][ T4228] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 71.108550][ T4228] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 71.164163][ T4228] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 71.193806][ T4228] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 71.221124][ T4228] usb 4-1: USB disconnect, device number 3 [ 71.330826][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.338040][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.572868][ T4744] loop2: detected capacity change from 0 to 40427 [ 71.659776][ T4744] F2FS-fs (loop2): invalid crc value [ 71.710278][ T4787] loop0: detected capacity change from 0 to 256 [ 71.725885][ T4744] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.810073][ T4744] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.923377][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 71.983834][ T4798] loop6: detected capacity change from 0 to 8 [ 72.005798][ T4786] attempt to access beyond end of device [ 72.005798][ T4786] loop2: rw=2049, want=45104, limit=40427 [ 72.233561][ T4228] usb 5-1: Using ep0 maxpacket: 16 [ 72.338009][ T4811] loop0: detected capacity change from 0 to 128 [ 72.413737][ T4228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.514357][ T4811] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.533571][ T4228] usb 5-1: config 1 has an invalid interface number: 206 but max is 0 [ 72.551885][ T4228] usb 5-1: config 1 has no interface number 0 [ 72.561187][ T4811] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.633407][ T4194] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 72.743575][ T4228] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 72.778188][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.806671][ T4228] usb 5-1: Product: syz [ 72.810870][ T4228] usb 5-1: Manufacturer: syz [ 72.823308][ T4228] usb 5-1: SerialNumber: syz [ 72.859077][ T4809] loop1: detected capacity change from 0 to 32768 [ 73.036572][ T4194] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.059048][ T4194] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 73.089566][ T4194] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 73.110228][ T4830] loop2: detected capacity change from 0 to 4096 [ 73.209867][ T4830] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 73.237673][ T4228] usb 5-1: USB disconnect, device number 4 [ 73.259384][ T4830] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 73.293562][ T4194] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 73.302632][ T4194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.328765][ T4194] usb 4-1: Product: syz [ 73.331399][ T4830] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 73.332956][ T4194] usb 4-1: Manufacturer: syz [ 73.364209][ T4194] usb 4-1: SerialNumber: syz [ 73.394761][ T4830] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 73.422516][ T4830] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 73.454550][ T4830] ntfs: volume version 3.1. [ 73.462415][ T4838] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.237'. [ 73.481842][ T4830] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 73.514090][ T4830] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 73.535752][ T4830] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 73.589296][ T4830] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 73.606115][ T4830] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 73.729878][ T4194] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 73.753853][ T4194] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 73.839415][ T4194] usb 4-1: 0:2 : does not exist [ 73.938359][ T4194] usb 4-1: USB disconnect, device number 4 [ 74.035338][ T4863] capability: warning: `syz.4.248' uses 32-bit capabilities (legacy support in use) [ 74.098933][ T4863] program syz.4.248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.130108][ T4861] loop1: detected capacity change from 0 to 2048 [ 74.252804][ T4861] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.266948][ T4872] vcan0: tx address claim with dlc 0 [ 74.289734][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.386068][ T4876] input: syz1 as /devices/virtual/input/input6 [ 74.719404][ T4897] loop0: detected capacity change from 0 to 128 [ 74.792767][ T4901] tap0: tun_chr_ioctl cmd 2147767511 [ 74.835827][ T4897] EXT4-fs (loop0): Test dummy encryption mode enabled [ 74.872893][ T4897] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,journal_ioprio=0x0000000000000000,,errors=continue. Quota mode: none. [ 74.927058][ T4897] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.025082][ T4910] loop2: detected capacity change from 0 to 256 [ 75.202725][ T4923] loop1: detected capacity change from 0 to 512 [ 75.291668][ T4923] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.324007][ T4923] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.392516][ T4897] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 75.640430][ T4228] hid-generic 0004:0004:FFFF0001.0004: unknown main item tag 0x0 [ 75.658375][ T4228] hid-generic 0004:0004:FFFF0001.0004: unknown main item tag 0x0 [ 75.666424][ T4173] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.678147][ T4228] hid-generic 0004:0004:FFFF0001.0004: unknown main item tag 0x0 [ 75.705053][ T4228] hid-generic 0004:0004:FFFF0001.0004: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 