last executing test programs: 2m34.092048171s ago: executing program 1 (id=209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {r2, 0x4}}]}, 0xc4}}, 0x0) 2m33.991062724s ago: executing program 1 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x40002000) 2m33.74084847s ago: executing program 1 (id=213): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYBLOB="e2a00cd61874b84fc70d3a234b6c58b9cd32a606ec6de304ba52ab49588e8e86a28b400c8a3e143eb1e9c7602594111a5638c0864db33b0db73af3758befd3539e07dec5371f5984dcd91ccf0fd4293e1bcc0c5665ef3e197eaa2f34134c6691459ac15f59508b33ea96f8860f5239bd47e3a006e1", @ANYRES32], 0xff, 0x2bd, &(0x7f0000000580)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x5) 2m33.312456051s ago: executing program 1 (id=216): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000380)={[{@errors_remount}, {}, {}, {}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@namecase}, {@errors_remount}]}, 0x3, 0x1534, &(0x7f0000000cc0)="$eJzs3AucTVX7OPDnWWvtMSSdJtdhrfVsTnJZJEkuSXJJktQrSW4JSZO8kpAYcksakpBchuQyhOQWk8b9fr8kJMk7SZJbbsn6fybmr97q/9568/v/5vl+Pvsza83az9rPPs+cffbe55z5pvOQmo1qVWtARPAfwUs/EgEgFgAGAMB1ABAAQLm4cnEZ49klJv5nG2F/rIdTrnYG7Gri+mdtXP+sjeuftXH9szauf9bG9c/auP5ZG9efsaxs87QC1/OSdRe+/5+V8ev//yLppcZ8ubZUni4AMf9sCNf//3/4H8Ry/f/XCv6Zlbj+WRvXP6uKvdoJsP8B+PmfFWT73RGuf9bG9WcsK/v5veBYuPr3o//sBSL/zfdAfM9Lj/LV38/f3X/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xPcNZfoQAgs32182KMMcYYY4wxxtgfx2e72hkwxhhjjDHGGGPsvw9BgAQFAcRANoiF7JADBEBM5vj1EAc3QG7IA3khH+SHAhAPBaEQaDBggSCEwlAEonAjFIWboBgUhxJQEhyUgtJwM5SBW6As3Arl4DYoD7dDBagIlaAy3AFV4E6oCndBNbgbqkMNqAm14B6oDfdCHbgP6sL9UA8egPrwIDwEf4EG8DA0hEegETwKjeExaAJNoRk0hxb/VvyL0B1egh7QExKhF/SGl6EP9IV+0B8GwCswEF6FQfAaJMFgGAKvw1B4A4bBmzAcRsBIeAtGwdswGsbAWBgHyTAeJsA7MBHehUkwGabAVEiBaTAd3oMZMBNmwfswGz6AOTAX5qmMx/NDWAiLIBU+gsXwMaTBElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ3wCeyCT2E37IG98Bnsg8//xfgzfxffBQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA5zY27Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oJlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78F7sBfWwTpYF+tiPayXeXsKG2ADbIgNsRE2wsbYGJtgE2yGzbAFtsCW2BJbYStsg22wLbbFdtgOEzAB22N77IAdsCN2xE7YCTtjZ+yCXbFr+ovZAF/Cl7AnVhe9sDf2xj6YlK0f9sf++AoOxFfxVXwNk3AwDsHX8XV8A4fhaRx+cQSOxJFYRbyNo3EMkhiHyZiME3ACTsSJOAkn42Sciik4DafjdJyBM3Emvo+z8QP8AOfiXJyPC3ABLsRFmIqpuBjPYBouwaW4DJfjClyOq3A1rsK1uA7X4gbcgJtwE27BLbgNt+EO3IGfoALAT3EP7sEk3If7cD/uxwN4AA/iQUzHdDyEh/AwHsYjeASP4lE8hsfxBB7HU3gKT+MZPItn8Tyexwv4fPxXDT8pviYJRAYllIgRMSJWxIocIofIKXKKXCKXiIiIiBNxIrfILfKKvCK/yC/iRbwoJAoJI4wgEeYBABEVUVFUFBXFRDFRQpQQTjhRWpQWZUQZUVaUFeXEbaK8uF1UEBVFa1dZVBZVRBtXVdwlqolqorqoIWqKWqKWqC1qizqijqgr6op6op6oLx4UD4le2A8fFhmVaSQGY2MxBJuIpkJePkK1FMOwlWgt2ognxQgcju1ES5cgnhHtxWjsIP4qxuBzopMYh53FC6KL6Cq6iRdFd9HK9RA9xSTsJXqLqdhH9BX9RH8xA2uI93F29priNZEkBosh4nUxH98Qw8SbYrgYIUaKt8Qo8bYYLcaIsWKcSBbjxQTxjpgo3hWTxGQxRUwVKWKamC7eEzPETDFLvC9miw/EHDFXzBPzxQLxoVgoFolU8ZFYLD4WaWKJWCqWieVihVgpVonVYo1YK9aJ9WKD2Cg2ic1ii9gqtontYofYKT4Ru8SnYrfYI/aKz8Q+8bnYL74QB8SX4qD4m0gXX4lD4mtxWHwjjohvxVHxnTgmjosT4qQ4Jb4Xp8UZcVacE+fFD+KC+FFcFF6ARCmklEoGMkZmk7Eyu8whr5E5ZZB5/Jdx8gaZW+aReWU+mV8WkPGyoCwktTTSSpKhLCyLyKi8URaVN8lisrgsIUtKJ0vJ0vJmWUbeIsvKW2U5eZssL2+XFWRFWUlWlnfIKvJOCZFL26gua8iaspa8RybCvbKOvE/WlffLevIBWV8+mHGMyiAbykdkI/mobCwfk01kU9lMNpct5OOypXxCtpKtZRv5pGwrn5Lt5NMyQT4j20t/+U/kOdlJPi87yxdkF9lVdpM/yovSyx6yp4ReIHvLl2Uf2Vf2k/3lAPmKHChflYPkazJJDpZD5OtyqHxDDpNvyuFyhBwp35Kj5NtytBwjx8pxMlmOlxPkO3KifFdOkpPlFDlVpshpst/lmWZJ+Q/j3/mN+EE/bX2T3Cy3yK1ym9wud8id8hO5S+6Su+VuuVfulfvkPrlf7pcH5AF5UB6U6TJdHpKH5GF5WB6RR+RReVQek8flOXlSnpLfy9PyjDwjz8nz8ry8cPkxAIVKKKmUClSMyqZiVXaVQ12jcqprVS51nYqo61WcukHlVnlUXpVP5VcFVLwqqAoprYyyilSoCqsiKqpuxMt/MKqEKqmcKqVKq5v/lXhVVN2kiqniv4jPzC/xd/JroVqolqqlaqVaqTaqjWqr2qp2qp1KUAmqvWqvOqgOqqPqqDqpTqqz6qy6qC6qm+qmuqvuqofqoRJVouqtXlZ9VF/VT/VXA9QrImMfBqlBKkklqSFqiBqqhqphapgaroarkWqkGqVGqdFqtBqrxqpklawmqAlKqolqkpqkpqgpKkWlqOlqupqhZqhZapaarWarOWqOmqfmqQVqgVqoFqpUlaoWq8UqTS1RS9QytUytUCvUKrVKrVFr1Dq1Tm1QG1Sa2qw2q61qq9qutqudaqfapXap3Wq32qv2qn1qn9qv9qsD6oA6qA6qdJWuDqlD6rA6rI6oI+qoOqqOqWPqhDqhTqlT6rQ6rc6qs+q8Oq8uqAvqorqYcdoXiEAEKlBBTBATxAaxQY4gR5AzyBnkCnIFkSASxAVxQe4gT5A3yBfkDwoE8UHBoFCgAxPYQFwuejS4MSga3BQUC4oHJYKSgQtKBaWDm4MywS1B2eDWoFxwW1A+uD2oEFQMKgWVgzuCKsGdQdXgrqBacHdQPagR1AxqBfcEtYN7gzrBfUHd4P6gXvBAUD94MHgo+EvQIHg4aBg8EjQKHg0aB48FTYKmQbOgedDi35gf4ffm9/50vidcD91TJ+peurd+WffRfXU/3V8P0K/ogfpVPUi/ppP0YD1Ev66H6jf0MP2mHq5H6JH6LT1Kv61H6zF6rB6nk/V4PUG/oyfqd/UkPVlP0VN1ip6mp+v39Aw9U8/S7+vZ+gM9R8/V8/R8vUB/qBfqRTpVf6QX6491ml6il+plerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbXq73qF36k/0Lv2p3q336L36M71Pf6736y/0Af2lPqj/ptP1V/qQ/lof1t/oI/pbfVR/p4/p47qsPqlP6e/1aX1Gn9Xn9Hn9g76gf9QXtc84uc94eTfKKBNjYkysiTU5TA6T0+Q0uUwuEzERE2fiTG6T2+Q1eU1+k9/Em3hTyBQyGciQKWwKm6iJmqKmqClmipkSpoRxxpnSprQpY8qYsqasKWfKmfKmvKlgKphKppK5w9xh7jR3mrvMXeZuc7epYWqYWqaWqW1qmzqmjqlr6pp6pp6pb+qbh8xDpoFpYBqahqaRaWQam8amiWlimplmpoVpYVqalqaVaWXamDamrWlr2pl2JsEkmPamvelgOpiOpqPpZDqZzqaz6WK6mG6mm+luupsepodJNImmt+lt+pg+pp/pZwaYAWagGWgGmUEmySSZIWaIGWqGmmFmmBluRpiRGSeq5m0z2owxY804k2ySzQQzwUw0E80kM8lMMVNMikkx0810M8PMMLPMLDPbzDZzzBwzz8wzC8wCs9AsNKkm1Sw2i02aSTNLzVKz3Cw3K81Ks9qsNmvNWrMe1puNZqPZbDabrWar2W62m51mp9lldpndZrfZa/aafWaf2W/2mwPmgDloDpp0k24OmUPmsDlsjpgj5qg5ao6ZY+aEOWFOmVPmtDltzpqz5rzJd/n10ptYm93msNfYnPZam8teZ/++n98WsPG2oC1ktc1r8/2ib6y1xWxxW8KWtM6WsqXtzb/qV7AVbSVb2d5hq9g7bdVf9Wvbe20de5+ta++3tew9v+jXsw/Y+vZR+xAigG1qG9rmtpF91Da2j9kmtqltZpvbtvYp284+bRPsM7a9ffZX/YV2kV1t19i1dp3dbffYs/acPWy/seftD7aH7WkH2FfsQPuqHWRfs0l28K/6I+1bdpR92462Y+xYO+5X/Sl2qk2x0+x0+56dYWf+qr/Afmhn21Q7x8618+z8n/oZOaXaj+xi+7FNswEstcvscrvCrrSr/m+uy+wGu9Fusrvsp3ar3Wa32x12Z+aJsN1j99rP7D77uT1kv7YH7Jf2oD1i0+1XP/Uz9u+I/dYetd/ZY/a4PWFP2lP2e5UZnbHvJ+2P9qL1FggJSJKigGIoG8VSdspB11BOupZy0XUUoespjm6g3JSH8lI+yk8FKJ4KUiHSZMgSUUiFqQhF6UbKTK8ElSRHpag03Uxl6BYqS7dSObqNytPtVIEqUiWqTHdQFbqTqtJdVI3upupUg2pSLbqHatO9VIfuo7p0P9WjB6g+PUgP0V+oAT1MDekRakSPUmN6jJpQU2pGzakFPU4t6QlqRa2pDT1JbekpakdPUwI9Q+3pWepAf6WO9Bx1ouepM71AXagrdaMXqTu9RD2oJyVSL+pNL1Mf6kv9qD8NoFdoIL1Kg+g1SqLBNIRep6H0Bg2jN2k4jaCR9BaNordpNI2hsTSOkmk8TaB3aCK9S5NoMk2hqZRC02g6vUczaCbNovdpNn1Ac2guzaP5tIA+pIW0iFLpI1pMH1MaLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDtpJn9Au+pR20x7aS5/RPvqc9tMXdIC+pIP0N0qnr+gQfU2H6Rs6Qt/6nvQdHaPjdIJO0in6nk7TGTpL5+g8/UAX6Ee6SJ4gxFCEMlRhEMaE2cLYMHuYI7wmzBleG+YKrwsj4fVhXHhDmDvME+YN84X5wwJhfFgwLBTq0IQ2pDAMC4dFwmh4Y1g0vCksFhYPS4QlQxeWCkuHN4dlwlvCsuGtYbnwtrB8eHtYIawYPnp/5fCOsEp4Z1g1vCusFt4dVg9rhDXDWuE9Ye3w3rBOeF9YN7w/LBs+ENYPHwwfCv8SNggfDhuGj4SNwkfDxuFjYZOwadgsbB62CB8PW4ZPhK3C1mGb8JqwbfhU2C58OkwInwnbh8/+NP7AoszxJ381nhj2CnuHL4cvh97fJ+dF50cXRD+MLowuiqZGP4oujn4cTYsuiS6NLosuj66Iroyuiq6Oromuja6Lro9uiG6Mbop6XysbOHTCSadc4GJcNhfrsrsc7hqX013rcrnrXMRd7+LcDS63y+Pyunwuvyvg4l1BV8hpZ5x15EJX2BVxUXejK+pucsVccVfClXTOlXKlXXPXwrVwLd0TrpVr7dq4J92T7in3lHvaPe2ece3ds66D+6vr6J5zndzz7nn3guviurpu7kXX3Y3Pdek5meh6u96uj+vj+rl+boAb4Aa6gW6QG+SSXJIb4oa4oW6oG+aGueFuuBvpRrpRbpQb7Ua7sW6sS3bJboKb4Ca6iW6Sm+SmuCkuxaW46W66m+FmuCozL21ljpvj5rl5boFb4Ba6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddmtTtc/vdfnfAHXAH3d9cuvvKHXJfu8PuG3fEfeuOuu/cMXfcnXAn3Sn3vTvtzriz7pw7735wF9yP7qLzLjkyPjIh8k5kYuTdyKTI5MiUyNRISmRaZHrkvciMyMzIrMj7kdmRDyJzInMj8yLzIwsiH0YWRhZFUiMfRRZHPo6kRZZElkaWRZZHVkS8L7g19IV9ER/1N/qi/iZfzBf3JXxJ73wpX9rf7MtcyjvN+9t8eX+7r+Ar+kr+Md/EN/XNfHPfwj/uW/onfCvf2rfxT/q2/infzj/tE/wzvr1/1nfwf/Ud/XO+k3/ed/Yv+C6+q+/mX/Td/Uu+h+/pE30v39u/7Pv4vr6f7+8H+Ff8QP+qH+Rf80l+sB/iX/dD/Rt+mH/TD/cj/MiYt/yozEtkGOeT/Xg/wb/jJ/p3/SQ/2U/xU32Kn+an+/f8DD/Tz/Lv+9n+Az/Hz/Xz/Hy/wH/oF/pFPtV/5Bf7j32aX5J509iv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/D7/Sf+F3+U7/b7/F7/Wd+n//c7/df+AMXM7+B9pU/5L/2h/03/oj/1h/13/lj/rg/4U/6U/57f9qf8Wf9OX/e/+Av+B/9Rf7OGmOMMcbYP2X8lab45cil2/m9fiNG/Gzl3gBw7bYC6T8fzzijXJ/3UruviI/N+PlMz84PZy7VqycmJl5eN01CUGQuQOY7QRl++ujB5X7Gek9BArSGMr+Zf1/R9Tz9g/mjtwHk+FlMRkKZ/SXQ5vL8XwBg4m/M//iTIxeWD8/G/T/mnwtQrMiVmOxwpb8E2vx0f6U1lP2d/PO1/Af5Z/8yGaDVz2JywpX+lfxLwxPwLCT8Yk3GGGOMMcYYY+ySvqJSx8zrz8xPfP7W9Xm8uhKTDa70r1x//vb1OWOMMcYYY4wxxq6+57p2e/rxhITWHf/1RtV/K+qfbjSG/9bM3PjNhvcAmb9RAPAfTgiQ0ZB/5l5s+VO2lXT5qfP3Q8vP+QD+Z5Tyj2hc5QMTY4wxxhhj7A935aT/l79XVyshxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsC/oz/p3Y1d5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Gr7PwEAAP//kFH3Jw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m32.875879921s ago: executing program 1 (id=221): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r0, 0x0, 0xa, 0x0) 2m32.386605923s ago: executing program 1 (id=225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="5900000000000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2m31.957152844s ago: executing program 32 (id=225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="5900000000000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 5.907440875s ago: executing program 3 (id=1047): mlockall(0x2) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000409000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) 5.580499643s ago: executing program 3 (id=1051): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x208000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f0000000080)) 4.90409765s ago: executing program 4 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0xb3) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 4.542249868s ago: executing program 4 (id=1059): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 3.684027079s ago: executing program 4 (id=1064): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0, 0x0, 0x50}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 3.447941375s ago: executing program 3 (id=1066): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc4001}]}) r0 = fsopen(&(0x7f0000004900)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000004940)='inode32', &(0x7f0000004980)="9c", 0x1) readv(r0, 0x0, 0x0) 3.366452277s ago: executing program 4 (id=1068): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) 3.295453179s ago: executing program 0 (id=1069): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0xffdffffc, 0x8, 0x3, "000000000000000000000042d8663000"}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x20000) 3.026332776s ago: executing program 0 (id=1070): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)="6f6e03", 0x3) 2.875728209s ago: executing program 0 (id=1072): set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000140)={0x20004, r0, 0x2}) 2.668036264s ago: executing program 2 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/kernel/modprobe\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='/b', 0x2) 2.660081885s ago: executing program 0 (id=1074): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000340), 0x10) sendto$l2tp(r0, &(0x7f0000000380)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x82004}, 0x10) close(0x3) 2.44494316s ago: executing program 2 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40}, 0x0, &(0x7f00000006c0)={0x9, 0x0, 0x0, 0x203, 0xfffffffffffffffd, 0x0, 0x0, 0xf}, 0x0, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x64) 2.355972682s ago: executing program 0 (id=1076): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 2.355585362s ago: executing program 3 (id=1077): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000c00)={0x0, 0x2c, 0x5, "e4bd39cd5b"}, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000140)={0x20, 0x0, 0x8, {0x100, 0x1, [0xf00]}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "bb55"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x39}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x9}, 0x0, 0x0}) 2.177193976s ago: executing program 0 (id=1078): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x5e}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) 1.283188368s ago: executing program 2 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x5c) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) 1.108004653s ago: executing program 2 (id=1080): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0c00990002000000210000000800c400010000000800c3007413"], 0x70}}, 0x880) 992.675126ms ago: executing program 4 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}]}, 0x30}}, 0x0) 854.748089ms ago: executing program 2 (id=1082): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000680)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}, "ff51ac9efbe275ac"}}}}}, 0x0) 688.089593ms ago: executing program 4 (id=1083): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 550.311746ms ago: executing program 2 (id=1084): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) syz_usb_connect(0x2, 0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/ttyUSB0\x00', 0x4002, 0x28) 261.124333ms ago: executing program 3 (id=1085): syz_open_procfs$namespace(0x0, 0x0) setuid(0xee01) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{&(0x7f0000000dc0)={0xa, 0x4e22, 0x8, @empty, 0x5}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hopopts_2292={{0x18, 0x29, 0x36, {0xff}}}], 0x18}}], 0x2, 0x40800) 0s ago: executing program 3 (id=1086): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xf0b, 0x8000, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000000}, 0x8080) kernel console output (not intermixed with test programs): c value [ 112.300321][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 112.425060][ T6253] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 112.439456][ T6253] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.625446][ T5787] syz-executor: attempt to access beyond end of device [ 112.625446][ T5787] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.654177][ T5787] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 113.072295][ T6284] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff813579c2 (__mcheck_cpu_init_clear_banks+0x102/0x1e0) [ 113.088093][ T6284] Call Trace: [ 113.091435][ T6284] [ 113.094426][ T6284] mce_cpu_restart+0xce/0x1b0 [ 113.099156][ T6284] ? mce_restart+0x180/0x180 [ 113.103800][ T6284] smp_call_function_many_cond+0xb71/0x1190 [ 113.109841][ T6284] ? _raw_spin_unlock+0x40/0x40 [ 113.114754][ T6284] ? mce_restart+0x180/0x180 [ 113.119404][ T6284] ? smp_call_function_many+0x40/0x40 [ 113.124860][ T6284] ? __timer_delete_sync+0x23d/0x2e0 [ 113.130197][ T6284] ? timer_delete_sync+0x20/0x20 [ 113.135183][ T6284] ? mutex_lock_nested+0x20/0x20 [ 113.140165][ T6284] ? _parse_integer_limit+0x19c/0x1e0 [ 113.145573][ T6284] ? mce_restart+0x180/0x180 [ 113.150202][ T6284] on_each_cpu_cond_mask+0x3f/0x80 [ 113.155349][ T6284] mce_restart+0x104/0x180 [ 113.159793][ T6284] set_bank+0x27f/0x390 [ 113.163994][ T6284] ? show_bank+0x2a0/0x2a0 [ 113.168460][ T6284] ? sysfs_kf_write+0x187/0x2a0 [ 113.173365][ T6284] ? sysfs_kf_read+0x360/0x360 [ 113.178157][ T6284] kernfs_fop_write_iter+0x3a4/0x520 [ 113.183476][ T6284] vfs_write+0x474/0x9a0 [ 113.187765][ T6284] ? file_end_write+0x250/0x250 [ 113.192683][ T6284] ? __fget_files+0x3fc/0x460 [ 113.197424][ T6284] ? __fdget_pos+0x2a3/0x330 [ 113.202061][ T6284] ? ksys_write+0x74/0x260 [ 113.206529][ T6284] ksys_write+0x151/0x260 [ 113.210899][ T6284] ? __ia32_sys_read+0x90/0x90 [ 113.215703][ T6284] ? lockdep_hardirqs_on+0x98/0x150 [ 113.220944][ T6284] do_syscall_64+0x55/0xb0 [ 113.225416][ T6284] ? clear_bhb_loop+0x40/0x90 [ 113.230138][ T6284] ? clear_bhb_loop+0x40/0x90 [ 113.234852][ T6284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.240884][ T6284] RIP: 0033:0x7fd20b59e559 [ 113.245346][ T6284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.265074][ T6284] RSP: 002b:00007fd2097f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.273526][ T6284] RAX: ffffffffffffffda RBX: 00007fd20b825fa0 RCX: 00007fd20b59e559 [ 113.281531][ T6284] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 113.289533][ T6284] RBP: 00007fd20b6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 113.297557][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.305549][ T6284] R13: 00007fd20b826038 R14: 00007fd20b825fa0 R15: 00007fffc0387cb8 [ 113.313582][ T6284] [ 113.316902][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.381963][ T6275] loop3: detected capacity change from 0 to 32768 [ 114.023092][ T6301] bonding: no command found in bonding_masters - use +ifname or -ifname [ 114.113971][ T27] audit: type=1400 audit(1792156272.542:4): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6304 comm="syz.2.172" name="//o" offset=66 [ 114.318280][ T6310] input: syz1 as /devices/virtual/input/input8 [ 114.563661][ T6321] loop7: detected capacity change from 0 to 7 [ 114.587662][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.597187][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.613912][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.623249][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.632870][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.642151][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.658557][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 