last executing test programs: 14.432865004s ago: executing program 1 (id=605): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0xfffffffffffffffe, 0x60) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0xfffc, 0x7}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in6=@empty, {0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x6}}]}, 0x144}}, 0x0) 14.208556981s ago: executing program 1 (id=608): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0xc0400) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000100)="de8664", 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000240)={r2}) 14.108997154s ago: executing program 1 (id=610): bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5508, &(0x7f0000002480)="$eJzs3EtvG1UUAODjpOmbEiEW7DpShZRItVWnD8GuQCseolVUYMEKHNux3NqeKHackBULlogF/wSBxIolv4EFa3aIBYgdEshzJ9DwkEBxYtJ8nzQ+c6+vz5xrVZXOTOQATqzF7OcfK3EpzkXEfERcjCjOK+VRuJ3CcxGRRcTcY0elnP994nREnI+IS5PkKWelfOvTq+MrN39446evvjlz6sJnX347u10Ds/Z8RPQ30vl2P8W8k+LDcr4x7haxf2NcxvRG/1E5zlPcbq8VGbYbe+saRbzeSevzja3hJK73Gs1J7HTXi/mNQbrgcNzZy1N84GFjsxi32mtF7A7zInZ2U107u+n/tt3hKOVplfk+KNLHaLQX03x7p532s/GoiM3BqJxPefNWe2cSx2UsLxfNvNcq6lg7yDf9//Zmd7C1k43bm8NuPshu1uov1Oq3qvXNvNUetW9UG/3WrRvZUqc3WVYdtRv925087/TatWbeX86WOs1mtV7Plu6017qNQVav167XrlVvLpdnV7NX77+T9VrZ0iS+3B1sjbq9Ybaeb2bpE8vZSu36i8vZlXr21r3VbPXB3bv3Vt9+786791+69/or5aK/lJUtrVxbWanWr1VX6ssnaP8flUVPcf9wIJVZFwBw/PzX/v+y/h+YgsPr/zcfRBx+/x/6/6k4Vv3vSe//D2H/cCD6fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE+u7hc9fK04W0/hCOf9UOfVMOa5ExFxE/Po35uP0vpzzZZ6Ff1i/8Kcavq5EkWFyjTPlcT4ibpfHL08f9rcAAAAAT64vPrz8SerW08virAviKKWbNnMX359SvkpELCx+P6Vsc5OXZ6eUrPj3fSp2ppStuIF1dkrJ0i23U9PK9q/M7wtnHwuVFOaOtBwAAOBI7O8EjrYLAQAA4Ch9POsCmI1K7D3K3HsWXPzl/R8PBM/tGwEAAADHUGXWBQAAAACHruj//f4fAAAAPNnS7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xs793CYORHEAfjZ4Yf9p0Wrv28reoIwtYY97jCggTVBADqSFNEAN5JYSIojwOAQiDpE8tpXo+yRnMpb58QbBYWakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv31Xpxe/X7um3Obt9OntEAAAAAl2yr9aL+Z5b6X5v735tbP5t+ERFlRFyau4/i01nmqMmpXp6/OX2+elXDXUSdcHiPSXN9iYg/zfX4o+tPAQAAAD6uzXI1T7P19Gc2dEH0KS3alN/+ZsorIqKaPWRKKw95vzKF1d/vcfzPlFYvYE0zhaUlt3GutDepf+7HVbvpSVOkprz4smOR2cYOAAD0aHTW9DsLAQAAoE//hi6AYRTxvJV53AqcpKbZ3vt81gMAAADeoWLoAgAAAIDO1fP/ns7/2zv/DwAAAIaRzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqvdgsV/O2Obt9O3lGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MT+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xpHFQcA/M3MztZWxTXKHiKi4EEvdrutrb2JByV48E8QQrqtsVt/tDnYUsRcvEnOvYgeRQQl3vo/5JxALvGWwx4ieFZmdiY7+QGuv2Y2yecDb953h2He981CyHfeSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS6O1JnGSHzjiOi3Obew+Xsn7rUJ95vLY9n7UsjupM+mR4sfoh6jaXCAAAAGdHUtb3IYSddH0h6+NOXv+n5TVZzf/t0+O4rOcP1/1lX9b+Wfvl593n9wfqjMfJbnpzeTi4dDSV1v83y9n2zF9e0cqffP7uJcm/kPi91edGaf48o683Nt5p5+G5OrIFAP6Ji2VfBOXvQ1nfbzIxAM6MVqXwLuv/pNNsTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1GK2GJ8s4CiHMtyZxZmvv4dJx/eO17fmyXXv0aC18Oblndos0hHBzeTi4VOtsZtu9+w9uLw6Hg7v1By+FEJoa/a1i+rc/mOLiEBp5PoL/KIiLL3tW8jkZQYM/lAAAOJXSomV1/U66vpCdi+ZC+OO7g/X/q5U4TFn/7354bbM6VrX+79c2w9nXW7nzae/e/QevL99ZvDW4Nfj4jcv9N/tXrl+9er2XvyvpeWMCAADAv9MuWrX+j+eOrv9fqMRhyvr/s2/6X1THStT/x5os+jWdCQAAwNn27Mu//xYdcz5qt8Pniysrd/vj4/7ny+NjA6n+beeKVq3/k7mmswIAAADqMFqNDqz/36jEYcr1/6e+f+HH6j2TEML5Yv3/4tInwxv1TWem1fHnxE3PEQAAgGadL1p1/T/N9//H+1se4hDCa6+M4+LfAE5V/yfvfvVDdazq/v8r9U1xJsXd8fPI+24IrW7TGQEAAHCaPVG0rNj/NV1f+OinC++37f8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNufAQAA//9hGz6T") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 12.875361813s ago: executing program 1 (id=624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000002c0)={0xe, 0x0, [{0xe4, 0x0, 0x4}, {0x3, 0x0, 0x4}, {0x100, 0x0, 0x200}, {0x9, 0x0, 0x4}, {0x7, 0x0, 0x1}, {0x6, 0x0, 0x6}, {0x0, 0x0, 0xfffc}, {0xffffff4c, 0x0, 0x3ff}, {0x200, 0x0, 0x1}, {0x9, 0x0, 0x6}, {0x400, 0x0, 0xfffffffffffffff8}, {0xffff8001, 0x0, 0x2}, {0x80, 0x0, 0x5}, {0x40000040, 0x0, 0x3}, {0xfff, 0x0, 0x1}, {0x10, 0x0, 0x4e78}]}) 12.283458122s ago: executing program 1 (id=632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0xcd}]}) 12.068857209s ago: executing program 1 (id=633): openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x40, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.750223385s ago: executing program 0 (id=773): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x93, 0x0, 0xf, "100056f200"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8002) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 1.60443601s ago: executing program 0 (id=774): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r0, &(0x7f00000004c0)=[{0x0, 0x4000}, {&(0x7f00000001c0)=""/19, 0x13}], 0x2) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8729e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) 1.444888325s ago: executing program 0 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e40)={r1}, 0xc) 1.444720445s ago: executing program 0 (id=776): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)="441f08d600270bcf724ef54e91e6ffbe002a5f89000000000000000000", 0x1d) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) 1.299245999s ago: executing program 2 (id=778): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061187e000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) 1.200948232s ago: executing program 2 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@random={0xdd, 0x4, 'abcd'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) 1.170258583s ago: executing program 2 (id=780): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c0017"], 0x34}}, 0xc000) 1.024916518s ago: executing program 2 (id=782): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x300, 0x300, 0x0, 0x101, 0x300}}) 959.76349ms ago: executing program 3 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 868.887213ms ago: executing program 2 (id=785): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5b, 0x0, &(0x7f00000004c0)="e30080670000ec5cb68717bd86dde148f0630962bb87dd44fe42904fcee14db43f749c2acf88d510fddc27241544716b9ca42231ed33455d8a9c63e195d6acf5bb80b4b7ee0fae7aea53492b18c3e6c807bc4b5d29a0ed834a6bd8", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b00d2b7b6b51c97, 0x0, 0xd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 842.594514ms ago: executing program 3 (id=786): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x11fb, 0x3, 0xaa}, 0x14) 816.312234ms ago: executing program 2 (id=787): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x7, 0x180) semop(r1, &(0x7f0000000200)=[{0x3, 0x2, 0x800}, {0x4, 0xa7dd, 0x3000}], 0x2) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/61, 0x3d}], 0x1, 0xfffff800, 0x800) 736.938687ms ago: executing program 3 (id=788): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 736.793087ms ago: executing program 3 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8815}, 0x804) 707.056788ms ago: executing program 3 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x38, r1, 0x101, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}}, 0x4c808) 658.096889ms ago: executing program 3 (id=791): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000280)='./file1\x00') 528.877714ms ago: executing program 0 (id=792): set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) 494.772115ms ago: executing program 0 (id=794): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) poll(&(0x7f0000000200)=[{r0, 0x3621}], 0x1, 0xa09) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020) 325.34496ms ago: executing program 4 (id=796): syz_mount_image$fuse(0x0, 0x0, 0x40000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',rootcontext=sysadm_u,euid>', @ANYRESDEC, @ANYBLOB="2c61707072616973655f747970653dc5a409eb696d6173695d2c66736d616769633d3078303030303030303030303030303430312c6673"], 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000300)=[{0x3, 0x5, 0x10, 0x4}, {0x3, 0x5, 0x2, 0x1}, {0x3, 0x1, 0x8, 0xa}, {0x1, 0x4, 0x1, 0x9}, {0x4, 0x4, 0x5, 0x8}], 0x10, 0x3}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000001000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000019000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) 239.766513ms ago: executing program 4 (id=797): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)='r', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000300)='h', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000440)={r1}) 132.105556ms ago: executing program 4 (id=798): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unshare(0x28000600) r0 = socket(0x1, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0), 0x4) 72.646518ms ago: executing program 4 (id=799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 46.190789ms ago: executing program 4 (id=800): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="934300005200337287277b9b108b4ab502"], 0xfe33) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x12022) 0s ago: executing program 4 (id=801): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x257f, 0x5}, 'syz0\x00', 0x38}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) kernel console output (not intermixed with test programs): 44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.085848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.094111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.106630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.115567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.124887][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.131997][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.140406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.180116][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.196084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.206076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.220241][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.227363][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.237705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.246489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.255224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.264646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.273607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.281420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.289157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.317240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.325434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.333379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.349299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.361088][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.368214][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.376668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.385420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.393911][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.400978][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.408819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.428911][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.443102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.452870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.461285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.470365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.480294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.491427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.500357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.529152][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.538270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.547258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.558009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.566690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.577984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.588076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.597391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.605372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.614559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.623070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.651954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.660739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.669959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.678458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.693011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.700706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.719705][ T4196] device veth0_vlan entered promiscuous mode [ 52.730062][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.740193][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.754151][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.772545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.781639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.809642][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.825804][ T4196] device veth1_vlan entered promiscuous mode [ 52.875817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.888776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.897746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.907923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.916539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.928847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.938644][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.971186][ T4196] device veth0_macvtap entered promiscuous mode [ 52.992297][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 52.998430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.007134][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 53.014176][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.022979][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 53.028375][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.029080][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 53.036035][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.039744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.058538][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.067216][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.075286][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 53.079516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.089484][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.097649][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.111647][ T4196] device veth1_macvtap entered promiscuous mode [ 53.127625][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.137601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.146353][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.155430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.164308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.172886][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.179917][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.188483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.196004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.204027][ T4201] device veth0_vlan entered promiscuous mode [ 53.216418][ T4201] device veth1_vlan entered promiscuous mode [ 