last executing test programs: 2m7.806258156s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40850) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r4 = gettid() getpriority(0x2, r4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r3, 0x289e0cb5, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, 0x0, 0x0) 2m5.012360747s ago: executing program 3 (id=7): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000500), 0x4, 0x10) 2m4.670614154s ago: executing program 3 (id=8): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000000500)='\x00', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) read$watch_queue(r3, &(0x7f0000000040)=""/21, 0x15) 2m2.10121551s ago: executing program 3 (id=10): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="1d0000000988"}) 2m0.322763131s ago: executing program 3 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) 1m59.465206632s ago: executing program 32 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) 1m55.740537275s ago: executing program 0 (id=27): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) 1m53.939946001s ago: executing program 0 (id=32): mkdir(&(0x7f0000000080)='proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='proc/self/root\x00', 0x10000, 0x0) fchdir(r0) chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00') chdir(&(0x7f0000000240)='g1\x00') mkdir(&(0x7f0000000280)='strings/0x409\x00', 0x1ff) mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000300)='configs/c.1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000340)='functions/uvc.0\x00', 0x1ff) mkdir(&(0x7f0000000380)='functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f00000003c0)='functions/uvc.0/streaming/uncompressed/u/360p\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='functions/uvc.0/streaming/uncompressed/u/360p/wWidth\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='640\n', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='functions/uvc.0/streaming/uncompressed/u/360p/wHeight\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='360\n\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='functions/uvc.0/streaming/uncompressed/u/360p/dwFrameInterval\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='333333\n\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='functions/uvc.0/streaming/uncompressed/u/360p/dwMaxVideoFrameBufferSize\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='460800\n\x00', 0x7) mkdir(&(0x7f0000000640)='functions/uvc.0/streaming/header/h\x00', 0x1ff) fchdir(r0) chdir(&(0x7f0000000680)='sys/kernel/config/usb_gadget/g1/functions/uvc.0/streaming\x00') 1m52.596124366s ago: executing program 0 (id=37): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0x3) 1m50.925957361s ago: executing program 0 (id=41): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x2) read$FUSE(r0, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000080)='./file1\x00', r1, r2) lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 1m47.855204046s ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) 1m46.808421479s ago: executing program 0 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48840) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0x7}, {0x8, 0x16, 0x0, 0x0, 0x7cc6}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40) 1m30.961584722s ago: executing program 33 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48840) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0x7}, {0x8, 0x16, 0x0, 0x0, 0x7cc6}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40) 47.759473654s ago: executing program 2 (id=201): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r0, &(0x7f0000000100)="1c0000001a007f0214f9f4070009040f030000000001000000020000", 0x1c) 47.424353602s ago: executing program 2 (id=204): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="02067f020300000000000000ffffffff01000800f0"], 0x18}, 0x1, 0x7}, 0x0) 47.03631573s ago: executing program 2 (id=208): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x1, "e8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 43.047570348s ago: executing program 2 (id=227): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x18) 41.422036512s ago: executing program 2 (id=232): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x7fffffff, 0x8}, 0xc) 40.125782045s ago: executing program 2 (id=236): userfaultfd(0x801) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x81) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 24.986480264s ago: executing program 34 (id=236): userfaultfd(0x801) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x81) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 17.749025691s ago: executing program 6 (id=312): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x3, {{0x2, 0x4e20, @multicast2}}}, 0x88) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)=""/36, 0x24}], 0x1}, 0x10021) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @local}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = syz_io_uring_setup(0x126b, &(0x7f00000006c0), &(0x7f0000000740), &(0x7f0000000780), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000140)={[{@noload}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noblock_validity}]}, 0x0, 0x533, &(0x7f0000001140)="$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") getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000140)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x80000001, 0x5}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000240)={0x0, 'veth0_vlan\x00', {0x2}, 0x6}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0xfffffffffffffffd, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0x144, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb9}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x6c}, 0x2, @in=@remote, 0xffffffff, 0x0, 0x0, 0x9, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1fc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@datasec={0x5, 0x0, 0x0, 0xf, 0x2, [], "2a18"}, @datasec={0x6, 0x0, 0x0, 0xf, 0x2, [], "6803"}]}, {0x0, [0x30, 0x2e, 0x30, 0x3e, 0x5f, 0x5f]}}, 0x0, 0x3c}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x240, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffff90}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fd3e43e6ff6f074973084a3b7add23e3e90f57c1c2a32863"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "44ee717da3154d8a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="85b1df5857eaf8088b0142a9dc13abc9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1d11b9113dc6a2263485c49c7126046c66c2fbeb2e733922a401f1c872814a42"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fe386ea3233547998dc46f465cfe157b486f233d5fd0a228b0ee313e5c0426ea"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="43ceeaf11cbf4e1f8b02bdcdd7330a19"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c56bee266a8423d7febf0f4361d6e840a463971098d1fa87"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="77b728363da9fb6d26402deb13c45233"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c6bc257e1074da4f6163c8aec58f635151c579fa5ef317f3191aacb9481cc50e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a752c0d2e187fde38eb8396cc103f4b3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "47f2a376c51952fb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3cad}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0d1e7b6bc6a403e7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f0ef9320500d4c3e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x466}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32bf8d9f06f219e0f5086b9e0cf1e76b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "11868b89c0909103"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="de80481fd1564519a9176e096490afb8914bbc84322a1e14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eaa38725efe2baab19c10219431efe55e233b481e6e40be6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b1d2056850b8f621777972b94825f5c3"}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x80}, 0x40041) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x165dbeb8f2befd25, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000009e85001700000000000100001811000050e3036e6df33fd9785e43cc7bc7743b9ea047bbc9abb46a340ab1644845e0c4fec141c41d6d2e5af244cfd2093c53aac7d72c8d73602007002c5cfccbb871080000000000000032f5072cf65e2e10f7d3000800000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) 14.965967649s ago: executing program 6 (id=314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="2e1221b239b601b377d3df373e75963d86ddf06712e900e5000000049d900f1c3248040000e3e7eb20d8d1ace5afad", 0x2f}, {&(0x7f0000000400)="62051e8682a794a214471fefa048fb27c545181e", 0x14}], 0x2) 14.018601574s ago: executing program 1 (id=322): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4b1, &(0x7f0000000200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) 13.895952654s ago: executing program 4 (id=323): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001640)={0xfc, {"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", 0x10c0}}, 0x1006) 12.390142972s ago: executing program 1 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netlink\x00') preadv(r2, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/200, 0xc8}], 0x1, 0x111, 0x0) 11.229370334s ago: executing program 4 (id=330): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x3, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 11.170608088s ago: executing program 1 (id=331): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 10.727137552s ago: executing program 6 (id=332): r0 = socket$inet(0x2, 0x3, 0x3) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x40}, 0x0) 10.595410191s ago: executing program 4 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x9, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc00}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 10.430318482s ago: executing program 1 (id=334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xd931d3864d39dcdb) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {0x4, 0xfffb, 0xa}, 0x55, [0x6, 0xd, 0x6ce, 0xed, 0x9, 0x400, 0xd8c, 0x5, 0x4452, 0x3e38, 0x407, 0x101, 0x0, 0xe662, 0xfffffffa, 0x6, 0x4, 0x7fff, 0x5, 0xb0, 0xfffffffe, 0xd07, 0x0, 0x9, 0x6, 0x8, 0x2, 0x6, 0x6, 0x80000000, 0x0, 0x4, 0xfff, 0x1, 0x79, 0x80000000, 0x8, 0x2, 0x7, 0x8, 0x1, 0xd, 0x401, 0x4, 0x1, 0x1, 0xff, 0x2, 0x101, 0x5c, 0x1, 0x1000000, 0x6, 0x7f, 0x6, 0x49758c69, 0x5, 0xca2, 0x3, 0x7, 0x82e, 0x40000000, 0x1, 0xff6d], [0xfffffffb, 0x85, 0x437d, 0x68, 0x0, 0x5, 0x40, 0x2, 0xfffffffd, 0x7f, 0x5, 0x8f44, 0x6, 0x3aa, 0x7, 0x0, 0x10, 0x1, 0xc, 0x1, 0x7, 0x5, 0x4, 0xfffffffc, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x80000000, 0xd, 0x1, 0x9, 0x3, 0x8171, 0x1, 0xcf34, 0xc9c, 0x1, 0x316c0eca, 0x8, 0x1, 0x5eb7981f, 0x8, 0xb, 0x8, 0x5, 0x0, 0xfffffe00, 0xffff8001, 0x8000, 0x7f, 0x40, 0x9, 0x8, 0x2, 0x3, 0x40ba, 0x7, 0x2, 0x8914, 0x3, 0x2, 0x35c3], [0x57b, 0xfffff000, 0x8001, 0x80000001, 0x9, 0xc, 0x6, 0x9dba, 0xc2e, 0x6, 0x1, 0x2, 0x5, 0x723fffb6, 0x6, 0x80000000, 0x1e3, 0xff, 0x5, 0x4, 0x10000, 0x25, 0x81, 0x9, 0x7, 0x7b, 0xd, 0x9, 0x3, 0x7ad, 0x4, 0x8, 0x40, 0x6, 0x7fff, 0x7, 0xffffe1be, 0x80000001, 0x31, 0x7, 0x7f, 0x10001, 0x2, 0x8, 0x1bf, 0x6, 0x0, 0x1, 0x80000000, 0x7, 0x2, 0x7f, 0x38, 0x7, 0x1, 0x8001, 0x10000, 0xf, 0x1, 0xc57f, 0xfffffff8, 0x6, 0x6, 0x5], [0x3f, 0x4, 0x6, 0x301, 0x8, 0x2, 0x3, 0x9af00000, 0xf2, 0x4, 0x10, 0x4, 0x101, 0xfffffff9, 0x89, 0x3, 0x0, 0x0, 0x5d0, 0x1, 0xa6, 0x5, 0x1e1e2a0c, 0x7, 0xfffffffb, 0x6, 0x6, 0x400, 0x10001, 0x10000, 0x4, 0x6, 0xff, 0xe, 0xfffff517, 0x0, 0x457, 0xda, 0x1, 0x400, 0x5, 0x7, 0x8, 0x40, 0x8, 0x3, 0xffff, 0xc526, 0x0, 0x9, 0x7, 0x6, 0x7fff, 0x7ced, 0x7, 0x9, 0x6, 0x1, 0x36, 0xfff, 0x4, 0x1, 0x101, 0x3]}, 0x45c) 10.109348456s ago: executing program 6 (id=336): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x880) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r3, r1, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) unshare(0x22020600) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 8.434584701s ago: executing program 6 (id=337): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8.067216137s ago: executing program 4 (id=338): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x64000600) getdents(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.533809241s ago: executing program 5 (id=340): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001340)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r2], 0x0) 5.231781644s ago: executing program 7 (id=341): syz_usb_connect$uac3(0x0, 0x8b, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x3, 0x10, 0x4, {0x8, 0xb, 0x0, 0x0, 0x1, 0x24, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x15, 0x9}, [@multiply_unit={0xb, 0x24, 0xd, 0x0, 0x5, 0x0, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x6, 0x3d, {0xa, 0x25, 0x25, 0x7, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xb, 0x6, 0xe, {0xa, 0x25, 0x25, 0xd4, 0x5e, 0x4}}}}}}}}]}}, 0x0) 4.725803294s ago: executing program 6 (id=342): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r0, &(0x7f0000000f40)=""/243, 0xf3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f00000002c0)="c3", 0x51}], 0x2) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@buf={0x23, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76a5345cf6442091e7510667de69ea14"}) 3.846357304s ago: executing program 5 (id=343): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f0000000200)={[{@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pwrite64(0xffffffffffffffff, &(0x7f0000000540)='2', 0x1, 0x8080c61) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 3.669981378s ago: executing program 7 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) 3.142409283s ago: executing program 5 (id=345): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") open(0x0, 0x60c42, 0x86) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) getdents(r0, 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 3.017679161s ago: executing program 7 (id=346): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48) close(r3) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 3.00610445s ago: executing program 1 (id=347): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x800452d3, 0x0) 1.73437496s ago: executing program 1 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x3}, {0x9, 0xfffffff9, 0x8, 0x8}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 1.601953277s ago: executing program 4 (id=349): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000700)={[{@dmask={'dmask', 0x3d, 0x402}}, {@fmask={'fmask', 0x3d, 0x83}}, {@time_offset={'time_offset', 0x3d, 0x8}}, {@dmask={'dmask', 0x3d, 0x1}}, {@fmask={'fmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@dmask={'dmask', 0x3d, 0x401}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@keep_last_dots}, {@codepage={'codepage', 0x3d, 'cp863'}}, {}, {@errors_remount}, {@namecase}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged\x00', 0x275a, 0x0) getdents(r0, &(0x7f00000001c0)=""/200, 0xc8) 1.477550698s ago: executing program 7 (id=350): socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) 1.236407772s ago: executing program 5 (id=351): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x28, 0x11, 0x1, 0x11000000, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x11, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9eb20fc66"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 1.156762876s ago: executing program 4 (id=352): r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x5516, &(0x7f00000006c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j525yEojhOIB2BkbwKxLj3qu4g2N4BJcuDQfwEhwBr+AFPAPuPIIBQzsQETQmdJho3kuG0mHyS0tg0X+TAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABNeq2mo6eH68d9c+aLXynjw72w9UGOuQAAAAC7zarpKL4ZpP5pff+8vnVZ94sQwnLxvmtR3wlHG5mdOqf65vnqyxieQ4gJRSwNpOskhHBTX+8XTX8LAAAA8H+9jCfDtFpPL4O2B8QhpaJNeXabKa8IIVSDt0xp5TLvKlNY/H13w32mtFjA6mcKSyW3bq60bTui4999XbXrf2qK1JQ/R2abOwAAcECdjabBVQgAAAAtu2t7ALSjCKutzPVWYC819fbe8UYPAAAA+IOKtgcAAAAANC6u/9s8/29VgHD+HwAAADQnnf8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk2bVdFSNJ8N9c+aL/eSZDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8sD/vKBACYRAGe9d3JnP/w0qDpqYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCb3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rycAAjEYBiMbz0p23+vyo9agwgzIH4k5LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn5z7/e+er/o3hsRRVWOmiSnjVlVzVoklq8Sag8SWg/bpkwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527uc1jioOAPh3f8zGVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlbczk7zGoFtKZ5bm84E377vTx3vfNwsl35lJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjvv78W9dJgv42517tb9a2upv72vT25s3VlKLcWd6txcU4nPvlfzD53F9hIBAADg8OjV9X1E3C22V1LfnZ/U/0U9JtX8PzxfxnU9v7/ur/u69k/t99/uvby70Hy5Tpr03Pp4dPzfqfSf3C5n2wv/O6I/ufKTey+9yRfS/WjzpZ1icj073928+cFgErrJAgAz61jdV0H981Dqh20mBsCh0c8K77r+7823mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAE3Y249k67kTEUn8vTm7fv7Z2UH9j685S3U5fv76Vz5mmKCLi3Pp4dLzBvcy6y1euXlgdj0eXmg9ei4i2Vn+v2v6FT6YYHNHK9RH8ZzA39eBu9WW3n/PjB0W1lye/Vkv/IQEA8NQqqpbq+rvF9ko611mIePDjw/X/m1kcU9b/9z49fStfK6//h43tcPYtb1z8cvnylatvr19cPT86P/r8nRPDd4cnz5w6dWZ5cq9k2R0TAAAAHs+gann9P9g3Jv3b0SyOKev/r74ffpPP01P/H2jvoV/bmQAAABxuL77+15+dA853BoP4enVj49KwPO5+PlEeW0j1kc1VLa//ewttZwUAAAA0YWez89D7/2ezOKZ8/v/cT6/8ks/Zi4gj1fP/Y2tfjM82t52Z1sSvLre9RwAAANp1pGr58/9iIdX/3d1XHroR8dYbZVz9GcCp6v/eh9/+nK+Vv/9/srktzqTuYnk9Jv1iRH+x7YwAAAB4Wv39IOKZKFsq9v8otlc++/XoxwPv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA07Z8AAAD//ylXMzw=") r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x30000018}) 