114.668175][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.677594][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.690807][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.700095][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.710631][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.719871][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.729530][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.738759][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.748512][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.757874][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.766351][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.775618][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.784249][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.792213][ T6321] ldm_validate_partition_table(): Disk read failed. [ 114.817124][ T6321] Dev loop7: unable to read RDB block 0 [ 114.850175][ T6321] loop7: unable to read partition table [ 114.856169][ T6321] loop7: partition table beyond EOD, truncated [ 114.870274][ T6327] loop3: detected capacity change from 0 to 1024 [ 114.897780][ T6321] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`4FLQk݊5) failed (rc=-5) [ 115.052230][ T6332] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 115.232760][ T6337] macvlan0: entered promiscuous mode [ 115.241939][ T6337] netlink: 'syz.1.187': attribute type 2 has an invalid length. [ 115.293856][ T6339] netlink: 'syz.0.185': attribute type 3 has an invalid length. [ 115.351019][ T6341] Bluetooth: MGMT ver 1.22 [ 115.435164][ T6345] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 115.514323][ T6349] loop3: detected capacity change from 0 to 256 [ 115.689067][ T6356] loop1: detected capacity change from 0 to 1024 [ 115.710425][ T6356] EXT4-fs: Ignoring removed nobh option [ 115.735928][ T6356] EXT4-fs: Ignoring removed bh option [ 115.766678][ T6356] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 115.844143][ T6356] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 115.853444][ T6356] System zones: 0-1, 3-12 [ 115.882694][ T6356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.964493][ T6356] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #12: block 7: comm syz.1.195: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 116.020487][ T6356] EXT4-fs (loop1): Remounting filesystem read-only [ 116.102884][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.140569][ T6371] Line length is too long: Should be less than 4094 [ 116.175442][ T6373] loop0: detected capacity change from 0 to 512 [ 116.223255][ T6373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.295294][ T6373] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.202: invalid indirect mapped block 32768 (level 2) [ 116.337515][ T6373] EXT4-fs (loop0): Remounting filesystem read-only [ 116.354001][ T6373] EXT4-fs (loop0): 1 orphan inode deleted [ 116.365027][ T6373] EXT4-fs (loop0): 1 truncate cleaned up [ 116.374345][ T6373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.475836][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.486391][ T6384] loop1: detected capacity change from 0 to 512 [ 116.618751][ T6384] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 116.627160][ T6384] System zones: 0-2, 18-18, 34-35 [ 116.635914][ T6384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.651144][ T6384] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.662003][ T5849] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.763511][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.869972][ T5849] usb 3-1: Using ep0 maxpacket: 8 [ 116.894007][ T5849] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 116.919903][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.955536][ T5849] pvrusb2: Hardware description: Terratec Grabster AV400 [ 116.984172][ T5849] pvrusb2: ********** [ 116.988236][ T5849] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 117.003754][ T5849] pvrusb2: Important functionality might not be entirely working. [ 117.011842][ T5849] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 117.032898][ T6401] loop3: detected capacity change from 0 to 256 [ 117.049549][ T5849] pvrusb2: ********** [ 117.181959][ T2323] pvrusb2: Invalid write control endpoint [ 117.252941][ T6403] loop1: detected capacity change from 0 to 128 [ 117.287682][ T2323] pvrusb2: Invalid write control endpoint [ 117.307200][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 117.345625][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 117.377568][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 117.409315][ T2323] pvrusb2: Device being rendered inoperable [ 117.432277][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 117.440939][ T5778] usb 3-1: USB disconnect, device number 5 [ 117.469552][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 117.505865][ T2323] pvrusb2: Attached sub-driver cx25840 [ 117.512326][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 117.522644][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 117.715932][ T6412] loop1: detected capacity change from 0 to 256 [ 117.738361][ T6412] exfat: Deprecated parameter 'namecase' [ 117.786288][ T6411] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.796259][ T6412] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 118.565222][ T3470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.707053][ T3470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.844105][ T3470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.073851][ T3470] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.868872][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.887710][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.903631][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.913738][ T6436] set_capacity_and_notify: 2 callbacks suppressed [ 119.913753][ T6436] loop2: detected capacity change from 0 to 32768 [ 119.942573][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.951629][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 119.959022][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.025285][ T6451] rxe_eth0 speed is unknown, defaulting to 1000 [ 120.118475][ T6436] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 120.198954][ T6460] netlink: 'syz.3.238': attribute type 39 has an invalid length. [ 120.563914][ T6436] syz.2.231 (6436) used greatest stack depth: 18808 bytes left [ 120.694774][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 121.196418][ T6482] loop2: detected capacity change from 0 to 512 [ 121.352205][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 121.858642][ T6498] loop2: detected capacity change from 0 to 4096 [ 122.020420][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.044178][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.059642][ T51] Bluetooth: hci3: command tx timeout [ 122.103727][ T6451] bridge_slave_0: entered allmulticast mode [ 122.163152][ T6451] bridge_slave_0: entered promiscuous mode [ 122.248794][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.276669][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.309707][ T6451] bridge_slave_1: entered allmulticast mode [ 122.356168][ T6451] bridge_slave_1: entered promiscuous mode [ 122.503884][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.528799][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.554478][ T6498] overlayfs: upper fs does not support tmpfile. [ 122.603288][ T6498] overlayfs: workdir/#2 already exists [ 122.646140][ T3470] hsr_slave_0: left promiscuous mode [ 122.729964][ T3470] hsr_slave_1: left promiscuous mode [ 122.751070][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.758706][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.821539][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.829038][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.902423][ T3470] bridge_slave_1: left allmulticast mode [ 122.908147][ T3470] bridge_slave_1: left promiscuous mode [ 122.961533][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.025321][ T3470] bridge_slave_0: left allmulticast mode [ 123.049876][ T3470] bridge_slave_0: left promiscuous mode [ 123.069845][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.169188][ T6521] Illegal XDP return value 4294967294 on prog (id 20) dev N/A, expect packet loss! [ 123.199164][ T3470] veth1_macvtap: left promiscuous mode [ 123.230045][ T3470] veth0_macvtap: left promiscuous mode [ 123.235998][ T3470] veth1_vlan: left promiscuous mode [ 123.257380][ T3470] veth0_vlan: left promiscuous mode [ 123.606796][ T6511] loop3: detected capacity change from 0 to 32768 [ 123.646208][ T6511] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.252 (6511) [ 123.724205][ T6511] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 123.737661][ T6511] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 123.759663][ T6511] BTRFS info (device loop3): setting nodatacow, compression disabled [ 123.770727][ T6511] BTRFS info (device loop3): turning on flush-on-commit [ 123.788264][ T6511] BTRFS info (device loop3): using free space tree [ 123.969072][ T6511] BTRFS info (device loop3): enabling ssd optimizations [ 123.997727][ T6511] BTRFS info (device loop3): auto enabling async discard [ 124.143587][ T51] Bluetooth: hci3: command tx timeout [ 124.162493][ T27] audit: type=1800 audit(1792156282.602:5): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.252" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 124.586413][ T5772] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 125.112048][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 125.188051][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 125.195338][ T6559] loop3: detected capacity change from 0 to 256 [ 125.257333][ T6559] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 125.332060][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.451538][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.550092][ T6564] sd 0:0:1:0: PR command failed: 1026 [ 125.556151][ T6564] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 125.564967][ T6564] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 126.137815][ T3470] bond0 (unregistering): Released all slaves [ 126.233408][ T51] Bluetooth: hci3: command tx timeout [ 126.398697][ T6581] loop2: detected capacity change from 0 to 512 [ 126.433472][ T6574] batadv_slave_1: entered promiscuous mode [ 126.445425][ T6574] macvlan2: entered allmulticast mode [ 126.451542][ T6574] batadv_slave_1: entered allmulticast mode [ 126.462199][ T6574] batman_adv: batadv0: Adding interface: macvlan2 [ 126.468775][ T6574] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.502821][ T6581] FAT-fs (loop2): Directory bread(block 2080) failed [ 126.511149][ T6574] batman_adv: batadv0: Interface activated: macvlan2 [ 126.540217][ T6581] FAT-fs (loop2): Directory bread(block 2081) failed [ 126.547068][ T6581] FAT-fs (loop2): Directory bread(block 2082) failed [ 126.563626][ T6451] team0: Port device team_slave_0 added [ 126.578276][ T6581] FAT-fs (loop2): Directory bread(block 2083) failed [ 126.595169][ T6581] FAT-fs (loop2): Directory bread(block 2084) failed [ 126.602882][ T6451] team0: Port device team_slave_1 added [ 126.623070][ T6584] loop3: detected capacity change from 0 to 256 [ 126.624273][ T6581] FAT-fs (loop2): Directory bread(block 2085) failed [ 126.639042][ T6584] exfat: Deprecated parameter 'utf8' [ 126.658880][ T6581] FAT-fs (loop2): Directory bread(block 2086) failed [ 126.667358][ T6581] FAT-fs (loop2): Directory bread(block 2087) failed [ 126.689713][ T6584] exfat: Deprecated parameter 'namecase' [ 126.695936][ T6584] exfat: Deprecated parameter 'namecase' [ 126.717477][ T6584] exfat: Deprecated parameter 'utf8' [ 126.733679][ T6581] FAT-fs (loop2): Directory bread(block 2080) failed [ 126.742553][ T6581] FAT-fs (loop2): Directory bread(block 2081) failed [ 126.771687][ T6584] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d) [ 126.808425][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.839426][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.938051][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.957353][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.009807][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.089993][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.291549][ T6451] hsr_slave_0: entered promiscuous mode [ 127.326403][ T6451] hsr_slave_1: entered promiscuous mode [ 127.348491][ T6451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.368455][ T6451] Cannot create hsr debugfs directory [ 127.874092][ T6451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.186731][ T6451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.231826][ T6600] loop3: detected capacity change from 0 to 32768 [ 128.309661][ T51] Bluetooth: hci3: command tx timeout [ 128.317527][ T6600] ERROR: (device loop3): diAllocAG: numfree > numinos [ 128.317527][ T6600] [ 128.346648][ T6600] ERROR: (device loop3): remounting filesystem as read-only [ 128.392738][ T6600] ialloc: diAlloc returned -5! [ 128.430703][ T6622] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 128.430703][ T6622] [ 128.489017][ T6451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.534859][ T6451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.805690][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.875494][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.942924][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.950170][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.973610][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.980890][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.284253][ T6621] syz.2.282 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 129.297225][ T6631] loop3: detected capacity change from 0 to 4096 [ 129.374919][ T6638] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.880542][ T6651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'. [ 129.881253][ T6648] use of bytesused == 0 is deprecated and will be removed in the future, [ 129.917665][ T6648] use the actual size instead. [ 129.975931][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.183299][ T6664] TCP: TCP_TX_DELAY enabled [ 130.572988][ T6680] process 'syz.2.297' launched '/dev/fd/4' with NULL argv: empty string added [ 130.865923][ T6451] veth0_vlan: entered promiscuous mode [ 130.920072][ T6451] veth1_vlan: entered promiscuous mode [ 131.012626][ T6451] veth0_macvtap: entered promiscuous mode [ 131.048335][ T6451] veth1_macvtap: entered promiscuous mode [ 131.081694][ T6693] loop8: detected capacity change from 0 to 7 [ 131.123639][ T6693] Dev loop8: unable to read RDB block 7 [ 131.129346][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.141379][ T6693] loop8: unable to read partition table [ 131.147297][ T6693] loop8: partition table beyond EOD, truncated [ 131.169670][ T6693] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 131.173940][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.209470][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.241372][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.241942][ T5139] Dev loop8: unable to read RDB block 7 [ 131.271107][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.295887][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.299624][ T5139] loop8: unable to read partition table [ 131.316459][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.328560][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.346605][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.356947][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.368007][ T5139] loop8: partition table beyond EOD, truncated [ 131.384344][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.425857][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.467187][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.513534][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.557972][ T6451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.594367][ T6451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.616294][ T27] audit: type=1400 audit(1792156290.052:6): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=6701 comm="syz.3.305" [ 131.637850][ T6451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.647423][ T6451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.821968][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.846501][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.904645][ T3947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.923620][ T3947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.458463][ T6727] netlink: 'syz.3.311': attribute type 14 has an invalid length. [ 132.902955][ T6743] input: syz0 as /devices/virtual/input/input10 [ 132.917186][ T6744] loop0: detected capacity change from 0 to 256 [ 133.043970][ T27] audit: type=1800 audit(1792156291.482:7): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.317" name="file1" dev="loop0" ino=1048647 res=0 errno=0 [ 133.046429][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.079584][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.096756][ T6744] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 133.140762][ T6744] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.261958][ T6744] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 134.043275][ T6751] loop4: detected capacity change from 0 to 32768 [ 134.203216][ T27] audit: type=1800 audit(1792156292.642:8): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.319" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 134.343946][ T6754] loop2: detected capacity change from 0 to 32768 [ 134.571594][ T6761] loop0: detected capacity change from 0 to 32768 [ 134.589878][ T6754] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 134.648255][ T6757] loop3: detected capacity change from 0 to 40427 [ 134.673312][ T6761] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.739918][ T6757] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 134.825748][ T6757] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 134.887276][ T6754] XFS (loop2): Ending clean mount [ 134.918417][ T6757] F2FS-fs (loop3): invalid crc value [ 135.132246][ T6761] XFS (loop0): Ending clean mount [ 135.386671][ T6757] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.419613][ T6757] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.522597][ T5774] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 135.558197][ T6761] overlayfs: failed to resolve './file2': -2 [ 135.664272][ T5773] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.918924][ T5772] syz-executor: attempt to access beyond end of device [ 135.918924][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.961476][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 136.447619][ T27] audit: type=1326 audit(1792156294.882:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20b59e559 code=0x7ffc0000 [ 136.513546][ T27] audit: type=1326 audit(1792156294.882:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20b59e559 code=0x7ffc0000 [ 136.602867][ T27] audit: type=1326 audit(1792156294.882:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20b59e559 code=0x7ffc0000 [ 136.680358][ T27] audit: type=1326 audit(1792156294.922:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fd20b59e559 code=0x7ffc0000 [ 136.749340][ T27] audit: type=1326 audit(1792156294.922:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20b59e559 code=0x7ffc0000 [ 136.830797][ T27] audit: type=1326 audit(1792156294.922:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20b59e559 code=0x7ffc0000 [ 136.904874][ T27] audit: type=1326 audit(1792156294.922:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20b59e559 code=0x7ffc0000 [ 136.978745][ T27] audit: type=1326 audit(1792156294.922:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20b59e559 code=0x7ffc0000 [ 137.096674][ T27] audit: type=1326 audit(1792156294.922:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fd20b59e559 code=0x7ffc0000 [ 137.175485][ T27] audit: type=1326 audit(1792156294.992:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20b59e559 code=0x7ffc0000 [ 137.259830][ T27] audit: type=1326 audit(1792156294.992:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd20b59e2c2 code=0x7ffc0000 [ 137.299188][ T6819] loop0: detected capacity change from 0 to 32768 [ 137.349541][ T6819] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.325 (6819) [ 137.361958][ T27] audit: type=1326 audit(1792156294.992:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd20b59e357 code=0x7ffc0000 [ 137.433720][ T27] audit: type=1326 audit(1792156294.992:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.2.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd20b55b251 code=0x7ffc0000 [ 137.494584][ T6819] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.509830][ T6819] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 137.547681][ T6819] BTRFS info (device loop0): setting nodatacow, compression disabled [ 137.557208][ T6819] BTRFS info (device loop0): force clearing of disk cache [ 137.564938][ T6819] BTRFS info (device loop0): enabling ssd optimizations [ 137.572259][ T6819] BTRFS info (device loop0): using spread ssd allocation scheme [ 137.589179][ T6819] BTRFS info (device loop0): turning off barriers [ 137.596359][ T6819] BTRFS info (device loop0): disabling free space tree [ 137.603683][ T6819] BTRFS info (device loop0): not using ssd optimizations [ 137.639475][ T6819] BTRFS info (device loop0): not using spread ssd allocation scheme [ 137.901815][ T6819] BTRFS info (device loop0): rebuilding free space tree [ 138.049078][ T6819] BTRFS info (device loop0): disabling free space tree [ 138.093841][ T6819] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.130380][ T6819] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.288522][ T6833] loop3: detected capacity change from 0 to 32768 [ 138.308819][ T6833] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.327 (6833) [ 138.355592][ T6833] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 138.415079][ T6833] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 138.453871][ T6833] BTRFS info (device loop3): turning on flush-on-commit [ 138.499168][ T6833] BTRFS info (device loop3): using free space tree [ 138.611679][ T3470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.791972][ T6833] BTRFS info (device loop3): enabling ssd optimizations [ 138.794497][ T5773] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.798974][ T6833] BTRFS info (device loop3): auto enabling async discard [ 139.025518][ T3470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.324747][ T3470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.384637][ T5772] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 139.671177][ T3470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.847763][ T6907] capability: warning: `syz.4.346' uses deprecated v2 capabilities in a way that may be insecure [ 140.335309][ T6921] loop4: detected capacity change from 0 to 128 [ 140.370871][ T6921] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.442576][ T6921] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.741740][ T66] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.836094][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.855700][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.870511][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.920205][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.937232][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.949269][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.957796][ T6931] Zero length message leads to an empty skb [ 141.158570][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.355'. [ 141.189783][ T6930] netem: invalid attributes len -5 [ 141.219622][ T6930] netem: change failed [ 141.504284][ T6926] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.019684][ T5786] Bluetooth: hci2: command tx timeout [ 144.695923][ T6926] chnl_net:caif_netlink_parms(): no params data found [ 145.099662][ T5786] Bluetooth: hci2: command tx timeout [ 145.312607][ T7009] rnbd_client L127: Can't parse path i: -93 [ 145.390044][ T3470] hsr_slave_0: left promiscuous mode [ 145.419969][ T5778] kernel write not supported for file /amidi2 (pid: 5778 comm: kworker/1:3) [ 145.479541][ T3470] hsr_slave_1: left promiscuous mode [ 145.519794][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.549519][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.611532][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.618994][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.653221][ T6982] loop4: detected capacity change from 0 to 32768 [ 145.679967][ T3470] bridge_slave_1: left allmulticast mode [ 145.685685][ T3470] bridge_slave_1: left promiscuous mode [ 145.771434][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.825951][ T6982] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 145.825951][ T6982] [ 145.893150][ T3470] bridge_slave_0: left allmulticast mode [ 145.898877][ T3470] bridge_slave_0: left promiscuous mode [ 145.952411][ T6982] ERROR: (device loop4): remounting filesystem as read-only [ 145.998163][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.009817][ T6982] xtLookup: xtSearch returned -5 [ 146.014817][ T6982] free_index: error reading directory table [ 146.069953][ T6982] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 146.069953][ T6982] [ 146.126911][ T6982] xtLookup: xtSearch returned -5 [ 146.176301][ T6982] free_index: error reading directory table [ 146.224070][ T6982] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 146.224070][ T6982] [ 146.321489][ T6982] xtLookup: xtSearch returned -5 [ 146.326514][ T6982] free_index: error reading directory table [ 146.379596][ T6982] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 146.379596][ T6982] [ 146.410510][ T3470] veth1_macvtap: left promiscuous mode [ 146.416120][ T3470] veth0_macvtap: left promiscuous mode [ 146.475130][ T6982] xtLookup: xtSearch returned -5 [ 146.485654][ T3470] veth1_vlan: left promiscuous mode [ 146.504523][ T6982] free_index: error reading directory table [ 146.510701][ T3470] veth0_vlan: left promiscuous mode [ 146.534354][ T6982] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 146.534354][ T6982] [ 146.597981][ T6982] xtLookup: xtSearch returned -5 [ 146.629529][ T6982] free_index: error reading directory table [ 146.666508][ T6982] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 146.666508][ T6982] [ 146.679625][ T6982] xtLookup: xtSearch returned -5 [ 146.688290][ T6982] add_index: get/read_metapage failed! [ 146.719712][ T6982] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 146.719712][ T6982] [ 146.769447][ T6982] xtLookup: xtSearch returned -5 [ 146.774475][ T6982] free_index: error reading directory table [ 146.819434][ T6982] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 146.819434][ T6982] [ 146.886698][ T6982] xtLookup: xtSearch returned -5 [ 146.919426][ T6982] free_index: error reading directory table [ 146.925412][ T6982] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 146.925412][ T6982] [ 146.973737][ T6982] xtLookup: xtSearch returned -5 [ 147.121281][ T6982] free_index: error reading directory table [ 147.179458][ T5786] Bluetooth: hci2: command tx timeout [ 149.047226][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 149.169249][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 149.242841][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.259547][ T5786] Bluetooth: hci2: command tx timeout [ 149.316663][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.078787][ T3470] bond0 (unregistering): Released all slaves [ 150.682852][ T7074] loop0: detected capacity change from 0 to 1024 [ 150.690916][ T7074] EXT4-fs: inline encryption not supported [ 150.696885][ T7074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.729615][ T7074] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.747365][ T7071] loop3: detected capacity change from 0 to 1024 [ 150.858921][ T7074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.930234][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.964058][ T7074] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.011962][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.067134][ T6926] bridge_slave_0: entered allmulticast mode [ 151.113522][ T6926] bridge_slave_0: entered promiscuous mode [ 151.161334][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.219618][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.227017][ T6926] bridge_slave_1: entered allmulticast mode [ 151.251164][ T7082] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.393: Freeing blocks not in datazone - block = 0, count = 16 [ 151.329583][ T6926] bridge_slave_1: entered promiscuous mode [ 151.377025][ T7082] EXT4-fs (loop0): Remounting filesystem read-only [ 151.478547][ T7084] loop4: detected capacity change from 0 to 256 [ 151.598693][ T6926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.654825][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 151.682677][ T6926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.727460][ T7086] loop3: detected capacity change from 0 to 256 [ 151.934716][ T6926] team0: Port device team_slave_0 added [ 151.983506][ T6926] team0: Port device team_slave_1 added [ 152.239589][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.239654][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.239682][ T6926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.243618][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.243636][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.243664][ T6926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.644252][ T6926] hsr_slave_0: entered promiscuous mode [ 152.650022][ T6926] hsr_slave_1: entered promiscuous mode [ 152.650907][ T6926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.650989][ T6926] Cannot create hsr debugfs directory [ 154.279423][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 154.279440][ T27] audit: type=1326 audit(1792156312.712:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.409" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 154.339938][ T7134] loop4: detected capacity change from 0 to 512 [ 154.463215][ T27] audit: type=1326 audit(1792156312.712:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.409" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 154.659488][ T27] audit: type=1326 audit(1792156312.752:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.409" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 154.740175][ T27] audit: type=1326 audit(1792156312.752:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.409" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 154.809430][ T27] audit: type=1326 audit(1792156312.752:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.409" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 154.999794][ T27] audit: type=1326 audit(1792156312.752:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.409" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 155.168546][ T27] audit: type=1326 audit(1792156312.752:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.409" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 155.299902][ T27] audit: type=1326 audit(1792156312.752:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.409" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 155.410116][ T27] audit: type=1326 audit(1792156312.752:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.409" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 155.492747][ T7150] loop3: detected capacity change from 0 to 1024 [ 155.498615][ T6926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.509438][ T27] audit: type=1326 audit(1792156312.752:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.409" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 155.571029][ T7153] loop0: detected capacity change from 0 to 512 [ 155.577406][ T6926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 155.647947][ T7150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 155.686609][ T6926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.726699][ T7153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.759698][ T7150] System zones: 0-1, 3-12 [ 155.768034][ T7150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.804993][ T7153] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.840953][ T6926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.164359][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.241430][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.450463][ T6926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.553916][ T6926] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.663798][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.671077][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.708717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.715989][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.807896][ T7167] loop0: detected capacity change from 0 to 2048 [ 156.993196][ T7167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.202386][ T6926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.491301][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.201007][ T6926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.453267][ T6926] veth0_vlan: entered promiscuous mode [ 158.518796][ T6926] veth1_vlan: entered promiscuous mode [ 158.685515][ T6926] veth0_macvtap: entered promiscuous mode [ 158.723613][ T6926] veth1_macvtap: entered promiscuous mode [ 158.807965][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.889421][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.899324][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.979826][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.008712][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.029694][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.092477][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.140973][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.153938][ T7212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.431'. [ 159.190781][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.215838][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.245046][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.275105][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.295192][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.308824][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.321129][ T7188] loop4: detected capacity change from 0 to 32768 [ 159.376624][ T7188] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.425 (7188) [ 159.394530][ T6926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.431818][ T6926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.469438][ T6926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.494361][ T6926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.504416][ T7188] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.549683][ T7188] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 159.558410][ T7188] BTRFS info (device loop4): using free space tree [ 159.881198][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.923514][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.936818][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.945786][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.199676][ T7188] BTRFS info (device loop4): enabling ssd optimizations [ 160.206700][ T7188] BTRFS info (device loop4): auto enabling async discard [ 160.797033][ T6451] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.916973][ T7246] netlink: 'syz.3.434': attribute type 3 has an invalid length. [ 161.207336][ T7251] option changes via remount are deprecated (pid=7249 comm=syz.2.436) [ 161.289794][ T7251] cgroup: option or name mismatch, new: 0x0 "nofavordynmods", old: 0x0 "" [ 161.369551][ T5783] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (5783) [ 162.176775][ T7270] batman_adv: batadv0: Adding interface: gretap1 [ 162.260706][ T7270] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.419516][ T7270] batman_adv: batadv0: Interface activated: gretap1 [ 163.622689][ T7313] loop2: detected capacity change from 0 to 8 [ 164.041410][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 164.193598][ T7323] ipvlan2: entered allmulticast mode [ 164.198985][ T7323] syz_tun: entered allmulticast mode [ 164.842759][ T7343] i2c i2c-0: delete_device: Can't find device in list [ 164.978070][ T7347] sd 0:0:1:0: PR command failed: 1026 [ 165.004458][ T7347] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 165.051739][ T7347] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 165.301941][ T7358] loop3: detected capacity change from 0 to 16 [ 165.309306][ T7358] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 165.448985][ T7355] loop0: detected capacity change from 0 to 164 [ 166.639126][ T7377] input: syz1 as /devices/virtual/input/input11 [ 168.033040][ T7390] loop4: detected capacity change from 0 to 256 [ 168.107045][ T7390] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.563235][ T7399] netlink: 14 bytes leftover after parsing attributes in process `syz.2.484'. [ 169.376648][ T7418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.491'. [ 170.486818][ T7449] bond0: no command found in slaves file - use +ifname or -ifname [ 170.601983][ T7452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.503'. [ 170.615167][ T7453] loop0: detected capacity change from 0 to 128 [ 171.226624][ T7466] loop2: detected capacity change from 0 to 512 [ 171.329484][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 171.329501][ T27] audit: type=1400 audit(1792156329.732:56): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7467 comm="syz.3.509" [ 171.370420][ T7466] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.701755][ T7466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.783442][ T7466] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.126790][ T6926] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.439853][ T7495] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.844140][ T7509] vivid-000: disconnect [ 172.883429][ T7506] vivid-000: reconnect [ 173.049479][ T5778] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 173.189965][ T789] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 173.211273][ T7518] loop3: detected capacity change from 0 to 1024 [ 173.302621][ T5778] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.352063][ T5778] usb 1-1: not running at top speed; connect to a high speed hub [ 173.409476][ T789] usb 5-1: Using ep0 maxpacket: 8 [ 173.415692][ T5778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.441824][ T789] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.477614][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.500281][ T789] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.517986][ T7518] hfsplus: keylen 65060 too large [ 173.547614][ T7518] hfsplus: xattr searching failed [ 173.554974][ T5778] usb 1-1: string descriptor 0 read error: -22 [ 173.569468][ T789] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.585876][ T5778] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.616613][ T7520] hfsplus: keylen 65060 too large [ 173.626303][ T789] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.642008][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.667840][ T7520] hfsplus: xattr searching failed [ 173.723638][ T789] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.740469][ T5778] usb 1-1: 0:2 : does not exist [ 173.771146][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.090227][ T789] usb 5-1: GET_CAPABILITIES returned 0 [ 174.131137][ T789] usbtmc 5-1:16.0: can't read capabilities [ 174.332668][ T789] usb 5-1: USB disconnect, device number 2 [ 174.396642][ T5778] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 174.440685][ T5778] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 174.457222][ T7533] loop2: detected capacity change from 0 to 512 [ 174.466801][ T5778] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 174.541917][ T7533] EXT4-fs (loop2): orphan cleanup on readonly fs [ 174.582493][ T5778] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 174.606387][ T5778] usb 1-1: USB disconnect, device number 5 [ 174.620755][ T7533] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 174.759404][ T7533] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 174.814554][ T7533] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.529: Failed to acquire dquot type 0 [ 174.869995][ T7533] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 174.929560][ T7533] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 174.965921][ T7533] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.529: Failed to acquire dquot type 0 [ 175.032876][ T7533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.529: bg 0: block 64: padding at end of block bitmap is not set [ 175.136868][ T7533] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 175.164488][ T7533] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 175.232741][ T7533] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 175.289811][ T7533] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.529: Failed to acquire dquot type 0 [ 175.369146][ T7533] EXT4-fs (loop2): 1 orphan inode deleted [ 175.401967][ T7533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.649149][ T6926] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.693572][ T7552] loop4: detected capacity change from 0 to 2048 [ 175.906950][ T7552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.944800][ T5844] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.139805][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 176.176674][ T5844] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 176.200724][ T5844] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.225135][ T5844] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.264525][ T5844] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.318916][ T5844] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.362341][ T6451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.399306][ T5844] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.471264][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.500457][ T7573] phram: illegal start address [ 176.773695][ T5844] usb 1-1: GET_CAPABILITIES returned 0 [ 176.799993][ T5844] usbtmc 1-1:16.0: can't read capabilities [ 177.092551][ T5844] usb 1-1: USB disconnect, device number 6 [ 177.477492][ T7590] sctp: [Deprecated]: syz.4.546 (pid 7590) Use of int in maxseg socket option. [ 177.477492][ T7590] Use struct sctp_assoc_value instead [ 177.653470][ T7594] loop2: detected capacity change from 0 to 1024 [ 178.519160][ T7614] loop4: detected capacity change from 0 to 512 [ 178.600011][ T7614] EXT4-fs (loop4): orphan cleanup on readonly fs [ 178.654043][ T7614] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 178.670047][ T7617] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 178.701447][ T7614] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 178.742165][ T7619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.778712][ T7614] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.553: Failed to acquire dquot type 0 [ 178.882016][ T7614] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 178.920812][ T7614] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 178.999908][ T7614] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.553: Failed to acquire dquot type 0 [ 179.110778][ T7614] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.553: bg 0: block 64: padding at end of block bitmap is not set [ 179.204778][ T7614] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 179.266191][ T7614] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 179.334639][ T7614] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 179.415167][ T7614] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.553: Failed to acquire dquot type 0 [ 179.489890][ T7614] EXT4-fs (loop4): 1 orphan inode deleted [ 179.566481][ T7614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.674599][ T7633] loop2: detected capacity change from 0 to 1024 [ 179.921099][ T6451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.248279][ T7642] loop4: detected capacity change from 0 to 2048 [ 180.394385][ T7642] NILFS (loop4): invalid segment: Magic number mismatch [ 180.441174][ T7642] NILFS (loop4): trying rollback from an earlier position [ 180.491678][ T7642] NILFS (loop4): recovery complete [ 180.519787][ T7650] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.796170][ T7642] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 181.104499][ T7661] netlink: 'syz.2.568': attribute type 12 has an invalid length. [ 181.134097][ T7661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.568'. [ 181.351862][ T7667] ip_tables: iptables: counters copy to user failed while replacing table [ 181.856603][ T7677] loop3: detected capacity change from 0 to 4096 [ 181.902279][ T7677] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 182.069768][ T7677] ntfs: volume version 3.1. [ 182.333388][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 182.401175][ T7692] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 182.408560][ T7692] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 182.449568][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 182.886782][ T27] audit: type=1807 audit(1792156341.322:57): action=appraise func=MODULE_CHECK res=1 [ 182.896612][ T7697] ima: policy update completed [ 182.918923][ T27] audit: type=1802 audit(1792156341.352:58): pid=7697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.4.582" res=1 errno=0 [ 182.942573][ T7703] loop2: detected capacity change from 0 to 512 [ 183.044887][ T7705] loop4: detected capacity change from 0 to 8 [ 183.086983][ T7705] Filesystem uses "unknown" compression. This is not supported [ 183.439807][ T5844] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 183.519302][ T7703] EXT4-fs: Invalid want_extra_isize 206 [ 183.654477][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10 [ 183.690000][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.735083][ T5844] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.779078][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.820322][ T5844] usb 5-1: config 0 descriptor?? [ 184.097201][ T7723] loop0: detected capacity change from 0 to 512 [ 184.149769][ T7723] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 184.261670][ T5844] plantronics 0003:047F:FFFF.0004: unbalanced delimiter at end of report description [ 184.288381][ T7723] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.591: bg 0: block 104: invalid block bitmap [ 184.310326][ T5844] plantronics 0003:047F:FFFF.0004: parse failed [ 184.316736][ T5844] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 184.351924][ T7723] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 184.361959][ T7723] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.591: invalid indirect mapped block 1 (level 1) [ 184.414007][ T7723] EXT4-fs (loop0): 1 truncate cleaned up [ 184.435096][ T7723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.517830][ T5844] usb 5-1: USB disconnect, device number 3 [ 184.630955][ T7723] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 184.702258][ T7723] overlayfs: failed to look up (fi) for ino (-13) [ 184.876187][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.436539][ T7743] hugetlbfs: syz.3.597 (7743): Using mlock ulimits for SHM_HUGETLB is obsolete [ 185.704042][ T7727] loop2: detected capacity change from 0 to 32768 [ 185.790650][ T7757] sock: sock_set_timeout: `syz.3.600' (pid 7757) tries to set negative timeout [ 185.846873][ T7727] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 186.022653][ T7727] XFS (loop2): Ending clean mount [ 186.193493][ T7727] XFS (loop2): User initiated shutdown received. [ 186.232470][ T7727] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 186.249587][ T7727] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 186.590755][ T6926] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 187.277573][ T7784] loop0: detected capacity change from 0 to 128 [ 187.347810][ T7784] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 187.413957][ T7784] hpfs: filesystem error: improperly stopped [ 187.448509][ T7784] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 187.483537][ T7784] hpfs: You really don't want any checks? You are crazy... [ 187.520136][ T7784] hpfs: Code page index out of array [ 187.547593][ T7784] hpfs: code page support is disabled [ 187.576105][ T7784] hpfs: hpfs_map_4sectors(): unaligned read [ 187.624036][ T7784] hpfs: hpfs_map_4sectors(): unaligned read [ 187.644782][ T7784] hpfs: filesystem error: unable to find root dir [ 187.734562][ T7784] hpfs: hpfs_map_sector(): read error [ 187.757807][ T7784] hpfs: hpfs_map_sector(): read error [ 188.024731][ T7793] loop0: detected capacity change from 0 to 64 [ 188.155527][ T7793] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 188.722351][ T7802] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.731853][ T7802] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.741917][ T7802] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.751141][ T7802] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.973418][ T7801] loop3: detected capacity change from 0 to 32768 [ 190.090131][ T7801] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.371615][ T7801] XFS (loop3): Ending clean mount [ 190.447339][ T7801] XFS (loop3): Quotacheck needed: Please wait. [ 190.618671][ T7811] loop4: detected capacity change from 0 to 32768 [ 190.653639][ T7801] XFS (loop3): Quotacheck: Done. [ 190.747026][ T7811] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 190.881715][ T7811] XFS (loop4): Ending clean mount [ 192.073710][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.089479][ T6451] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 193.032941][ T7841] loop0: detected capacity change from 0 to 2048 [ 193.160904][ T7841] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 193.193486][ T7841] loop0: partition table partially beyond EOD, truncated [ 193.213991][ T7845] scsi_dev_info_list_add_str: bad dev info string 'Q' '(null)' '(null)' [ 193.254563][ T7841] loop0: p1 start 3405774849 is beyond EOD, truncated [ 193.272606][ T7847] loop2: detected capacity change from 0 to 512 [ 193.291478][ T7841] loop0: p2 start 53543428 is beyond EOD, truncated [ 193.298161][ T7841] loop0: p3 start 4284289 is beyond EOD, truncated [ 193.323263][ T7847] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.405772][ T7841] loop0: p5 start 3405774849 is beyond EOD, truncated [ 193.425164][ T7847] EXT4-fs (loop2): 1 truncate cleaned up [ 193.464991][ T7847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.478563][ T7841] loop0: p6 start 53543428 is beyond