53.229857][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.240225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.248053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.258151][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.267565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.277984][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.296535][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.322188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.330745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.345216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.356330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.377983][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.388490][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.398878][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.408578][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.417293][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.430874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.445855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.470316][ T4201] device veth0_macvtap entered promiscuous mode [ 53.496506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.511266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.520418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.529176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.538064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.567301][ T4195] device veth0_vlan entered promiscuous mode [ 53.583231][ T4201] device veth1_macvtap entered promiscuous mode [ 53.591000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.605174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.616392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.627993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.637676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.646624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.655140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.663914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.672274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.681040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.688872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.708761][ T4195] device veth1_vlan entered promiscuous mode [ 53.724981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.733718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.742210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.776414][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.798327][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.815149][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.827265][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.837090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.845334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.854588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.863720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.872680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.906734][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.925495][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.940147][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.961233][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.970855][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.980335][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.989103][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.003101][ T4195] device veth0_macvtap entered promiscuous mode [ 54.014953][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.024252][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.034851][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.044491][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.052693][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.067092][ T4195] device veth1_macvtap entered promiscuous mode [ 54.080390][ T4201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.090574][ T4201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.105501][ T4201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.117254][ T4201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.133788][ T4188] device veth0_vlan entered promiscuous mode [ 54.144415][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.162418][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.169862][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.180753][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.190712][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.203338][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.214460][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.231554][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.242548][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.252741][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.265067][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.277395][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.294901][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.306007][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.314319][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.323226][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.331728][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.339355][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.346925][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.357108][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.372963][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.394701][ T4188] device veth1_vlan entered promiscuous mode [ 54.414943][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.425154][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.435220][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.444204][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.475810][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.482844][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.491763][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.493346][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.508167][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.545338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.563214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.571820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.579737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.595387][ T4189] device veth0_vlan entered promiscuous mode [ 54.620336][ T4188] device veth0_macvtap entered promiscuous mode [ 54.659808][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.660677][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.681724][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.686792][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.699916][ T4188] device veth1_macvtap entered promiscuous mode [ 54.727378][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.749394][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.763613][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.809304][ T4189] device veth1_vlan entered promiscuous mode [ 54.825452][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.849762][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.856109][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.860912][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.877714][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.888650][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.898831][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.909303][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.921644][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.938742][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.950233][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.961727][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.987522][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.012074][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.023520][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.048630][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.060246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.071110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.079609][ T4190] Bluetooth: hci3: command 0x040f tx timeout [ 55.087049][ T4190] Bluetooth: hci2: command 0x040f tx timeout [ 55.093944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.115838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.125417][ T4190] Bluetooth: hci1: command 0x040f tx timeout [ 55.131493][ T4190] Bluetooth: hci0: command 0x040f tx timeout [ 55.154328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.163660][ T4190] Bluetooth: hci4: command 0x040f tx timeout [ 55.170431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.181217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.207977][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.214646][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.221192][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.233090][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.242100][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.251065][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.273646][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.293994][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.307595][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.312125][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.322900][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.347642][ T4189] device veth0_macvtap entered promiscuous mode [ 55.369743][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.378985][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.433216][ T4189] device veth1_macvtap entered promiscuous mode [ 55.507918][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.537195][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.544185][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.590392][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.633676][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.647964][ T4288] capability: warning: `syz.1.13' uses deprecated v2 capabilities in a way that may be insecure [ 55.649208][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.670245][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.681220][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.693115][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.704116][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.716585][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.767314][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.789769][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.810360][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.815970][ T4291] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14'. [ 55.828963][ T4278] loop2: detected capacity change from 0 to 32768 [ 55.849663][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.879593][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.889564][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.900348][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.915593][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.926281][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.936387][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.946994][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.958466][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.984343][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.003457][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.033111][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.042609][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.056051][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.065051][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.096438][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.107184][ T4302] loop1: detected capacity change from 0 to 2048 [ 56.118961][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.133218][ T4302] ======================================================= [ 56.133218][ T4302] WARNING: The mand mount option has been deprecated and [ 56.133218][ T4302] and is ignored by this kernel. Remove the mand [ 56.133218][ T4302] option from the mount to silence this warning. [ 56.133218][ T4302] ======================================================= [ 56.172999][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.180627][ T4278] XFS (loop2): Mounting V5 Filesystem [ 56.199296][ T4302] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 56.225757][ T4302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.360390][ T4278] XFS (loop2): Ending clean mount [ 56.382288][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.395887][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.421544][ T4313] loop0: detected capacity change from 0 to 2048 [ 56.449575][ T4196] XFS (loop2): Unmounting Filesystem [ 56.457193][ T4311] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5'. [ 56.469834][ T25] audit: type=1800 audit(1781655721.763:2): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 56.521156][ T4314] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5'. [ 56.531095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.538895][ T4314] Zero length message leads to an empty skb [ 56.581308][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.602256][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.611287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.630732][ T4313] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.646914][ T4313] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.700688][ T4322] netem: incorrect gi model size [ 56.706211][ T4322] netem: change failed [ 56.814315][ T4313] fs-verity: sha512 using implementation "sha512-avx2" [ 56.844614][ T4328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 56.997131][ T4338] loop1: detected capacity change from 0 to 64 [ 57.153757][ T4202] Bluetooth: hci1: command 0x0419 tx timeout [ 57.187004][ T4202] Bluetooth: hci2: command 0x0419 tx timeout [ 57.215398][ T4202] Bluetooth: hci3: command 0x0419 tx timeout [ 57.238749][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 57.255808][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 57.389879][ T4358] loop4: detected capacity change from 0 to 512 [ 57.425177][ T4358] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 57.543969][ T4358] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.577946][ T4358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 57.620854][ T4358] System zones: 1-12 [ 57.654538][ T4332] loop2: detected capacity change from 0 to 32768 [ 57.684342][ T4358] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.712588][ T4358] EXT4-fs (loop4): 1 truncate cleaned up [ 57.753060][ T4332] [ 57.753060][ T4332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 57.753060][ T4332] [ 57.782205][ T4358] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 57.870848][ T25] audit: type=1800 audit(1781655723.163:3): pid=4332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 57.890891][ C1] vkms_vblank_simulate: vblank timer overrun [ 57.960090][ T4332] ERROR: (device loop2): diWrite: ixpxd invalid [ 57.960090][ T4332] [ 57.981200][ T4332] ERROR: (device loop2): txCommit: [ 57.981200][ T4332] [ 58.080491][ T4196] [ 58.080491][ T4196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 58.080491][ T4196] [ 58.114923][ T4196] [ 58.114923][ T4196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 58.114923][ T4196] [ 58.240847][ T4382] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 58.319516][ T4382] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 58.563212][ T4394] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 58.843535][ T4410] loop2: detected capacity change from 0 to 2048 [ 58.905758][ T4410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.163013][ T4408] loop1: detected capacity change from 0 to 32768 [ 59.199725][ T4424] loop0: detected capacity change from 0 to 1024 [ 59.308460][ T4408] XFS (loop1): Mounting V5 Filesystem [ 59.406157][ T4424] hfsplus: bad catalog entry type [ 59.413728][ T4436] kvm [4434]: vcpu3, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 59.539065][ T4408] XFS (loop1): Ending clean mount [ 59.628149][ T4454] netlink: 'syz.2.72': attribute type 12 has an invalid length. [ 59.662039][ T4454] netlink: 'syz.2.72': attribute type 29 has an invalid length. [ 59.691428][ T4195] XFS (loop1): Unmounting Filesystem [ 59.696970][ T4454] netlink: 148 bytes leftover after parsing attributes in process `syz.2.72'. [ 59.717201][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 59.800222][ T4461] loop4: detected capacity change from 0 to 64 [ 59.947517][ T4468] erofs: (device loop0): mounted with root inode @ nid 36. [ 59.954831][ T4471] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 60.007996][ T4468] attempt to access beyond end of device [ 60.007996][ T4468] loop0: rw=524288, want=48, limit=16 [ 60.032124][ T4468] attempt to access beyond end of device [ 60.032124][ T4468] loop0: rw=524288, want=40, limit=16 [ 60.108436][ T4475] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 60.651986][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.815582][ T4508] capability: warning: `syz.3.96' uses 32-bit capabilities (legacy support in use) [ 61.009203][ T4498] set_capacity_and_notify: 1 callbacks suppressed [ 61.009218][ T4498] loop1: detected capacity change from 0 to 32768 [ 61.022552][ T4232] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 61.030821][ T4232] usb 5-1: config 0 has no interface number 0 [ 61.058010][ T4512] loop2: detected capacity change from 0 to 4096 [ 61.109531][ T4512] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 61.123068][ T4498] JBD2: Ignoring recovery information on journal [ 61.212173][ T4232] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 61.221240][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.240384][ T4498] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 61.249606][ T4232] usb 5-1: Product: syz [ 61.254355][ T4232] usb 5-1: Manufacturer: syz [ 61.258986][ T4232] usb 5-1: SerialNumber: syz [ 61.261789][ T4512] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 61.289550][ T4232] usb 5-1: config 0 descriptor?? [ 61.416364][ T4520] loop3: detected capacity change from 0 to 2048 [ 61.535025][ T4522] loop2: detected capacity change from 0 to 256 [ 61.551762][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 61.573292][ T4520] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.583726][ T4524] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.587961][ T4232] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 61.675458][ T4279] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.690911][ T4279] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.703279][ T4279] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.710932][ T4279] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.718538][ T4279] rtc rtc0: __rtc_set_alarm: err=-22 [ 61.740916][ T4232] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 61.792232][ T4232] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 61.800422][ T4232] usb 5-1: media controller created [ 61.890743][ T4535] program syz.3.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.917819][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 62.062157][ T4232] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 62.094799][ T4546] input: syz0 as /devices/virtual/input/input5 [ 62.167469][ T4547] loop0: detected capacity change from 0 to 4096 [ 62.209279][ T4232] usb 5-1: USB disconnect, device number 2 [ 62.366653][ T4560] loop2: detected capacity change from 0 to 256 [ 62.372551][ T4559] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.427260][ T4560] exfat: Deprecated parameter 'utf8' [ 62.457191][ T4560] exfat: Deprecated parameter 'utf8' [ 62.467815][ T4560] exfat: Deprecated parameter 'utf8' [ 62.518125][ T4560] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 62.562594][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.821981][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 62.952215][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.002352][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.024630][ T4557] loop1: detected capacity change from 0 to 40427 [ 63.038595][ T4231] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 63.052605][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.061763][ T4231] usb 4-1: config 0 descriptor?? [ 63.098171][ T4557] F2FS-fs (loop1): invalid crc value [ 63.107324][ T4557] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.164776][ T4557] F2FS-fs (loop1): Start checkpoint disabled! [ 63.204431][ T4557] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 63.302026][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.557914][ T4231] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 63.611083][ T4592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.141'. [ 63.635932][ T4592] netlink: 32 bytes leftover after parsing attributes in process `syz.1.141'. [ 63.701643][ T4585] loop0: detected capacity change from 0 to 40427 [ 63.729817][ T4585] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 63.738233][ T4585] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 63.777794][ T4585] F2FS-fs (loop0): invalid crc value [ 63.832116][ T4232] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 63.834230][ T4585] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 63.866705][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.902489][ T4232] usb 3-1: Product: syz [ 63.921880][ T4232] usb 3-1: Manufacturer: syz [ 63.926535][ T4232] usb 3-1: SerialNumber: syz [ 63.961198][ T4232] usb 3-1: config 0 descriptor?? [ 63.974498][ T4585] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 63.981702][ T4585] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.009425][ T1691] usb 4-1: USB disconnect, device number 2 [ 64.023416][ T4232] ch341 3-1:0.0: ch341-uart converter detected [ 64.168770][ T25] audit: type=1804 audit(1781655729.463:4): pid=4585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.138" name="/newroot/33/file1/bus" dev="loop0" ino=10 res=1 errno=0 [ 64.189975][ C1] vkms_vblank_simulate: vblank timer overrun [ 64.192789][ T4593] loop4: detected capacity change from 0 to 32768 [ 64.208352][ T4201] attempt to access beyond end of device [ 64.208352][ T4201] loop0: rw=2049, want=45104, limit=40427 [ 64.227262][ T25] audit: type=1800 audit(1781655729.463:5): pid=4585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.138" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 64.284183][ T4593] JBD2: Ignoring recovery information on journal [ 64.329671][ T4593] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 64.448932][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 64.631690][ T4619] loop4: detected capacity change from 0 to 128 [ 64.751165][ T4621] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 64.777018][ T4621] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 64.811581][ T4621] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #5: comm syz.1.142: unexpected bad inode w/o EXT4_IGET_BAD [ 64.829411][ T4621] EXT4-fs (loop1): no journal found [ 64.842905][ T4621] EXT4-fs (loop1): can't get journal size [ 64.850371][ T4621] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x0000000000000005,abort,,errors=continue. Quota mode: writeback. [ 64.870141][ T1691] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.902239][ T4232] usb 3-1: failed to send control message: -71 [ 64.908471][ T4232] ch341-uart: probe of ttyUSB0 failed with error -71 [ 64.924554][ T4232] usb 3-1: USB disconnect, device number 2 [ 64.936869][ T4624] netlink: 'syz.4.143': attribute type 3 has an invalid length. [ 64.946144][ T4232] ch341 3-1:0.0: device disconnected [ 64.951626][ T4624] netlink: 152 bytes leftover after parsing attributes in process `syz.4.143'. [ 64.961039][ T4202] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.023457][ T4626] netlink: 40 bytes leftover after parsing attributes in process `syz.4.144'. [ 65.038021][ T4626] netlink: 32 bytes leftover after parsing attributes in process `syz.4.144'. [ 65.121966][ T1691] usb 1-1: Using ep0 maxpacket: 8 [ 65.242070][ T1691] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 65.259007][ T1691] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 65.269567][ T1691] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.286252][ T1691] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.301630][ T1691] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.317476][ T1691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.427641][ T4632] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 65.444850][ T4632] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 65.496527][ T4202] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 65.509594][ T4632] F2FS-fs (loop1): invalid crc value [ 65.509670][ T4202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.530133][ T4202] usb 4-1: Product: syz [ 65.534818][ T4202] usb 4-1: Manufacturer: syz [ 65.539613][ T4202] usb 4-1: SerialNumber: syz [ 65.553681][ T4632] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 65.602069][ T1691] usb 1-1: GET_CAPABILITIES returned 0 [ 65.607595][ T1691] usbtmc 1-1:16.0: can't read capabilities [ 65.704183][ T4632] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 65.711354][ T4632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.757724][ T25] audit: type=1804 audit(1781655731.053:6): pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.147" name="/newroot/29/file1/bus" dev="loop1" ino=10 res=1 errno=0 [ 65.794447][ T25] audit: type=1800 audit(1781655731.083:7): pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.147" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 65.828766][ T4195] attempt to access beyond end of device [ 65.828766][ T4195] loop1: rw=2049, want=45104, limit=40427 [ 65.834230][ T7] usb 1-1: USB disconnect, device number 2 [ 66.015162][ T4636] set_capacity_and_notify: 3 callbacks suppressed [ 66.015176][ T4636] loop2: detected capacity change from 0 to 32768 [ 66.034815][ T4202] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 66.065397][ T4645] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 66.082492][ T4645] hfsplus: xattr search failed [ 66.098038][ T4636] JBD2: Ignoring recovery information on journal [ 66.174800][ T144] hfsplus: b-tree write err: -5, ino 25 [ 66.217599][ T144] hfsplus: b-tree write err: -5, ino 4 [ 66.233713][ T144] hfsplus: b-tree write err: -5, ino 2 [ 66.239272][ T144] hfsplus: b-tree write err: -5, ino 28 [ 66.239868][ T4636] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 66.322021][ T4202] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 66.342871][ T4202] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 66.373780][ T4202] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 66.375776][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 66.384211][ T4202] lan78xx: probe of 4-1:1.0 failed with error -71 [ 66.404816][ T4653] netlink: 128 bytes leftover after parsing attributes in process `syz.4.153'. [ 66.438476][ T4202] usb 4-1: USB disconnect, device number 3 [ 66.715160][ T4664] loop1: detected capacity change from 0 to 512 [ 66.740550][ T4663] loop2: detected capacity change from 0 to 1024 [ 66.760352][ T4664] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.792912][ T4663] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 66.823105][ T4663] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 66.839389][ T4663] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #5: comm syz.2.154: unexpected bad inode w/o EXT4_IGET_BAD [ 66.844471][ T4664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 66.875817][ T4664] System zones: 1-12 [ 66.896219][ T4664] EXT4-fs (loop1): 1 truncate cleaned up [ 66.942697][ T4663] EXT4-fs (loop2): no journal found [ 66.947983][ T4663] EXT4-fs (loop2): can't get journal size [ 66.954566][ T4664] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 66.982668][ T4663] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x0000000000000005,abort,,errors=continue. Quota mode: writeback. [ 67.019853][ T4672] loop3: detected capacity change from 0 to 1024 [ 67.076999][ T4655] loop0: detected capacity change from 0 to 32768 [ 67.112205][ T4202] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 67.158195][ T4655] (syz.0.156,4655,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 67.171193][ T4672] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 67.206090][ T4672] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 67.215887][ T4655] (syz.0.156,4655,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 67.223256][ T4257] hfsplus: b-tree write err: -5, ino 25 [ 67.239133][ T4674] hfsplus: b-tree write err: -5, ino 22 [ 67.263730][ T4257] hfsplus: b-tree write err: -5, ino 4 [ 67.276528][ T4257] hfsplus: b-tree write err: -5, ino 2 [ 67.288093][ T4655] JBD2: Ignoring recovery information on journal [ 67.288655][ T4257] hfsplus: b-tree write err: -5, ino 23 [ 67.353061][ T4655] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 67.372150][ T155] hfsplus: b-tree write err: -5, ino 22 [ 67.487686][ T4201] ocfs2: Unmounting device (7,0) on (node local) [ 67.488106][ T4680] loop3: detected capacity change from 0 to 256 [ 67.494341][ T4202] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.500466][ T4279] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 67.521588][ T4202] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.697504][ T4202] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 67.743024][ T4202] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 67.751402][ T4202] usb 5-1: Product: syz [ 67.771938][ T4202] usb 5-1: Manufacturer: syz [ 67.832843][ T4202] hub 5-1:4.0: USB hub found [ 67.945294][ T4279] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.982360][ T4689] syz.0.166 (4689) used greatest stack depth: 20976 bytes left [ 68.006116][ T4279] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.012367][ T4682] loop1: detected capacity change from 0 to 32768 [ 68.052110][ T4202] hub 5-1:4.0: 2 ports detected [ 68.053682][ T4279] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 68.076042][ T4682] [ 68.076042][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.076042][ T4682] [ 68.081883][ T4279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.130286][ T4682] [ 68.130286][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.130286][ T4682] [ 68.130982][ T4695] loop3: detected capacity change from 0 to 4096 [ 68.152077][ T4682] [ 68.152077][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.152077][ T4682] [ 68.168627][ T4682] [ 68.168627][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.168627][ T4682] [ 68.175721][ T4279] hub 3-1:4.0: USB hub found [ 68.202076][ T4682] [ 68.202076][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.202076][ T4682] [ 68.209586][ T4695] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 68.250620][ T4682] [ 68.250620][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.250620][ T4682] [ 68.270834][ T4695] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 68.282224][ T4682] [ 68.282224][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.282224][ T4682] [ 68.313888][ T277] [ 68.313888][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.313888][ T277] [ 68.350797][ T4682] [ 68.350797][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.350797][ T4682] [ 68.363811][ T4682] [ 68.363811][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.363811][ T4682] [ 68.381990][ T4682] [ 68.381990][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.381990][ T4682] [ 68.387012][ T4279] hub 3-1:4.0: 2 ports detected [ 68.397565][ T4279] usb 3-1: selecting invalid altsetting 1 [ 68.401176][ T4682] [ 68.401176][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.401176][ T4682] [ 68.421980][ T4279] hub 3-1:4.0: Using single TT (err -22) [ 68.435025][ T277] [ 68.435025][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.435025][ T277] [ 68.457406][ T4696] [ 68.457406][ T4696] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.457406][ T4696] [ 68.481110][ T4696] [ 68.481110][ T4696] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.481110][ T4696] [ 68.492145][ T4202] hub 5-1:4.0: set hub depth failed [ 68.500713][ T4696] [ 68.500713][ T4696] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.500713][ T4696] [ 68.511804][ T4696] [ 68.511804][ T4696] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.511804][ T4696] [ 68.525249][ T277] [ 68.525249][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.525249][ T277] [ 68.550592][ T4202] usb 5-1: USB disconnect, device number 3 [ 68.595460][ T4694] loop0: detected capacity change from 0 to 40427 [ 68.617283][ T4195] [ 68.617283][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.617283][ T4195] [ 68.632417][ T4195] [ 68.632417][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.632417][ T4195] [ 68.655691][ T4694] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 68.666964][ T4694] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 68.676016][ T4694] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 68.700805][ T4694] F2FS-fs (loop0): invalid crc value [ 68.713947][ T4694] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 68.745784][ T1691] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 68.800388][ T4694] F2FS-fs (loop0): Start checkpoint disabled! [ 68.831149][ T4694] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 68.845853][ T4694] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 68.865433][ T4279] usb 3-1: USB disconnect, device number 3 [ 68.958501][ T9] attempt to access beyond end of device [ 68.958501][ T9] loop0: rw=2049, want=45104, limit=40427 [ 69.117458][ T4702] loop4: detected capacity change from 0 to 1024 [ 69.162222][ T1691] usb 4-1: unable to get BOS descriptor or descriptor too short [ 69.252169][ T4706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.260213][ T4702] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 69.268158][ T4706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 69.287117][ T4708] hfsplus: b-tree write err: -5, ino 22 [ 69.289659][ T4702] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 69.306650][ T4706] System zones: 1-12 [ 69.318425][ T4706] EXT4-fs (loop0): 1 truncate cleaned up [ 69.328647][ T4706] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 69.360366][ T4249] hfsplus: b-tree write err: -5, ino 25 [ 69.369393][ T4249] hfsplus: b-tree write err: -5, ino 4 [ 69.375758][ T4249] hfsplus: b-tree write err: -5, ino 2 [ 69.387420][ T4249] hfsplus: b-tree write err: -5, ino 23 [ 69.419027][ T1691] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 69.431368][ T4249] hfsplus: b-tree write err: -5, ino 22 [ 69.458234][ T1691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.469527][ T1691] usb 4-1: Product: syz [ 69.486658][ T1691] usb 4-1: Manufacturer: syz [ 69.491368][ T1691] usb 4-1: SerialNumber: syz [ 69.810768][ T4723] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 69.834049][ T4723] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.934508][ T4734] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.089172][ T4736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.101934][ T4279] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 70.118980][ T4738] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.242206][ T1691] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 70.322492][ T1691] usb 4-1: USB disconnect, device number 4 [ 70.395121][ T4181] udevd[4181]: setting mode of /dev/bus/usb/004/004 to 020664 failed: No such file or directory [ 70.419678][ T4181] udevd[4181]: setting owner of /dev/bus/usb/004/004 to uid=0, gid=0 failed: No such file or directory [ 70.552073][ T4279] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.593892][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.612260][ T4279] usb 1-1: not running at top speed; connect to a high speed hub [ 70.712644][ T4279] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 70.825596][ T4202] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.833440][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 70.902286][ T4279] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 70.911370][ T4279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.939701][ T4279] usb 1-1: Product: syz [ 70.955430][ T4279] usb 1-1: Manufacturer: syz [ 70.966476][ T4279] usb 1-1: SerialNumber: syz [ 71.013514][ T4759] FAT-fs (loop4): Unrecognized mount option "0x000000000000000300000000000000000000zXDb&S!|:]dN" or missing value [ 71.082075][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 71.166687][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.173226][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.202173][ T4232] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 71.210530][ T4202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.232074][ T4232] usb 3-1: config 0 has no interface number 0 [ 71.238317][ T4202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.250678][ T4771] set_capacity_and_notify: 6 callbacks suppressed [ 71.250691][ T4771] loop4: detected capacity change from 0 to 764 [ 71.263829][ T4202] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.277133][ T4202] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.286425][ T4202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.296197][ T4202] usb 2-1: config 0 descriptor?? [ 71.362076][ T4279] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 71.378939][ T4279] usb 1-1: 1:1 : sample bitwidth 253 in over sample bytes 16 [ 71.396654][ T4279] usb 1-1: 1:1 : unsupported sample bitwidth 253 in 16 bytes [ 71.426078][ T4232] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 71.438770][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.455549][ T4232] usb 3-1: Product: syz [ 71.460854][ T4232] usb 3-1: Manufacturer: syz [ 71.461626][ T4773] [U] [ 71.468363][ T4773] [U] [ 71.469862][ T4232] usb 3-1: SerialNumber: syz [ 71.471076][ T4773] [U] [ 71.471103][ T4773] [U] [ 71.482659][ T4279] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 71.489104][ T4232] usb 3-1: config 0 descriptor?? [ 71.536743][ T4232] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 71.543694][ T4279] usb 1-1: USB disconnect, device number 3 [ 71.592214][ T4773] [U] [ 71.703308][ T4769] loop3: detected capacity change from 0 to 32768 [ 71.734911][ T4777] loop4: detected capacity change from 0 to 512 [ 71.757744][ T4232] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 71.794929][ T4202] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description [ 71.825840][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.838511][ T4232] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 71.864358][ T4777] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.894559][ T4202] plantronics 0003:047F:FFFF.0002: parse failed [ 71.917310][ T4781] loop0: detected capacity change from 0 to 2048 [ 71.948369][ T4781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.967800][ T4202] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 72.048781][ T4202] usb 2-1: USB disconnect, device number 2 [ 72.231411][ T1691] usb 3-1: USB disconnect, device number 4 [ 72.237439][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 72.250564][ T1691] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 72.300514][ T1691] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 72.321075][ T1691] quatech2 3-1:0.51: device disconnected [ 72.449717][ T4798] loop0: detected capacity change from 0 to 1024 [ 72.608042][ T4802] loop0: detected capacity change from 0 to 2048 [ 72.659578][ T4802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.891110][ T4808] loop1: detected capacity change from 0 to 512 [ 72.908317][ T4811] loop2: detected capacity change from 0 to 512 [ 72.937174][ T4814] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 72.953713][ T4808] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.957304][ T4814] syzkaller1: linktype set to 785 [ 73.010744][ T4811] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.065653][ T4808] EXT4-fs (loop1): 1 truncate cleaned up [ 73.071999][ T4808] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,. Quota mode: none. [ 73.324769][ T4828] process 'syz.3.229' launched '/dev/fd/4' with NULL argv: empty string added [ 73.471447][ T4833] loop4: detected capacity change from 0 to 2048 [ 73.517339][ T4832] loop0: detected capacity change from 0 to 4096 [ 73.533758][ T4833] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.601329][ T4840] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.233: iget: bad i_size value: 38620345925642 [ 73.752760][ T4840] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.233: couldn't read orphan inode 15 (err -117) [ 73.790717][ T4840] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 73.905851][ T4846] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.920802][ T4840] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.233: bg 0: block 5: invalid block bitmap [ 73.936651][ T4840] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 73.950886][ T4840] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.950886][ T4840] [ 73.961000][ T4840] EXT4-fs (loop3): Total free blocks count 0 [ 73.967222][ T4840] EXT4-fs (loop3): Free/Dirty block details [ 73.974010][ T4840] EXT4-fs (loop3): free_blocks=0 [ 73.979020][ T4840] EXT4-fs (loop3): dirty_blocks=1 [ 73.985064][ T4840] EXT4-fs (loop3): Block reservation details [ 73.991642][ T4840] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 74.108056][ T4844] ERROR: (device loop2): dtReadFirst: stbl[0] out of bound [ 74.108056][ T4844] [ 74.155689][ T4844] ERROR: (device loop2): remounting filesystem as read-only [ 75.097400][ T1691] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 75.172059][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.330238][ T4909] netlink: 'syz.4.254': attribute type 10 has an invalid length. [ 75.370985][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.405100][ T4909] device bridge_slave_1 left promiscuous mode [ 75.446875][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 75.453744][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.478433][ T4909] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 75.482102][ T1691] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 75.507197][ T1691] usb 1-1: config 0 has no interface number 0 [ 75.514833][ T1691] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 75.612099][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.642286][ T1691] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 75.655378][ T1691] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 75.675917][ T1691] usb 1-1: Manufacturer: syz [ 75.687445][ T1691] usb 1-1: SerialNumber: syz [ 75.702055][ T4232] usb 2-1: config 117 has an invalid interface number: 163 but max is 0 [ 75.717189][ T4232] usb 2-1: config 117 has no interface number 0 [ 75.730290][ T1691] usb 1-1: config 0 descriptor?? [ 75.738749][ T4232] usb 2-1: config 117 interface 163 has no altsetting 0 [ 75.902068][ T4232] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 75.916120][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.927179][ T4232] usb 2-1: Product: syz [ 75.931682][ T4232] usb 2-1: Manufacturer: syz [ 75.938190][ T4232] usb 2-1: SerialNumber: syz [ 76.222532][ T1691] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 76.249739][ T1691] usb 1-1: USB disconnect, device number 4 [ 76.274901][ T26] cfg80211: failed to load regulatory.db [ 76.364163][ T4958] set_capacity_and_notify: 4 callbacks suppressed [ 76.364172][ T4958] loop3: detected capacity change from 0 to 1024 [ 76.435263][ T4958] EXT4-fs (loop3): Ignoring removed bh option [ 76.477830][ T4958] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 76.509213][ T4958] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.577834][ T4958] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.273: lblock 3 mapped to illegal pblock 3 (length 3) [ 76.595715][ T4958] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 76.608385][ T4958] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.608385][ T4958] [ 76.631965][ T144] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 76.648320][ T144] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 76.661552][ T144] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.661552][ T144] [ 76.789773][ T4971] loop0: detected capacity change from 0 to 256 [ 76.818534][ T4971] exfat: Deprecated parameter 'namecase' [ 76.832028][ T4971] exfat: Deprecated parameter 'namecase' [ 76.837981][ T4971] exfat: Deprecated parameter 'namecase' [ 76.862055][ T4231] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 76.874134][ T4232] usb 2-1: USB disconnect, device number 3 [ 76.880671][ T4232] f81534a_ctrl 2-1:117.163: failed to set register 0x116: -19 [ 76.899548][ T4971] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 76.900625][ T4232] f81534a_ctrl 2-1:117.163: failed to enable ports: -19 [ 77.215797][ T4969] loop3: detected capacity change from 0 to 40427 [ 77.240717][ T4979] loop4: detected capacity change from 0 to 8192 [ 77.250375][ T4969] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 77.277785][ T4969] F2FS-fs (loop3): invalid crc value [ 77.292197][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.311209][ T4979] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 77.324027][ T4979] REISERFS (device loop4): using ordered data mode [ 77.330990][ T4979] reiserfs: using flush barriers [ 77.337115][ T4969] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.337827][ T4231] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 77.352683][ T4979] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.388478][ T4979] REISERFS (device loop4): checking transaction log (loop4) [ 77.412292][ T4979] REISERFS (device loop4): Using r5 hash to sort names [ 77.413660][ T4969] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 77.424401][ T4979] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 77.464381][ T4969] attempt to access beyond end of device [ 77.464381][ T4969] loop3: rw=2049, want=77960, limit=40427 [ 77.534436][ T4189] attempt to access beyond end of device [ 77.534436][ T4189] loop3: rw=2049, want=45104, limit=40427 [ 77.549884][ T4990] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.294'. [ 77.592282][ T4231] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.601351][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.641976][ T4231] usb 3-1: Product: syz [ 77.646180][ T4231] usb 3-1: Manufacturer: syz [ 77.650780][ T4231] usb 3-1: SerialNumber: syz [ 77.692310][ T4231] usb 3-1: config 0 descriptor?? [ 77.953838][ T4279] usb 3-1: USB disconnect, device number 5 [ 78.056649][ T4231] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.090577][ T4231] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.409470][ T5025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.300'. [ 78.554838][ T5031] Failed to get privilege flags for destination (handle=0x2:0x400) [ 78.605513][ T5029] loop2: detected capacity change from 0 to 1024 [ 78.660252][ T5029] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 78.720753][ T5029] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop [ 79.123987][ T5065] loop4: detected capacity change from 0 to 128 [ 79.203354][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 79.228279][ T5065] FAT-fs (loop4): bogus number of reserved sectors [ 79.237259][ T5065] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 79.257928][ T5065] FAT-fs (loop4): Can't find a valid FAT filesystem [ 79.268664][ T5073] loop3: detected capacity change from 0 to 1024 [ 79.275174][ T4232] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.405034][ T5073] hfsplus: catalog searching failed [ 79.457181][ T4257] hfsplus: b-tree write err: -5, ino 3 [ 79.485512][ T5083] tap0: tun_chr_ioctl cmd 2147767506 [ 79.512002][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 79.637756][ T4232] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 79.822137][ T4232] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 79.842471][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 79.860477][ T4232] usb 1-1: Product: syz [ 79.873678][ T4232] usb 1-1: Manufacturer: syz [ 79.886478][ T4232] usb 1-1: SerialNumber: syz [ 79.908531][ T4232] usb 1-1: config 0 descriptor?? [ 79.942158][ T5058] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.962673][ T4232] hub 1-1:0.0: bad descriptor, ignoring hub [ 79.968616][ T4232] hub: probe of 1-1:0.0 failed with error -5 [ 79.988236][ T5085] loop4: detected capacity change from 0 to 32768 [ 80.047963][ T5085] JBD2: Ignoring recovery information on journal [ 80.123431][ T5085] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 80.193306][ T25] audit: type=1800 audit(1781655745.493:8): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.329" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 80.286953][ T5085] syz.4.329 (5085) used greatest stack depth: 19576 bytes left [ 80.292048][ T1691] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 80.303373][ T4231] usb 1-1: USB disconnect, device number 5 [ 80.344667][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 80.414204][ T5106] loop3: detected capacity change from 0 to 32768 [ 80.478177][ T5106] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.337 (5106) [ 80.571368][ T5106] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 80.631991][ T5106] BTRFS info (device loop3): using free space tree [ 80.643164][ T5106] BTRFS info (device loop3): has skinny extents [ 80.653243][ T4232] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.682859][ T1691] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 80.690993][ T1691] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.705102][ T1691] usb 3-1: config 0 has no interface number 0 [ 80.714968][ T5119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 80.724696][ T5119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 80.735142][ T5119] netlink: 20 bytes leftover after parsing attributes in process `syz.4.341'. [ 80.744259][ T5119] netlink: 20 bytes leftover after parsing attributes in process `syz.4.341'. [ 80.827713][ T5106] BTRFS info (device loop3): enabling ssd optimizations [ 80.862005][ T1691] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 80.876120][ T1691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.887012][ T1691] usb 3-1: Product: syz [ 80.891195][ T1691] usb 3-1: Manufacturer: syz [ 80.895991][ T1691] usb 3-1: SerialNumber: syz [ 80.902029][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 80.907900][ T1691] usb 3-1: config 0 descriptor?? [ 81.022147][ T4232] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 81.240085][ T1691] usb 3-1: USB disconnect, device number 6 [ 81.282237][ T4232] usb 1-1: string descriptor 0 read error: -22 [ 81.297979][ T4232] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 81.344396][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 81.405299][ T4232] usb 1-1: config 0 descriptor?? [ 81.432491][ T5058] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.453869][ T4232] hub 1-1:0.0: bad descriptor, ignoring hub [ 81.497674][ T4232] hub: probe of 1-1:0.0 failed with error -5 [ 81.587509][ T5139] loop4: detected capacity change from 0 to 40427 [ 81.612114][ T5139] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 81.618484][ T5139] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 81.689390][ T5139] F2FS-fs (loop4): invalid crc value [ 81.749201][ T5139] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 81.772098][ T4232] usb 1-1: USB disconnect, device number 6 [ 81.912512][ T5139] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 81.919614][ T5139] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.956905][ T5161] loop3: detected capacity change from 0 to 512 [ 81.989347][ T25] audit: type=1804 audit(1781655747.283:9): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.343" name="/newroot/59/file1/bus" dev="loop4" ino=10 res=1 errno=0 [ 82.045836][ T25] audit: type=1800 audit(1781655747.303:10): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.343" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 82.064112][ T5163] loop2: detected capacity change from 0 to 136 [ 82.074365][ T4188] attempt to access beyond end of device [ 82.074365][ T4188] loop4: rw=2049, want=45104, limit=40427 [ 82.091404][ T5161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.122606][ T5161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 82.141981][ T5161] System zones: 1-12 [ 82.181212][ T5161] EXT4-fs (loop3): 1 truncate cleaned up [ 82.188604][ T5161] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 82.232079][ T5163] Attempt to read inode for relocated directory [ 82.266395][ T5167] loop1: detected capacity change from 0 to 2048 [ 82.317893][ T5170] loop0: detected capacity change from 0 to 2048 [ 82.402706][ T5167] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.421753][ T5170] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.449600][ T5167] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.481034][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.708322][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 82.999084][ T5177] loop4: detected capacity change from 0 to 32768 [ 83.045239][ T5177] [ 83.045239][ T5177] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.045239][ T5177] [ 83.073339][ T4232] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.082534][ T4232] usb 3-1: config 0 has no interface number 0 [ 83.097493][ T25] audit: type=1800 audit(1781655748.393:11): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.347" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 83.135079][ T5177] ERROR: (device loop4): diWrite: ixpxd invalid [ 83.135079][ T5177] [ 83.165664][ T5177] ERROR: (device loop4): txCommit: [ 83.165664][ T5177] [ 83.237447][ T4188] [ 83.237447][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.237447][ T4188] [ 83.242087][ T4232] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 83.263161][ T4188] [ 83.263161][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.263161][ T4188] [ 83.279327][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.292103][ T5181] loop3: detected capacity change from 0 to 32768 [ 83.298711][ T4232] usb 3-1: Product: syz [ 83.315072][ T4232] usb 3-1: Manufacturer: syz [ 83.320665][ T4232] usb 3-1: SerialNumber: syz [ 83.336113][ T4232] usb 3-1: config 0 descriptor?? [ 83.357585][ T5181] XFS (loop3): Mounting V5 Filesystem [ 83.384270][ T5180] loop0: detected capacity change from 0 to 32768 [ 83.476450][ T5181] XFS (loop3): Ending clean mount [ 83.504300][ T5181] XFS (loop3): Quotacheck needed: Please wait. [ 83.582066][ T4232] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 83.589623][ T5181] XFS (loop3): Quotacheck: Done. [ 83.605839][ T4232] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 83.617533][ T4232] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 83.626257][ T4232] usb 3-1: media controller created [ 83.652109][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.802000][ T4232] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 83.905443][ T4232] usb 3-1: USB disconnect, device number 7 [ 83.930545][ T4189] XFS (loop3): Unmounting Filesystem [ 83.971678][ T5201] loop4: detected capacity change from 0 to 4096 [ 84.049244][ T5203] loop1: detected capacity change from 0 to 2048 [ 84.184285][ T5205] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.186238][ T5204] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.410216][ T5207] EXT4-fs (loop1): orphan cleanup on readonly fs [ 84.457180][ T5207] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 84.528242][ T5207] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 84.537422][ T5207] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.363: couldn't read orphan inode 26 (err -116) [ 84.588719][ T5207] EXT4-fs (loop1): Remounting filesystem read-only [ 84.598904][ T5207] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 84.622786][ T5197] XFS (loop0): Mounting V5 Filesystem [ 84.644521][ T5225] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.652362][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 84.703683][ T5214] NILFS (loop3): error -22 preparing GC: cannot mark copying blocks dirty [ 84.763546][ T5197] XFS (loop0): Ending clean mount [ 84.823700][ T5197] XFS (loop0): Quotacheck needed: Please wait. [ 84.926340][ T5197] XFS (loop0): Quotacheck: Done. [ 84.970787][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 85.022040][ T5238] netlink: 'syz.1.370': attribute type 20 has an invalid length. [ 85.099136][ T4201] XFS (loop0): Unmounting Filesystem [ 85.157536][ T5240] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.182564][ T5245] exfat: Deprecated parameter 'utf8' [ 85.188378][ T5245] exfat: Deprecated parameter 'utf8' [ 85.255963][ T5245] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8dfd24ac, utbl_chksum : 0xe619d30d) [ 85.259384][ T5240] EXT4-fs (loop3): 1 truncate cleaned up [ 85.292590][ T5240] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 85.357160][ T5250] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 85.508217][ T5250] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 86.003016][ T1691] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.102916][ T4231] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 86.235610][ T5284] EXT4-fs (loop4): Ignoring removed bh option [ 86.251972][ T1691] usb 2-1: Using ep0 maxpacket: 32 [ 86.267533][ T5284] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 86.287398][ T5284] EXT4-fs (loop4): 1 truncate cleaned up [ 86.312129][ T5284] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 86.372001][ T1691] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 86.384976][ T1691] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.391675][ T1691] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 86.401270][ T1691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.406270][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 86.411108][ T1691] usb 2-1: config 0 descriptor?? [ 86.512900][ T5293] netem: change failed [ 86.602013][ T4231] usb 1-1: config 0 has no interfaces? [ 86.618277][ T5281] set_capacity_and_notify: 7 callbacks suppressed [ 86.618290][ T5281] loop3: detected capacity change from 0 to 32768 [ 86.664670][ T5281] JBD2: Ignoring recovery information on journal [ 86.692194][ T5281] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 86.693214][ T4231] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 86.715419][ T4231] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 86.724782][ T4231] usb 1-1: Manufacturer: syz [ 86.740794][ T4231] usb 1-1: config 0 descriptor?? [ 86.857460][ T5281] (syz.3.389,5281,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 86.865450][ T5281] (syz.3.389,5281,1):ocfs2_trim_mainbm:7603 ERROR: status = -12 [ 86.896134][ T1691] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 86.912623][ T1691] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 86.923121][ T1691] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 86.930670][ T1691] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 86.938322][ T1691] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 86.948794][ T1691] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 86.968528][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 87.026206][ T4190] usb 1-1: USB disconnect, device number 7 [ 87.121276][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 87.184742][ T5313] loop3: detected capacity change from 0 to 4096 [ 87.315214][ T1691] corsair-cpro: probe of 0003:1B1C:0C10.0004 failed with error -71 [ 87.338195][ T1691] usb 2-1: USB disconnect, device number 4 [ 87.349836][ T5313] EXT4-fs (loop3): Test dummy encryption mode enabled [ 87.364172][ T5313] EXT4-fs (loop3): Ignoring removed orlov option [ 87.391542][ T5313] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 87.431706][ T5313] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 87.453222][ T5313] EXT4-fs (loop3): Ignoring removed orlov option [ 87.464060][ T5313] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option [ 87.493070][ T5313] EXT4-fs (loop3): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,nouid32,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 87.496081][ T5318] fido_id[5318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 87.667890][ T5321] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 87.699761][ T5321] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 87.721746][ T146] block nbd0: Receive control failed (result -32) [ 87.741679][ T5325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 87.909406][ T5329] loop4: detected capacity change from 0 to 512 [ 87.927060][ T5333] loop2: detected