1.04761868s ago: executing program 7 (id=353): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}, {}, {@nojournal_checksum}, {@norecovery}, {@nogrpid}, {@bh}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x585, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x98) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 401.930333ms ago: executing program 5 (id=354): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 154.554695ms ago: executing program 5 (id=355): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nodioread_nolock}, {@dioread_nolock}, {@errors_remount}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x38}}, {@errors_remount}]}, 0x1, 0x478, &(0x7f00000006c0)="$eJzs28tvVNUfAPDvvX0APx7lh/gAUavEpNHY0oLKwo1GE2MwmugCl7UdSONADa1GkEgxxpWJIdGNG+JOo/+EcaOuTNi6cmVIiLIBXNXcO/fCdJgplM4wpfP5JHfmnHvPnXPOnPs495yZAHrWcPaSRGyJiD8iYqgWXZpguPZ29fLpqWuXT08lsbj41t9Jnu7K5dNTZdJyv81FZCSNSD9LikyWmjt56r3JarVyooiPzR97f2zu5KlnPjw2ebRytHJ84uDBA/vHn39u4tm21DOr15Xdn8zu2fXqO+denzp87t1ff8zKu6XYXl+PdhnOKv7PYq5x25PtzqzLttaFk/4uFoQV6YuIrLkG8vN/KPriRuMNxSufdrVwQEdl96YNrTcvLALrWBLdLgHQHeWNPnv+LZe71PVYEy69WHsAyup9tVhqW/ojLdIMNDzfttNwRBxe+Pd8tkSHxiEAAOp9MfX1ocGI+PjaD69lfY+hiCjHgx7IX//MX7cVcyjbI+L/EbEjIu6LiJ0RcX+R9sGIeGiV5bm5/5NeXOVHLivr/71QzG0t7f+Vvb/Y3lfEtub1H0iOzFQr+2JD/p2MxMCGLD6+TB4/vXzhy1bb6vt/2ZLlX/YFi3Jc7G8YoJuenJ/MO6VtcOlsxO7+ZvVPrs8EJBGxKyJ2r+yjt5WBmae+39MqUfP6Xzl/Wzm0YZ5p8dusegtZ/Reiof6lpH5+cuam+cmxjVGt7BurHRXN/Pb752+2yv/W7d9Zlyq197r2b0yyPamfr51rb/53ePyng8nb+TzzYLHuo8n5+RPjEYPJoTy+ZP3EjX3LeJk+O/5H9jY//3cU+2T1fzgisoP4kYh4NCIeK8r+eEQ8ERF7l6njLy/duv6Rdqn9z0ZMN73+XT/+G9p/xYFvvlsm/9tr/wN5aKRYk1//bqFZcbLLRWMB7/iLAwAAgHtImv8GPklHr4fTdHS09hv+nfG/tDo7N//0kdkPjk/HhW218c+0HOkaKsZDqzPVyniyUHxibXx0ohgrLsdL9xfjxl/1bcrjo1Oz1eku1x163eYW53/mr75ulw7osE1N104M3vWCAF3QOI+eLo2eeSNcDGC98n9t6F3l+d/ieb/+fzDAOuP+D72r2fl/piFuLgDWJ/d/6F3Of+hR6c+r2NlTAdzr3P+hJ63if/2dDGxcG8XoTmCtNkoeiCgD6Zooj0CHAt2+MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTHfwEAAP//Id7mUg==") sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 0s ago: executing program 7 (id=356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) kernel console output (not intermixed with test programs): batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.852506][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.863844][ T5606] team0: Port device team_slave_0 added [ 93.869944][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.877189][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.884614][ T5612] bridge_slave_1: entered allmulticast mode [ 93.892245][ T5612] bridge_slave_1: entered promiscuous mode [ 93.914437][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.946754][ T5606] team0: Port device team_slave_1 added [ 93.964743][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.971932][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.979512][ T5625] bridge_slave_0: entered allmulticast mode [ 93.987415][ T5625] bridge_slave_0: entered promiscuous mode [ 94.061410][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.068787][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.076611][ T5625] bridge_slave_1: entered allmulticast mode [ 94.084494][ T5625] bridge_slave_1: entered promiscuous mode [ 94.095796][ T5623] team0: Port device team_slave_0 added [ 94.104133][ T5619] team0: Port device team_slave_0 added [ 94.126788][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.164773][ T5623] team0: Port device team_slave_1 added [ 94.173041][ T5619] team0: Port device team_slave_1 added [ 94.179881][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.187216][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.214150][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.228479][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.291936][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.299208][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.325374][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.353315][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.370392][ T5605] hsr_slave_0: entered promiscuous mode [ 94.376623][ T5616] Bluetooth: hci0: command tx timeout [ 94.378179][ T5605] hsr_slave_1: entered promiscuous mode [ 94.382679][ T50] Bluetooth: hci1: command tx timeout [ 94.388014][ T5607] Bluetooth: hci2: command tx timeout [ 94.475164][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.493597][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.500961][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.527135][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.533885][ T5607] Bluetooth: hci4: command tx timeout [ 94.537762][ T50] Bluetooth: hci3: command tx timeout [ 94.548501][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.555546][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.581915][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.594822][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.601769][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.627990][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.643033][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.650861][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.677327][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.694166][ T50] Bluetooth: hci5: command tx timeout [ 94.703419][ T5612] team0: Port device team_slave_0 added [ 94.782621][ T5612] team0: Port device team_slave_1 added [ 94.805791][ T5625] team0: Port device team_slave_0 added [ 94.836484][ T5606] hsr_slave_0: entered promiscuous mode [ 94.843250][ T5606] hsr_slave_1: entered promiscuous mode [ 94.849748][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 94.856012][ T5606] Cannot create hsr debugfs directory [ 94.891259][ T5625] team0: Port device team_slave_1 added [ 94.940295][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.947412][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.973628][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.046305][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.053401][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.079476][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.110212][ T5619] hsr_slave_0: entered promiscuous mode [ 95.116984][ T5619] hsr_slave_1: entered promiscuous mode [ 95.123145][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 95.128910][ T5619] Cannot create hsr debugfs directory [ 95.161796][ T5623] hsr_slave_0: entered promiscuous mode [ 95.168370][ T5623] hsr_slave_1: entered promiscuous mode [ 95.175118][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 95.181280][ T5623] Cannot create hsr debugfs directory [ 95.196476][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.203438][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.229412][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.242466][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.249468][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.275477][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.559591][ T5612] hsr_slave_0: entered promiscuous mode [ 95.566550][ T5612] hsr_slave_1: entered promiscuous mode [ 95.572782][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 95.578871][ T5612] Cannot create hsr debugfs directory [ 95.645549][ T5625] hsr_slave_0: entered promiscuous mode [ 95.651982][ T5625] hsr_slave_1: entered promiscuous mode [ 95.658480][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 95.664274][ T5625] Cannot create hsr debugfs directory [ 95.911539][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.924994][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.933549][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.945352][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.991085][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.001039][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.040082][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.052447][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.218342][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.229259][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.259563][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.271243][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.283144][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.294679][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.305842][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.316773][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.418992][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.430549][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.449129][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.456320][ T50] Bluetooth: hci2: command tx timeout [ 96.463783][ T5607] Bluetooth: hci0: command tx timeout [ 96.465636][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.469205][ T50] Bluetooth: hci1: command tx timeout [ 96.478185][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.492501][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.501118][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.510823][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.613806][ T50] Bluetooth: hci4: command tx timeout [ 96.614456][ T5607] Bluetooth: hci3: command tx timeout [ 96.632248][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.644541][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.653319][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.663869][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.681577][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.691325][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.699963][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.710530][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.750417][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.773964][ T5607] Bluetooth: hci5: command tx timeout [ 96.867364][ T5612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.877606][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.902995][ T5612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.913138][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.922934][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.946825][ T5612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.957752][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.966501][ T5612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.977187][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.031378][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.038773][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.065943][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.111358][ T129] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.118584][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.161299][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.172497][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.181852][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.192784][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.214298][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.224681][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.251908][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.262515][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.291761][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.335901][ T129] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.343037][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.364059][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.403617][ T129] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.410822][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.441868][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.506650][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.563105][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.570366][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.623977][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.631233][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.647308][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.697081][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.704282][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.724319][ T5606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.787484][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.801123][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.808368][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.938132][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.025710][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.032909][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.102521][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.143056][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.150291][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.299779][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.359146][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.366389][ T3293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.459912][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.467150][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.489441][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.533552][ T5612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.543995][ T5607] Bluetooth: hci1: command tx timeout [ 98.544045][ T5607] Bluetooth: hci2: command tx timeout [ 98.544078][ T5607] Bluetooth: hci0: command tx timeout [ 98.562681][ T5612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.694912][ T50] Bluetooth: hci4: command tx timeout [ 98.701553][ T5607] Bluetooth: hci3: command tx timeout [ 98.854723][ T50] Bluetooth: hci5: command tx timeout [ 98.931739][ T5605] veth0_vlan: entered promiscuous mode [ 98.999311][ T5605] veth1_vlan: entered promiscuous mode [ 99.220130][ T5605] veth0_macvtap: entered promiscuous mode [ 99.261530][ T5605] veth1_macvtap: entered promiscuous mode [ 99.367332][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.421736][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.478334][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.538287][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.765548][ T152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.814967][ T129] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.886908][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.930516][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.961775][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.028167][ T5606] veth0_vlan: entered promiscuous mode [ 100.049159][ T5606] veth1_vlan: entered promiscuous mode [ 100.062705][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.075117][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.081350][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.096913][ T5619] veth0_vlan: entered promiscuous mode [ 100.135337][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.200278][ T5619] veth1_vlan: entered promiscuous mode [ 100.267578][ T5605] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.287055][ T5606] veth0_macvtap: entered promiscuous mode [ 100.302001][ T5606] veth1_macvtap: entered promiscuous mode [ 100.425905][ T5623] veth0_vlan: entered promiscuous mode [ 100.508290][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.671096][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.686739][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.724826][ T5619] veth0_macvtap: entered promiscuous mode [ 100.745679][ T5619] veth1_macvtap: entered promiscuous mode [ 100.772018][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.784895][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.805151][ T5623] veth1_vlan: entered promiscuous mode [ 100.824067][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.745354][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.833875][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.188183][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.199619][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.220243][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.232401][ T5623] veth0_macvtap: entered promiscuous mode [ 102.287876][ T5623] veth1_macvtap: entered promiscuous mode [ 