75.763404][ T1325] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.779781][ T4950] loop3: detected capacity change from 0 to 24 [ 75.822416][ T4952] loop0: detected capacity change from 0 to 128 [ 75.889103][ T4948] fido_id[4948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.904730][ T4173] usb 5-1: Using ep0 maxpacket: 32 [ 75.928514][ T4952] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.958126][ T4952] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.013581][ T1325] usb 3-1: Using ep0 maxpacket: 32 [ 76.033743][ T4173] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.043739][ T4173] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.069664][ T4173] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.077274][ T4173] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 76.086448][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.096455][ T4173] usb 5-1: config 0 descriptor?? [ 76.105135][ T4958] loop0: detected capacity change from 0 to 4096 [ 76.143569][ T1325] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 76.151971][ T1325] usb 3-1: config 0 has no interface number 0 [ 76.157665][ T4958] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 76.182326][ T4958] ntfs3: loop0: Inode r=19 is not in use! [ 76.188620][ T4958] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 76.323605][ T1325] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 76.352282][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.396591][ T1325] usb 3-1: Product: syz [ 76.403165][ T4936] FAT-fs (loop4): Directory bread(block 64) failed [ 76.415970][ T1325] usb 3-1: Manufacturer: syz [ 76.420949][ T1325] usb 3-1: SerialNumber: syz [ 76.434616][ T4936] FAT-fs (loop4): Directory bread(block 65) failed [ 76.445340][ T1107] cfg80211: failed to load regulatory.db [ 76.479331][ T4936] FAT-fs (loop4): Directory bread(block 66) failed [ 76.487525][ T1325] usb 3-1: config 0 descriptor?? [ 76.509996][ T4936] FAT-fs (loop4): Directory bread(block 67) failed [ 76.539148][ T1325] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 76.558759][ T4936] FAT-fs (loop4): Directory bread(block 68) failed [ 76.591074][ T4936] FAT-fs (loop4): Directory bread(block 69) failed [ 76.636757][ T4936] FAT-fs (loop4): Directory bread(block 70) failed [ 76.689133][ T4936] FAT-fs (loop4): Directory bread(block 71) failed [ 76.727239][ T4936] FAT-fs (loop4): Directory bread(block 72) failed [ 76.762330][ T1325] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 76.771859][ T4936] FAT-fs (loop4): Directory bread(block 73) failed [ 76.822646][ T1325] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 77.049435][ T4983] tipc: Started in network mode [ 77.079239][ T4983] tipc: Node identity ac14140f, cluster identity 4711 [ 77.095359][ T4173] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 77.109130][ T4173] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 77.109953][ T4983] tipc: New replicast peer: 255.255.255.255 [ 77.128531][ T4173] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 77.157730][ T4983] tipc: Enabled bearer , priority 10 [ 77.162130][ T4173] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 77.183372][ T4173] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 77.196045][ T4173] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 77.204179][ T4228] usb 3-1: USB disconnect, device number 3 [ 77.215349][ T4173] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x7 [ 77.223394][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 77.230187][ T4173] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x7 [ 77.247457][ T4173] hid-rmi 0003:1532:011D.0005: item fetching failed at offset 40/41 [ 77.256489][ T4228] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 77.268239][ T4173] hid-rmi 0003:1532:011D.0005: parse failed [ 77.304299][ T4173] hid-rmi: probe of 0003:1532:011D.0005 failed with error -22 [ 77.312848][ T4228] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 77.333183][ T4173] usb 5-1: USB disconnect, device number 5 [ 77.335131][ T4228] quatech2 3-1:0.51: device disconnected [ 77.870706][ T5005] set_capacity_and_notify: 2 callbacks suppressed [ 77.870720][ T5005] loop3: detected capacity change from 0 to 1024 [ 77.922906][ T5009] loop0: detected capacity change from 0 to 512 [ 78.062261][ T5005] EXT4-fs (loop3): Ignoring removed orlov option [ 78.081013][ T5005] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.098777][ T5009] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 78.119153][ T5009] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 78.150032][ T5009] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 78.175302][ T4194] tipc: Node number set to 2886997007 [ 78.360442][ T5005] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,dioread_nolock,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 78.381616][ T5009] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 78.413357][ T5009] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000] [ 78.421778][ T5027] loop1: detected capacity change from 0 to 1024 [ 78.483809][ T5009] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.490240][ T5009] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.306: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 78.771188][ T5009] EXT4-fs error (device loop0): ext4_quota_enable:6447: comm