capacity change from 0 to 128 [ 88.014511][ T5329] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 88.053931][ T5329] EXT4-fs (loop4): invalid journal inode [ 88.063199][ T5329] EXT4-fs (loop4): can't get journal size [ 88.128491][ T5333] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.173655][ T5333] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.190861][ T5329] EXT4-fs (loop4): 1 truncate cleaned up [ 88.196629][ T5329] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 88.224887][ T5333] fscrypt (loop2, inode 12): Mutually exclusive encryption flags (0x0c) [ 88.349565][ T5327] loop3: detected capacity change from 0 to 32768 [ 88.600008][ T5327] XFS (loop3): Mounting V5 Filesystem [ 88.682990][ T1691] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 88.735050][ T5327] XFS (loop3): Ending clean mount [ 88.746028][ T5327] XFS (loop3): Quotacheck needed: Please wait. [ 88.781466][ T5339] loop1: detected capacity change from 0 to 32768 [ 88.799665][ T5327] XFS (loop3): Quotacheck: Done. [ 88.897827][ T4189] XFS (loop3): Unmounting Filesystem [ 88.900960][ T5368] loop2: detected capacity change from 0 to 128 [ 88.967355][ T1691] usb 1-1: Using ep0 maxpacket: 8 [ 88.980012][ T5368] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 89.068848][ T5368] hpfs: filesystem error: improperly stopped [ 89.100247][ T5368] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 89.120804][ T5368] hpfs: You really don't want any checks? You are crazy... [ 89.132035][ T1691] usb 1-1: unable to get BOS descriptor or descriptor too short [ 89.151103][ T5368] hpfs: hpfs_map_sector(): read error [ 89.158478][ T5368] hpfs: code page support is disabled [ 89.170169][ T5368] hpfs: hpfs_map_4sectors(): unaligned read [ 89.176595][ T5368] hpfs: hpfs_map_4sectors(): unaligned read [ 89.206902][ T5368] hpfs: filesystem error: unable to find root dir [ 89.242069][ T1691] usb 1-1: config 3 has an invalid interface number: 145 but max is 0 [ 89.250792][ T1691] usb 1-1: config 3 has no interface number 0 [ 89.287919][ T1691] usb 1-1: config 3 interface 145 has no altsetting 0 [ 89.462144][ T1691] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=c8.3f [ 89.472190][ T1691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.486315][ T1691] usb 1-1: Product: syz [ 89.490492][ T1691] usb 1-1: Manufacturer: syz [ 89.525058][ T1691] usb 1-1: SerialNumber: syz [ 89.533913][ T5375] loop3: detected capacity change from 0 to 512 [ 89.584550][ T5375] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.602191][ T5375] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.821958][ T4231] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.838467][ T5376] loop1: detected capacity change from 0 to 32768 [ 89.862854][ T1691] qmi_wwan 1-1:3.145: bogus CDC Union: master=0, slave=0 [ 89.885821][ T1691] qmi_wwan: probe of 1-1:3.145 failed with error -22 [ 89.929411][ T1691] usb 1-1: USB disconnect, device number 8 [ 90.008899][ T5376] XFS (loop1): Mounting V5 Filesystem [ 90.072019][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 90.132166][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 90.163446][ T5398] netlink: 452 bytes leftover after parsing attributes in process `syz.3.430'. [ 90.211394][ T4231] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 90.234943][ T5376] XFS (loop1): Ending clean mount [ 90.392041][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 90.418853][ T4195] XFS (loop1): Unmounting Filesystem [ 90.434433][ T4231] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 90.476833][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.495823][ T4231] usb 5-1: Product: syz [ 90.500012][ T4231] usb 5-1: Manufacturer: syz [ 90.506210][ T4231] usb 5-1: SerialNumber: syz [ 90.522153][ T13] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 90.550291][ T4231] usb 5-1: config 0 descriptor?? [ 90.618480][ T4231] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 90.647274][ T4231] usb 5-1: setting power ON [ 90.660125][ T4231] dvb-usb: bulk message failed: -22 (2/0) [ 90.690365][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.712435][ T4231] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 90.720914][ T4231] usb 5-1: media controller created [ 90.762172][ T13] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 90.779144][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.788833][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.812014][ T13] usb 3-1: Product: syz [ 90.816196][ T13] usb 3-1: Manufacturer: syz [ 90.825162][ T5380] dvb-usb: bulk message failed: -22 (3/0) [ 90.833799][ T5380] dvb-usb: bulk message failed: -22 (3/0) [ 90.852664][ T13] usb 3-1: SerialNumber: syz [ 90.864398][ T13] usb 3-1: config 0 descriptor?? [ 90.909369][ T4231] usb 5-1: selecting invalid altsetting 6 [ 90.917498][ T13] usb 3-1: bad CDC descriptors [ 90.932134][ T5420] syz.3.440 uses obsolete (PF_INET,SOCK_PACKET) [ 90.949065][ T4231] usb 5-1: digital interface selection failed (-22) [ 90.960088][ T13] usb 3-1: unsupported MDLM descriptors [ 90.990077][ T4231] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 91.066816][ T4231] usb 5-1: setting power OFF [ 91.081955][ T4231] dvb-usb: bulk message failed: -22 (2/0) [ 91.109795][ T4231] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 91.152709][ T4231] (NULL device *): no alternate interface [ 91.166206][ T4230] usb 3-1: USB disconnect, device number 8 [ 91.236228][ T4231] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 91.236497][ T5433] loop3: detected capacity change from 0 to 8 [ 91.270945][ T4231] usb 5-1: USB disconnect, device number 4 [ 91.406755][ T5433] SQUASHFS error: zlib decompression failed, data probably corrupt [ 91.452090][ T5433] SQUASHFS error: Failed to read block 0x9b: -5 [ 91.484553][ T5433] SQUASHFS error: Unable to read metadata cache entry [99] [ 91.512140][ T5433] SQUASHFS error: Unable to read inode 0x104 [ 91.810504][ T5457] loop0: detected capacity change from 0 to 1024 [ 91.926669][ T5457] hfsplus: request for non-existent node 211 in B*Tree [ 91.940502][ T5461] tipc: Started in network mode [ 91.945995][ T4230] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.956620][ T5457] hfsplus: request for non-existent node 211 in B*Tree [ 91.967511][ T5461] tipc: Node identity ac14140f, cluster identity 4711 [ 92.007881][ T5461] tipc: New replicast peer: 255.255.255.255 [ 92.024038][ T4249] hfsplus: b-tree write err: -5, ino 8 [ 92.033518][ T5461] tipc: Enabled bearer , priority 10 [ 92.382349][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.392061][ T4231] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.482252][ T4230] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 92.652128][ T4230] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 92.676556][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.700929][ T4230] usb 5-1: Product: ⫡ⷞ潗芨혫졫걮칭ꐬገ丕킴洞톍・쒊駅灈ﷸꨛὝ뛘잽 [ 92.721353][ T4230] usb 5-1: Manufacturer: ႀ쒻鶴瓠ℷ리蟎龅菊菺跞螻溍ꣷ뒋쾤䶤ᝬ難ᰬ᫗巜霎ንἢ᫺専噘韖篡犛丘㺚㟴坋ᔷशఓࣴ퓩ᦖ㟩灮⏙㞇遨粢㓲䡬乽貤㣢ꯡ㝨쌆瘾䤑ㆀ㩍鏤鍞泊撼䃴떉篺ዀ꾝箈딘슣쏂盹螋䠩䈺좽頫駥덗陴樀秌淏茁俞ᙃ薏퉝ኧ觙喪냀謇甒⥬ [ 92.760881][ T4230] usb 5-1: SerialNumber: syz [ 92.766174][ T5498] loop1: detected capacity change from 0 to 256 [ 92.869819][ T5498] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba999a5, utbl_chksum : 0xe619d30d) [ 93.049762][ T5147] tipc: Node number set to 2886997007 [ 93.079305][ T4231] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 93.092837][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.103267][ T4231] usb 4-1: Product: syz [ 93.107450][ T4231] usb 4-1: Manufacturer: syz [ 93.112320][ T4231] usb 4-1: SerialNumber: syz [ 93.121682][ T4231] usb 4-1: config 0 descriptor?? [ 93.122039][ T4232] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 93.162643][ T4230] usb 5-1: unit 4 not found! [ 93.259191][ T4230] usb 5-1: USB disconnect, device number 5 [ 93.392145][ T4231] usb 4-1: ignoring: probably an ADSL modem [ 93.452008][ T1691] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.502122][ T4232] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.508013][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.510865][ T4232] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 93.537196][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 93.544817][ T4232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.556910][ T4232] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 93.572299][ T4232] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 93.702097][ T4232] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.711194][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.719460][ T4232] usb 3-1: Product: syz [ 93.723689][ T4232] usb 3-1: Manufacturer: syz [ 93.770143][ T4232] cdc_wdm 3-1:1.0: skipping garbage [ 93.782134][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 93.788784][ T4232] cdc_wdm 3-1:1.0: skipping garbage [ 93.797176][ T4232] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 93.804334][ T4232] cdc_wdm 3-1:1.0: Unknown control protocol [ 93.822264][ T1691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.842294][ T4231] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 93.857539][ T1691] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.867423][ T1691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.887867][ T1691] usb 2-1: config 0 descriptor?? [ 93.912489][ T26] usb 1-1: config 0 has an invalid interface number: 115 but max is 0 [ 93.920710][ T26] usb 1-1: config 0 has no interface number 0 [ 93.934877][ T26] usb 1-1: config 0 interface 115 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.949152][ T26] usb 1-1: config 0 interface 115 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 93.979660][ T26] usb 1-1: config 0 interface 115 has no altsetting 0 [ 94.004984][ T4231] usb 3-1: USB disconnect, device number 9 [ 94.049304][ T4230] usb 4-1: USB disconnect, device number 5 [ 94.152294][ T26] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff55, bcdDevice=72.3e [ 94.171919][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.179926][ T26] usb 1-1: Product: syz [ 94.191942][ T26] usb 1-1: Manufacturer: syz [ 94.196553][ T26] usb 1-1: SerialNumber: syz [ 94.212868][ T26] usb 1-1: config 0 descriptor?? [ 94.254422][ T26] option 1-1:0.115: GSM modem (1-port) converter detected [ 94.373118][ T1691] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 94.394388][ T1691] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input7 [ 94.457159][ T4230] usb 1-1: USB disconnect, device number 9 [ 94.473575][ T4230] option 1-1:0.115: device disconnected [ 94.525066][ T1691] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 94.811483][ T5548] loop4: detected capacity change from 0 to 128 [ 94.882879][ T5548] EXT4-fs (loop4): Test dummy encryption mode enabled [ 94.913347][ T5548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 94.921354][ T5548] System zones: 1-3, 19-19, 35-36 [ 94.922103][ T5554] loop3: detected capacity change from 0 to 64 [ 94.951085][ T5548] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 94.971678][ T4230] usb 2-1: USB disconnect, device number 5 [ 94.989921][ T5548] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.068914][ T5563] syz.2.502[5563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.069029][ T5563] syz.2.502[5563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.194409][ T5548] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 95.493011][ T5570] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 95.560500][ T5570] overlayfs: Failed to create volatile/dirty file. [ 95.999825][ T5574] loop2: detected capacity change from 0 to 32768 [ 96.067689][ T5619] loop1: detected capacity change from 0 to 64 [ 96.077752][ T5574] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.506 (5574) [ 96.180500][ T5574] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 96.217890][ T5574] BTRFS info (device loop2): setting nodatacow, compression disabled [ 96.244739][ T5574] BTRFS info (device loop2): turning on flush-on-commit [ 96.288272][ T5574] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 96.344782][ T5574] BTRFS info (device loop2): use lzo compression, level 0 [ 96.391249][ T5574] BTRFS info (device loop2): setting nodatasum [ 96.439051][ T5574] BTRFS info (device loop2): use no compression [ 96.445988][ T5574] BTRFS info (device loop2): trying to use backup root at mount time [ 96.507516][ T5574] BTRFS info (device loop2): max_inline at 0 [ 96.562926][ T5574] BTRFS info (device loop2): using free space tree [ 96.601492][ T5574] BTRFS info (device loop2): has skinny extents [ 96.719408][ T5658] loop4: detected capacity change from 0 to 16 [ 96.784229][ T5658] erofs: (device loop4): mounted with root inode @ nid 36. [ 96.874128][ T5658] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 96.905642][ T155] BTRFS warning (device loop2): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 96.929462][ T5658] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 96.958037][ T5574] BTRFS warning (device loop2): couldn't read tree root [ 96.982332][ T4249] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 97.032048][ T5658] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 97.040420][ T5574] BTRFS warning (device loop2): couldn't read tree root [ 97.060117][ T5574] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 97.070348][ T5676] device veth1_macvtap left promiscuous mode [ 97.085666][ T5574] BTRFS warning (device loop2): couldn't read tree root [ 97.086072][ T5676] device macsec0 entered promiscuous mode [ 97.105415][ T5639] loop0: detected capacity change from 0 to 32768 [ 97.113928][ T5574] BTRFS info (device loop2): enabling ssd optimizations [ 97.150070][ T5574] BTRFS info (device loop2): clearing free space tree [ 97.172930][ T5574] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.174245][ T5676] device veth1_macvtap entered promiscuous mode [ 97.200137][ T5574] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.204920][ T5676] device macsec0 left promiscuous mode [ 97.219210][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.294914][ T5639] XFS (loop0): Mounting V5 Filesystem [ 97.309648][ T5574] BTRFS info (device loop2): creating free space tree [ 97.327030][ T5574] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.351667][ T5574] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.482748][ T5639] XFS (loop0): Ending clean mount [ 97.489714][ T5639] XFS (loop0): Quotacheck needed: Please wait. [ 97.562731][ T5639] XFS (loop0): Quotacheck: Done. [ 97.755760][ T4201] XFS (loop0): Unmounting Filesystem [ 98.030883][ T5690] loop4: detected capacity change from 0 to 32768 [ 98.185099][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.247439][ T5690] XFS (loop4): Mounting V5 Filesystem [ 98.351789][ T5708] loop3: detected capacity change from 0 to 40427 [ 98.401937][ T5690] XFS (loop4): Ending clean mount [ 98.587026][ T4188] XFS (loop4): Unmounting Filesystem [ 98.739242][ T5743] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 98.767872][ T5740] loop1: detected capacity change from 0 to 1024 [ 98.837113][ T5740] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 99.028846][ T5746] loop2: detected capacity change from 0 to 4096 [ 99.058718][ T5754] block nbd0: NBD_DISCONNECT [ 99.077659][ T5754] block nbd0: Send disconnect failed -32 [ 99.096919][ T5756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.566'. [ 99.118571][ T5754] block nbd0: shutting down sockets [ 99.239086][ T5761] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.249835][ T25] audit: type=1800 audit(1781655764.543:12): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.562" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 99.326469][ T25] audit: type=1800 audit(1781655764.543:13): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.562" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 99.791992][ T5146] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 99.874150][ T5793] loop4: detected capacity change from 0 to 4096 [ 100.006899][ T5793] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 100.028079][ T5809] loop1: detected capacity change from 0 to 512 [ 100.048277][ T5793] ntfs3: loop4: Failed to load $Extend. [ 100.087994][ T25] audit: type=1800 audit(1781655765.383:14): pid=5793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.582" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 100.157203][ T5814] loop3: detected capacity change from 0 to 512 [ 100.185656][ T5809] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,noquota,quota,,errors=continue. Quota mode: writeback. [ 100.201462][ T5809] ext4 filesystem being mounted at /128/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.212981][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.224728][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.238188][ T5146] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.251351][ T5146] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.270589][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.281169][ T5146] usb 1-1: config 0 descriptor?? [ 100.337348][ T5814] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 100.366215][ T5814] EXT4-fs (loop3): shut down requested (2) [ 100.508995][ T5830] netlink: 'syz.2.599': attribute type 5 has an invalid length. [ 100.532499][ T5830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'. [ 100.553239][ T5831] loop1: detected capacity change from 0 to 256 [ 100.572888][ T4188] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 100.585924][ T4188] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 100.607758][ T5831] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.634748][ T5831] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 100.667963][ T5831] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 100.754093][ T5146] plantronics 0003:047F:FFFF.0006: unbalanced delimiter at end of report description [ 100.782408][ T5146] plantronics 0003:047F:FFFF.0006: parse failed [ 100.837160][ T5146] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 100.840690][ T5841] usb usb7: usbfs: process 5841 (syz.2.603) did not claim interface 0 before use [ 100.936134][ T5846] loop4: detected capacity change from 0 to 256 [ 100.955829][ T5714] usb 1-1: USB disconnect, device number 10 [ 101.023288][ T5846] exfat: Deprecated parameter 'utf8' [ 101.037540][ T5846] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 101.060675][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 101.073569][ T5846] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 101.241923][ T1691] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 101.304335][ T5854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.402732][ T25] audit: type=1800 audit(1781655766.703:15): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.604" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 101.422918][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.481936][ T1691] usb 3-1: Using ep0 maxpacket: 16 [ 101.605545][ T1691] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 101.623373][ T1691] usb 3-1: config 0 has no interface number 0 [ 101.641745][ T1691] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.682164][ T5862] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 101.697999][ T1691] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 101.832141][ T1691] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 101.841739][ T1691] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 101.879873][ T1691] usb 3-1: Product: syz [ 101.906884][ T1691] usb 3-1: SerialNumber: syz [ 101.917439][ T5872] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 101.928460][ T1691] usb 3-1: config 0 descriptor?? [ 101.993814][ T1691] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 102.004615][ T1691] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input9 [ 102.010550][ T5856] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 102.074961][ T5856] F2FS-fs (loop1): invalid crc value [ 102.091307][ T5856] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.198784][ T5848] udc-core: couldn't find an available UDC or it's busy [ 102.217512][ T5848] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.267764][ T5856] F2FS-fs (loop1): recover fsync data on readonly fs [ 102.304610][ T5856] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 102.318334][ T5721] usb 3-1: USB disconnect, device number 10 [ 102.326772][ T5856] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 102.332211][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 102.340876][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 102.361090][ T5856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.362659][ T5882] set_capacity_and_notify: 5 callbacks suppressed [ 102.362671][ T5882] loop3: detected capacity change from 0 to 1024 [ 102.394047][ T5721] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 102.408421][ T5856] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 102.428711][ T5882] EXT4-fs (loop3): Ignoring removed bh option [ 102.453214][ T5882] EXT4-fs (loop3): inline encryption not supported [ 102.505500][ T5882] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e018, mo2=0000] [ 102.590420][ T5882] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.621: lblock 2 mapped to illegal pblock 2 (length 1) [ 102.732081][ T5882] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 102.740285][ T5882] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.621: Invalid inode table block 1 in block_group 0 [ 102.785298][ T5882] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 102.808073][ T5882] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.621: mark_inode_dirty error [ 102.859057][ T5882] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 102.897508][ T5882] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.621: Failed to acquire dquot type 0 [ 102.948042][ T5882] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 103.012012][ T5882] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.621: mark_inode_dirty error [ 103.018968][ T5895] loop0: detected capacity change from 0 to 32768 [ 103.064965][ T5895] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.627 (5895) [ 103.104767][ T5895] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 103.120465][ T5882] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 103.136426][ T5895] BTRFS info (device loop0): enabling ssd optimizations [ 103.147358][ T5895] BTRFS info (device loop0): use zlib compression, level 3 [ 103.171992][ T5895] BTRFS info (device loop0): turning on flush-on-commit [ 103.179609][ T5895] BTRFS info (device loop0): enabling auto defrag [ 103.186827][ T5882] EXT4-fs (loop3): 1 orphan inode deleted [ 103.203229][ T155] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.207651][ T5895] BTRFS info (device loop0): max_inline at 4096 [ 103.224892][ T5882] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,noblock_validity,bh,max_batch_time=0x00000000000008c9,inlinecrypt,debug,,errors=continue. Quota mode: none. [ 103.252925][ T5895] BTRFS info (device loop0): force zlib compression, level 3 [ 103.271374][ T5895] BTRFS info (device loop0): using free space tree [ 103.337818][ T155] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 103.350785][ T5895] BTRFS info (device loop0): has skinny extents [ 103.367245][ T155] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 103.409169][ T4189] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 103.436347][ T4189] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 103.449945][ T4189] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 104.518308][ T5988] loop0: detected capacity change from 0 to 1764 [ 104.766218][ T5993] loop2: detected capacity change from 0 to 256 [ 104.808496][ T5993] FAT-fs (loop2): Directory bread(block 64) failed [ 104.817053][ T5993] FAT-fs (loop2): Directory bread(block 65) failed [ 104.852018][ T5993] FAT-fs (loop2): Directory bread(block 66) failed [ 104.872242][ T5993] FAT-fs (loop2): Directory bread(block 67) failed [ 104.889183][ T5993] FAT-fs (loop2): Directory bread(block 68) failed [ 104.923044][ T5993] FAT-fs (loop2): Directory bread(block 69) failed [ 104.929959][ T5993] FAT-fs (loop2): Directory bread(block 70) failed [ 104.955401][ T5998] loop0: detected capacity change from 0 to 512 [ 104.973247][ T5993] FAT-fs (loop2): Directory bread(block 71) failed [ 104.980203][ T5993] FAT-fs (loop2): Directory bread(block 72) failed [ 104.997652][ T5993] FAT-fs (loop2): Directory bread(block 73) failed [ 105.106036][ T5998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b803c028, mo2=0002] [ 105.126359][ T5998] System zones: 1-12 [ 105.154761][ T5998] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.662: error while reading EA inode 32 err=-116 [ 105.181975][ T5998] EXT4-fs (loop0): Remounting filesystem read-only [ 105.188638][ T5998] EXT4-fs (loop0): 1 orphan inode deleted [ 105.194564][ T5998] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,debug,data_err=abort,noauto_da_alloc,nodiscard,jqfmt=vfsv1,min_batch_time=0x0000000000000004,. Quota mode: none. [ 105.197515][ T5996] netlink: 'syz.4.661': attribute type 21 has an invalid length. [ 105.241192][ T5996] netlink: 'syz.4.661': attribute type 7 has an invalid length. [ 105.287635][ T5986] loop3: detected capacity change from 0 to 40427 [ 105.301661][ T6004] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.662: unexpected EA_INODE flag [ 105.326925][ T6004] EXT4-fs (loop0): Remounting filesystem read-only [ 105.350588][ T5986] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 105.364862][ T5986] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 105.377484][ T5986] F2FS-fs (loop3): invalid crc value [ 105.404629][ T5986] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 105.479594][ T5986] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 105.495148][ T5986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.562283][ T6008] attempt to access beyond end of device [ 105.562283][ T6008] loop3: rw=2049, want=45104, limit=40427 [ 106.258839][ T6034] loop0: detected capacity change from 0 to 4096 [ 106.303616][ T6043] loop2: detected capacity change from 0 to 256 [ 106.311317][ T5146] kernel read not supported for file /video9 (pid: 5146 comm: kworker/0:9) [ 106.338427][ T6034] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 106.403674][ T6043] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.450796][ T6043] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.598287][ T6047] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.614881][ T6028] loop4: detected capacity change from 0 to 32768 [ 106.771018][ T6057] loop3: detected capacity change from 0 to 8 [ 106.833901][ T6028] XFS (loop4): Mounting V5 Filesystem [ 106.978868][ T6028] XFS (loop4): Ending clean mount [ 107.144522][ T4188] XFS (loop4): Unmounting Filesystem [ 107.319412][ T6084] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.695: corrupted inode contents [ 107.347748][ T6084] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 107.487836][ T6084] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.695: corrupted inode contents [ 107.557419][ T6084] EXT4-fs error (device loop2): ext4_evict_inode:332: inode #15: comm syz.2.695: mark_inode_dirty error [ 107.635424][ T6084] EXT4-fs (loop2): 1 orphan inode deleted [ 107.641200][ T6084] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.741754][ T6095] netlink: 128 bytes leftover after parsing attributes in process `syz.0.701'. [ 107.822173][ T6095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.701'. [ 107.831107][ T6095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.701'. [ 108.043774][ T6107] set_capacity_and_notify: 1 callbacks suppressed [ 108.043789][ T6107] loop0: detected capacity change from 0 to 512 [ 108.106277][ T6087] loop3: detected capacity change from 0 to 32768 [ 108.128058][ T6107] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.706: bg 0: block 5: invalid block bitmap [ 108.158651][ T6107] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 108.168659][ T6107] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.706: invalid indirect mapped block 3 (level 2) [ 108.182716][ T6107] EXT4-fs (loop0): 1 orphan inode deleted [ 108.188946][ T6107] EXT4-fs (loop0): 1 truncate cleaned up [ 108.199357][ T6107] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.212571][ T5713] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 108.215236][ T6087] XFS (loop3): Mounting V5 Filesystem [ 108.317603][ T6120] loop4: detected capacity change from 0 to 2048 [ 108.475197][ T6120] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.497745][ T6087] XFS (loop3): Starting recovery (logdev: internal) [ 108.606756][ T6087] XFS (loop3): Ending recovery (logdev: internal) [ 108.735680][ T4189] XFS (loop3): Unmounting Filesystem [ 108.742106][ T5713] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 108.761424][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.776412][ T5713] usb 3-1: Product: syz [ 108.780597][ T5713] usb 3-1: Manufacturer: syz [ 108.834491][ T5713] usb 3-1: SerialNumber: syz [ 108.860246][ T5713] usb 3-1: config 0 descriptor?? [ 108.913607][ T5713] hub 3-1:0.0: bad descriptor, ignoring hub [ 108.920304][ T5713] hub: probe of 3-1:0.0 failed with error -5 [ 109.127313][ T5713] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 109.136200][ T6126] loop0: detected capacity change from 0 to 32768 [ 109.154693][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.182836][ T6126] (syz.0.710,6126,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.220993][ T6126] (syz.0.710,6126,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.238214][ T5713] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 109.251432][ T5713] usb 3-1: media controller created [ 109.278983][ T6126] JBD2: Ignoring recovery information on journal [ 109.287122][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.398068][ T6126] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.404165][ T5713] DVB: Unable to find symbol dib7000p_attach() [ 109.423608][ T5713] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 109.525954][ T6126] ocfs2: Unmounting device (7,0) on (node local) [ 109.542117][ T5713] rc_core: IR keymap rc-dib0700-rc5 not found [ 109.553797][ T5713] Registered IR keymap rc-empty [ 109.559730][ T5713] dvb-usb: could not initialize remote control. [ 109.566361][ T5713] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 109.609813][ T5713] usb 