102.414072][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.446943][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.475800][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.530420][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.606791][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.635736][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.644240][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.666165][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.737540][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.803925][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.817806][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.852676][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.871161][ T5612] veth0_vlan: entered promiscuous mode [ 102.929043][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.035564][ T5612] veth1_vlan: entered promiscuous mode [ 103.232043][ T5845] loop1: detected capacity change from 0 to 256 [ 103.253133][ T5845] exfat: Deprecated parameter 'utf8' [ 103.268883][ T5845] exfat: Deprecated parameter 'namecase' [ 103.347854][ T5845] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x3fccd927, utbl_chksum : 0xe619d30d) [ 103.486835][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.528769][ T5625] veth0_vlan: entered promiscuous mode [ 103.559660][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.574983][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.593613][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.683561][ T5612] veth0_macvtap: entered promiscuous mode [ 103.720214][ T5625] veth1_vlan: entered promiscuous mode [ 103.744127][ T5750] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 103.746922][ T5612] veth1_macvtap: entered promiscuous mode [ 103.779280][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.793980][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.915978][ T5750] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 103.953123][ T5750] usb 1-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 103.978702][ T5750] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.004777][ T5750] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.023450][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.039334][ T5750] usb 1-1: Product: syz [ 104.048103][ T5750] usb 1-1: Manufacturer: syz [ 104.058293][ T5750] usb 1-1: SerialNumber: syz [ 104.087010][ T5750] usb 1-1: config 0 descriptor?? [ 104.141183][ T5851] loop3: detected capacity change from 0 to 40427 [ 104.196439][ T5851] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 104.205414][ T5851] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 104.223068][ T5851] F2FS-fs (loop3): invalid crc value [ 104.391882][ T5851] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 104.424313][ T5851] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 104.443964][ T5851] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.541267][ T30] audit: type=1800 audit(1787060671.925:2): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 104.568883][ T5851] syz.3.8: attempt to access beyond end of device [ 104.568883][ T5851] loop3: rw=8423425, sector=53248, nr_sectors = 8 limit=40427 [ 104.592097][ T30] audit: type=1804 audit(1787060671.975:3): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8" name="/newroot/2/file1/bus" dev="loop3" ino=14 res=1 errno=0 [ 104.981641][ T5851] syz.3.8: attempt to access beyond end of device [ 104.981641][ T5851] loop3: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 104.999031][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz.3.8 Not tainted syzkaller #0 PREEMPT(full) [ 104.999076][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.999099][ T5851] Call Trace: [ 104.999110][ T5851] [ 104.999124][ T5851] dump_stack_lvl+0x100/0x190 [ 104.999175][ T5851] f2fs_stop_checkpoint+0x5e6/0xb30 [ 104.999241][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.999292][ T5851] ? errseq_set+0xe3/0x150 [ 104.999355][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.999412][ T5851] f2fs_write_end_bio+0xf53/0x1340 [ 104.999459][ T5851] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 104.999508][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.999566][ T5851] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 104.999609][ T5851] bio_endio+0x778/0x8e0 [ 104.999663][ T5851] submit_bio_noacct+0x64c/0x1ff0 [ 104.999742][ T5851] f2fs_submit_write_bio+0x133/0x330 [ 104.999808][ T5851] __submit_merged_bio+0x330/0x7b0 [ 104.999847][ T5851] ? rcu_is_watching+0x12/0xc0 [ 104.999913][ T5851] __submit_merged_write_cond+0x3fe/0x510 [ 104.999972][ T5851] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 105.000029][ T5851] ? __pfx___might_resched+0x10/0x10 [ 105.000073][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.000118][ T5851] ? mlock_drain_local+0x280/0x4e0 [ 105.000187][ T5851] f2fs_fsync_node_pages+0xddc/0x1490 [ 105.000273][ T5851] ? __pfx_f2fs_fsync_node_pages+0x10/0x10 [ 105.000393][ T5851] ? __pfx___up_read+0x10/0x10 [ 105.000444][ T5851] ? f2fs_do_sync_file+0x15c9/0x1ca0 [ 105.000501][ T5851] ? f2fs_do_sync_file+0x15c9/0x1ca0 [ 105.000556][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.000617][ T5851] f2fs_do_sync_file+0x1666/0x1ca0 [ 105.000686][ T5851] ? find_held_lock+0x2b/0x80 [ 105.000746][ T5851] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 105.000802][ T5851] ? f2fs_inode_dirtied+0xf1/0x4f0 [ 105.000932][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.000984][ T5851] ? find_held_lock+0x2b/0x80 [ 105.001043][ T5851] ? f2fs_file_write_iter+0xf46/0x2b00 [ 105.001110][ T5851] f2fs_sync_file+0x13a/0x1a0 [ 105.001169][ T5851] ? __pfx_f2fs_sync_file+0x10/0x10 [ 105.001224][ T5851] vfs_fsync_range+0x9b/0x190 [ 105.001272][ T5851] f2fs_file_write_iter+0x12d4/0x2b00 [ 105.001361][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.001410][ T5851] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 105.001469][ T5851] ? trace_kmalloc+0xeb/0x110 [ 105.001518][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.001564][ T5851] ? splice_from_pipe_next+0x1ec/0x5a0 [ 105.001619][ T5851] iter_file_splice_write+0x830/0x10b0 [ 105.001691][ T5851] ? __pfx_iter_file_splice_write+0x10/0x10 [ 105.001773][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.001825][ T5851] ? __pfx_iter_file_splice_write+0x10/0x10 [ 105.001872][ T5851] direct_splice_actor+0x192/0x690 [ 105.001918][ T5851] splice_direct_to_actor+0x345/0xa30 [ 105.001967][ T5851] ? __pfx_direct_splice_actor+0x10/0x10 [ 105.002017][ T5851] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 105.002063][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.002121][ T5851] do_splice_direct+0x174/0x240 [ 105.002163][ T5851] ? __pfx_do_splice_direct+0x10/0x10 [ 105.002206][ T5851] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 105.002280][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.002327][ T5851] ? rw_verify_area+0xce/0x6d0 [ 105.002379][ T5851] do_sendfile+0xadc/0xe20 [ 105.002442][ T5851] ? __pfx_do_sendfile+0x10/0x10 [ 105.002489][ T5851] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.002554][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.002601][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.002648][ T5851] ? __x64_sys_futex+0x358/0x4d0 [ 105.002712][ T5851] __x64_sys_sendfile64+0x1d8/0x220 [ 105.002778][ T5851] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 105.002848][ T5851] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.002905][ T5851] do_syscall_64+0x115/0x870 [ 105.002971][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.003012][ T5851] RIP: 0033:0x7fee0fb9e0d9 [ 105.003042][ T5851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.003078][ T5851] RSP: 002b:00007fee10b08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 105.003113][ T5851] RAX: ffffffffffffffda RBX: 00007fee0fe25fa0 RCX: 00007fee0fb9e0d9 [ 105.003139][ T5851] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 105.003162][ T5851] RBP: 00007fee0fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 105.003186][ T5851] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000000 [ 105.003209][ T5851] R13: 00007fee0fe26038 R14: 00007fee0fe25fa0 R15: 00007ffc2ba2e9e8 [ 105.003265][ T5851] [ 105.455475][ T5851] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 106.069378][ T5605] syz-executor: attempt to access beyond end of device [ 106.069378][ T5605] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 106.084246][ T5605] syz-executor: attempt to access beyond end of device [ 106.084246][ T5605] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 106.713780][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.765659][ T152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.200408][ T5750] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 107.287187][ T5750] usb 1-1: USB disconnect, device number 2 [ 107.312140][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.387919][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.437374][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.558151][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.645048][ T5625] veth0_macvtap: entered promiscuous mode [ 107.718144][ T5625] veth1_macvtap: entered promiscuous mode [ 107.836064][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.012677][ T5875] loop0: detected capacity change from 0 to 1024 [ 108.046327][ T5875] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 108.092512][ T5875] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.140694][ T5875] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 108.147631][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.205853][ T5875] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.245421][ T5875] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.15: Inode bitmap for bg 0 marked uninitialized [ 108.291181][ T5868] loop1: detected capacity change from 0 to 40427 [ 108.313335][ T5868] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 108.329719][ T5875] loop0: lost filesystem error report for type 5 error -117 [ 108.333801][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 108.348082][ C0] EXT4-fs (loop0): initial error at time 1787060675: ext4_read_inode_bitmap:168 [ 108.357179][ C0] EXT4-fs (loop0): last error at time 1787060675: ext4_read_inode_bitmap:168 [ 108.371750][ T5875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.388179][ T5868] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 108.402690][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.518689][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.555444][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.664132][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.710802][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.732968][ T5868] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 108.811823][ T5868] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.833503][ T5868] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.914132][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.964702][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.983145][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.003490][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.166230][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.202677][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.213930][ T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.230512][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.234005][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.246555][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.261501][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.269414][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.365007][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.405258][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 109.429257][ T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 109.472978][ T29] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 109.504767][ T140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.508258][ T29] usb 1-1: config 0 has no interface number 0 [ 109.518973][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.554818][ T29] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 109.558268][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.579578][ T140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.587953][ T29] usb 1-1: config 0 interface 196 has no altsetting 0 [ 109.624348][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.657297][ T29] usb 1-1: Product: syz [ 109.675583][ T29] usb 1-1: Manufacturer: syz [ 109.692011][ T29] usb 1-1: SerialNumber: syz [ 109.725592][ T12] bridge_slave_1: left allmulticast mode [ 109.746080][ T12] bridge_slave_1: left promiscuous mode [ 109.764710][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.780198][ T29] usb 1-1: config 0 descriptor?? [ 109.789172][ T5885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.807076][ T12] bridge_slave_0: left allmulticast mode [ 109.812786][ T12] bridge_slave_0: left promiscuous mode [ 109.824270][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.178768][ T5893] loop1: detected capacity change from 0 to 4096 [ 110.221078][ T5893] EXT4-fs: Ignoring removed oldalloc option [ 110.234688][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.273162][ T5893] EXT4-fs (loop1): Test dummy encryption mode enabled [ 110.284571][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.302737][ T5893] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 110.315371][ T12] bond0 (unregistering): Released all slaves [ 110.358855][ T5893] System zones: 0-5 [ 110.382664][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.437298][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.492257][ T5893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.633859][ T29] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 110.890515][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.070967][ T29] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 111.149852][ T29] usb 1-1: USB disconnect, device number 3 [ 111.221116][ T5913] ======================================================= [ 111.221116][ T5913] WARNING: The mand mount option has been deprecated and [ 111.221116][ T5913] and is ignored by this kernel. Remove the mand [ 111.221116][ T5913] option from the mount to silence this warning. [ 111.221116][ T5913] ======================================================= [ 111.291254][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.333743][ T5607] Bluetooth: hci0: command tx timeout [ 111.340809][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.507500][ T29] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 111.898785][ T12] hsr_slave_0: left promiscuous mode [ 111.925941][ T12] hsr_slave_1: left promiscuous mode [ 111.950431][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.972858][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.002821][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.037690][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.132518][ T12] veth1_macvtap: left promiscuous mode [ 112.148513][ T12] veth0_macvtap: left promiscuous mode [ 112.163124][ T12] veth1_vlan: left promiscuous mode [ 112.177266][ T12] veth0_vlan: left promiscuous mode [ 112.612991][ T5940] loop0: detected capacity change from 0 to 512 [ 112.661875][ T5940] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.160228][ T12] team0 (unregistering): Port device team_slave_1 removed [ 113.222368][ T12] team0 (unregistering): Port device team_slave_0 removed [ 113.414469][ T5607] Bluetooth: hci0: command tx timeout [ 113.476481][ T5941] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 113.521860][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 114.022722][ T5949] sit0: entered promiscuous mode [ 114.061041][ T5949] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 114.093073][ T5949] netlink: 1 bytes leftover after parsing attributes in process `syz.1.29'. [ 114.169745][ T5944] syzkaller0: entered promiscuous mode [ 114.182292][ T5944] syzkaller0: entered allmulticast mode [ 115.357275][ T5963] loop1: detected capacity change from 0 to 128 [ 115.494984][ T5607] Bluetooth: hci0: command tx timeout [ 115.826011][ T5979] Zero length message leads to an empty skb [ 117.202416][ T5992] loop5: detected capacity change from 0 to 128 [ 117.258831][ T5992] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.403688][ T5999] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 117.584486][ T5607] Bluetooth: hci0: command tx timeout [ 118.131583][ T5992] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.150835][ T6001] loop0: detected capacity change from 0 to 512 [ 118.207535][ T30] audit: type=1326 audit(1787060685.585:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.40" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 118.298509][ T30] audit: type=1326 audit(1787060685.625:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.40" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 118.428704][ T6001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.547498][ T6001] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.568497][ T30] audit: type=1326 