syz.0.306: Bad quota inode: 4, type: 1 [ 78.810867][ T5009] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.897003][ T5018] loop2: detected capacity change from 0 to 131072 [ 78.936630][ T5009] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 78.946752][ T5009] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,bsddf,nodioread_nolock,acl,debug,noblock_validity,usrjquota=,minixdf,min_batch_time=0x0000000000000008,resgid=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback. [ 79.059490][ T5009] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.306: bg 0: block 34: padding at end of block bitmap is not set [ 79.098251][ T5018] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.170124][ T5018] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.245282][ T5047] loop1: detected capacity change from 0 to 512 [ 79.330879][ T5047] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.321: inode has both inline data and extents flags [ 79.363094][ T5047] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.321: couldn't read orphan inode 15 (err -117) [ 79.455437][ T5047] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.622322][ T5047] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.321: directory missing '.' [ 79.990650][ T5062] loop0: detected capacity change from 0 to 4096 [ 79.994427][ T5066] loop1: detected capacity change from 0 to 8 [ 80.037205][ T5066] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 80.050816][ T5062] EXT4-fs (loop0): inline encryption not supported [ 80.053509][ T4173] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.066746][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop1 [ 80.127792][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop1 [ 80.191695][ T5062] EXT4-fs (loop0): Test dummy encryption mode enabled [ 80.212423][ T5062] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 80.233478][ T5062] System zones: 0-5 [ 80.244346][ T5062] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 80.353440][ T4173] usb 5-1: Using ep0 maxpacket: 16 [ 80.447097][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 80.447110][ T26] audit: type=1800 audit(1777564895.608:2): pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.328" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 80.473534][ T4173] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.475743][ T4194] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 80.504892][ T5062] fs-verity: sha512 using implementation "sha512-avx2" [ 80.510274][ T4173] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.571396][ T5078] loop1: detected capacity change from 0 to 512 [ 80.578613][ T4173] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 80.608182][ T4173] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.626566][ T4173] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 80.643353][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.657434][ T4173] usb 5-1: config 0 descriptor?? [ 80.720936][ T5078] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.1.332: corrupted xattr block 95 [ 80.743582][ T4194] usb 4-1: Using ep0 maxpacket: 16 [ 80.768717][ T5078] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 80.784322][ T5078] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.332: bg 0: block 7: invalid block bitmap [ 80.858134][ T5078] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 80.868048][ T5088] netlink: 52 bytes leftover after parsing attributes in process `syz.2.335'. [ 80.896136][ T5078] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2923: inode #11: comm syz.1.332: corrupted xattr block 95 [ 80.917744][ T5078] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 80.922315][ T4194] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.937908][ T5078] EXT4-fs (loop1): 1 orphan inode deleted [ 80.948662][ T5078] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.083445][ T4194] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 81.101866][ T4194] usb 4-1: can't read configurations, error -71 [ 81.135355][ T5100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.342'. [ 81.139577][ T5101] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 81.159543][ T5100] device bond0 entered promiscuous mode [ 81.161849][ T4173] hid (null): report_id 0 is invalid [ 81.172361][ T5100] device bond_slave_0 entered promiscuous mode [ 81.179327][ T5100] device bond_slave_1 entered promiscuous mode [ 81.194860][ T5100] device bond0 left promiscuous mode [ 81.200253][ T5100] device bond_slave_0 left promiscuous mode [ 81.208844][ T5100] device bond_slave_1 left promiscuous mode [ 81.299585][ T5103] program syz.2.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.393530][ T4209] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 81.425074][ T4229] usb 5-1: USB disconnect, device number 6 [ 81.470804][ T5112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'. [ 81.479862][ T5112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.347'. [ 81.523175][ T5114] program syz.2.