EOD, truncated [ 193.519449][ T5778] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 193.711949][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 193.723708][ T5778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 193.753611][ T6926] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.775954][ T5778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9056, setting to 1024 [ 193.840125][ T5778] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 193.902489][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.957244][ T5778] usb 1-1: config 0 descriptor?? [ 193.992193][ T5778] hub 1-1:0.0: USB hub found [ 194.233382][ T5778] hub 1-1:0.0: 26 ports detected [ 194.258038][ T5778] hub 1-1:0.0: insufficient power available to use all downstream ports [ 194.441256][ T5778] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 194.466131][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.479812][ T5778] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 194.517763][ T5778] usbhid 1-1:0.0: can't add hid device: -71 [ 194.536452][ T5778] usbhid: probe of 1-1:0.0 failed with error -71 [ 194.616735][ T5778] usb 1-1: USB disconnect, device number 7 [ 195.307607][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.505155][ T7879] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 195.571121][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.735565][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.930024][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.112075][ T7889] loop2: detected capacity change from 0 to 512 [ 196.359708][ T7386] blk_print_req_error: 11 callbacks suppressed [ 196.359727][ T7386] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 197.252947][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.277049][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.289538][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.301906][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.311859][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 197.320397][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.718842][ T7906] rxe_eth0 speed is unknown, defaulting to 1000 [ 198.175209][ T7897] loop2: detected capacity change from 0 to 32768 [ 198.239589][ T7897] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.651 (7897) [ 198.361212][ T7897] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 198.422731][ T7897] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 198.489568][ T7897] BTRFS info (device loop2): using free space tree [ 198.839089][ T7897] BTRFS info (device loop2): enabling ssd optimizations [ 198.887474][ T7897] BTRFS info (device loop2): auto enabling async discard [ 199.349834][ T51] Bluetooth: hci0: command tx timeout [ 199.545831][ T6926] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 199.953655][ T5783] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.005316][ T7969] loop2: detected capacity change from 0 to 128 [ 201.139761][ T7969] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 201.219950][ T7969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.419761][ T51] Bluetooth: hci0: command tx timeout [ 201.430922][ T7906] chnl_net:caif_netlink_parms(): no params data found [ 201.749484][ T66] hsr_slave_0: left promiscuous mode [ 201.769103][ T66] hsr_slave_1: left promiscuous mode [ 201.773178][ T7976] loop4: detected capacity change from 0 to 32768 [ 201.824386][ T7976] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 201.833467][ T7976] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 201.848271][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.887358][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.999267][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.034713][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.080906][ T66] bridge_slave_1: left allmulticast mode [ 202.122815][ T66] bridge_slave_1: left promiscuous mode [ 202.128669][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.150014][ T7976] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 202.175822][ T172] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 202.220629][ T66] bridge_slave_0: left allmulticast mode [ 202.226360][ T66] bridge_slave_0: left promiscuous mode [ 202.279599][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.389382][ T172] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 202.588294][ T66] veth1_macvtap: left promiscuous mode [ 202.617192][ T66] veth0_macvtap: left promiscuous mode [ 202.645937][ T66] veth1_vlan: left promiscuous mode [ 202.669519][ T66] veth0_vlan: left promiscuous mode [ 202.960772][ T172] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 571ms [ 202.992512][ T172] gfs2: fsid=syz:syz.0: jid=0: Done [ 203.001552][ T7976] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 203.047256][ T7994] loop2: detected capacity change from 0 to 2048 [ 203.204670][ T7994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.309588][ T7994] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.502707][ T51] Bluetooth: hci0: command tx timeout [ 203.658668][ T6926] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.880214][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 205.072716][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 205.221338][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.316131][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 205.439420][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.460624][ T9] usb 1-1: config 0 descriptor?? [ 205.604955][ T51] Bluetooth: hci0: command tx timeout [ 205.714202][ T66] team0 (unregistering): Port device team_slave_1 removed [ 205.757029][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 205.843503][ T66] team0 (unregistering): Port device team_slave_0 removed [ 205.944954][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.979889][ T789] usb 1-1: USB disconnect, device number 8 [ 206.102521][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.833830][ T66] bond0 (unregistering): Released all slaves [ 207.049870][ T8024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.681'. [ 207.088318][ T8024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.681'. [ 207.406566][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.443614][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.493124][ T7906] bridge_slave_0: entered allmulticast mode [ 207.539571][ T7906] bridge_slave_0: entered promiscuous mode [ 207.601915][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.609155][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.684464][ T7906] bridge_slave_1: entered allmulticast mode [ 207.730885][ T7906] bridge_slave_1: entered promiscuous mode [ 207.825734][ T7906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.863886][ T7906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.183405][ T7906] team0: Port device team_slave_0 added [ 208.218155][ T7906] team0: Port device team_slave_1 added [ 208.382862][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.393997][ T8052] loop0: detected capacity change from 0 to 1024 [ 208.407967][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.539469][ T7906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.582088][ T8052] hfsplus: invalid length 1280 has been corrected to 255 [ 208.610458][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.658601][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.852313][ T7906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.005093][ T8059] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6451] was attempted by ""[8059] [ 209.104213][ T7906] hsr_slave_0: entered promiscuous mode [ 209.133732][ T7906] hsr_slave_1: entered promiscuous mode [ 210.092852][ T8078] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 211.077931][ T8099] gretap0: entered promiscuous mode [ 211.561812][ T8111] netlink: 'syz.0.714': attribute type 10 has an invalid length. [ 211.571780][ T8112] loop4: detected capacity change from 0 to 16 [ 211.604728][ T8112] erofs: (device loop4): mounted with root inode @ nid 36. [ 211.607083][ T8111] netlink: 152 bytes leftover after parsing attributes in process `syz.0.714'. [ 212.082087][ T7906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.123738][ T7906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.171142][ T7906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.235496][ T8126] loop4: detected capacity change from 0 to 512 [ 212.267010][ T7906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.304788][ T8126] EXT4-fs: Ignoring removed oldalloc option [ 212.409503][ T8126] EXT4-fs (loop4): Test dummy encryption mode enabled [ 212.638680][ T8126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.878177][ T7906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.927402][ T8141] loop0: detected capacity change from 0 to 2048 [ 213.019499][ T8141] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 213.095572][ T7906] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.222639][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.230029][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.335047][ T2108] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.342357][ T2108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.692316][ T7906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.316203][ T8126] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 214.517579][ T8167] loop2: detected capacity change from 0 to 256 [ 214.664604][ T6451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.700023][ T9] IPVS: starting estimator thread 0... [ 214.717668][ T8169] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 214.833962][ T8172] IPVS: using max 15 ests per chain, 36000 per kthread [ 215.115715][ T7906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.372525][ T7906] veth0_vlan: entered promiscuous mode [ 215.412810][ T7906] veth1_vlan: entered promiscuous mode [ 215.511625][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.533756][ T7906] veth0_macvtap: entered promiscuous mode [ 215.594870][ T7906] veth1_macvtap: entered promiscuous mode [ 215.704263][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.749597][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 215.768632][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.788605][ T23] usb 3-1: config 139 has an invalid interface number: 104 but max is 0 [ 215.819527][ T23] usb 3-1: config 139 has no interface number 0 [ 215.825927][ T23] usb 3-1: config 139 interface 104 has no altsetting 0 [ 215.834822][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.859572][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.878496][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=82.25 [ 215.898111][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.919480][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.939883][ T23] usb 3-1: Product: syz [ 215.944461][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.975638][ T23] usb 3-1: Manufacturer: syz [ 215.997814][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.032876][ T23] usb 3-1: SerialNumber: syz [ 216.154676][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.227124][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.329410][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.450398][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.509402][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.562962][ T23] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 216.594545][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.641583][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.744087][ T7906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.804846][ T7906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.849505][ T7906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.871499][ T7906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.972145][ T23] gspca_sn9c20x: Write register 1001 failed -71 [ 216.993222][ T23] gspca_sn9c20x: Device initialization failed [ 217.026721][ T23] gspca_sn9c20x: probe of 3-1:139.104 failed with error -71 [ 217.138113][ T23] usb 3-1: USB disconnect, device number 6 [ 217.298825][ T8203] loop4: detected capacity change from 0 to 4096 [ 217.400836][ T8203] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 217.496862][ T2108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.525758][ T2108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.689664][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.698004][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.796377][ T8203] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 218.526760][ T8227] loop3: detected capacity change from 0 to 512 [ 218.551800][ T8229] warning: `syz.4.742' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 218.678473][ T8227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.800352][ T8227] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.931690][ T8241] netem: change failed [ 219.000688][ T8227] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 3: comm syz.3.744: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 219.192010][ T7906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.596493][ T8254] loop3: detected capacity change from 0 to 256 [ 221.316900][ T8285] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 221.521759][ T8292] loop3: detected capacity change from 0 to 512 [ 221.569832][ T8292] EXT4-fs (loop3): Test dummy encryption mode enabled [ 221.691605][ T8292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.147739][ T8304] rnbd_client L213: map_device: Parameters missing [ 222.187387][ T7906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.201094][ T8306] netlink: 48 bytes leftover after parsing attributes in process `syz.2.767'. [ 223.122511][ T51] block nbd0: Receive control failed (result -32) [ 223.862670][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 223.995955][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.786'. [ 224.008030][ T8361] netlink: 'syz.2.786': attribute type 2 has an invalid length. [ 224.017484][ T8361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.786'. [ 224.071091][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 224.094984][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.126456][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.167058][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.230912][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 224.283853][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.341873][ T23] usb 1-1: config 0 descriptor?? [ 224.383199][ T8363] loop3: detected capacity change from 0 to 4096 [ 224.458012][ T8368] msr: Write to unrecognized MSR 0x0 by syz.2.788 (pid: 8368). [ 224.485365][ T8363] EXT4-fs (loop3): Test dummy encryption mode enabled [ 224.533238][ T8368] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 224.549744][ T8363] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 224.604905][ T8363] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (64851!