audit(1787060685.625:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.40" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 118.595110][ T30] audit: type=1326 audit(1787060685.625:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.40" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 118.687102][ T30] audit: type=1326 audit(1787060685.625:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.40" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 119.391674][ T30] audit: type=1326 audit(1787060685.625:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.40" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 119.672639][ T30] audit: type=1326 audit(1787060685.625:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.40" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 119.825991][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.011727][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.052538][ T30] audit: type=1326 audit(1787060685.635:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.40" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 120.193714][ T5888] bridge_slave_0: entered allmulticast mode [ 120.263343][ T5888] bridge_slave_0: entered promiscuous mode [ 120.329377][ T30] audit: type=1326 audit(1787060685.655:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.40" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 120.361242][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.417996][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.443293][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.490877][ T5888] bridge_slave_1: entered allmulticast mode [ 120.554452][ T5888] bridge_slave_1: entered promiscuous mode [ 120.569841][ T30] audit: type=1326 audit(1787060685.655:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.40" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 121.024146][ T6023] futex_wake_op: syz.1.46 tries to shift op by 144; fix this program [ 121.084384][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 121.146044][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.204998][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.336990][ T5888] team0: Port device team_slave_0 added [ 121.377435][ T5888] team0: Port device team_slave_1 added [ 122.619081][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.643406][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.722321][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.768122][ T6033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.885977][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.900466][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.985554][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.024363][ T5735] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.059034][ T6043] loop5: detected capacity change from 0 to 128 [ 123.091184][ T6043] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 123.135266][ T5622] udevd[5622]: incorrect ext4 checksum on /dev/loop5 [ 123.193734][ T5735] usb 2-1: Using ep0 maxpacket: 16 [ 123.226836][ T5735] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 123.281275][ T5735] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 123.321598][ T5735] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.335267][ T5888] hsr_slave_0: entered promiscuous mode [ 123.354711][ T5888] hsr_slave_1: entered promiscuous mode [ 123.368306][ T6043] loop5: detected capacity change from 0 to 4096 [ 123.374846][ T5735] usb 2-1: config 0 has no interface number 0 [ 123.407382][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.430029][ T6043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.455087][ T5735] usb 2-1: Product: syz [ 123.473577][ T5735] usb 2-1: Manufacturer: syz [ 123.492956][ T6043] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002] [ 123.506662][ T5735] usb 2-1: SerialNumber: syz [ 123.515219][ T6043] System zones: 0-5 [ 123.538079][ T5735] usb 2-1: config 0 descriptor?? [ 123.563902][ T5735] uvcvideo 2-1:0.105: Found Unit with invalid ID 0 [ 123.598780][ T6043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.761988][ T5735] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 123.792885][ T5735] uvcvideo 2-1:0.105: No valid video chain found. [ 123.892308][ T5735] usb 2-1: USB disconnect, device number 2 [ 125.122424][ T6057] capability: warning: `syz.2.53' uses 32-bit capabilities (legacy support in use) [ 125.210540][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.301001][ T6068] loop5: detected capacity change from 0 to 256 [ 126.356527][ T6068] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 127.030438][ T5888] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.078901][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.202436][ T5888] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 127.242896][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.262020][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 127.279506][ T5888] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.329034][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.376667][ T5888] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.421038][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.570172][ T6095] loop5: detected capacity change from 0 to 16 [ 127.701268][ T6095] erofs (device loop5): mounted with root inode @ nid 36. [ 127.830925][ T6095] syz.5.60: attempt to access beyond end of device [ 127.830925][ T6095] loop5: rw=8912896, sector=8, nr_sectors = 16 limit=16 [ 127.861392][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.889574][ T6101] loop1: detected capacity change from 0 to 512 [ 127.909097][ T6095] syz.5.60: attempt to access beyond end of device [ 127.909097][ T6095] loop5: rw=8912896, sector=4295524352, nr_sectors = 16 limit=16 [ 127.930004][ T5888] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.937339][ T6098] loop2: detected capacity change from 0 to 256 [ 127.988058][ T6095] syz.5.60: attempt to access beyond end of device [ 127.988058][ T6095] loop5: rw=8912896, sector=6464, nr_sectors = 16 limit=16 [ 127.991051][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.008844][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.082657][ T6095] syz.5.60: attempt to access beyond end of device [ 128.082657][ T6095] loop5: rw=8912896, sector=36028797018963952, nr_sectors = 16 limit=16 [ 128.101505][ T6098] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 128.146684][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.153901][ T3293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.181736][ T6095] syz.5.60: attempt to access beyond end of device [ 128.181736][ T6095] loop5: rw=8388608, sector=16, nr_sectors = 8 limit=16 [ 128.293200][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 128.293222][ T30] audit: type=1800 audit(1787060695.675:75): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.60" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 128.406179][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.63'. [ 128.595236][ T6108] usb usb8: usbfs: process 6108 (syz.1.64) did not claim interface 0 before use [ 129.978428][ T6121] loop1: detected capacity change from 0 to 256 [ 130.047771][ T6121] FAT-fs (loop1): data area starts beyond volume (274 > 64) [ 130.065863][ T6119] netlink: 'syz.5.65': attribute type 13 has an invalid length. [ 130.088400][ T6121] FAT-fs (loop1): Can't find a valid FAT filesystem [ 132.665409][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.673429][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.442172][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 134.738033][ T6156] loop1: detected capacity change from 0 to 256 [ 134.765791][ T6156] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.797918][ T6158] netlink: 16 bytes leftover after parsing attributes in process `syz.5.73'. [ 134.819713][ T6156] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 134.873583][ T6156] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 134.873610][ T6158] loop5: detected capacity change from 0 to 1024 [ 134.879040][ T6158] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.917894][ T6158] EXT4-fs error (device loop5): ext4_map_blocks:835: inode #3: block 1: comm syz.5.73: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.919446][ T6156] exFAT-fs (loop1): failed to load alloc-bitmap [ 134.931972][ T6158] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 134.943051][ T6158] Quota error (device loop5): write_blk: dquota write failed [ 134.952155][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 134.952193][ C1] EXT4-fs (loop5): initial error at time 1787060702: ext4_map_blocks:835: inode 3: block 1 [ 134.952259][ C1] EXT4-fs (loop5): last error at time 1787060702: ext4_map_blocks:835: inode 3: block 1 [ 134.961830][ T6156] exFAT-fs (loop1): failed to recognize exfat type [ 134.966399][ T6158] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 134.966487][ T6158] EXT4-fs error (device loop5): ext4_acquire_dquot:7047: comm syz.5.73: Failed to acquire dquot type 0 [ 134.966530][ T6158] loop5: lost filesystem error report for type 5 error -117 [ 134.980370][ T5735] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.036346][ T6158] EXT4-fs error (device loop5): ext4_free_blocks:6717: comm syz.5.73: Freeing blocks not in datazone - block = 0, count = 4096 [ 135.049759][ T6158] loop5: lost filesystem error report for type 5 error -117 [ 135.055569][ T6158] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.73: Invalid inode bitmap blk 0 in block_group 0 [ 135.075459][ T6158] loop5: lost filesystem error report for type 5 error -117 [ 135.075585][ T48] EXT4-fs error (device loop5): ext4_map_blocks:793: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.077662][ T6158] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 135.090582][ T48] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 135.098952][ T6158] loop5: lost filesystem error report for type 5 error -117 [ 135.122025][ T6158] EXT4-fs (loop5): 1 orphan inode deleted [ 135.137814][ T6158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.159955][ T6158] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 135.167565][ T6164] loop4: detected capacity change from 0 to 2048 [ 135.194548][ T48] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 135.252746][ T48] EXT4-fs error (device loop5): ext4_release_dquot:7083: comm kworker/u8:3: Failed to release dquot type 0 [ 135.339794][ T6164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.363902][ T5735] usb 3-1: Using ep0 maxpacket: 16 [ 135.420605][ T5735] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.876402][ T6164] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.413803][ T5735] usb 3-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 137.393286][ T5735] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 137.407110][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.415806][ T5735] usb 3-1: Product: syz [ 137.420005][ T5735] usb 3-1: Manufacturer: syz [ 137.424813][ T5735] usb 3-1: SerialNumber: syz [ 137.521545][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.091830][ T5735] usb 3-1: can't set config #1, error -71 [ 138.120254][ T5735] usb 3-1: USB disconnect, device number 2 [ 138.239646][ T6188] loop2: detected capacity change from 0 to 512 [ 138.301252][ T6188] EXT4-fs: Ignoring removed orlov option [ 138.345082][ T6188] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.352541][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 138.374555][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 138.385573][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 138.396600][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 138.404988][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 138.522478][ T6188] EXT4-fs error (device loop2): ext4_iget_extra_inode:5187: inode #15: comm syz.2.78: corrupted in-inode xattr: e_value size too large [ 138.582736][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.589811][ T6188] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.592018][ T6188] EXT4-fs (loop2): Remounting filesystem read-only [ 138.601242][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 138.601275][ C0] EXT4-fs (loop2): initial error at time 1787060705: ext4_iget_extra_inode:5187: inode 15 [ 138.601328][ C0] EXT4-fs (loop2): last error at time 1787060705: ext4_iget_extra_inode:5187: inode 15 [ 138.790380][ T6188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.925237][ T6163] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 139.027176][ T6163] EXT4-fs (loop4): Remounting filesystem read-only [ 139.089966][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.512446][ T6217] loop2: detected capacity change from 0 to 4096 [ 139.568761][ T6217] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.618610][ T6217] EXT4-fs (loop2): Test dummy encryption mode enabled [ 139.663605][ T6217] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 139.683887][ T6217] System zones: 0-5 [ 139.750748][ T6217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.272383][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.474847][ T50] Bluetooth: hci6: command tx timeout [ 141.236526][ T6233] loop5: detected capacity change from 0 to 512 [ 141.241255][ T5888] veth0_vlan: entered promiscuous mode [ 141.357337][ T6233] EXT4-fs error (device loop5): ext4_quota_enable:7235: comm syz.5.87: Bad quota inum: 12023, type: 1 [ 141.368537][ T6233] loop5: lost filesystem error report for type 5 error -117 [ 141.373244][ T6233] EXT4-fs warning (device loop5): ext4_enable_quotas:7280: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 141.380657][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 141.380688][ C1] EXT4-fs (loop5): initial error at time 1787060708: ext4_quota_enable:7235 [ 141.380731][ C1] EXT4-fs (loop5): last error at time 1787060708: ext4_quota_enable:7235 [ 141.431524][ T6233] EXT4-fs (loop5): mount failed [ 142.574025][ T50] Bluetooth: hci6: command tx timeout [ 142.927630][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.157561][ T5888] veth1_vlan: entered promiscuous mode [ 143.434976][ T6246] xt_CONNSECMARK: invalid mode: 66 [ 143.446213][ T6248] netlink: 28 bytes leftover after parsing attributes in process `syz.5.92'. [ 143.498948][ T6248] netlink: 28 bytes leftover after parsing attributes in process `syz.5.92'. [ 143.555798][ T5888] veth0_macvtap: entered promiscuous mode [ 143.609728][ T5888] veth1_macvtap: entered promiscuous mode [ 143.694531][ T189] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.758716][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.878507][ T189] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.915415][ T189] usb 5-1: config 1 interface 0 altsetting 212 bulk endpoint 0x82 has invalid maxpacket 8 [ 143.950542][ T189] usb 5-1: config 1 interface 0 altsetting 212 bulk endpoint 0x3 has invalid maxpacket 64 [ 143.991224][ T189] usb 5-1: config 1 interface 0 altsetting 212 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 144.073390][ T189] usb 5-1: config 1 interface 0 has no altsetting 0 [ 144.085113][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.118793][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.151426][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.161891][ T189] usb 5-1: SerialNumber: syz [ 144.205855][ T6250] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.232963][ T6250] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.258418][ T30] audit: type=1326 audit(1787060711.635:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.5.96" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 144.300408][ T30] audit: type=1326 audit(1787060711.635:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.5.96" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 144.330496][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.350762][ T30] audit: type=1326 audit(1787060711.645:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.5.96" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 144.384181][ T30] audit: type=1326 audit(1787060711.645:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.5.96" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 144.431703][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.481354][ T30] audit: type=1326 audit(1787060711.645:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.5.96" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64ca39f947 code=0x7ffc0000 [ 144.603408][ T30] audit: type=1326 audit(1787060711.645:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.5.96" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f64ca35e90e code=0x7ffc0000 [ 144.634432][ T50] Bluetooth: hci6: command tx timeout [ 144.634961][ T30] audit: type=1326 audit(1787060711.645:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.5.96" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f64ca35e90e code=0x7ffc0000 [ 144.665998][ T6266] mmap: syz.5.97 (6266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.700989][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.733160][ T6250] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.750510][ T30] audit: type=1326 audit(1787060711.645:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.5.96" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f64ca35e90e code=0x7ffc0000 [ 144.767717][ T6250] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.775883][ T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.859657][ T30] audit: type=1326 audit(1787060711.645:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.5.96" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f64ca35e90e code=0x7ffc0000 [ 144.884580][ T3314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.884661][ T3314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.904274][ T30] audit: type=1326 audit(1787060711.645:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.5.96" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ca39e0d9 code=0x7ffc0000 [ 145.009515][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.048454][ T189] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 145.099772][ T189] usb 5-1: USB disconnect, device number 2 [ 145.533596][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.562505][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.579618][ T6284] loop2: detected capacity change from 0 to 512 [ 145.601934][ T6286] overlayfs: failed to resolve './file0': -2 [ 145.621609][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.628959][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.639900][ T6190] bridge_slave_0: entered allmulticast mode [ 145.654197][ T6284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 145.665059][ T6190] bridge_slave_0: entered promiscuous mode [ 145.711849][ T6284] System zones: 1-12 [ 145.753054][ T6284] EXT4-fs error (device loop2): ext4_do_update_inode:5750: inode #15: comm syz.2.105: corrupted inode contents [ 145.830808][ T6284] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.833675][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 145.849299][ C1] EXT4-fs (loop2): initial error at time 1787060713: ext4_do_update_inode:5750: inode 15 [ 145.859211][ C1] EXT4-fs (loop2): last error at time 1787060713: ext4_do_update_inode:5750: inode 15 [ 145.871915][ T6284] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 145.883741][ T6284] loop2: lost filesystem error report for type 5 error -117 [ 145.886428][ T6284] EXT4-fs error (device loop2): ext4_do_update_inode:5750: inode #15: comm syz.2.105: corrupted inode contents [ 145.899561][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.935609][ T6284] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.935766][ T6292] loop1: detected capacity change from 0 to 512 [ 145.960199][ T6284] EXT4-fs error (device loop2): ext4_evict_inode:317: inode #15: comm syz.2.105: mark_inode_dirty error [ 145.971159][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.011416][ T6190] bridge_slave_1: entered allmulticast mode [ 146.018400][ T6284] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.020447][ T6284] EXT4-fs (loop2): 1 orphan inode deleted [ 146.044995][ T6190] bridge_slave_1: entered promiscuous mode [ 146.071157][ T6284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.309504][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.406495][ T6190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.461228][ T6190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.694237][ T50] Bluetooth: hci6: command tx timeout [ 147.270722][ T48] bridge_slave_1: left allmulticast mode [ 147.301038][ T48] bridge_slave_1: left promiscuous mode [ 147.332206][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.393566][ T48] bridge_slave_0: left allmulticast mode [ 147.420857][ T48] bridge_slave_0: left promiscuous mode [ 147.444392][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.587019][ T6308] loop2: detected capacity change from 0 to 512 [ 147.619797][ T6308] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.691547][ T6308] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.756527][ T6308] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 147.845508][ T6308] EXT4-fs (loop2): 1 truncate cleaned up [ 147.853433][ T6313] loop1: detected capacity change from 0 to 512 [ 147.899019][ T6308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.915892][ T6313] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.089941][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.266456][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.285934][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.301224][ T48] bond0 (unregistering): Released all slaves [ 149.348317][ T6321] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 149.441763][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.464416][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.708381][ T6190] team0: Port device team_slave_0 added [ 149.748747][ T6190] team0: Port device team_slave_1 added [ 149.863054][ T6331] loop1: detected capacity change from 0 to 256 [ 150.036051][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.067636][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.170088][ T6190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.329016][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.356196][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.394526][ T6344] overlayfs: missing 'lowerdir' [ 150.434912][ T6190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.463470][ T6333] syzkaller0: refused to change device tx_queue_len [ 150.566123][ T48] hsr_slave_0: left promiscuous mode [ 150.586052][ T48] hsr_slave_1: left promiscuous mode [ 150.605197][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.633834][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.663096][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.685591][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.747820][ T48] veth1_macvtap: left promiscuous mode [ 150.770026][ T48] veth0_macvtap: left promiscuous mode [ 150.789428][ T48] veth1_vlan: left promiscuous mode [ 150.807246][ T48] veth0_vlan: left promiscuous mode [ 151.358710][ T6360] loop2: detected capacity change from 0 to 256 [ 151.719428][ T48] team0 (unregistering): Port device team_slave_1 removed [ 151.738843][ T6350] loop1: detected capacity change from 0 to 40427 [ 151.759344][ T6350] F2FS-fs (loop1): invalid crc value [ 151.805838][ T48] team0 (unregistering): Port device team_slave_0 removed [ 152.028909][ T6350] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 152.077188][ T6350] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 152.106893][ T6350] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 152.132977][ T6350] F2FS-fs (loop1): Start checkpoint disabled! [ 152.172123][ T6350] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 152.183182][ T6350] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 152.228817][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 152.509511][ T6190] hsr_slave_0: entered promiscuous mode [ 152.537744][ T6190] hsr_slave_1: entered promiscuous mode [ 152.564656][ T6190] debugfs: 'hsr0' already exists in 'hsr' [ 153.367794][ T6190] Cannot create hsr debugfs directory [ 153.901650][ T6369] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 154.426539][ T5735] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 154.553873][ T140] kworker/u8:6: attempt to access beyond end of device [ 154.553873][ T140] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 154.700056][ T140] CPU: 1 UID: 0 PID: 140 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 154.700105][ T140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 154.700130][ T140] Workqueue: writeback wb_workfn (flush-7:1) [ 154.700200][ T140] Call Trace: [ 154.700212][ T140] [ 154.700226][ T140] dump_stack_lvl+0x100/0x190 [ 154.700274][ T140] f2fs_stop_checkpoint+0x5e6/0xb30 [ 154.700340][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.700387][ T140] ? errseq_set+0xe3/0x150 [ 154.700450][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.700506][ T140] f2fs_write_end_bio+0xf53/0x1340 [ 154.700556][ T140] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 154.700605][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.700665][ T140] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 154.700708][ T140] bio_endio+0x778/0x8e0 [ 154.700762][ T140] submit_bio_noacct+0x64c/0x1ff0 [ 154.700840][ T140] f2fs_submit_write_bio+0x133/0x330 [ 154.700906][ T140] __submit_merged_bio+0x330/0x7b0 [ 154.700945][ T140] ? rcu_is_watching+0x12/0xc0 [ 154.701011][ T140] __submit_merged_write_cond+0x3fe/0x510 [ 154.701065][ T140] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 154.701121][ T140] ? __pfx___might_resched+0x10/0x10 [ 154.701164][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.701210][ T140] ? folio_clear_dirty_for_io+0x178/0x960 [ 154.701283][ T140] f2fs_write_cache_pages+0x20e9/0x2630 [ 154.701359][ T140] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 154.701408][ T140] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 154.701472][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.701518][ T140] ? find_held_lock+0x2b/0x80 [ 154.701583][ T140] ? nr_blockdev_pages+0xde/0x120 [ 154.701753][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.701799][ T140] ? find_held_lock+0x2b/0x80 [ 154.701857][ T140] ? f2fs_write_meta_pages+0x45c/0x6f0 [ 154.701905][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.701951][ T140] ? rcu_is_watching+0x12/0xc0 [ 154.702016][ T140] f2fs_write_data_pages+0x799/0x16d0 [ 154.702063][ T140] ? up_write+0x2e5/0x5c0 [ 154.702129][ T140] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 154.702200][ T140] ? __lock_acquire+0x49f/0x1a40 [ 154.702243][ T140] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 154.702297][ T140] do_writepages+0x278/0x600 [ 154.702341][ T140] ? __pfx_do_writepages+0x10/0x10 [ 154.702380][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.702426][ T140] ? reacquire_held_locks+0xce/0x1e0 [ 154.702479][ T140] __writeback_single_inode+0x164/0x1560 [ 154.702538][ T140] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 154.702599][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.702650][ T140] ? __pfx___writeback_single_inode+0x10/0x10 [ 154.702708][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.702754][ T140] ? do_raw_spin_unlock+0x145/0x1e0 [ 154.702809][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.702864][ T140] writeback_sb_inodes+0x766/0x1c50 [ 154.702950][ T140] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 154.703006][ T140] ? do_raw_spin_lock+0x128/0x260 [ 154.703061][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.703180][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.703227][ T140] ? rcu_is_watching+0x12/0xc0 [ 154.703283][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.703329][ T140] ? queue_io+0x287/0x530 [ 154.703383][ T140] wb_writeback+0x1c0/0xb50 [ 154.703457][ T140] ? __pfx_wb_writeback+0x10/0x10 [ 154.703529][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.703580][ T140] ? mark_held_locks+0x40/0x70 [ 154.703624][ T140] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.703678][ T140] wb_workfn+0x143/0xc80 [ 154.703743][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.703789][ T140] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 154.703838][ T140] ? __pfx_wb_workfn+0x10/0x10 [ 154.703901][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.703953][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.704004][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.704050][ T140] ? rcu_is_watching+0x12/0xc0 [ 154.704118][ T140] process_one_work+0xa23/0x1940 [ 154.704184][ T140] ? __pfx_process_one_work+0x10/0x10 [ 154.704221][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.704287][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.704343][ T140] worker_thread+0x5ef/0xe50 [ 154.704405][ T140] ? kthread+0x13a/0x450 [ 154.704437][ T140] ? __pfx_worker_thread+0x10/0x10 [ 154.704475][ T140] kthread+0x370/0x450 [ 154.704508][ T140] ? __pfx_kthread+0x10/0x10 [ 154.704551][ T140] ret_from_fork+0x72b/0xd50 [ 154.704608][ T140] ? __pfx_ret_from_fork+0x10/0x10 [ 154.704664][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.704710][ T140] ? __switch_to+0x800/0x10f0 [ 154.704745][ T140] ? __switch_to_asm+0x39/0x70 [ 154.704800][ T140] ? __pfx_kthread+0x10/0x10 [ 154.704839][ T140] ret_from_fork_asm+0x1a/0x30 [ 154.704924][ T140] [ 155.305754][ T140] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 155.312899][ T140] CPU: 1 UID: 0 PID: 140 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 155.312945][ T140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.312970][ T140] Workqueue: writeback wb_workfn (flush-7:1) [ 155.313038][ T140] Call Trace: [ 155.313050][ T140] [ 155.313063][ T140] dump_stack_lvl+0x100/0x190 [ 155.313112][ T140] f2fs_stop_checkpoint+0x5e6/0xb30 [ 155.313177][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.313224][ T140] ? errseq_set+0xe3/0x150 [ 155.313288][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.313345][ T140] f2fs_write_end_bio+0xf53/0x1340 [ 155.313391][ T140] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 155.313440][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.313499][ T140] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 155.313539][ T140] bio_endio+0x778/0x8e0 [ 155.313599][ T140] submit_bio_noacct+0x64c/0x1ff0 [ 155.313682][ T140] f2fs_submit_write_bio+0x133/0x330 [ 155.313749][ T140] __submit_merged_bio+0x330/0x7b0 [ 155.313789][ T140] ? rcu_is_watching+0x12/0xc0 [ 155.313856][ T140] __submit_merged_write_cond+0x3fe/0x510 [ 155.313910][ T140] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 155.313966][ T140] ? __pfx___might_resched+0x10/0x10 [ 155.314009][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.314055][ T140] ? folio_clear_dirty_for_io+0x178/0x960 [ 155.314129][ T140] f2fs_write_cache_pages+0x20e9/0x2630 [ 155.314204][ T140] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 155.314254][ T140] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 155.314319][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.314366][ T140] ? find_held_lock+0x2b/0x80 [ 155.314425][ T140] ? nr_blockdev_pages+0xde/0x120 [ 155.314600][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.314646][ T140] ? find_held_lock+0x2b/0x80 [ 155.314716][ T140] ? f2fs_write_meta_pages+0x45c/0x6f0 [ 155.314777][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.314823][ T140] ? rcu_is_watching+0x12/0xc0 [ 155.314888][ T140] f2fs_write_data_pages+0x799/0x16d0 [ 155.314936][ T140] ? up_write+0x2e5/0x5c0 [ 155.315001][ T140] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.315073][ T140] ? __lock_acquire+0x49f/0x1a40 [ 155.315115][ T140] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.315170][ T140] do_writepages+0x278/0x600 [ 155.315215][ T140] ? __pfx_do_writepages+0x10/0x10 [ 155.315253][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.315300][ T140] ? reacquire_held_locks+0xce/0x1e0 [ 155.315352][ T140] __writeback_single_inode+0x164/0x1560 [ 155.315412][ T140] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 155.315468][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.315518][ T140] ? __pfx___writeback_single_inode+0x10/0x10 [ 155.315582][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.315629][ T140] ? do_raw_spin_unlock+0x145/0x1e0 [ 155.315684][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.315739][ T140] writeback_sb_inodes+0x766/0x1c50 [ 155.315825][ T140] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 155.315881][ T140] ? do_raw_spin_lock+0x128/0x260 [ 155.315936][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.316054][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.316102][ T140] ? rcu_is_watching+0x12/0xc0 [ 155.316158][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.316204][ T140] ? queue_io+0x287/0x530 [ 155.316259][ T140] wb_writeback+0x1c0/0xb50 [ 155.316332][ T140] ? __pfx_wb_writeback+0x10/0x10 [ 155.316405][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.316451][ T140] ? mark_held_locks+0x40/0x70 [ 155.316496][ T140] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.316557][ T140] wb_workfn+0x143/0xc80 [ 155.316621][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.316668][ T140] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.316717][ T140] ? __pfx_wb_workfn+0x10/0x10 [ 155.316779][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.316831][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.316883][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.316929][ T140] ? rcu_is_watching+0x12/0xc0 [ 155.316997][ T140] process_one_work+0xa23/0x1940 [ 155.317063][ T140] ? __pfx_process_one_work+0x10/0x10 [ 155.317101][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.317167][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.317222][ T140] worker_thread+0x5ef/0xe50 [ 155.317285][ T140] ? kthread+0x13a/0x450 [ 155.317317][ T140] ? __pfx_worker_thread+0x10/0x10 [ 155.317355][ T140] kthread+0x370/0x450 [ 155.317388][ T140] ? __pfx_kthread+0x10/0x10 [ 155.317428][ T140] ret_from_fork+0x72b/0xd50 [ 155.317484][ T140] ? __pfx_ret_from_fork+0x10/0x10 [ 155.317540][ T140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.317591][ T140] ? __switch_to+0x800/0x10f0 [ 155.317627][ T140] ? __switch_to_asm+0x39/0x70 [ 155.317682][ T140] ? __pfx_kthread+0x10/0x10 [ 155.317721][ T140] ret_from_fork_asm+0x1a/0x30 [ 155.317806][ T140] [ 155.839224][ T140] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 155.866036][ T5735] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.121782][ T5735] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 156.132373][ T5735] usb 7-1: can't read configurations, error -71 [ 156.975045][ T6190] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 157.037903][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.069177][ T6190] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 157.367731][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.423229][ T6190] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 157.480466][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.489936][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 157.490028][ T30] audit: type=1326 audit(1787060724.875:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.2.138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebb9e0d9 code=0x7ffc0000 [ 157.536402][ T6190] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 157.597884][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.598233][ T30] audit: type=1326 audit(1787060724.915:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.2.138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebb9e0d9 code=0x7ffc0000 [ 157.749676][ T30] audit: type=1326 audit(1787060724.915:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.2.138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f59ebb9e0d9 code=0x7ffc0000 [ 157.901277][ T30] audit: type=1326 audit(1787060724.915:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.2.138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebb9e0d9 code=0x7ffc0000 [ 158.023326][ T30] audit: type=1326 audit(1787060724.915:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.2.138" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebb9e0d9 code=0x7ffc0000 [ 158.149611][ T6400] loop6: detected capacity change from 0 to 40427 [ 158.384059][ T6437] futex_wake_op: syz.2.140 tries to shift op by -1; fix this program [ 159.026643][ T6400] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 159.061265][ T6400] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 159.399791][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.540113][ T6190] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.667159][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.674408][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.831417][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.838711][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.957949][ T6400] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 162.184254][ T6484] futex_wake_op: syz.1.147 tries to shift op by 144; fix this program [ 162.319008][ T6485] loop6: detected capacity change from 0 to 512 [ 162.876857][ T6485] EXT4-fs (loop6): blocks per group (95) and clusters per group (64) inconsistent [ 164.005013][ T6483] loop4: detected capacity change from 0 to 512 [ 164.786620][ T6483] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 167.346812][ T5735] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.538104][ T5735] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 167.546710][ T6190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.597608][ T5735] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 167.628376][ T5735] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 167.668360][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.694749][ T5735] usb 5-1: Product: syz [ 167.699299][ T6519] netlink: 96 bytes leftover after parsing attributes in process `syz.5.156'. [ 167.708981][ T5735] usb 5-1: Manufacturer: syz [ 167.720928][ T5735] usb 5-1: SerialNumber: syz [ 168.943834][ T5736] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.164788][ T5736] usb 3-1: Using ep0 maxpacket: 8 [ 169.202217][ T5736] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 169.288425][ T5736] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 169.316557][ T6537] netlink: 120 bytes leftover after parsing attributes in process `syz.6.161'. [ 169.352016][ T5736] usb 3-1: config 179 has no interface number 0 [ 169.371400][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.161'. [ 169.407051][ T5736] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 169.482324][ T5736] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 169.560510][ T5736] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 169.636099][ T5736] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 169.720138][ T5736] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.763314][ T5735] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 169.854700][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.960938][ T6530] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 169.983865][ T5843] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 170.115468][ T5735] usb 5-1: USB disconnect, device number 3 [ 170.146859][ T6190] veth0_vlan: entered promiscuous mode [ 170.216886][ T5843] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 170.219262][ T5735] usblp0: removed [ 170.234304][ T6190] veth1_vlan: entered promiscuous mode [ 170.263384][ T5843] usb 6-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 170.338731][ T6542] loop6: detected capacity change from 0 to 4096 [ 170.427703][ T6542] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 170.483495][ T6542] EXT4-fs (loop6): Test dummy encryption mode enabled [ 170.513718][ T6190] veth0_macvtap: entered promiscuous mode [ 170.561444][ T5750] usb 3-1: USB disconnect, device number 3 [ 170.561475][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 170.575973][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 170.580514][ T6542] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 170.601629][ T6190] veth1_macvtap: entered promiscuous mode [ 170.678812][ T5843] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.688611][ T6542] System zones: 0-5 [ 170.699105][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.716949][ T5843] usb 6-1: Product: syz [ 170.738323][ T6542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.777452][ T5843] usb 6-1: Manufacturer: syz [ 170.926834][ T5843] usb 6-1: SerialNumber: syz [ 171.515912][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.632082][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.809344][ T5843] usb 6-1: 0:1 : does not exist [ 171.828779][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.871350][ T5843] usb 6-1: unit 4 not found! [ 171.882389][ T3293] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.912227][ T5843] usb 6-1: unit 51 not found! [ 171.969804][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.025662][ T6486] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.224747][ T30] audit: type=1326 audit(1787060739.615:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.2.167" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebb9e0d9 code=0x7ffc0000 [ 172.270797][ T6486] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.447089][ T5843] usb 6-1: USB disconnect, device number 2 [ 172.501346][ T30] audit: type=1326 audit(1787060739.655:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.2.167" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebb9e0d9 code=0x7ffc0000 [ 172.749555][ T3293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.823507][ T30] audit: type=1326 audit(1787060739.655:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.2.167" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f59ebb9e0d9 code=0x7ffc0000 [ 172.824091][ T3293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.930031][ T30] audit: type=1326 audit(1787060739.655:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.2.167" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebb9e0d9 code=0x7ffc0000 [ 173.067882][ T30] audit: type=1326 audit(1787060739.655:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.2.167" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebb9e0d9 code=0x7ffc0000 [ 173.159952][ T6566] loop6: detected capacity change from 0 to 1024 [ 173.199984][ T6566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.235337][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.237340][ T6566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.281126][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.336057][ T6566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.394834][ T6566] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.441252][ T6569] netlink: 'syz.5.172': attribute type 13 has an invalid length. [ 173.602648][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 174.361317][ T6577] netlink: 156 bytes leftover after parsing attributes in process `syz.5.172'. [ 175.039600][ T6596] loop6: detected capacity change from 0 to 512 [ 175.113102][ T6596] FAT-fs (loop6): bogus sectors per cluster 0 [ 175.164275][ T6596] FAT-fs (loop6): Can't find a valid FAT filesystem [ 175.346147][ T6599] loop7: detected capacity change from 0 to 512 [ 175.397245][ T6599] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4)! [ 175.438705][ T6599] EXT4-fs (loop7): group descriptors corrupted! [ 175.790639][ T30] audit: type=1804 audit(1787060743.175:99): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.180" name="bus" dev="ramfs" ino=13456 res=1 errno=0 [ 175.838203][ T30] audit: type=1804 audit(1787060743.175:100): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.180" name="bus" dev="ramfs" ino=13456 res=1 errno=0 [ 176.085995][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 176.188385][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.582236][ T5622] udevd[5622]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory [ 176.622820][ T5622] udevd[5622]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 176.877806][ T6599] loop7: detected capacity change from 0 to 8192 [ 177.246456][ T6613] loop2: detected capacity change from 0 to 16 [ 177.296669][ T6613] erofs (device loop2): mounted with root inode @ nid 36. [ 177.339300][ T6613] erofs (device loop2): invalid h_shared_count 83 @ nid 46 [ 177.349123][ T6613] evm: overlay not supported [ 177.357789][ T6613] erofs (device loop2): invalid h_shared_count 83 @ nid 46 [ 177.516624][ T6616] loop1: detected capacity change from 0 to 256 [ 177.581122][ T6616] exFAT-fs (loop1): error, The cluster chain has a loop [ 177.591763][ T6616] exFAT-fs (loop1): Filesystem has been set read-only [ 177.613392][ T6616] exFAT-fs (loop1): failed to count the number of clusters in root [ 177.631846][ T6618] loop2: detected capacity change from 0 to 512 [ 177.638995][ T6616] exFAT-fs (loop1): failed to recognize exfat type [ 177.694959][ T6618] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.778928][ T6618] EXT4-fs (loop2): 1 truncate cleaned up [ 177.829202][ T6618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.929513][ T6618] EXT4-fs error (device loop2): ext4_generic_delete_entry:2672: inode #2: block 13: comm syz.2.185: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 177.966636][ T6618] EXT4-fs (loop2): Remounting filesystem read-only [ 177.975433][ T6618] EXT4-fs warning (device loop2): ext4_rename_delete:3737: inode #2: comm syz.2.185: Deleting old file: nlink 5, error=-117 [ 178.053879][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.184588][ T6624] loop7: detected capacity change from 0 to 256 [ 178.244202][ T6624] capability: warning: `syz.7.186' uses deprecated v2 capabilities in a way that may be insecure [ 178.675214][ T6639] loop7: detected capacity change from 0 to 512 [ 178.688944][ T6639] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 150994962)! [ 178.718508][ T6639] EXT4-fs (loop7): group descriptors corrupted! [ 178.937898][ T6639] loop7: detected capacity change from 0 to 8192 [ 180.037385][ T6658] loop4: detected capacity change from 0 to 128 [ 180.084622][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 180.229232][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.305627][ T6666] loop6: detected capacity change from 0 to 256 [ 180.378017][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.379176][ T6666] exfat: Deprecated parameter 'utf8' [ 180.446349][ T6666] exfat: Deprecated parameter 'namecase' [ 180.481405][ T6666] exfat: Deprecated parameter 'namecase' [ 180.587674][ T6666] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 181.545524][ T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 181.642050][ T6706] loop7: detected capacity change from 0 to 4096 [ 181.659380][ T6706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.671197][ T6706] EXT4-fs (loop7): Test dummy encryption mode enabled [ 181.682099][ T6706] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80ec1a8, mo2=0003] [ 181.691240][ T6706] System zones: 0-5 [ 181.701557][ T6706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.974854][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 181.996952][ T29] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 182.012354][ T6716] loop6: detected capacity change from 0 to 512 [ 182.035405][ T29] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 182.189875][ T29] usb 3-1: config 0 has no interface number 0 [ 182.384967][ T29] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 182.596176][ T29] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 182.763570][ T6716] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 182.810896][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.838083][ T29] usb 3-1: Product: syz [ 182.852326][ T29] usb 3-1: Manufacturer: syz [ 182.865803][ T29] usb 3-1: SerialNumber: syz [ 182.886508][ T29] usb 3-1: config 0 descriptor?? [ 182.923551][ T6695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.929984][ T6190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.965454][ T6695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.984020][ T6716] EXT4-fs (loop6): 1 truncate cleaned up [ 183.019784][ T6721] loop5: detected capacity change from 0 to 2048 [ 183.111474][ T6716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.139376][ T6721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.260089][ T6727] loop4: detected capacity change from 0 to 512 [ 183.331951][ T6695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.427683][ T6695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.704069][ T29] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 183.781160][ T29] asix 3-1:0.34: probe with driver asix failed with error -61 [ 184.097349][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.176995][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.901038][ T6756] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 184.996833][ T6756] flags: 0xfff10000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 185.035528][ T6756] raw: 00fff10000000014 0000000000000000 dead000000000122 0000000000000000 [ 185.074990][ T6756] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 185.111718][ T9] usb 3-1: USB disconnect, device number 4 [ 185.119294][ T6756] page dumped because: unmovable page [ 185.165954][ T6756] page_owner tracks the page as allocated [ 185.227521][ T6756] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 6178, tgid 6178 (syz-executor), ts 137592877896, free_ts 26067572234 [ 185.344001][ T6756] post_alloc_hook+0xfd/0x120 [ 185.357979][ T6736] loop7: detected capacity change from 0 to 512 [ 185.370775][ T6756] get_page_from_freelist+0xf48/0x3530 [ 185.398140][ T6756] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 185.418903][ T6756] alloc_pages_mpol+0x1fb/0x540 [ 185.433809][ T6756] alloc_pages_noprof+0x1a/0x160 [ 185.444407][ T6736] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.219: Bad quota inum: 12023, type: 1 [ 185.453857][ T6756] __vmalloc_node_range_noprof+0xf9a/0x1630 [ 185.468377][ T6736] loop7: lost filesystem error report for type 5 error -117 [ 185.473662][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 185.487466][ C1] EXT4-fs (loop7): initial error at time 1787060752: ext4_quota_enable:7235 [ 185.496206][ C1] EXT4-fs (loop7): last error at time 1787060752: ext4_quota_enable:7235 [ 185.502362][ T6756] vmalloc_user_noprof+0x9e/0xe0 [ 185.506845][ T6736] EXT4-fs warning (device loop7): ext4_enable_quotas:7280: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 185.534803][ T6736] EXT4-fs (loop7): mount failed [ 185.546142][ T6756] kcov_ioctl+0x4d/0x750 [ 185.565220][ T6756] __x64_sys_ioctl+0x18e/0x210 [ 185.583716][ T6756] do_syscall_64+0x115/0x870 [ 185.595614][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.626227][ T6756] page last free pid 1 tgid 1 stack trace: [ 185.691655][ T6756] free_pages_prepare+0x586/0xd80 [ 185.709247][ T6756] __free_contig_range_common+0x14f/0x250 [ 185.731815][ T6756] destroy_args+0xa8/0x7a0 [ 185.750995][ T6756] debug_vm_pgtable+0x1d69/0x3490 [ 185.770321][ T6756] do_one_initcall+0x11d/0x700 [ 185.790948][ T6756] kernel_init_freeable+0x6ea/0x7b0 [ 185.805173][ T6756] kernel_init+0x21/0x1e0 [ 185.817131][ T6756] ret_from_fork+0x72b/0xd50 [ 185.829729][ T6756] ret_from_fork_asm+0x1a/0x30 [ 185.841831][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 186.205680][ T6778] loop6: detected capacity change from 0 to 512 [ 186.258789][ T6778] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.773162][ T6788] loop5: detected capacity change from 0 to 256 [ 186.948641][ T6788] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 186.976274][ T6788] FAT-fs (loop5): Filesystem has been set read-only [ 187.784683][ T6788] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 188.527298][ T6815] netlink: 60 bytes leftover after parsing attributes in process `syz.4.238'. [ 188.554665][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.574436][ T189] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 188.751711][ T189] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.806939][ T189] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.869381][ T189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.899627][ T6823] loop4: detected capacity change from 0 to 128 [ 188.909521][ T189] usb 6-1: SerialNumber: syz [ 188.924534][ T6823] EXT4-fs: Ignoring removed orlov option [ 189.006196][ T6823] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.040624][ T6823] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.271568][ T5625] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.354914][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 189.478927][ T6831] loop6: detected capacity change from 0 to 512 [ 189.512910][ T6831] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 189.544010][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.597588][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.597710][ T189] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 189.616749][ T6831] EXT4-fs (loop6): 1 truncate cleaned up [ 189.676052][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.705765][ T6831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.746977][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 189.775882][ T29] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.841202][ T9] usb 6-1: USB disconnect, device number 3 [ 190.090329][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.104378][ T29] usb 8-1: Product: syz [ 190.108580][ T29] usb 8-1: Manufacturer: syz [ 190.113186][ T29] usb 8-1: SerialNumber: syz [ 190.153021][ T29] cdc_mbim 8-1:1.0: skipping garbage [ 191.187068][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.779516][ T29] cdc_mbim 8-1:1.0: bind() failure [ 192.009860][ T6860] loop5: detected capacity change from 0 to 512 [ 192.064726][ T6860] EXT4-fs (loop5): Test dummy encryption mode enabled [ 192.082781][ T29] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 192.113974][ T29] usb 8-1: USB disconnect, device number 2 [ 192.136491][ T6860] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.783202][ T6860] EXT4-fs (loop5): 1 truncate cleaned up [ 192.837785][ T6860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.842192][ T6868] loop6: detected capacity change from 0 to 128 [ 193.096231][ T6860] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6491: inode #15: comm syz.5.252: bad extra_isize 62 (inode size 256) [ 193.185418][ T6860] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6491: inode #15: comm syz.5.252: bad extra_isize 62 (inode size 256) [ 193.259103][ T6860] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6491: inode #15: comm syz.5.252: bad extra_isize 62 (inode size 256) [ 193.527607][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.582912][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.593102][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.974078][ T5757] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 194.875211][ T5757] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 194.959243][ T5757] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 195.003468][ T5757] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 195.042920][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.050851][ T6899] loop1: detected capacity change from 0 to 16 [ 195.060003][ T5757] usb 5-1: Product: syz [ 195.076485][ T5757] usb 5-1: Manufacturer: syz [ 195.107647][ T5757] usb 5-1: SerialNumber: syz [ 195.108352][ T6899] erofs (device loop1): mounted with root inode @ nid 36. [ 195.113295][ T6903] loop7: detected capacity change from 0 to 128 [ 195.224459][ T6903] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 195.291987][ T6903] FAT-fs (loop7): data area starts beyond volume (36 > 6) [ 195.331048][ T6903] FAT-fs (loop7): Can't find a valid FAT filesystem [ 195.401464][ T5757] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 195.460011][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 195.835456][ T189] usb 5-1: USB disconnect, device number 4 [ 195.907334][ T189] usblp0: removed [ 196.771368][ T6938] binder: 6935:6938 ioctl c018620c 200000000040 returned -22 [ 196.938962][ C1] Illegal XDP return value 16128 on prog (id 20) dev lo, expect packet loss! [ 197.216202][ T6941] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 201.706534][ T6977] loop6: detected capacity change from 0 to 512 [ 201.713345][ T6974] loop7: detected capacity change from 0 to 1024 [ 201.740876][ T6974] EXT4-fs: Ignoring removed bh option [ 201.759635][ T6974] EXT4-fs: Ignoring removed bh option [ 201.778187][ T6974] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 201.819989][ T6977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.922672][ T6974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.041344][ T5888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.236157][ T6190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.322445][ T6987] loop6: detected capacity change from 0 to 256 [ 202.354369][ T6987] vfat: Deprecated parameter 'posix' [ 202.356142][ T6971] loop4: detected capacity change from 0 to 512 [ 202.381725][ T6987] FAT-fs: "posix" option is obsolete, not supported now [ 202.440896][ T6971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 202.467089][ T6971] System zones: 1-12 [ 202.473818][ T6971] EXT4-fs error (device loop4): ext4_iget_extra_inode:5187: inode #15: comm syz.4.280: corrupted in-inode xattr: e_value size too large [ 202.524794][ T6971] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.534292][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 202.549945][ C1] EXT4-fs (loop4): initial error at time 1787060769: ext4_iget_extra_inode:5187: inode 15 [ 202.559924][ C1] EXT4-fs (loop4): last error at time 1787060769: ext4_iget_extra_inode:5187: inode 15 [ 202.582810][ T6971] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.280: couldn't read orphan inode 15 (err -117) [ 202.594663][ T6971] loop4: lost filesystem error report for type 5 error -117 [ 202.645500][ T6971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.110759][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.420617][ T6985] loop5: detected capacity change from 0 to 40427 [ 203.466603][ T6985] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 203.513942][ T6985] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 203.921848][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.936046][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.945272][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.956832][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.967386][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.114841][ T6985] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 204.168928][ T6985] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 204.201330][ T6985] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 204.461126][ T30] audit: type=1804 audit(1787060771.845:101): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.285" name="/newroot/56/bus/bus" dev="loop5" ino=10 res=1 errno=0 [ 204.471299][ T7009] loop1: detected capacity change from 0 to 512 [ 204.506045][ T6994] loop6: detected capacity change from 0 to 40427 [ 204.545983][ T6994] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 204.566105][ T7009] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.601251][ T6994] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 204.643581][ T7011] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 204.967356][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.5.285'. [ 204.995687][ T7011] ip6tnl0: Caught tx_queue_len zero misconfig [ 205.350613][ T7018] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 205.858437][ T6994] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 205.924096][ T6994] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 205.946207][ T6994] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 206.056431][ T5607] Bluetooth: hci1: command tx timeout [ 206.530228][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.133696][ T5607] Bluetooth: hci1: command tx timeout [ 208.784341][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.002874][ T7058] process 'syz.6.294' launched './file1' with NULL argv: empty string added [ 209.130152][ T7060] loop5: detected capacity change from 0 to 1024 [ 209.153226][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.283485][ T7060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.396894][ T7053] loop4: detected capacity change from 0 to 8192 [ 209.671946][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.153479][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.214213][ T5607] Bluetooth: hci1: command tx timeout [ 211.348921][ T7093] loop7: detected capacity change from 0 to 512 [ 211.425056][ T29] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 211.452939][ T7093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.517226][ T7093] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.616430][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 211.659563][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.704854][ T7104] loop6: detected capacity change from 0 to 512 [ 211.719353][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 211.746955][ T30] audit: type=1800 audit(1787060779.125:102): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.311" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 211.772826][ T7104] EXT4-fs (loop6): blocks per group (34) and clusters per group (32768) inconsistent [ 211.808416][ T29] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 211.873288][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 211.911019][ T29] usb 2-1: SerialNumber: syz [ 212.009968][ T29] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 212.057994][ T29] usb-storage 2-1:1.0: USB Mass Storage device detected [ 212.148656][ T29] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 212.304194][ T5607] Bluetooth: hci1: command tx timeout [ 212.352811][ T7116] loop4: detected capacity change from 0 to 16 [ 212.412660][ T7116] erofs (device loop4): mounted with root inode @ nid 36. [ 213.387173][ T5750] usb 2-1: USB disconnect, device number 3 [ 213.429560][ T6190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.447529][ T70] bridge_slave_1: left allmulticast mode [ 213.469916][ T70] bridge_slave_1: left promiscuous mode [ 213.496518][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.561031][ T70] bridge_slave_0: left allmulticast mode [ 213.579873][ T70] bridge_slave_0: left promiscuous mode [ 213.607406][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.928884][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 214.324945][ T7146] loop1: detected capacity change from 0 to 512 [ 214.848376][ T7146] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.322: bad orphan inode 15 [ 215.017177][ T7146] loop1: lost filesystem error report for type 5 error -117 [ 215.018986][ T7146] ext4_test_bit(bit=14, block=5) = 0 [ 215.026385][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 215.026417][ C1] EXT4-fs (loop1): initial error at time 1787060782: ext4_orphan_get:1425 [ 215.026459][ C1] EXT4-fs (loop1): last error at time 1787060782: ext4_orphan_get:1425 [ 215.097202][ T7156] loop7: detected capacity change from 0 to 256 [ 215.124037][ T7156] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.124062][ T7156] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 215.153127][ T7156] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 215.161963][ T7156] exFAT-fs (loop7): failed to load alloc-bitmap [ 215.161984][ T7156] exFAT-fs (loop7): failed to recognize exfat type [ 215.441617][ T7146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.622585][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.653056][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.694789][ T70] bond0 (unregistering): Released all slaves [ 215.749812][ T7163] tipc: MTU too low for tipc bearer [ 215.810481][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.170483][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 216.181691][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 216.187872][ T5608] Bluetooth: hci3: command 0x0406 tx timeout [ 216.303512][ T7167] loop7: detected capacity change from 0 to 512 [ 216.951136][ T7167] ext4: Unknown parameter 'noacl' [ 217.107627][ T7167] usb usb8: usbfs: process 7167 (syz.7.328) did not claim interface 0 before use [ 218.835020][ T7200] loop7: detected capacity change from 0 to 1024 [ 219.714263][ T7196] input: syz0 as /devices/virtual/input/input5 [ 219.849963][ T7200] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 219.944912][ T7200] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 219.963766][ T7200] EXT4-fs error (device loop7): ext4_acquire_dquot:7047: comm syz.7.335: Failed to acquire dquot type 0 [ 219.982258][ T70] hsr_slave_0: left promiscuous mode [ 220.037523][ T70] hsr_slave_1: left promiscuous mode [ 220.061418][ T7200] loop7: lost filesystem error report for type 5 error -5 [ 220.063653][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 220.077283][ C0] EXT4-fs (loop7): initial error at time 1787060787: ext4_acquire_dquot:7047 [ 220.086079][ C0] EXT4-fs (loop7): last error at time 1787060787: ext4_acquire_dquot:7047 [ 220.110541][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.118333][ T5843] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 220.147078][ T7200] EXT4-fs (loop7): 1 truncate cleaned up [ 220.152130][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.230274][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.232537][ T7200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.285420][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.404709][ T7216] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 220.443946][ T7216] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 220.480243][ T7216] EXT4-fs error (device loop7): ext4_acquire_dquot:7047: comm syz.7.335: Failed to acquire dquot type 0 [ 220.550198][ T5843] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.561873][ T5843] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.573855][ T5843] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 220.588255][ T5843] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 221.414016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 221.597836][ T70] veth1_macvtap: left promiscuous mode [ 222.348242][ T70] veth0_macvtap: left promiscuous mode [ 222.354039][ T70] veth1_vlan: left promiscuous mode [ 222.359345][ T70] veth0_vlan: left promiscuous mode [ 222.404301][ T5843] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 222.431570][ T5843] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 222.477861][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.500939][ T5843] usb 7-1: Product: syz [ 222.515778][ T5843] usb 7-1: Manufacturer: syz [ 222.523760][ T6190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.556634][ T5843] cdc_wdm 7-1:1.0: skipping garbage [ 222.580534][ T5843] cdc_wdm 7-1:1.0: skipping garbage [ 222.651997][ T5843] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 222.671962][ T5843] cdc_wdm 7-1:1.0: Unknown control protocol [ 222.808831][ T10] usb 7-1: USB disconnect, device number 4 [ 223.103980][ T5750] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 223.274625][ T5750] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 223.301064][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 223.315920][ T5750] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.345558][ T5750] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.371010][ T5750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 223.387834][ T5750] usb 6-1: SerialNumber: syz [ 223.484975][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 