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.561749][ T5116] device bridge0 entered promiscuous mode [ 81.570056][ T5116] device macvlan2 entered promiscuous mode [ 81.763466][ T4209] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.772207][ T4209] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 81.803736][ T4209] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.812818][ T4209] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 81.833339][ T4209] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 81.984760][ T4209] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.015716][ T4209] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.032928][ T4209] usb 2-1: Product: syz [ 82.083394][ T4209] usb 2-1: Manufacturer: syz [ 82.124419][ T4209] cdc_wdm 2-1:1.0: skipping garbage [ 82.129628][ T4209] cdc_wdm 2-1:1.0: skipping garbage [ 82.152280][ T4209] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 82.158516][ T4209] cdc_wdm 2-1:1.0: Unknown control protocol [ 82.384072][ T13] usb 2-1: USB disconnect, device number 5 [ 82.544337][ T5145] loop4: detected capacity change from 0 to 128 [ 82.667481][ T5145] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.691027][ T5145] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.808761][ T5159] loop3: detected capacity change from 0 to 1024 [ 83.183502][ T4173] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 83.224848][ T5176] tipc: Started in network mode [ 83.229939][ T5176] tipc: Node identity ac14140f, cluster identity 4711 [ 83.253398][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 83.263597][ T5176] tipc: New replicast peer: 255.255.255.255 [ 83.270348][ T5176] tipc: Enabled bearer , priority 10 [ 83.290809][ T5178] loop0: detected capacity change from 0 to 2048 [ 83.341994][ T5168] loop1: detected capacity change from 0 to 32768 [ 83.355757][ T5178] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 83.379844][ T5178] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 83.395172][ T5178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.427387][ T5178] UDF-fs: unknown compression code (0) [ 83.456095][ T5168] JBD2: Ignoring recovery information on journal [ 83.504979][ T5168] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 83.563776][ T4173] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 83.583093][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.603201][ T4173] usb 5-1: config 0 descriptor?? [ 83.623725][ T21] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 83.636102][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.652675][ T21] usb 4-1: config 0 descriptor?? [ 83.659815][ T4173] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 83.685665][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 83.781836][ T5184] loop0: detected capacity change from 0 to 32768 [ 83.818617][ T5184] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.377 (5184) [ 83.863518][ T4173] gp8psk: usb in 128 operation failed. [ 83.879334][ T5184] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 83.901936][ T5184] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 83.925941][ T5184] BTRFS info (device loop0): use zstd compression, level 3 [ 83.940604][ T5184] BTRFS info (device loop0): using free space tree [ 83.947610][ T5184] BTRFS info (device loop0): has skinny extents [ 83.966353][ T5187] loop1: detected capacity change from 0 to 4096 [ 83.989116][ T5187] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 84.049588][ T21] usb 4-1: Cannot read MAC address [ 84.057026][ T21] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 84.057787][ T5187] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 84.090681][ T21] usb 4-1: USB disconnect, device number 7 [ 84.143531][ T4173] gp8psk: FW Version = 220.37.51 (0xdc2533) Build 2136/100/214 [ 84.280130][ T5184] BTRFS info (device loop0): enabling ssd optimizations [ 84.294023][ T4194] tipc: Node number set to 2886997007 [ 84.363901][ T4173] gp8psk: usb in 149 operation failed. [ 84.369408][ T4173] gp8psk: failed to get FPGA version [ 84.393557][ T4173] gp8psk: usb in 138 operation failed. [ 84.399055][ T4173] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 84.410436][ T4173] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 84.431283][ T4173] usb 5-1: USB disconnect, device number 7 [ 84.624438][ T4209] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 84.884461][ T4209] usb 2-1: Using ep0 maxpacket: 16 [ 85.013529][ T4209] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 85.026100][ T4209] usb 2-1: config 0 has no interface number 0 [ 85.072810][ T4209] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.100120][ T5243] program syz.4.389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.148800][ T5247] loop2: detected capacity change from 0 to 64 [ 85.185918][ T5249] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 85.224305][ T4209] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 85.271627][ T4209] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 85.310949][ T4209] usb 2-1: Product: syz [ 85.323056][ T4209] usb 2-1: SerialNumber: syz [ 85.339342][ T4209] usb 2-1: config 0 descriptor?? [ 85.379154][ T5255] netlink: 72 bytes leftover after parsing attributes in process `syz.2.395'. [ 85.385204][ T4209] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 85.410702][ T4209] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input10 [ 85.651737][ T4209] usb 2-1: USB disconnect, device number 6 [ 85.658195][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.658459][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 85.722750][ T4209] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 85.832882][ T5276] netlink: 