=55237) [ 224.662151][ T8363] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 224.771233][ T8363] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz.3.787: Invalid inode table block 0 in block_group 0 [ 224.803665][ T23] wacom 0003:056A:010E.0005: unknown main item tag 0x5 [ 224.835487][ T8363] EXT4-fs (loop3): get root inode failed [ 224.839541][ T23] wacom 0003:056A:010E.0005: item fetching failed at offset 23/24 [ 224.858944][ T8370] loop4: detected capacity change from 0 to 4096 [ 224.866836][ T23] wacom 0003:056A:010E.0005: parse failed [ 224.874131][ T23] wacom: probe of 0003:056A:010E.0005 failed with error -22 [ 224.891249][ T8370] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 224.936431][ T8363] EXT4-fs (loop3): mount failed [ 225.185715][ T23] usb 1-1: USB disconnect, device number 9 [ 226.452879][ T27] audit: type=1326 audit(1792156384.882:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 226.530960][ T8407] loop3: detected capacity change from 0 to 8 [ 226.556223][ T27] audit: type=1326 audit(1792156384.882:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 226.690480][ T27] audit: type=1326 audit(1792156384.982:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 226.771505][ T27] audit: type=1326 audit(1792156384.982:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.797" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcffcb9e559 code=0x7ffc0000 [ 227.045283][ T8414] netlink: 'syz.2.802': attribute type 2 has an invalid length. [ 227.076124][ T8411] CacheFiles: Failed to register: -95 [ 227.429033][ T27] audit: type=1326 audit(1792156385.862:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f915979e559 code=0x0 [ 227.530070][ T8425] input: syz1 as /devices/virtual/input/input12 [ 228.534916][ T8447] loop4: detected capacity change from 0 to 128 [ 228.570506][ T8447] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.588192][ T8447] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.651146][ T6451] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.759539][ T5852] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 228.878222][ T8452] loop4: detected capacity change from 0 to 256 [ 228.979500][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 228.998102][ T5852] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.026826][ T8452] FAT-fs (loop4): Directory bread(block 64) failed [ 229.033683][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.055516][ T8452] FAT-fs (loop4): Directory bread(block 65) failed [ 229.081549][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.094221][ T8452] FAT-fs (loop4): Directory bread(block 66) failed [ 229.120185][ T8452] FAT-fs (loop4): Directory bread(block 67) failed [ 229.137102][ T5852] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 229.162179][ T8452] FAT-fs (loop4): Directory bread(block 68) failed [ 229.196403][ T5852] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.219677][ T8452] FAT-fs (loop4): Directory bread(block 69) failed [ 229.255468][ T5852] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.259889][ T8452] FAT-fs (loop4): Directory bread(block 70) failed [ 229.269454][ T5852] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.309398][ T8452] FAT-fs (loop4): Directory bread(block 71) failed [ 229.309616][ T5852] usb 4-1: Manufacturer: syz [ 229.318371][ T8452] FAT-fs (loop4): Directory bread(block 72) failed [ 229.346633][ T5852] usb 4-1: config 0 descriptor?? [ 229.359409][ T8452] FAT-fs (loop4): Directory bread(block 73) failed [ 229.810499][ T8451] syz.4.819: attempt to access beyond end of device [ 229.810499][ T8451] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 229.844716][ T5852] rc_core: IR keymap rc-hauppauge not found [ 229.856208][ T5852] Registered IR keymap rc-empty [ 229.873920][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 229.917357][ T8443] loop2: detected capacity change from 0 to 32768 [ 229.937995][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 229.999181][ T5852] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 230.040993][ T8443] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.073094][ T5852] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 230.159774][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.282070][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.362117][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.456642][ T8443] XFS (loop2): Ending clean mount [ 230.463522][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.540056][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.609794][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.669472][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.719672][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.769671][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.831437][ T5852] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.877871][ T6926] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.890404][ T5852] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 230.920697][ T5852] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 230.973382][ T5852] usb 4-1: USB disconnect, device number 4 [ 231.801746][ T8491] loop3: detected capacity change from 0 to 128 [ 231.892105][ T8491] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.959895][ T8491] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.328664][ T8480] loop0: detected capacity change from 0 to 32768 [ 232.399075][ T7906] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.520746][ T8480] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 232.761670][ T8480] XFS (loop0): Ending clean mount [ 233.148390][ T5773] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 234.021846][ T8527] loop3: detected capacity change from 0 to 1024 [ 234.480720][ T5851] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 234.689455][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 234.713525][ T5851] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 234.769450][ T5851] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 234.808165][ T5852] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 234.821087][ T5851] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.862005][ T5851] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.862068][ T5851] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.862096][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.037343][ T5852] usb 1-1: not running at top speed; connect to a high speed hub [ 235.038959][ T5852] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 235.042705][ T5852] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 235.042776][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.042801][ T5852] usb 1-1: Product: syz [ 235.042818][ T5852] usb 1-1: Manufacturer: syz [ 235.042835][ T5852] usb 1-1: SerialNumber: syz [ 235.052023][ T5852] oti6858 1-1:1.0: oti6858 converter detected [ 235.100247][ T5852] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 235.118858][ T5851] usb 3-1: GET_CAPABILITIES returned 0 [ 235.118909][ T5851] usbtmc 3-1:16.0: can't read capabilities [ 235.394803][ T8533] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32 [ 235.397621][ T5851] usb 3-1: USB disconnect, device number 7 [ 235.616092][ T5844] usb 1-1: USB disconnect, device number 10 [ 235.668186][ T5844] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 235.697949][ T5844] oti6858 1-1:1.0: device disconnected [ 236.050909][ T8555] loop3: detected capacity change from 0 to 1024 [ 236.749183][ T8571] loop3: detected capacity change from 0 to 256 [ 236.780644][ T8571] exfat: Deprecated parameter 'namecase' [ 236.786392][ T8571] exfat: Deprecated parameter 'namecase' [ 236.883246][ T8571] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 236.910704][ T8573] netlink: 'syz.4.865': attribute type 5 has an invalid length. [ 237.212581][ T8583] loop0: detected capacity change from 0 to 64 [ 237.703441][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 237.899814][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.489488][ T5852] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 238.683809][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 238.694759][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.725569][ T5852] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 238.747238][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.761897][ T8580] loop4: detected capacity change from 0 to 32768 [ 238.806744][ T5852] usb 4-1: config 0 descriptor?? [ 238.984925][ T8580] UFO tlock:0xffffc9000289a168 [ 239.009880][ T8604] MetaData crosses page boundary!! [ 239.101899][ T8604] lblock = 610061, size = 269537280 [ 239.129650][ T5852] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 239.151573][ T8604] CPU: 1 PID: 8604 Comm: syz.4.868 Not tainted syzkaller #0 [ 239.159224][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 239.169425][ T8604] Call Trace: [ 239.172757][ T8604] [ 239.175744][ T8604] dump_stack_lvl+0x18c/0x250 [ 239.180572][ T8604] ? show_regs_print_info+0x20/0x20 [ 239.185836][ T8604] ? load_image+0x420/0x420 [ 239.190430][ T8604] ? folio_unlock+0x118/0x2f0 [ 239.195176][ T8604] __get_metapage+0xaac/0xfa0 [ 239.199956][ T8604] dtSearch+0x58d/0x21a0 [ 239.204283][ T8604] ? rcu_is_watching+0x15/0xb0 [ 239.209126][ T8604] jfs_lookup+0x1b1/0x420 [ 239.213513][ T8604] ? jfs_get_parent+0xb0/0xb0 [ 239.218260][ T8604] ? __lock_acquire+0x7eb0/0x7eb0 [ 239.223370][ T8604] ? __rwlock_init+0x150/0x150 [ 239.228200][ T8604] ? d_set_d_op+0x25f/0x370 [ 239.232752][ T8604] ? do_raw_spin_unlock+0x121/0x230 [ 239.238010][ T8604] ? _raw_spin_unlock+0x28/0x40 [ 239.242918][ T8604] ? d_alloc+0x1eb/0x250 [ 239.247215][ T8604] lookup_one_qstr_excl+0x112/0x250 [ 239.252485][ T8604] filename_create+0x246/0x450 [ 239.257303][ T8604] ? kern_path_create+0x50/0x50 [ 239.262199][ T8604] ? __virt_addr_valid+0x10c/0x380 [ 239.267359][ T8604] ? __virt_addr_valid+0x10c/0x380 [ 239.272536][ T8604] do_mkdirat+0xa9/0x450 [ 239.276828][ T8604] ? vfs_mkdir+0x470/0x470 [ 239.281298][ T8604] ? getname_flags+0x20a/0x500 [ 239.286111][ T8604] __x64_sys_mkdir+0x6e/0x80 [ 239.290752][ T8604] do_syscall_64+0x55/0xb0 [ 239.295222][ T8604] ? clear_bhb_loop+0x40/0x90 [ 239.299936][ T8604] ? clear_bhb_loop+0x40/0x90 [ 239.304671][ T8604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.310653][ T8604] RIP: 0033:0x7f590579e559 [ 239.315113][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.334772][ T8604] RSP: 002b:00007f590663e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 239.343246][ T8604] RAX: ffffffffffffffda RBX: 00007f5905a26090 RCX: 00007f590579e559 [ 239.351263][ T8604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 239.359304][ T8604] RBP: 00007f59058358b0 R08: 0000000000000000 R09: 0000000000000000 [ 239.367315][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.375335][ T8604] R13: 00007f5905a26128 R14: 00007f5905a26090 R15: 00007fffd806afb8 [ 239.383386][ T8604] [ 239.386459][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.398408][ T8606] loop0: detected capacity change from 0 to 1024 [ 239.559444][ T8604] bread failed! [ 239.563217][ T8604] jfs_lookup: dtSearch returned -5 [ 239.758687][ T5852] usb 4-1: USB disconnect, device number 5 [ 240.279879][ T8613] netlink: 84 bytes leftover after parsing attributes in process `syz.2.883'. [ 240.685111][ T8625] loop4: detected capacity change from 0 to 512 [ 240.733531][ T8625] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 240.976323][ T8625] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 241.004761][ T8625] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 241.306968][ T27] audit: type=1400 audit(1792156399.742:64): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=8634 comm="syz.0.893" name="foo" offset=35 [ 241.446435][ T8640] loop2: detected capacity change from 0 to 1024 [ 241.517800][ T8640] hfsplus: bad catalog entry used to create inode [ 241.558081][ T8640] hfsplus: failed to load root directory [ 241.895807][ T8652] loop0: detected capacity change from 0 to 512 [ 241.948309][ T8652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 241.999594][ T8652] System zones: 1-12 [ 242.125038][ T8652] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.900: error while reading EA inode 32 err=-116 [ 242.182675][ T8652] EXT4-fs (loop0): Remounting filesystem read-only [ 242.223704][ T8652] EXT4-fs (loop0): 1 orphan inode deleted [ 242.252641][ T8652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.527006][ T8664] pimreg: entered allmulticast mode [ 242.544914][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.620293][ T8665] pimreg: left allmulticast mode [ 242.636744][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 242.928825][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 242.955560][ T8674] gretap0: entered promiscuous mode [ 242.965923][ T8674] macvlan2: entered allmulticast mode [ 242.976063][ T8674] gretap0: entered allmulticast mode [ 243.503723][ T8678] loop0: detected capacity change from 0 to 8192 [ 243.570374][ T5844] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 243.601854][ T8678] Dev loop0: RDB in block 1 has bad checksum [ 243.693883][ T8685] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 243.790569][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.833718][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.894473][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.962146][ T5844] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 244.020007][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.080771][ T5844] usb 4-1: config 0 descriptor?? [ 244.550732][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.581720][ T8676] loop2: detected capacity change from 0 to 32768 [ 244.594571][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.632591][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.664447][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.681541][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.717239][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.728342][ T8676] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 244.774288][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.810035][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.844624][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.879991][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.887082][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.907340][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.921734][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.938930][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.951132][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.967533][ T8676] XFS (loop2): Ending clean mount [ 244.973891][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 244.985497][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 245.000647][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 245.013294][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 245.048902][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 245.074056][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 245.088555][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 245.112184][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 245.135741][ T6926] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 245.138844][ T5844] apple 0003:05AC:026C.0006: unknown main item tag 0x0 [ 245.169656][ T5844] apple 0003:05AC:026C.0006: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.3-1/input0 [ 245.206223][ T5844] usb 4-1: USB disconnect, device number 6 [ 245.500200][ T8709] fido_id[8709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 246.047645][ T8715] loop0: detected capacity change from 0 to 8192 [ 246.153980][ T8715] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 246.205041][ T8715] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 246.216071][ T8715] REISERFS (device loop0): using ordered data mode [ 246.226447][ T8715] reiserfs: using flush barriers [ 246.241804][ T8715] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 246.262087][ T8715] REISERFS (device loop0): checking transaction log (loop0) [ 246.271116][ T8715] REISERFS (device loop0): Using r5 hash to sort names [ 246.278457][ T8715] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 246.298614][ T8715] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 246.498134][ T8715] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 246.604801][ T8731] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 247.578378][ T8743] loop2: detected capacity change from 0 to 4096 [ 247.633408][ T8743] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 247.701241][ T8743] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 247.743116][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 247.839154][ T8743] ntfs3: loop2: Inode r=b is not in use! [ 247.889567][ T8743] ntfs3: loop2: Failed to load $Extend (-116). [ 247.895808][ T8743] ntfs3: loop2: Failed to initialize $Extend. [ 248.890559][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'. [ 249.064710][ T8746] loop4: detected capacity change from 0 to 40427 [ 249.119838][ T8746] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 249.126274][ T8746] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 249.213182][ T8746] F2FS-fs (loop4): invalid crc value [ 249.550468][ T8769] loop0: detected capacity change from 0 to 4096 [ 249.607633][ T8769] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 249.710524][ T8746] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 249.718283][ T8769] ntfs3: loop0: ino=19, mi_enum_attr [ 249.757623][ T8746] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 249.859617][ T8769] ntfs3: loop0: failed to convert "c46c" to cp850 [ 249.910988][ T8769] ntfs3: loop0: ino=20, mi_enum_attr [ 250.236938][ T6451] syz-executor: attempt to access beyond end of device [ 250.236938][ T6451] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.324891][ T6451] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 251.465760][ T8801] loop2: detected capacity change from 0 to 512 [ 251.569759][ T8801] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.959: iget: bad i_size value: 38620345925642 [ 251.594202][ T8788] loop0: detected capacity change from 0 to 32768 [ 251.602720][ T8788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.954 (8788) [ 251.660221][ T8801] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.959: couldn't read orphan inode 15 (err -117) [ 251.713013][ T8788] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 251.741413][ T8801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.768556][ T8788] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 251.829502][ T8803] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 251.844102][ T8788] BTRFS info (device loop0): setting nodatacow, compression disabled [ 251.917886][ T8788] BTRFS info (device