223.507115][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 223.531072][ T70] team0 (unregistering): Port device team_slave_1 removed [ 223.542771][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.560574][ T10] usb 8-1: Product: syz [ 223.572320][ T10] usb 8-1: Manufacturer: syz [ 223.582991][ T10] usb 8-1: SerialNumber: syz [ 223.590181][ T70] team0 (unregistering): Port device team_slave_0 removed [ 223.651108][ T5750] usb 6-1: 0:2 : does not exist [ 223.810407][ T5750] usb 6-1: USB disconnect, device number 4 [ 224.114734][ T10] usb 8-1: USB disconnect, device number 3 [ 224.359104][ T7233] udevd[7233]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 224.496776][ T7237] loop5: detected capacity change from 0 to 512 [ 224.535075][ T7237] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.343: inode has both inline data and extents flags [ 224.552681][ T7237] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 224.553001][ T7237] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.343: couldn't read orphan inode 15 (err -117) [ 224.562201][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 224.562224][ C0] EXT4-fs (loop5): initial error at time 1787060791: ext4_orphan_get:1399: inode 15 [ 224.562264][ C0] EXT4-fs (loop5): last error at time 1787060791: ext4_orphan_get:1399: inode 15 [ 224.600472][ T7237] loop5: lost filesystem error report for type 5 error -117 [ 224.611012][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.626125][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.634049][ T7003] bridge_slave_0: entered allmulticast mode [ 224.671982][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.699639][ T7237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.709942][ T7003] bridge_slave_0: entered promiscuous mode [ 224.745884][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.755788][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.766284][ T7003] bridge_slave_1: entered allmulticast mode [ 224.806295][ T7003] bridge_slave_1: entered promiscuous mode [ 225.069083][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.222148][ T7003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.277988][ T7003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.317812][ T7244] loop5: detected capacity change from 0 to 512 [ 225.410080][ T7244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.461916][ T7003] team0: Port device team_slave_0 added [ 225.541809][ T7244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 225.555186][ T7003] team0: Port device team_slave_1 added [ 225.576133][ T7244] System zones: 1-2, 4-12, 8-8 [ 225.639736][ T7244] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.345: iget: bad i_size value: 38620345925642 [ 226.456561][ T7244] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 226.460287][ T7244] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.345: couldn't read orphan inode 15 (err -117) [ 226.469561][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 226.469592][ C1] EXT4-fs (loop5): initial error at time 1787060793: ext4_orphan_get:1399: inode 15 [ 226.469647][ C1] EXT4-fs (loop5): last error at time 1787060793: ext4_orphan_get:1399: inode 15 [ 226.530773][ T7244] loop5: lost filesystem error report for type 5 error -117 [ 226.654583][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.670048][ T7260] loop4: detected capacity change from 0 to 256 [ 226.670412][ T7244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.734277][ T7260] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 226.748856][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.882911][ T7003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.945452][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.978964][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.009347][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.029123][ T7003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.253763][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 227.261037][ T5757] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 227.261169][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.351'. [ 227.281392][ T5757] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 227.337048][ T7276] loop7: detected capacity change from 0 to 1024 [ 227.368213][ T7003] hsr_slave_0: entered promiscuous mode [ 227.385256][ T7276] EXT4-fs: Ignoring removed bh option [ 227.401506][ T7003] hsr_slave_1: entered promiscuous mode [ 227.433274][ T7003] debugfs: 'hsr0' already exists in 'hsr' [ 227.447067][ T7003] Cannot create hsr debugfs directory [ 227.453239][ T7276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.120369][ T7288] loop5: detected capacity change from 0 to 512 [ 228.224904][ T7288] ------------[ cut here ]------------ [ 228.230982][ T7288] EA inode 11 i_nlink=0 [ 228.231006][ T7288] WARNING: fs/ext4/xattr.c:1057 at ext4_xattr_inode_update_ref+0x47a/0x5a0, CPU#0: syz.5.355/7288 [ 228.246021][ T7288] Modules linked in: [ 228.251115][ T7288] CPU: 0 UID: 0 PID: 7288 Comm: syz.5.355 Not tainted syzkaller #0 PREEMPT(full) [ 228.260700][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 228.270811][ T7288] RIP: 0010:ext4_xattr_inode_update_ref+0x481/0x5a0 [ 228.278428][ T7288] Code: 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 01 00 00 48 8d 3d f6 1e 5f 0e 48 8b 73 40 44 89 e2 <67> 48 0f b9 3a eb a6 e8 f3 85 20 ff 48 8d 7b 40 48 b8 00 00 00 00 [ 228.298820][ T7288] RSP: 0018:ffffc900035ef3c8 EFLAGS: 00010246 [ 228.306086][ T7288] RAX: dffffc0000000000 RBX: ffff8880531e9460 RCX: ffffc90005d92000 [ 228.314261][ T7288] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff9148fd30 [ 228.322259][ T7288] RBP: ffffc900035ef490 R08: 0000000000000005 R09: 0000000000000001 [ 228.330318][ T7288] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 228.338351][ T7288] R13: 1ffff920006bde7c R14: 00000000ffffffff R15: 0000000000000000 [ 228.344706][ T6190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.346388][ T7288] FS: 00007f64cb29e6c0(0000) GS:ffff888123bdc000(0000) knlGS:0000000000000000 [ 228.364730][ T7288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.371340][ T7288] CR2: 00007f64ca44de68 CR3: 000000006677a000 CR4: 0000000000350ef0 [ 228.380296][ T7288] Call Trace: [ 228.383590][ T7288] [ 228.387163][ T7288] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 228.393555][ T7288] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 228.399574][ T7288] ? ext4_xattr_inode_dec_ref_all+0x959/0xef0 [ 228.405815][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.411517][ T7288] ? __ext4_journal_ensure_credits+0x265/0x2f0 [ 228.417837][ T7288] ext4_xattr_inode_dec_ref_all+0x526/0xef0 [ 228.423870][ T7288] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 228.430352][ T7288] ? up_write+0x2e5/0x5c0 [ 228.435896][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.441561][ T7288] ? errseq_check+0x4f/0x90 [ 228.446195][ T7288] ext4_xattr_delete_inode+0x4ef/0xbb0 [ 228.451718][ T7288] ? rcu_is_watching+0x12/0xc0 [ 228.457421][ T7288] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 228.463471][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.469189][ T7288] ? __ext4_journal_start_sb+0x1ce/0x670 [ 228.474923][ T7288] ? ext4_evict_inode+0x6b3/0x18f0 [ 228.480911][ T7288] ext4_evict_inode+0x8b9/0x18f0 [ 228.486560][ T7288] ? __pfx_ext4_evict_inode+0x10/0x10 [ 228.491968][ T7288] ? evict+0x37e/0xad0 [ 228.496118][ T7288] ? evict+0x37e/0xad0 [ 228.500240][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.506010][ T7288] ? __pfx_ext4_evict_inode+0x10/0x10 [ 228.511421][ T7288] evict+0x3c2/0xad0 [ 228.515441][ T7288] ? __pfx_evict+0x10/0x10 [ 228.519892][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.525650][ T7288] ? iput.part.0+0x981/0x1050 [ 228.530364][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.536223][ T7288] iput.part.0+0x989/0x1050 [ 228.540781][ T7288] iput+0x35/0x40 [ 228.544502][ T7288] ext4_orphan_cleanup+0x71e/0x11e0 [ 228.549767][ T7288] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 228.555506][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.561185][ T7288] ? ext4_register_li_request+0xef/0xa00 [ 228.563977][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 228.566988][ T7288] ext4_fill_super+0x916d/0xb460 [ 228.578425][ T7288] ? __pfx_ext4_fill_super+0x10/0x10 [ 228.584821][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.589138][ T7003] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 228.590497][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.603464][ T7288] ? sb_set_blocksize+0x1f6/0x290 [ 228.608605][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.614529][ T7288] ? setup_bdev_super+0x4e8/0x770 [ 228.619642][ T7288] get_tree_bdev_flags+0x38c/0x620 [ 228.624877][ T7288] ? __pfx_ext4_fill_super+0x10/0x10 [ 228.630206][ T7288] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 228.635944][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.641623][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.647364][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.653033][ T7288] ? security_capable+0x80/0x260 [ 228.658095][ T7288] vfs_get_tree+0x92/0x320 [ 228.662545][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.668269][ T7288] path_mount+0x7d0/0x24c0 [ 228.672737][ T7288] ? __pfx_path_mount+0x10/0x10 [ 228.675968][ T7273] loop4: detected capacity change from 0 to 40427 [ 228.677662][ T7288] ? lockdep_hardirqs_on+0x78/0x100 [ 228.690216][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.696560][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.702285][ T7288] ? kmem_cache_free+0x127/0x6b0 [ 228.707353][ T7288] ? __x64_sys_mount+0x293/0x310 [ 228.712330][ T7288] __x64_sys_mount+0x293/0x310 [ 228.717226][ T7288] ? __pfx___x64_sys_mount+0x10/0x10 [ 228.719180][ T7273] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 228.722568][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.734895][ T7288] do_syscall_64+0x115/0x870 [ 228.739540][ T7288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.745515][ T7288] RIP: 0033:0x7f64ca39f34a [ 228.749953][ T7288] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.753733][ T7273] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 228.769645][ T7288] RSP: 002b:00007f64cb29de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.769690][ T7288] RAX: ffffffffffffffda RBX: 00007f64cb29dee0 RCX: 00007f64ca39f34a [ 228.769720][ T7288] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f64cb29dea0 [ 228.769748][ T7288] RBP: 0000200000000180 R08: 00007f64cb29dee0 R09: 0000000000000000 [ 228.811862][ T7288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 228.814126][ T7273] F2FS-fs (loop4): invalid crc value [ 228.819897][ T7288] R13: 00007f64cb29dea0 R14: 0000000000000478 R15: 000000000000002c [ 228.833197][ T7288] [ 228.836299][ T7288] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.843599][ T7288] CPU: 0 UID: 0 PID: 7288 Comm: syz.5.355 Not tainted syzkaller #0 PREEMPT(full) [ 228.852830][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 228.862896][ T7288] Call Trace: [ 228.866188][ T7288] [ 228.869128][ T7288] dump_stack_lvl+0x100/0x190 [ 228.873846][ T7288] vpanic+0x552/0x970 [ 228.877852][ T7288] ? __pfx_vpanic+0x10/0x10 [ 228.882395][ T7288] panic+0xd1/0xe0 [ 228.886140][ T7288] ? __pfx_panic+0x10/0x10 [ 228.890612][ T7288] check_panic_on_warn.cold+0x19/0x34 [ 228.896011][ T7288] ? ext4_xattr_inode_update_ref+0x47a/0x5a0 [ 228.902024][ T7288] __warn.cold+0x191/0x318 [ 228.906465][ T7288] __report_bug+0x30f/0x440 [ 228.910992][ T7288] ? ext4_xattr_inode_update_ref+0x47a/0x5a0 [ 228.917009][ T7288] ? __pfx___report_bug+0x10/0x10 [ 228.922086][ T7288] report_bug_entry+0xe1/0x290 [ 228.926876][ T7288] ? ext4_xattr_inode_update_ref+0x481/0x5a0 [ 228.932890][ T7288] handle_bug+0x1cd/0x2a0 [ 228.937252][ T7288] exc_invalid_op+0x17/0x50 [ 228.941787][ T7288] asm_exc_invalid_op+0x1a/0x20 [ 228.946654][ T7288] RIP: 0010:ext4_xattr_inode_update_ref+0x481/0x5a0 [ 228.953279][ T7288] Code: 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 01 00 00 48 8d 3d f6 1e 5f 0e 48 8b 73 40 44 89 e2 <67> 48 0f b9 3a eb a6 e8 f3 85 20 ff 48 8d 7b 40 48 b8 00 00 00 00 [ 228.972901][ T7288] RSP: 0018:ffffc900035ef3c8 EFLAGS: 00010246 [ 228.978980][ T7288] RAX: dffffc0000000000 RBX: ffff8880531e9460 RCX: ffffc90005d92000 [ 228.986955][ T7288] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff9148fd30 [ 228.994960][ T7288] RBP: ffffc900035ef490 R08: 0000000000000005 R09: 0000000000000001 [ 229.002934][ T7288] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 229.010906][ T7288] R13: 1ffff920006bde7c R14: 00000000ffffffff R15: 0000000000000000 [ 229.018930][ T7288] ? ext4_xattr_inode_update_ref+0x454/0x5a0 [ 229.024971][ T7288] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 229.031333][ T7288] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 229.036912][ T7288] ? ext4_xattr_inode_dec_ref_all+0x959/0xef0 [ 229.043009][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.048660][ T7288] ? __ext4_journal_ensure_credits+0x265/0x2f0 [ 229.054836][ T7288] ext4_xattr_inode_dec_ref_all+0x526/0xef0 [ 229.060781][ T7288] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 229.067234][ T7288] ? up_write+0x2e5/0x5c0 [ 229.071589][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.077239][ T7288] ? errseq_check+0x4f/0x90 [ 229.081787][ T7288] ext4_xattr_delete_inode+0x4ef/0xbb0 [ 229.087289][ T7288] ? rcu_is_watching+0x12/0xc0 [ 229.092083][ T7288] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 229.098110][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.103768][ T7288] ? __ext4_journal_start_sb+0x1ce/0x670 [ 229.109413][ T7288] ? ext4_evict_inode+0x6b3/0x18f0 [ 229.114547][ T7288] ext4_evict_inode+0x8b9/0x18f0 [ 229.119509][ T7288] ? __pfx_ext4_evict_inode+0x10/0x10 [ 229.124896][ T7288] ? evict+0x37e/0xad0 [ 229.128983][ T7288] ? evict+0x37e/0xad0 [ 229.133069][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.138730][ T7288] ? __pfx_ext4_evict_inode+0x10/0x10 [ 229.144119][ T7288] evict+0x3c2/0xad0 [ 229.148041][ T7288] ? __pfx_evict+0x10/0x10 [ 229.152471][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.158130][ T7288] ? iput.part.0+0x981/0x1050 [ 229.162827][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.168489][ T7288] iput.part.0+0x989/0x1050 [ 229.173023][ T7288] iput+0x35/0x40 [ 229.176698][ T7288] ext4_orphan_cleanup+0x71e/0x11e0 [ 229.181935][ T7288] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 229.187596][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.193249][ T7288] ? ext4_register_li_request+0xef/0xa00 [ 229.198917][ T7288] ext4_fill_super+0x916d/0xb460 [ 229.203928][ T7288] ? __pfx_ext4_fill_super+0x10/0x10 [ 229.209256][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.214917][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.220569][ T7288] ? sb_set_blocksize+0x1f6/0x290 [ 229.225629][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.231283][ T7288] ? setup_bdev_super+0x4e8/0x770 [ 229.236336][ T7288] get_tree_bdev_flags+0x38c/0x620 [ 229.241474][ T7288] ? __pfx_ext4_fill_super+0x10/0x10 [ 229.246790][ T7288] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 229.252452][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.258108][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.263760][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.269412][ T7288] ? security_capable+0x80/0x260 [ 229.274367][ T7288] vfs_get_tree+0x92/0x320 [ 229.278798][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.284453][ T7288] path_mount+0x7d0/0x24c0 [ 229.288896][ T7288] ? __pfx_path_mount+0x10/0x10 [ 229.293760][ T7288] ? lockdep_hardirqs_on+0x78/0x100 [ 229.298984][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.304644][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.310298][ T7288] ? kmem_cache_free+0x127/0x6b0 [ 229.315279][ T7288] ? __x64_sys_mount+0x293/0x310 [ 229.320234][ T7288] __x64_sys_mount+0x293/0x310 [ 229.325018][ T7288] ? __pfx___x64_sys_mount+0x10/0x10 [ 229.330326][ T7288] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.335993][ T7288] do_syscall_64+0x115/0x870 [ 229.340616][ T7288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.346525][ T7288] RIP: 0033:0x7f64ca39f34a [ 229.350944][ T7288] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.370565][ T7288] RSP: 002b:00007f64cb29de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.378993][ T7288] RAX: ffffffffffffffda RBX: 00007f64cb29dee0 RCX: 00007f64ca39f34a [ 229.386967][ T7288] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f64cb29dea0 [ 229.394943][ T7288] RBP: 0000200000000180 R08: 00007f64cb29dee0 R09: 0000000000000000 [ 229.402919][ T7288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 229.410896][ T7288] R13: 00007f64cb29dea0 R14: 0000000000000478 R15: 000000000000002c [ 229.418896][ T7288] [ 229.422146][ T7288] Kernel Offset: disabled [ 229.426463][ T7288] Rebooting in 86400 seconds..