'syz.2.405': attribute type 8 has an invalid length. [ 85.988040][ T5283] kernel profiling enabled (shift: 6) [ 86.087908][ T5261] loop4: detected capacity change from 0 to 32768 [ 86.151428][ T5289] loop7: detected capacity change from 0 to 7 [ 86.189650][ T5289] Dev loop7: unable to read RDB block 7 [ 86.240782][ T5289] loop7: unable to read partition table [ 86.258342][ T151] loop: Write error at byte offset 2, length 3584. [ 86.271278][ T5289] loop7: partition table beyond EOD, truncated [ 86.279670][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 86.291159][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 86.314147][ T5289] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 86.380776][ T5298] program syz.1.416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.562480][ T26] audit: type=1800 audit(1777564901.718:3): pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.398" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 86.972921][ T5285] loop3: detected capacity change from 0 to 40427 [ 87.049798][ T5285] F2FS-fs (loop3): invalid crc value [ 87.082095][ T5285] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.228621][ T5285] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 87.275966][ T5285] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 87.283860][ T5285] F2FS-fs (loop3): Start checkpoint disabled! [ 87.339668][ T5285] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 87.778434][ T5322] loop2: detected capacity change from 0 to 32768 [ 87.858509][ T5322] JBD2: Ignoring recovery information on journal [ 87.870919][ T5357] netlink: 44 bytes leftover after parsing attributes in process `syz.4.442'. [ 87.968644][ T26] audit: type=1326 audit(1777564903.128:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.3.435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3dcfdfdd9 code=0x0 [ 87.968962][ T5357] netlink: 'syz.4.442': attribute type 6 has an invalid length. [ 88.001400][ T5357] netlink: 'syz.4.442': attribute type 5 has an invalid length. [ 88.011057][ T5357] netlink: 'syz.4.442': attribute type 4 has an invalid length. [ 88.091046][ T5322] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 88.378914][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 89.181556][ T5419] loop0: detected capacity change from 0 to 64 [ 89.293570][ T5425] loop1: detected capacity change from 0 to 512 [ 89.369538][ T5425] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.411828][ T5425] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.417057][ T5419] Trying to free block not in datazone [ 89.492026][ T5419] Trying to free block not in datazone [ 89.535038][ T5425] EXT4-fs (loop1): 1 truncate cleaned up [ 89.540801][ T5425] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,stripe=0x0000000000000007,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 89.563805][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.643464][ T4209] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.667397][ T5419] Trying to free block not in datazone [ 89.726581][ T5425] EXT4-fs warning (device loop1): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 89.776652][ T5443] Failed to get privilege flags for destination (handle=0x2:0x400) [ 89.789394][ T5437] loop4: detected capacity change from 0 to 32768 [ 89.833400][ T5437] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.477 (5437) [ 89.894369][ T4209] usb 3-1: Using ep0 maxpacket: 8 [ 89.951049][ T5437] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 90.017555][ T4209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.027924][ T5437] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 90.042509][ T4209] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 90.059926][ T5437] BTRFS info (device loop4): use zstd compression, level 3 [ 90.067530][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.076291][ T5437] BTRFS info (device loop4): using free space tree [ 90.082857][ T5437] BTRFS info (device loop4): has skinny extents [ 90.102783][ T4209] usb 3-1: config 0 descriptor?? [ 90.111138][ T5454] loop1: detected capacity change from 0 to 4096 [ 90.140022][ T5454] EXT4-fs (loop1): inline encryption not supported [ 90.145415][ T4209] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 90.168719][ T5454] EXT4-fs (loop1): Test dummy encryption mode enabled [ 90.216654][ T5228] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 90.220390][ T5454] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 90.233692][ T5454] System zones: 0-5 [ 90.239021][ T5454] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 90.290079][ T5437] BTRFS info (device loop4): enabling ssd optimizations [ 90.349447][ T26] audit: type=1800 audit(1777564905.508:5): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.483" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 90.647781][ T5228] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.672036][ T5228] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.692071][ T5482] loop1: detected capacity change from 0 to 256 [ 90.793430][ T4209] gspca_vc032x: reg_r err -71 [ 90.798368][ T4209] vc032x: probe of 3-1:0.0 failed with error -71 [ 90.802168][ T5482] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 90.823645][ T5228] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.832015][ T4209] usb 3-1: USB disconnect, device number 4 [ 