3-1: USB disconnect, device number 11 [ 109.670893][ T6144] loop3: detected capacity change from 0 to 256 [ 109.686075][ T5713] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 109.798581][ T6144] FAT-fs (loop3): Directory bread(block 64) failed [ 109.831543][ T6144] FAT-fs (loop3): Directory bread(block 65) failed [ 109.840478][ T6144] FAT-fs (loop3): Directory bread(block 66) failed [ 109.858880][ T6144] FAT-fs (loop3): Directory bread(block 67) failed [ 109.912147][ T6144] FAT-fs (loop3): Directory bread(block 68) failed [ 109.918756][ T6144] FAT-fs (loop3): Directory bread(block 69) failed [ 109.949231][ T6144] FAT-fs (loop3): Directory bread(block 70) failed [ 109.956403][ T6144] FAT-fs (loop3): Directory bread(block 71) failed [ 109.963544][ T6144] FAT-fs (loop3): Directory bread(block 72) failed [ 109.970100][ T6144] FAT-fs (loop3): Directory bread(block 73) failed [ 110.096130][ T6144] attempt to access beyond end of device [ 110.096130][ T6144] loop3: rw=2049, want=1256, limit=256 [ 110.142061][ T6162] loop4: detected capacity change from 0 to 4096 [ 110.278786][ T6162] ntfs: volume version 3.1. [ 110.612174][ T4231] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 110.723713][ T6191] loop2: detected capacity change from 0 to 64 [ 110.877176][ T6191] attempt to access beyond end of device [ 110.877176][ T6191] loop2: rw=2049, want=414, limit=64 [ 110.912150][ T5712] Bluetooth: hci4: command 0x0411 tx timeout [ 110.912188][ T6191] Buffer I/O error on dev loop2, logical block 206, lost async page write [ 110.946168][ T6181] loop4: detected capacity change from 0 to 32768 [ 111.027448][ T4231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.029104][ T6189] loop3: detected capacity change from 0 to 40427 [ 111.047330][ T4231] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.061003][ T4231] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.078928][ T6181] XFS (loop4): Mounting V5 Filesystem [ 111.099612][ T6189] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 111.107024][ T6189] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 111.121063][ T6189] F2FS-fs (loop3): invalid crc value [ 111.175080][ T6189] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 111.265490][ T4231] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 111.289485][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 111.298963][ T4231] usb 1-1: Product: syz [ 111.303504][ T4231] usb 1-1: Manufacturer: syz [ 111.306695][ T6209] loop2: detected capacity change from 0 to 64 [ 111.308411][ T4231] usb 1-1: SerialNumber: syz [ 111.362672][ T6181] XFS (loop4): Ending clean mount [ 111.393520][ T6181] XFS (loop4): Quotacheck needed: Please wait. [ 111.406692][ T6189] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 111.418150][ T6189] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.437252][ T6209] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 111.454460][ T6189] F2FS-fs (loop3): Corrupted max_depth of 3: 513 [ 111.508978][ T6181] XFS (loop4): Quotacheck: Done. [ 111.588614][ T4231] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 111.650302][ T4188] XFS (loop4): Unmounting Filesystem [ 111.793351][ T5712] usb 1-1: USB disconnect, device number 11 [ 111.843304][ T5712] usblp0: removed [ 111.937148][ T6219] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.322208][ T6231] tap0: tun_chr_ioctl cmd 1074025677 [ 112.357218][ T6231] tap0: linktype set to 823 [ 112.599448][ T25] audit: type=1326 audit(1781655777.893:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.0.753" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21c9cdce59 code=0x0 [ 112.862395][ T4231] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 112.923887][ T4181] Alternate GPT is invalid, using primary GPT. [ 112.930322][ T4181] loop2: p1 p2 p3 [ 112.934446][ T4181] loop2: partition table partially beyond EOD, truncated [ 112.985487][ T6264] Alternate GPT is invalid, using primary GPT. [ 112.994540][ T6264] loop2: p1 p2 p3 [ 112.998350][ T6264] loop2: partition table partially beyond EOD, truncated [ 113.121784][ T6267] set_capacity_and_notify: 4 callbacks suppressed [ 113.121800][ T6267] loop2: detected capacity change from 0 to 512 [ 113.143589][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 113.158875][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 113.159342][ T4783] udevd[4783]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 113.200872][ T6267] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.764: inode has both inline data and extents flags [ 113.283404][ T6267] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.764: couldn't read orphan inode 15 (err -117) [ 113.291707][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 113.295785][ T6267] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.333326][ T4783] udevd[4783]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 113.358470][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 113.473278][ T4231] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.489167][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.515881][ T4231] usb 5-1: Product: syz [ 113.523661][ T4231] usb 5-1: Manufacturer: syz [ 113.535413][ T4231] usb 5-1: SerialNumber: syz [ 113.555943][ T4231] usb 5-1: config 0 descriptor?? [ 113.832278][ T4231] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 114.225102][ T6305] openvswitch: netlink: Actions may not be safe on all matching packets [ 114.322366][ T4231] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 114.340695][ T4231] usb 5-1: USB disconnect, device number 6 [ 114.427414][ T6314] tipc: Started in network mode [ 114.445349][ T6314] tipc: Node identity ac14140f, cluster identity 4711 [ 114.454609][ T6314] tipc: New replicast peer: 255.255.255.255 [ 114.457225][ T6316] program syz.2.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.460984][ T6314] tipc: Enabled bearer , priority 10 [ 115.257919][ T6330] loop3: detected capacity change from 0 to 32768 [ 115.361230][ T6330] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 115.400029][ T6329] [ 115.402400][ T6329] ====================================================== [ 115.409412][ T6329] WARNING: possible circular locking dependency detected [ 115.414131][ T6353] input: syz0 as /devices/virtual/input/input11 [ 115.416426][ T6329] syzkaller #0 Not tainted [ 115.427031][ T6329] ------------------------------------------------------ [ 115.434047][ T6329] syz.3.791/6329 is trying to acquire lock: [ 115.439938][ T6329] ffff8880602f09c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_evict_inode+0x1d72/0x41d0 [ 115.452379][ T6329] [ 115.452379][ T6329] but task is already holding lock: [ 115.459742][ T6329] ffff888074fe9808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0x2d12/0x41d0 [ 115.465721][ T4230] kernel read not supported for file /bus/input/devices (pid: 4230 comm: kworker/0:4) [ 115.471999][ T6329] [ 115.471999][ T6329] which lock already depends on the new lock. [ 115.471999][ T6329] [ 115.472005][ T6329] [ 115.472005][ T6329] the existing dependency chain (in reverse order) is: [ 115.472010][ T6329] [ 115.472010][ T6329] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}: [ 115.472048][ T6329] down_write+0x38/0x60 [ 115.516056][ T6329] ocfs2_del_inode_from_orphan+0x12b/0x7a0 [ 115.522390][ T6329] ocfs2_dio_end_io+0x103a/0x13c0 [ 115.527938][ T6329] dio_complete+0x249/0x720 [ 115.532960][ T6329] __blockdev_direct_IO+0x2e31/0x3a70 [ 115.538848][ T6329] ocfs2_direct_IO+0x233/0x2a0 [ 115.544137][ T6329] generic_file_direct_write+0x22c/0x490 [ 115.550290][ T6329] __generic_file_write_iter+0x2b1/0x4e0 [ 115.556439][ T6329] ocfs2_file_write_iter+0x1670/0x1e70 [ 115.562420][ T6329] do_iter_readv_writev+0x47e/0x5f0 [ 115.568268][ T6329] do_iter_write+0x205/0x7b0 [ 115.573379][ T6329] do_pwritev+0x240/0x3a0 [ 115.578228][ T6329] do_syscall_64+0x4c/0xa0 [ 115.583165][ T6329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.589592][ T6329] [ 115.589592][ T6329] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 115.600109][ T6329] down_write+0x38/0x60 [ 115.604787][ T6329] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 115.611200][ T6329] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 115.618054][ T6329] ocfs2_mknod+0xecc/0x2510 [ 115.623118][ T6329] ocfs2_create+0x192/0x420 [ 115.628137][ T6329] path_openat+0x11db/0x2fa0 [ 115.633244][ T6329] do_filp_open+0x1e2/0x410 [ 115.638262][ T6329] do_sys_openat2+0x150/0x4b0 [ 115.643453][ T6329] __x64_sys_openat+0x135/0x160 [ 115.648816][ T6329] do_syscall_64+0x4c/0xa0 [ 115.653751][ T6329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.660152][ T6329] [ 115.660152][ T6329] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 115.670644][ T6329] __lock_acquire+0x2c42/0x7d10 [ 115.676000][ T6329] lock_acquire+0x19e/0x400 [ 115.681008][ T6329] down_write+0x38/0x60 [ 115.685665][ T6329] ocfs2_evict_inode+0x1d72/0x41d0 [ 115.691276][ T6329] evict+0x4c9/0x8d0 [ 115.695673][ T6329] ocfs2_dentry_iput+0x24a/0x390 [ 115.701110][ T6329] __dentry_kill+0x431/0x650 [ 115.706198][ T6329] dentry_kill+0xb8/0x290 [ 115.711030][ T6329] dput+0xd8/0x1a0 [ 115.715250][ T6329] __fput+0x5ee/0x930 [ 115.719731][ T6329] task_work_run+0x125/0x1a0 [ 115.724822][ T6329] exit_to_user_mode_loop+0x10f/0x130 [ 115.730694][ T6329] exit_to_user_mode_prepare+0xee/0x180 [ 115.736745][ T6329] syscall_exit_to_user_mode+0x16/0x40 [ 115.742719][ T6329] do_syscall_64+0x58/0xa0 [ 115.747644][ T6329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.754046][ T6329] [ 115.754046][ T6329] other info that might help us debug this: [ 115.754046][ T6329] [ 115.764255][ T6329] Chain exists of: [ 115.764255][ T6329] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type] [ 115.764255][ T6329] [ 115.785697][ T6329] Possible unsafe locking scenario: [ 115.785697][ T6329] [ 115.793128][ T6329] CPU0 CPU1 [ 115.798506][ T6329] ---- ---- [ 115.803852][ T6329] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]); [ 115.810938][ T6329] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 115.820718][ T6329] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]); [ 115.830322][ T6329] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 115.837588][ T6329] [ 115.837588][ T6329] *** DEADLOCK *** [ 115.837588][ T6329] [ 115.845707][ T6329] 2 locks held by syz.3.791/6329: [ 115.850704][ T6329] #0: ffff888028860ab0 (&osb->nfs_sync_rwlock){.+.+}-{3:3}, at: ocfs2_nfs_sync_lock+0x103/0x270 [ 115.861209][ T6329] #1: ffff888074fe9808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0x2d12/0x41d0 [ 115.873878][ T6329] [ 115.873878][ T6329] stack backtrace: [ 115.879787][ T6329] CPU: 1 PID: 6329 Comm: syz.3.791 Not tainted syzkaller #0 [ 115.887051][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.897102][ T6329] Call Trace: [ 115.900378][ T6329] [ 115.903302][ T6329] dump_stack_lvl+0x188/0x250 [ 115.907971][ T6329] ? load_image+0x400/0x400 [ 115.912457][ T6329] ? show_regs_print_info+0x20/0x20 [ 115.917688][ T6329] ? print_circular_bug+0x12b/0x1a0 [ 115.922869][ T6329] check_noncircular+0x296/0x330 [ 115.927788][ T6329] ? add_chain_block+0x940/0x940 [ 115.932704][ T6329] ? lockdep_lock+0xf1/0x1f0 [ 115.937278][ T6329] ? mark_lock+0x94/0x320 [ 115.941587][ T6329] __lock_acquire+0x2c42/0x7d10 [ 115.946425][ T6329] ? verify_lock_unused+0x140/0x140 [ 115.951604][ T6329] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 115.957218][ T6329] ? do_raw_spin_lock+0x128/0x2f0 [ 115.962221][ T6329] ? mutex_unlock+0x10/0x10 [ 115.966711][ T6329] ? __rwlock_init+0x140/0x140 [ 115.971456][ T6329] ? do_raw_spin_unlock+0x11d/0x230 [ 115.976639][ T6329] lock_acquire+0x19e/0x400 [ 115.981127][ T6329] ? ocfs2_evict_inode+0x1d72/0x41d0 [ 115.986397][ T6329] ? __might_sleep+0xf0/0xf0 [ 115.990966][ T6329] ? read_lock_is_recursive+0x10/0x10 [ 115.996316][ T6329] ? rwsem_write_trylock+0x135/0x1c0 [ 116.001579][ T6329] ? clear_nonspinnable+0x60/0x60 [ 116.006582][ T6329] ? ocfs2_node_map_test_bit+0xe3/0x1a0 [ 116.012110][ T6329] ? ocfs2_node_map_clear_bit+0xd0/0xd0 [ 116.017637][ T6329] down_write+0x38/0x60 [ 116.021775][ T6329] ? ocfs2_evict_inode+0x1d72/0x41d0 [ 116.027040][ T6329] ocfs2_evict_inode+0x1d72/0x41d0 [ 116.032132][ T6329] ? ocfs2_sync_blockdev+0x40/0x40 [ 116.037220][ T6329] ? __lock_acquire+0x13bc/0x7d10 [ 116.042234][ T6329] ? mark_lock+0x94/0x320 [ 116.046542][ T6329] ? __lock_acquire+0x13bc/0x7d10 [ 116.051549][ T6329] ? mark_lock+0x94/0x320 [ 116.055859][ T6329] ? __lock_acquire+0x13bc/0x7d10 [ 116.060869][ T6329] ? mark_lock+0x94/0x320 [ 116.065176][ T6329] ? __lock_acquire+0x13bc/0x7d10 [ 116.070181][ T6329] ? verify_lock_unused+0x140/0x140 [ 116.075372][ T6329] ? inode_wait_for_writeback+0x1df/0x220 [ 116.081073][ T6329] ? __lock_acquire+0x7d10/0x7d10 [ 116.086079][ T6329] ? do_raw_spin_lock+0x128/0x2f0 [ 116.091090][ T6329] ? __rwlock_init+0x140/0x140 [ 116.095833][ T6329] ? do_raw_spin_unlock+0x11d/0x230 [ 116.101013][ T6329] ? _raw_spin_unlock+0x24/0x40 [ 116.105841][ T6329] ? inode_wait_for_writeback+0x1df/0x220 [ 116.111542][ T6329] ? sb_clear_inode_writeback+0x360/0x360 [ 116.117239][ T6329] ? do_raw_spin_lock+0x128/0x2f0 [ 116.122243][ T6329] ? bit_waitqueue+0x30/0x30 [ 116.126813][ T6329] ? do_raw_spin_unlock+0x11d/0x230 [ 116.131990][ T6329] ? ocfs2_sync_blockdev+0x40/0x40 [ 116.137080][ T6329] evict+0x4c9/0x8d0 [ 116.140960][ T6329] ? proc_nr_inodes+0x320/0x320 [ 116.145790][ T6329] ? do_raw_spin_unlock+0x11d/0x230 [ 116.150966][ T6329] ? _raw_spin_unlock+0x24/0x40 [ 116.155796][ T6329] ? iput+0x706/0x8a0 [ 116.159761][ T6329] ocfs2_dentry_iput+0x24a/0x390 [ 116.164682][ T6329] ? ocfs2_dentry_revalidate+0xbb0/0xbb0 [ 116.170291][ T6329] ? fsnotify_grab_connector+0x13b/0x1e0 [ 116.175904][ T6329] ? fsnotify_destroy_marks+0x7e/0x310 [ 116.181343][ T6329] ? dentry_unlink_inode+0x2e4/0x3c0 [ 116.186610][ T6329] __dentry_kill+0x431/0x650 [ 116.191180][ T6329] dentry_kill+0xb8/0x290 [ 116.195493][ T6329] dput+0xd8/0x1a0 [ 116.199192][ T6329] __fput+0x5ee/0x930 [ 116.203157][ T6329] task_work_run+0x125/0x1a0 [ 116.207731][ T6329] exit_to_user_mode_loop+0x10f/0x130 [ 116.213196][ T6329] exit_to_user_mode_prepare+0xee/0x180 [ 116.218741][ T6329] syscall_exit_to_user_mode+0x16/0x40 [ 116.224194][ T6329] do_syscall_64+0x58/0xa0 [ 116.228601][ T6329] ? clear_bhb_loop+0x30/0x80 [ 116.233262][ T6329] ? clear_bhb_loop+0x30/0x80 [ 116.237919][ T6329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.243805][ T6329] RIP: 0033:0x7f7bf3265e59 [ 116.248204][ T6329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.267800][ T6329] RSP: 002b:00007ffc2f088658 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 116.276201][ T6329] RAX: 0000000000000000 RBX: 00007ffc2f088740 RCX: 00007f7bf3265e59 [ 116.284160][ T6329] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 116.292115][ T6329] RBP: 000000000001c013 R08: 0000000000000001 R09: 0000000000000000 [ 116.300068][ T6329] R10: 0000001b31a20000 R11: 0000000000000246 R12: 00007ffc2f088780 [ 116.308025][ T6329] R13: 00007f7bf34defac R14: 000000000001c2d4 R15: 00007f7bf34defa0 [ 116.315993][ T6329] [ 116.331387][ T5713] tipc: Node number set to 2886997007 [ 116.414196][ T4189] ocfs2: Unmounting device (7,3) on (node local)