loop0): disabling tree log [ 251.954354][ T8788] BTRFS info (device loop0): turning on async discard [ 251.976029][ T8788] BTRFS info (device loop0): max_inline at 0 [ 252.019425][ T8788] BTRFS info (device loop0): using free space tree [ 252.071903][ T3470] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 252.102935][ T3470] EXT4-fs (loop2): This should not happen!! Data will be lost [ 252.102935][ T3470] [ 252.117956][ T3470] EXT4-fs (loop2): Total free blocks count 0 [ 252.126969][ T3470] EXT4-fs (loop2): Free/Dirty block details [ 252.136550][ T3470] EXT4-fs (loop2): free_blocks=0 [ 252.142034][ T3470] EXT4-fs (loop2): dirty_blocks=1 [ 252.147258][ T3470] EXT4-fs (loop2): Block reservation details [ 252.153724][ T3470] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 252.195035][ T8816] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 252.223646][ T6926] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.777689][ T8788] BTRFS info (device loop0): scrub: started on devid 1 [ 252.829808][ T8788] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 252.889816][ T5851] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 253.085067][ T5851] usb 4-1: Using ep0 maxpacket: 8 [ 253.112268][ T5851] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 253.129401][ T5851] usb 4-1: config 179 has no interface number 0 [ 253.146006][ T5851] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 253.191624][ T5851] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 253.231646][ T5851] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 253.282127][ T5851] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 253.323344][ T5851] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 253.380544][ T5851] usb 4-1: config 179 interface 65 has no altsetting 0 [ 253.409185][ T5851] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 253.419834][ T8843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 253.485117][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.546361][ T5851] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 253.781017][ T23] usb 4-1: USB disconnect, device number 7 [ 253.786988][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 253.858298][ T23] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 253.871948][ T5773] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.280680][ T8853] mmap: syz.2.974 (8853): VmData 37523456 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 255.148785][ T8872] loop3: detected capacity change from 0 to 1024 [ 255.328101][ T8872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 255.340955][ T8872] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.365648][ T8872] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.981: bg 0: block 112: padding at end of block bitmap is not set [ 255.387103][ T8872] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 255.428446][ T8872] EXT4-fs (loop3): This should not happen!! Data will be lost [ 255.428446][ T8872] [ 255.463994][ T8872] EXT4-fs (loop3): Total free blocks count 0 [ 255.490872][ T8872] EXT4-fs (loop3): Free/Dirty block details [ 255.507713][ T8872] EXT4-fs (loop3): free_blocks=0 [ 255.541631][ T8872] EXT4-fs (loop3): dirty_blocks=16 [ 255.554308][ T8872] EXT4-fs (loop3): Block reservation details [ 255.589518][ T8872] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 255.726445][ T7906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 255.909068][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.370627][ T8894] loop0: detected capacity change from 0 to 2048 [ 256.435885][ T8894] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.566577][ T8919] loop4: detected capacity change from 0 to 512 [ 257.762571][ T8919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.799594][ T8919] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.891947][ T8891] loop2: detected capacity change from 0 to 40427 [ 257.952847][ T8891] F2FS-fs (loop2): invalid crc value [ 257.984488][ T8891] F2FS-fs (loop2): Found nat_bits in checkpoint [ 258.065728][ T6451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.244772][ T8891] F2FS-fs (loop2): Start checkpoint disabled! [ 258.319745][ T8891] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 258.872170][ T12] kworker/u4:1: attempt to access beyond end of device [ 258.872170][ T12] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 258.912577][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 258.939508][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 259.138554][ T8944] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 259.188364][ T8946] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.638592][ T5851] kernel write not supported for file /snd/seq (pid: 5851 comm: kworker/1:5) [ 261.066000][ T23] IPVS: starting estimator thread 0... [ 261.189598][ T8971] IPVS: using max 16 ests per chain, 38400 per kthread [ 261.218059][ T8955] loop3: detected capacity change from 0 to 32768 [ 261.259518][ T8955] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1018 (8955) [ 261.326323][ T8955] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 261.375068][ T8955] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 261.409276][ T8955] BTRFS info (device loop3): using free space tree [ 261.629979][ T8955] BTRFS info (device loop3): enabling ssd optimizations [ 261.676543][ T8955] BTRFS info (device loop3): auto enabling async discard [ 261.878873][ T27] audit: type=1807 audit(1792156420.312:65): UNKNOWN=? res=0 [ 261.881606][ T8993] ima: policy update failed [ 261.921682][ T27] audit: type=1802 audit(1792156420.312:66): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1027" res=0 errno=0 [ 261.966615][ T7906] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 261.999544][ T27] audit: type=1802 audit(1792156420.352:67): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1027" res=0 errno=0 [ 262.170114][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1031'. [ 262.999448][ T5851] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 263.099866][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 263.229547][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 263.254978][ T5851] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.318163][ T5851] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.355707][ T5851] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 263.450429][ T5851] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.457216][ T5851] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 263.524775][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.577062][ T5851] usb 4-1: config 0 descriptor?? [ 264.039245][ T5851] hid (null): report_id 34376 is invalid [ 264.057989][ T9003] loop4: detected capacity change from 0 to 40427 [ 264.070693][ T5851] hid (null): invalid report_size 29285 [ 264.076510][ T5851] hid (null): invalid report_size 29285 [ 264.127124][ T5851] hid (null): report_id 34376 is invalid [ 264.165251][ T5851] hid (null): report_id 0 is invalid [ 264.174272][ T5783] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.196457][ T5851] hid (null): global environment stack underflow [ 264.216762][ T5851] hid (null): unknown global tag 0xc [ 264.247279][ T5851] hid (null): unknown global tag 0xe [ 264.253296][ T5851] hid (null): unknown global tag 0xc [ 264.266739][ T5851] hid (null): unknown global tag 0xc [ 264.305470][ T5851] usb 4-1: USB disconnect, device number 8 [ 264.670926][ T9034] loop2: detected capacity change from 0 to 4096 [ 264.773468][ T9034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.095703][ T9043] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1048'. [ 265.238710][ T6926] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.561631][ T9051] binder: BINDER_SET_CONTEXT_MGR already set [ 265.568372][ T9051] binder: 9049:9051 ioctl 4018620d 200000004a80 returned -16 [ 266.111823][ T9061] loop0: detected capacity change from 0 to 1024 [ 266.737105][ T9050] loop3: detected capacity change from 0 to 32768 [ 266.745078][ T9070] block nbd4: Device being setup by another task [ 266.760065][ T9066] block nbd4: shutting down sockets [ 266.781388][ T9050] (syz.3.1051,9050,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 266.890710][ T9050] (syz.3.1051,9050,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 267.000052][ T9050] JBD2: Ignoring recovery information on journal [ 267.051811][ T9050] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 267.553197][ T7906] ocfs2: Unmounting device (7,3) on (node local) [ 267.667033][ T9089] ubi0: attaching mtd0 [ 267.722624][ T2108] Bluetooth: hci4: Frame reassembly failed (-84) [ 268.309857][ T27] audit: type=1326 audit(1792156426.732:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1066" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915979e559 code=0x7ffc0000 [ 268.369402][ T27] audit: type=1326 audit(1792156426.752:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1066" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915979e559 code=0x7ffc0000 [ 268.459860][ T27] audit: type=1326 audit(1792156426.752:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1066" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915979e559 code=0x7ffc0000 [ 268.523595][ T27] audit: type=1326 audit(1792156426.792:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1066" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f915979e559 code=0x7ffc0000 [ 268.597514][ T27] audit: type=1326 audit(1792156426.792:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1066" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915979e559 code=0x7ffc0000 [ 268.678001][ T27] audit: type=1326 audit(1792156426.792:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1066" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915979e559 code=0x7ffc0000 [ 268.734836][ T27] audit: type=1326 audit(1792156426.792:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1066" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915979e559 code=0x7ffc0000 [ 268.769084][ T27] audit: type=1326 audit(1792156426.792:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1066" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915979e559 code=0x7ffc0000 [ 268.800461][ T27] audit: type=1326 audit(1792156426.802:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1066" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915979e559 code=0x7ffc0000 [ 268.828835][ T27] audit: type=1326 audit(1792156426.802:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.1066" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f915979e559 code=0x7ffc0000 [ 268.859735][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 269.052295][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 269.067451][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.078405][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.093906][ T23] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 269.105400][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.116715][ T23] usb 4-1: Product: syz [ 269.126280][ T23] usb 4-1: Manufacturer: syz [ 269.136241][ T23] usb 4-1: SerialNumber: syz [ 269.169718][ T23] usb 4-1: selecting invalid altsetting 1 [ 269.182507][ T23] usb 4-1: unit 6 not found! [ 269.739516][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 269.880360][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 270.001857][ T23] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 270.092744][ T23] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 270.144037][ T23] usb 4-1: USB disconnect, device number 9 [ 270.244564][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.677645][ T9127] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 270.729772][ T23] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 270.949986][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 270.972547][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.006100][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 271.028708][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 271.046862][ T23] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 271.056895][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.091754][ T23] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 271.112868][ T23] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 271.137762][ T23] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 271.161549][ T23] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 271.211799][ T23] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 271.252625][ T23] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 271.328100][ T23] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 271.675832][ T23] usb 3-1: USB disconnect, device number 8 [ 271.715850][ T23] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 271.778437][ T23] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 271.818759][ T23] keyspan 3-1:1.0: device disconnected [ 317.344440][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.560459][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 378.787950][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 432.539473][ T29] INFO: task kworker/u4:7:2108 blocked for more than 143 seconds. [ 432.547414][ T29] Not tainted syzkaller #0 [ 432.573129][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.585202][ T29] task:kworker/u4:7 state:D stack:21848 pid:2108 ppid:2 flags:0x00004000 [ 432.603180][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 432.615175][ T29] Call Trace: [ 432.618531][ T29] [ 432.629287][ T29] __schedule+0x15ae/0x4660 [ 432.633881][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 432.653512][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 432.666714][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 432.679750][ T29] ? asan.module_dtor+0x20/0x20 [ 432.684696][ T29] ? blk_check_plugged+0x250/0x250 [ 432.701582][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 432.707586][ T29] ? wq_worker_sleeping+0x63/0x240 [ 432.719846][ T29] schedule+0xbd/0x170 [ 432.724004][ T29] io_schedule+0x80/0xd0 [ 432.728299][ T29] bit_wait_io+0x11/0xd0 [ 432.739334][ T29] __wait_on_bit_lock+0xc2/0x560 [ 432.744359][ T29] ? bit_wait+0xd0/0xd0 [ 432.748564][ T29] out_of_line_wait_on_bit_lock+0x13c/0x190 [ 432.755175][ T29] ? bit_wait+0xd0/0xd0 [ 432.762314][ T29] ? __wait_on_bit_lock+0x560/0x560 [ 432.767589][ T29] ? bit_waitqueue+0x30/0x30 [ 432.772660][ T29] do_get_write_access+0x1a9/0xe00 [ 432.777859][ T29] ? jbd2_journal_add_journal_head+0x44b/0x4c0 [ 432.785258][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 432.792301][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 432.798520][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 432.805150][ T29] ? ext4_get_group_desc+0x10e/0x4d0 [ 432.810904][ T29] ext4_mb_mark_diskspace_used+0x27c/0x14b0 [ 432.816887][ T29] ? _raw_read_unlock+0x28/0x40 [ 432.822324][ T29] ? ext4_discard_allocated_blocks+0x620/0x620 [ 432.828556][ T29] ext4_mb_new_blocks+0x105b/0x42f0 [ 432.834171][ T29] ? __es_insert_extent+0x17b0/0x17b0 [ 432.846265][ T29] ? ext4_find_extent+0x1f5/0xcd0 [ 432.851681][ T29] ? ext4_ext_search_right+0x376/0x800 [ 432.857204][ T29] ? __asan_memcpy+0x40/0x70 [ 432.865122][ T29] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 432.871329][ T29] ? ext4_ext_find_goal+0xed/0x1d0 [ 432.876504][ T29] ext4_ext_map_blocks+0x1811/0x68c0 [ 432.882323][ T29] ? __might_sleep+0xe0/0xe0 [ 432.886994][ T29] ? ext4_ext_release+0x10/0x10 [ 432.892327][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 432.897430][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 432.904071][ T29] ext4_map_blocks+0x9db/0x1a90 [ 432.909015][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 432.914805][ T29] ? rcu_is_watching+0x15/0xb0 [ 432.919903][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 432.925608][ T29] ext4_do_writepages+0x1463/0x3990 [ 432.931325][ T29] ? xas_find_marked+0x194/0x1060 [ 432.936458][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 432.944015][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 432.956016][ T29] ? __lock_acquire+0x1431/0x7eb0 [ 432.969342][ T29] ext4_writepages+0x1dd/0x350 [ 432.974182][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 432.979179][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 432.995272][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 433.001114][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 433.006110][ T29] do_writepages+0x351/0x590 [ 433.016167][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 433.022700][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 433.028143][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 433.038400][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 433.043833][ T29] __writeback_single_inode+0x14e/0xee0 [ 433.049861][ T29] writeback_sb_inodes+0x813/0x1020 [ 433.055156][ T29] ? queue_io+0x530/0x530 [ 433.072625][ T29] __writeback_inodes_wb+0x114/0x240 [ 433.078016][ T29] wb_writeback+0x472/0xbe0 [ 433.085345][ T29] ? queue_io+0x2c1/0x530 [ 433.092521][ T29] ? percpu_ref_tryget+0x250/0x250 [ 433.097718][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 433.106774][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 433.114504][ T29] wb_workfn+0xad7/0xe60 [ 433.118832][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 433.127598][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 433.136414][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 433.144347][ T29] ? read_lock_is_recursive+0x20/0x20 [ 433.152453][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.157722][ T29] ? process_scheduled_works+0x975/0x1600 [ 433.166334][ T29] ? process_scheduled_works+0x975/0x1600 [ 433.194741][ T29] process_scheduled_works+0xa60/0x1600 [ 433.200840][ T29] ? worker_attach_to_pool+0x370/0x370 [ 433.206371][ T29] ? assign_work+0x3cc/0x5d0 [ 433.211785][ T29] worker_thread+0xa5e/0xfe0 [ 433.216499][ T29] ? _raw_spin_unlock+0x40/0x40 [ 433.222024][ T29] ? __kthread_parkme+0x71/0x1c0 [ 433.227038][ T29] kthread+0x2fa/0x390 [ 433.231823][ T29] ? pr_cont_work+0x550/0x550 [ 433.236573][ T29] ? kthread_blkcg+0xd0/0xd0 [ 433.241679][ T29] ret_from_fork+0x48/0x80 [ 433.246153][ T29] ? kthread_blkcg+0xd0/0xd0 [ 433.251038][ T29] ret_from_fork_asm+0x11/0x20 [ 433.255882][ T29] [ 433.258980][ T29] INFO: task jbd2/sda1-8:5102 blocked for more than 144 seconds. [ 433.267686][ T29] Not tainted syzkaller #0 [ 433.275614][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.288686][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5102 ppid:2 flags:0x00004000 [ 433.298294][ T29] Call Trace: [ 433.303963][ T29] [ 433.306948][ T29] __schedule+0x15ae/0x4660 [ 433.311970][ T29] ? asan.module_dtor+0x20/0x20 [ 433.316877][ T29] ? jbd2_journal_wait_updates+0x196/0x270 [ 433.323166][ T29] ? _raw_spin_unlock+0x40/0x40 [ 433.328077][ T29] ? prepare_to_wait+0x1aa/0x200 [ 433.333482][ T29] schedule+0xbd/0x170 [ 433.337610][ T29] jbd2_journal_wait_updates+0x19b/0x270 [ 433.343913][ T29] ? jbd2_journal_restart+0x30/0x30 [ 433.349165][ T29] ? do_raw_write_lock+0x11e/0x260 [ 433.355042][ T29] ? wake_bit_function+0x200/0x200 [ 433.360507][ T29] ? do_raw_read_unlock+0x80/0x80 [ 433.365614][ T29] jbd2_journal_commit_transaction+0x90f/0x5ad0 [ 433.375420][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 433.382604][ T29] ? lock_chain_count+0x20/0x20 [ 433.387537][ T29] ? _raw_spin_unlock+0x40/0x40 [ 433.396216][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 433.402255][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 433.407596][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 433.415789][ T29] ? timer_delete_sync+0x20/0x20 [ 433.421752][ T29] ? do_raw_read_unlock+0x80/0x80 [ 433.426845][ T29] ? prepare_to_wait+0x1aa/0x200 [ 433.432305][ T29] kjournald2+0x40f/0x810 [ 433.436710][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 433.442394][ T29] ? wake_bit_function+0x200/0x200 [ 433.447559][ T29] ? _raw_spin_unlock+0x40/0x40 [ 433.452930][ T29] ? __kthread_parkme+0x71/0x1c0 [ 433.457926][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 433.463755][ T29] kthread+0x2fa/0x390 [ 433.467877][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 433.473698][ T29] ? kthread_blkcg+0xd0/0xd0 [ 433.488037][ T29] ret_from_fork+0x48/0x80 [ 433.492812][ T29] ? kthread_blkcg+0xd0/0xd0 [ 433.497454][ T29] ret_from_fork_asm+0x11/0x20 [ 433.511224][ T29] [ 433.514324][ T29] INFO: task syz-executor:5761 blocked for more than 144 seconds. [ 433.526987][ T29] Not tainted syzkaller #0 [ 433.534623][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.546033][ T29] task:syz-executor state:D stack:20816 pid:5761 ppid:5760 flags:0x00004002 [ 433.557883][ T29] Call Trace: [ 433.563803][ T29] [ 433.566790][ T29] __schedule+0x15ae/0x4660 [ 433.574272][ T29] ? asan.module_dtor+0x20/0x20 [ 433.584479][ T29] ? wait_transaction_locked+0x1aa/0x270 [ 433.593042][ T29] ? prepare_to_wait_exclusive+0x81/0x210 [ 433.598836][ T29] ? wait_transaction_locked+0x1aa/0x270 [ 433.607505][ T29] schedule+0xbd/0x170 [ 433.617637][ T29] wait_transaction_locked+0x1d7/0x270 [ 433.625856][ T29] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 433.637256][ T29] ? wake_bit_function+0x200/0x200 [ 433.645032][ T29] ? __stack_depot_save+0x1f/0x660 [ 433.652847][ T29] start_this_handle+0x7e8/0x2170 [ 433.657933][ T29] ? ext4_dirty_inode+0x93/0x110 [ 433.665741][ T29] ? jbd2__journal_start+0x5b0/0x5b0 [ 433.673744][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 433.678834][ T29] ? slab_post_alloc_hook+0x86/0x4d0 [ 433.689843][ T29] ? rcu_is_watching+0x15/0xb0 [ 433.694677][ T29] ? kmem_cache_alloc+0x1a6/0x2c0 [ 433.703862][ T29] ? jbd2__journal_start+0x140/0x5b0 [ 433.709217][ T29] jbd2__journal_start+0x2bb/0x5b0 [ 433.714691][ T29] __ext4_journal_start_sb+0x203/0x560 [ 433.728118][ T29] ext4_dirty_inode+0x93/0x110 [ 433.733160][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 433.739019][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 433.746641][ T29] file_update_time+0x187/0x1a0 [ 433.751684][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 433.756774][ T29] ? do_wp_page+0x4ce/0x34d0 [ 433.761446][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 433.767733][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 433.773730][ T29] do_page_mkwrite+0x153/0x3f0 [ 433.778566][ T29] do_wp_page+0xd4d/0x34d0 [ 433.786202][ T29] ? folio_put+0xd0/0xd0 [ 433.791063][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 433.796155][ T29] ? __rwlock_init+0x150/0x150 [ 433.801459][ T29] handle_mm_fault+0x1306/0x4a50 [ 433.806506][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 433.811947][ T29] ? numa_migrate_prep+0x350/0x350 [ 433.817135][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 433.823072][ T29] do_user_addr_fault+0x736/0x12d0 [ 433.828263][ T29] exc_page_fault+0x64/0x100 [ 433.836822][ T29] ? clear_bhb_loop+0x40/0x90 [ 433.841843][ T29] asm_exc_page_fault+0x26/0x30 [ 433.846747][ T29] RIP: 0033:0x7f45d04705f7 [ 433.853933][ T29] RSP: 002b:00007ffc537ac830 EFLAGS: 00010202 [ 433.860402][ T29] RAX: 00007f45ccc00218 RBX: 00007ffc537ac960 RCX: 0000000000000000 [ 433.868428][ T29] RDX: 00007f45ccc00218 RSI: 0000000000000006 RDI: 00007ffc537ac960 [ 433.876924][ T29] RBP: 000000000000008c R08: 0000000000000000 R09: 0000000000000000 [ 433.887891][ T29] R10: 00007ffc537ac940 R11: 0000000000000000 R12: 0000000000000000 [ 433.896495][ T29] R13: 0000000000000086 R14: 0000000000000002 R15: 0000000000000002 [ 433.905124][ T29] [ 433.908227][ T29] INFO: task syz.3.1086:9128 blocked for more than 144 seconds. [ 433.916383][ T29] Not tainted syzkaller #0 [ 433.921636][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.930646][ T29] task:syz.3.1086 state:D stack:27560 pid:9128 ppid:7906 flags:0x00004004 [ 433.943667][ T29] Call Trace: [ 433.947087][ T29] [ 433.950371][ T29] __schedule+0x15ae/0x4660 [ 433.954962][ T29] ? asan.module_dtor+0x20/0x20 [ 433.962386][ T29] ? wait_transaction_locked+0x1aa/0x270 [ 433.968096][ T29] ? prepare_to_wait_exclusive+0x81/0x210 [ 433.974406][ T29] ? wait_transaction_locked+0x1aa/0x270 [ 433.981075][ T29] schedule+0xbd/0x170 [ 433.985210][ T29] wait_transaction_locked+0x1d7/0x270 [ 433.993900][ T29] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 434.000975][ T29] ? wake_bit_function+0x200/0x200 [ 434.006160][ T29] ? __stack_depot_save+0x1f/0x660 [ 434.012009][ T29] start_this_handle+0x7e8/0x2170 [ 434.017095][ T29] ? ext4_dirty_inode+0x93/0x110 [ 434.022611][ T29] ? jbd2__journal_start+0x5b0/0x5b0 [ 434.027976][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 434.033542][ T29] ? slab_post_alloc_hook+0x86/0x4d0 [ 434.038885][ T29] ? rcu_is_watching+0x15/0xb0 [ 434.044127][ T29] ? kmem_cache_alloc+0x1a6/0x2c0 [ 434.049214][ T29] ? jbd2__journal_start+0x140/0x5b0 [ 434.059773][ T29] jbd2__journal_start+0x2bb/0x5b0 [ 434.064953][ T29] __ext4_journal_start_sb+0x203/0x560 [ 434.073041][ T29] ext4_dirty_inode+0x93/0x110 [ 434.077863][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 434.084135][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 434.092184][ T29] file_update_time+0x187/0x1a0 [ 434.097127][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 434.102727][ T29] ? filemap_fault+0x103c/0x1540 [ 434.107743][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 434.114036][ T29] ? pte_alloc_one+0x3b6/0x540 [ 434.118867][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 434.125828][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 434.139428][ T29] do_page_mkwrite+0x153/0x3f0 [ 434.144281][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 434.155265][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 434.160828][ T29] ? numa_migrate_prep+0x350/0x350 [ 434.166017][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 434.182989][ T29] do_user_addr_fault+0x736/0x12d0 [ 434.188203][ T29] exc_page_fault+0x64/0x100 [ 434.200632][ T29] ? clear_bhb_loop+0x40/0x90 [ 434.205385][ T29] asm_exc_page_fault+0x26/0x30 [ 434.214138][ T29] RIP: 0033:0x7f915966bea3 [ 434.218607][ T29] RSP: 002b:00007ffd25c84ec0 EFLAGS: 00010246 [ 434.238591][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b31464000 [ 434.246960][ T29] RDX: 0000001b31424000 RSI: 0000000000400000 RDI: 00007f91599e3708 [ 434.255386][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.268214][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 434.276573][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd25c85150 [ 434.289401][ T29] [ 434.292514][ T29] [ 434.292514][ T29] Showing all locks held in the system: [ 434.310166][ T29] 1 lock held by khungtaskd/29: [ 434.315326][ T29] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 434.328851][ T29] 6 locks held by kworker/u4:7/2108: [ 434.335514][ T29] #0: ffff88801ee62138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 434.347314][ T29] #1: ffffc90004fc7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 434.364825][ T29] #2: ffff88802d9940e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 434.375552][ T29] #3: ffff88802d996c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 434.394190][ T29] #4: ffff88814d970990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 434.409009][ T29] #5: ffff888079f58c88 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 434.426238][ T29] 2 locks held by getty/5529: [ 434.431070][ T29] #0: ffff8880324920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 434.445725][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 434.456293][ T29] 2 locks held by syz-executor/5761: [ 434.467077][ T29] #0: ffff888078355720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 434.477310][ T29] #1: ffff88802d994510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 434.487507][ T29] 2 locks held by syz.3.1086/9128: [ 434.497238][ T29] #0: ffff88807c46a7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 434.518103][ T29] #1: ffff88802d994510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 434.528138][ T29] [ 434.537663][ T29] ============================================= [ 434.537663][ T29] [ 434.547322][ T29] NMI backtrace for cpu 1 [ 434.551694][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 434.558927][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 434.569020][ T29] Call Trace: [ 434.572340][ T29] [ 434.575306][ T29] dump_stack_lvl+0x18c/0x250 [ 434.580025][ T29] ? __wake_up_klogd+0xd9/0x100 [ 434.584940][ T29] ? show_regs_print_info+0x20/0x20 [ 434.590183][ T29] ? load_image+0x420/0x420 [ 434.594757][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 434.599739][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 434.605943][ T29] ? load_image+0x420/0x420 [ 434.610497][ T29] ? wq_watchdog_touch+0xef/0x170 [ 434.615590][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 434.621810][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 434.627842][ T29] watchdog+0xf59/0xfa0 [ 434.632051][ T29] ? watchdog+0x1e1/0xfa0 [ 434.636432][ T29] kthread+0x2fa/0x390 [ 434.640543][ T29] ? hungtask_pm_notify+0x50/0x50 [ 434.645617][ T29] ? kthread_blkcg+0xd0/0xd0 [ 434.650251][ T29] ret_from_fork+0x48/0x80 [ 434.654717][ T29] ? kthread_blkcg+0xd0/0xd0 [ 434.659348][ T29] ret_from_fork_asm+0x11/0x20 [ 434.664170][ T29] [ 434.668925][ T29] Sending NMI from CPU 1 to CPUs 0: [ 434.674475][ C0] NMI backtrace for cpu 0 [ 434.674485][ C0] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 434.674502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 434.674513][ C0] Workqueue: bat_events batadv_nc_worker [ 434.674533][ C0] RIP: 0010:__kasan_check_read+0xa/0x20 [ 434.674561][ C0] Code: 48 c7 c7 e7 bd a5 8c 4c 89 e6 eb 0a 48 c7 c7 e8 4b 87 8c 48 89 de e8 e5 0f a7 08 31 ed eb d4 cc f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ff ea ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 [ 434.674575][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00000046 [ 434.674589][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff818e02c8 [ 434.674600][ C0] RDX: 0000000000000100 RSI: 0000000000000008 RDI: ffffffff8f6c5ae8 [ 434.674611][ C0] RBP: ffffc90000007ca8 R08: ffffffff91ff1697 R09: 1ffffffff23fe2d2 [ 434.674623][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2d3 R12: 0000000000000200 [ 434.674635][ C0] R13: 1ffffffff1be97a9 R14: 1ffff92000000f80 R15: dffffc0000000000 [ 434.674648][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 434.674662][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.674673][ C0] CR2: 0000556d878f4660 CR3: 00000000305be000 CR4: 00000000003506f0 [ 434.674689][ C0] Call Trace: [ 434.674694][ C0] [ 434.674699][ C0] trace_irq_disable+0x28/0xe0 [ 434.674726][ C0] seqcount_lockdep_reader_access+0xf0/0x1d0 [ 434.674750][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 434.674769][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 434.674794][ C0] ? __rwlock_init+0x150/0x150 [ 434.674815][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 434.674841][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 434.674863][ C0] ktime_mono_to_any+0x6c/0x100 [ 434.674885][ C0] gate_timer_func+0x224/0x430 [ 434.674914][ C0] ? gate_get_start_time+0x130/0x130 [ 434.674947][ C0] __hrtimer_run_queues+0x525/0xc10 [ 434.674977][ C0] ? hrtimer_interrupt+0x980/0x980 [ 434.674995][ C0] ? read_tsc+0x9/0x20 [ 434.675019][ C0] hrtimer_run_softirq+0x177/0x290 [ 434.675041][ C0] handle_softirqs+0x27d/0x820 [ 434.675063][ C0] ? do_softirq+0xfa/0x1a0 [ 434.675082][ C0] ? do_softirq+0x1a0/0x1a0 [ 434.675101][ C0] ? batadv_nc_purge_paths+0x300/0x3a0 [ 434.675120][ C0] do_softirq+0xfa/0x1a0 [ 434.675137][ C0] [ 434.675141][ C0] [ 434.675147][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 434.675165][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 434.675189][ C0] ? rcu_is_watching+0x15/0xb0 [ 434.675213][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 434.675232][ C0] ? _local_bh_enable+0xa0/0xa0 [ 434.675249][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 434.675273][ C0] ? batadv_nc_purge_paths+0x300/0x3a0 [ 434.675289][ C0] ? batadv_nc_purge_paths+0x3a0/0x3a0 [ 434.675307][ C0] batadv_nc_purge_paths+0x300/0x3a0 [ 434.675326][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 434.675349][ C0] batadv_nc_worker+0x322/0x600 [ 434.675367][ C0] ? process_scheduled_works+0x975/0x1600 [ 434.675391][ C0] process_scheduled_works+0xa60/0x1600 [ 434.675429][ C0] ? worker_attach_to_pool+0x370/0x370 [ 434.675457][ C0] ? assign_work+0x3cc/0x5d0 [ 434.675481][ C0] worker_thread+0xa5e/0xfe0 [ 434.675517][ C0] kthread+0x2fa/0x390 [ 434.675533][ C0] ? pr_cont_work+0x550/0x550 [ 434.675554][ C0] ? kthread_blkcg+0xd0/0xd0 [ 434.675571][ C0] ret_from_fork+0x48/0x80 [ 434.675591][ C0] ? kthread_blkcg+0xd0/0xd0 [ 434.675608][ C0] ret_from_fork_asm+0x11/0x20 [ 434.675639][ C0] [ 435.042954][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 435.049865][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 435.057098][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 435.067188][ T29] Call Trace: [ 435.070518][ T29] [ 435.073484][ T29] dump_stack_lvl+0x18c/0x250 [ 435.078210][ T29] ? show_regs_print_info+0x20/0x20 [ 435.083445][ T29] ? load_image+0x420/0x420 [ 435.088007][ T29] panic+0x2ca/0x720 [ 435.091953][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 435.096500][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 435.102092][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 435.107509][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 435.113733][ T29] watchdog+0xf98/0xfa0 [ 435.117967][ T29] ? watchdog+0x1e1/0xfa0 [ 435.122369][ T29] kthread+0x2fa/0x390 [ 435.126488][ T29] ? hungtask_pm_notify+0x50/0x50 [ 435.131562][ T29] ? kthread_blkcg+0xd0/0xd0 [ 435.136187][ T29] ret_from_fork+0x48/0x80 [ 435.140645][ T29] ? kthread_blkcg+0xd0/0xd0 [ 435.145269][ T29] ret_from_fork_asm+0x11/0x20 [ 435.150091][ T29] [ 435.153747][ T29] Kernel Offset: disabled [ 435.158078][ T29] Rebooting in 86400 seconds..