90.832696][ T5228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.850505][ T5488] program syz.3.487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.883131][ T5228] usb 1-1: SerialNumber: syz [ 91.043468][ T5484] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 91.167836][ T5503] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.190153][ T5228] usb 1-1: 0:2 : does not exist [ 91.224796][ T5228] usb 1-1: USB disconnect, device number 5 [ 91.293477][ T5484] usb 5-1: Using ep0 maxpacket: 16 [ 91.423793][ T5514] loop5: detected capacity change from 0 to 7 [ 91.425466][ T5484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.465026][ T5514] Dev loop5: unable to read RDB block 7 [ 91.469774][ T5484] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.484814][ T5514] loop5: unable to read partition table [ 91.490854][ T5514] loop5: partition table beyond EOD, truncated [ 91.501067][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.508657][ T5484] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 91.540781][ T5514] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 91.558958][ T5484] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.585088][ T5484] usb 5-1: config 0 descriptor?? [ 91.670124][ T5523] misc userio: Begin command sent, but we're already running [ 91.743458][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.863394][ T4194] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 91.990287][ T5528] loop0: detected capacity change from 0 to 32768 [ 92.028252][ T5534] loop1: detected capacity change from 0 to 16 [ 92.040481][ T5528] JBD2: Ignoring recovery information on journal [ 92.057181][ T5484] uclogic 0003:28BD:0071.0007: interface is invalid, ignoring [ 92.073982][ T5534] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 92.087452][ T5528] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.136752][ T5528] (syz.0.504,5528,1):ocfs2_reflink_ioctl:4454 ERROR: status = -2 [ 92.139391][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop1 [ 92.152311][ T4194] usb 4-1: Using ep0 maxpacket: 16 [ 92.158219][ T13] usb 3-1: config 0 has an invalid interface number: 22 but max is 0 [ 92.173148][ T13] usb 3-1: config 0 has no interface number 0 [ 92.186010][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop1 [ 92.188553][ T13] usb 3-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.215447][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 92.222412][ T13] usb 3-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.239987][ T13] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 92.251068][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.277562][ T13] usb 3-1: config 0 descriptor?? [ 92.298909][ T4229] usb 5-1: USB disconnect, device number 8 [ 92.325792][ T4194] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.350196][ T4194] usb 4-1: config 0 has no interface number 0 [ 92.367181][ T4194] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.397731][ T4194] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.415542][ T4194] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 92.435208][ T4194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.454440][ T5542] input: syz0 as /devices/virtual/input/input12 [ 92.461904][ T4194] usb 4-1: config 0 descriptor?? [ 92.745231][ T13] elo 0003:04E7:0030.0008: item fetching failed at offset 6/7 [ 92.752835][ T5228] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 92.761316][ T13] elo 0003:04E7:0030.0008: parse failed [ 92.767488][ T13] elo: probe of 0003:04E7:0030.0008 failed with error -22 [ 92.783445][ T5484] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.886017][ T5548] sg_write: process 211 (syz.4.513) changed security contexts after opening file descriptor, this is not allowed. [ 92.972546][ T1325] usb 3-1: USB disconnect, device number 5 [ 93.003519][ T5228] usb 2-1: Using ep0 maxpacket: 16 [ 93.146435][ T4194] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0009/input/input13 [ 93.159959][ T5560] loop4: detected capacity change from 0 to 512 [ 93.174148][ T5228] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 93.183564][ T5484] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.191270][ T5228] usb 2-1: config 0 has no interface number 0 [ 93.199014][ T5228] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.206353][ T5560] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.214784][ T5228] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.236100][ T5228] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 93.240566][ T5560] [ 93.246354][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.247492][ T5560] ====================================================== [ 93.247500][ T5560] WARNING: possible circular locking dependency detected [ 93.264679][ T4194] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0009/input/input14 [ 93.269486][ T5560] syzkaller #0 Not tainted [ 93.285579][ T5560] ------------------------------------------------------ [ 93.289953][ T5228] usb 2-1: config 0 descriptor?? [ 93.292691][ T5560] syz.4.518/5560 is trying to acquire lock: [ 93.302238][ T4194] uclogic 0003:28BD:0071.0009: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 93.303748][ T5560] ffff88801bec6c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 93.325614][ T5560] [ 93.325614][ T5560] but task is already holding lock: [ 93.333001][ T5560] ffff88801bec4650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 93.342111][ T5560] [ 93.342111][ T5560] which lock already depends on the new lock. [ 93.342111][ T5560] [ 93.352598][ T5560] [ 93.352598][ T5560] the existing dependency chain (in reverse order) is: [ 93.361877][ T5560] [ 93.361877][ T5560] -> #1 (sb_internal){.+.+}-{0:0}: [ 93.369310][ T5560] percpu_down_read+0x46/0x1b0 [ 93.375010][ T5560] ext4_evict_inode+0x44a/0x1090 [ 93.380519][ T5560] evict+0x4c9/0x8d0 [ 93.384964][ T5560] ext4_ext_migrate+0xc0c/0xe60 [ 93.390354][ T5560] ext4_ioctl+0x1a84/0x3870 [ 93.395404][ T5560] __se_sys_ioctl+0xfa/0x170 [ 93.400525][ T5560] do_syscall_64+0x4c/0xa0 [ 93.405475][ T5560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.412024][ T5560] [ 93.412024][ T5560] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 93.420446][ T5560] __lock_acquire+0x2c42/0x7d10 [ 93.426066][ T5560] lock_acquire+0x19e/0x400 [ 93.431287][ T5560] percpu_down_read+0x46/0x1b0 [ 93.436660][ T5560] ext4_writepages+0x20f/0x2df0 [ 93.442126][ T5560] do_writepages+0x476/0x6e0 [ 93.447343][ T5560] __writeback_single_inode+0x153/0xda0 [ 93.453545][ T5560] writeback_single_inode+0x3cb/0x8e0 [ 93.459672][ T5560] write_inode_now+0x23b/0x2c0 [ 93.464960][ T5560] iput+0x5ab/0x8a0 [ 93.469278][ T5560] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 93.475276][ T5560] ext4_xattr_block_set+0x979/0x2d20 [ 93.481143][ T5560] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 93.487477][ T5560] __ext4_expand_extra_isize+0x301/0x3e0 [ 93.493661][ T5560] __ext4_mark_inode_dirty+0x469/0x700 [ 93.499777][ T5560] ext4_evict_inode+0xa8d/0x1090 [ 93.505251][ T5560] evict+0x4c9/0x8d0 [ 93.509685][ T5560] ext4_orphan_cleanup+0xad2/0x1320 [ 93.515415][ T5560] ext4_fill_super+0x8d6e/0x94f0 [ 93.520880][ T5560] mount_bdev+0x287/0x3c0 [ 93.525715][ T5560] legacy_get_tree+0xe6/0x180 [ 93.530899][ T5560] vfs_get_tree+0x88/0x270 [ 93.536019][ T5560] do_new_mount+0x24a/0xa40 [ 93.541116][ T5560] __se_sys_mount+0x2e3/0x3d0 [ 93.546306][ T5560] do_syscall_64+0x4c/0xa0 [ 93.551234][ T5560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.557683][ T5560] [ 93.557683][ T5560] other info that might help us debug this: [ 93.557683][ T5560] [ 93.568040][ T5560] Possible unsafe locking scenario: [ 93.568040][ T5560] [ 93.575481][ T5560] CPU0 CPU1 [ 93.580844][ T5560] ---- ---- [ 93.586857][ T5560] lock(sb_internal); [ 93.591051][ T5560] lock(&sbi->s_writepages_rwsem); [ 93.598785][ T5560] lock(sb_internal); [ 93.605445][ T5560] lock(&sbi->s_writepages_rwsem); [ 93.610635][ T5560] [ 93.610635][ T5560] *** DEADLOCK *** [ 93.610635][ T5560] [ 93.618765][ T5560] 3 locks held by syz.4.518/5560: [ 93.623775][ T5560] #0: ffff88801bec40e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 93.633862][ T5560] #1: ffff88801bec4650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 93.643328][ T5560] #2: ffff888061abd088 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 93.653683][ T5560] [ 93.653683][ T5560] stack backtrace: [ 93.659553][ T5560] CPU: 1 PID: 5560 Comm: syz.4.518 Not tainted syzkaller #0 [ 93.666833][ T5560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 93.676870][ T5560] Call Trace: [ 93.680225][ T5560] [ 93.683201][ T5560] dump_stack_lvl+0x188/0x250 [ 93.687865][ T5560] ? load_image+0x400/0x400 [ 93.692352][ T5560] ? show_regs_print_info+0x20/0x20 [ 93.697712][ T5560] ? print_circular_bug+0x12b/0x1a0 [ 93.702910][ T5560] check_noncircular+0x296/0x330 [ 93.707943][ T5560] ? add_chain_block+0x940/0x940 [ 93.713039][ T5560] ? _find_first_zero_bit+0xce/0xf0 [ 93.718248][ T5560] ? add_lock_to_list+0x18d/0x280 [ 93.723412][ T5560] __lock_acquire+0x2c42/0x7d10 [ 93.728515][ T5560] ? 0xffffffffa002a000 [ 93.732773][ T5560] ? 0xffffffffa002a000 [ 93.736947][ T5560] ? is_bpf_text_address+0x254/0x270 [ 93.742434][ T5560] ? verify_lock_unused+0x140/0x140 [ 93.747723][ T5560] ? __kernel_text_address+0x9a/0x100 [ 93.753182][ T5560] ? arch_stack_walk+0xf2/0x140 [ 93.758526][ T5560] lock_acquire+0x19e/0x400 [ 93.763176][ T5560] ? ext4_writepages+0x20f/0x2df0 [ 93.768194][ T5560] ? __might_sleep+0xf0/0xf0 [ 93.772940][ T5560] ? lockdep_unlock+0x143/0x2e0 [ 93.777785][ T5560] ? read_lock_is_recursive+0x10/0x10 [ 93.783150][ T5560] ? add_lock_to_list+0x18d/0x280 [ 93.788256][ T5560] ? __lock_acquire+0x28ac/0x7d10 [ 93.793275][ T5560] percpu_down_read+0x46/0x1b0 [ 93.798054][ T5560] ? ext4_writepages+0x20f/0x2df0 [ 93.803067][ T5560] ext4_writepages+0x20f/0x2df0 [ 93.807904][ T5560] ? deref_stack_reg+0xd0/0x120 [ 93.812737][ T5560] ? verify_lock_unused+0x140/0x140 [ 93.818019][ T5560] ? mark_lock+0x94/0x320 [ 93.822329][ T5560] ? ext4_readpage+0x2e0/0x2e0 [ 93.827079][ T5560] ? __lock_acquire+0x13bc/0x7d10 [ 93.832099][ T5560] ? arch_stack_walk+0xf2/0x140 [ 93.837023][ T5560] ? __lock_acquire+0x7d10/0x7d10 [ 93.842030][ T5560] ? do_raw_spin_lock+0x128/0x2f0 [ 93.847185][ T5560] ? lockdep_unlock+0x143/0x2e0 [ 93.852399][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 93.857608][ T5560] ? ext4_readpage+0x2e0/0x2e0 [ 93.862544][ T5560] do_writepages+0x476/0x6e0 [ 93.867276][ T5560] ? __writepage+0x130/0x130 [ 93.872190][ T5560] ? writeback_single_inode+0x3c0/0x8e0 [ 93.877736][ T5560] ? __lock_acquire+0x7d10/0x7d10 [ 93.883109][ T5560] ? do_raw_spin_lock+0x128/0x2f0 [ 93.888132][ T5560] __writeback_single_inode+0x153/0xda0 [ 93.893866][ T5560] writeback_single_inode+0x3cb/0x8e0 [ 93.895893][ T5228] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input2 [ 93.899433][ T5560] ? write_inode_now+0x2c0/0x2c0 [ 93.915074][ T5560] write_inode_now+0x23b/0x2c0 [ 93.919851][ T5560] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 93.925771][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 93.931050][ T5560] iput+0x5ab/0x8a0 [ 93.934879][ T5560] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 93.940271][ T5560] ? ext4_xattr_ibody_set+0x330/0x330 [ 93.945675][ T5560] ext4_xattr_block_set+0x979/0x2d20 [ 93.951162][ T5560] ? ext4_get_inode_loc+0x120/0x120 [ 93.956400][ T5560] ? ext4_xattr_block_find+0x500/0x500 [ 93.961846][ T5560] ? ext4_xattr_block_find+0xe6/0x500 [ 93.967325][ T5560] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 93.973232][ T5560] __ext4_expand_extra_isize+0x301/0x3e0 [ 93.978871][ T5560] __ext4_mark_inode_dirty+0x469/0x700 [ 93.984453][ T5560] ext4_evict_inode+0xa8d/0x1090 [ 93.989385][ T5560] ? _raw_spin_unlock+0x24/0x40 [ 93.994247][ T5560] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 94.000158][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 94.005368][ T5560] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 94.011276][ T5560] evict+0x4c9/0x8d0 [ 94.015190][ T5560] ? proc_nr_inodes+0x320/0x320 [ 94.020275][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 94.025821][ T5560] ? _raw_spin_unlock+0x24/0x40 [ 94.030688][ T5560] ? iput+0x706/0x8a0 [ 94.034896][ T5560] ext4_orphan_cleanup+0xad2/0x1320 [ 94.040114][ T5560] ? ext4_orphan_del+0xbf0/0xbf0 [ 94.045137][ T5560] ? errseq_check_and_advance+0x62/0x120 [ 94.050911][ T5560] ext4_fill_super+0x8d6e/0x94f0 [ 94.055836][ T5560] ? format_decode+0x898/0x1300 [ 94.060721][ T5560] ? ext4_mount+0x40/0x40 [ 94.065125][ T5560] ? set_blocksize+0x1f3/0x370 [ 94.069959][ T5560] ? sb_set_blocksize+0xa5/0xe0 [ 94.074882][ T5560] mount_bdev+0x287/0x3c0 [ 94.079300][ T5560] ? ext4_mount+0x40/0x40 [ 94.083893][ T5560] legacy_get_tree+0xe6/0x180 [ 94.088959][ T5560] ? ext4_errno_to_code+0x160/0x160 [ 94.094244][ T5560] vfs_get_tree+0x88/0x270 [ 94.098780][ T5560] do_new_mount+0x24a/0xa40 [ 94.103284][ T5560] __se_sys_mount+0x2e3/0x3d0 [ 94.108032][ T5560] ? __x64_sys_mount+0xc0/0xc0 [ 94.112797][ T5560] ? lockdep_hardirqs_on+0x94/0x140 [ 94.118010][ T5560] ? __x64_sys_mount+0x1c/0xc0 [ 94.122796][ T5560] do_syscall_64+0x4c/0xa0 [ 94.127228][ T5560] ? clear_bhb_loop+0x30/0x80 [ 94.131922][ T5560] ? clear_bhb_loop+0x30/0x80 [ 94.136631][ T5560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.142569][ T5560] RIP: 0033:0x7f8b8609204a [ 94.145968][ T5228] usb 2-1: USB disconnect, device number 7 [ 94.147091][ T5560] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.147110][ T5560] RSP: 002b:00007f8b842e9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.181328][ T5560] RAX: ffffffffffffffda RBX: 00007f8b842e9ee0 RCX: 00007f8b8609204a [ 94.189373][ T5560] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f8b842e9ea0 [ 94.197437][ T5560] RBP: 0000200000000180 R08: 00007f8b842e9ee0 R09: 0000000000000000 [ 94.205414][ T5560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 94.213368][ T5560] R13: 00007f8b842e9ea0 R14: 000000000000047a R15: 000000000000002c [ 94.221327][ T5560] [ 94.233526][ T5560] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.518: iget: bad extra_isize 58 (inode size 256) [ 94.251788][ T5560] EXT4-fs (loop4): Remounting filesystem read-only [ 94.258743][ T5560] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.518: error while reading EA inode 18 err=-117 [ 94.271522][ T5560] EXT4-fs (loop4): Remounting filesystem read-only [ 94.272191][ T4194] usb 4-1: USB disconnect, device number 8 [ 94.279852][ T5560] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.518: iget: bad extra_isize 58 (inode size 256) [ 94.298200][ T5484] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.309182][ T5484] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.318338][ T5560] EXT4-fs (loop4): Remounting filesystem read-only [ 94.326143][ T5560] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.518: error while reading EA inode 11 err=-117 [ 94.339264][ T5560] EXT4-fs (loop4): Remounting filesystem read-only [ 94.347095][ T5560] EXT4-fs (loop4): 1 orphan inode deleted [ 94.353031][ T5560] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,jqfmt=vfsold,. Quota mode: none. [ 94.410880][ T5560] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.518: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 94.432526][ T5560] EXT4-fs (loop4): Remounting filesystem read-only [ 94.509818][ T5484] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 94.519869][ T5484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.528961][ T5484] usb 1-1: Product: syz [ 94.533109][ T5484] usb 1-1: Manufacturer: syz [ 94.537731][ T5484] usb 1-1: SerialNumber: syz [ 94.584785][ T5484] usb 1-1: selecting invalid altsetting 1 [ 94.590794][ T5484] usb 1-1: unit 6 not found! [ 95.453468][ T5484] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 95.468096][ T5484] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 95.476880][ T5484] usb 1-1: USB disconnect, device number 6 [ 95.693988][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory