last executing test programs: 4m3.429968069s ago: executing program 32 (id=28): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x68}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file1\x00', 0x8, &(0x7f0000002500)=ANY=[], 0x1, 0x1f1, &(0x7f0000000440)="$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") ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e0008"], 0x24}}, 0x40084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 2m38.090144891s ago: executing program 3 (id=242): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) userfaultfd(0x801) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='GPL\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) listen(r1, 0xd9) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 2m30.305087065s ago: executing program 5 (id=257): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f00000005c0)={[{@rodir}, {@shortname_win95}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@shortname_winnt}, {@fat=@errors_continue}, {@shortname_winnt}]}, 0xfc, 0x2b8, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2m29.071599289s ago: executing program 3 (id=260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000180)=0xff, 0x4) 2m28.771006427s ago: executing program 5 (id=263): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="8011000042000701feffffff00000020017c00"], 0x1180}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) socket$tipc(0x1e, 0x2, 0x0) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2m28.417223459s ago: executing program 3 (id=264): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m27.985836614s ago: executing program 2 (id=266): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1531, &(0x7f0000002f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="b26d084169cb5ebb"}}) 2m27.887622181s ago: executing program 0 (id=267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m27.84782615s ago: executing program 5 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 2m26.639512428s ago: executing program 0 (id=270): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xc) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e130100c900", @ANYRESOCT=r0], 0x16) 2m26.609996772s ago: executing program 3 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 2m26.545345511s ago: executing program 5 (id=273): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000007c0)={0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0], 0x4, 0x683, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x124500f, &(0x7f0000000240)={[{@barrier}, {@enospc_debug}, {@treelog}, {@rescue={'rescue', 0x3d, 'all'}}, {@nossd_spread}, {@datacow}, {@nodiscard}, {@discard_async}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@treelog}, {@flushoncommit}]}, 0x9, 0x55b1, &(0x7f0000009080)="$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") r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000100)={0x2e}, 0x8) setsockopt$inet6_buf(r3, 0x29, 0xca, &(0x7f0000000140)="c45f0e30a04b9ba0efe9513c69426560af6b9351970d26ac0c7f81cf8cc74b5defc2f4042ef53ddf6f8fb066f587113c57b7e0b0fde30a95ddcc6941fd6a36287b2035aeb43a7aaa47ef0cae4c444e4ba0c8fd3a3b9960acb790b001a6c721368fc7b77969cd274e5aa4e4ba6321a89fadfb4d0137d3dd84c2b237cc31103e8439", 0x81) socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000780), 0x2080, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0xc, @empty, 0x3}, 0x1c) 2m26.189789577s ago: executing program 0 (id=274): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@barrier}, {@noblock_validity}, {@mblk_io_submit}, {@data_err_ignore}, {@errors_remount}, {@inlinecrypt}]}, 0x6, 0x615, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@minixdf}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 2m26.065047792s ago: executing program 3 (id=275): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r1, &(0x7f0000000180), 0x0, 0x0, 0x4, 0x1) 2m25.789095841s ago: executing program 2 (id=276): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="a075d117632367da1fbb5d2f82eb3d70c1e6ee948fce25d505f6277ae1600de90a6df5aa606168ff29399ad39768c4e5696eeb2dc73d31a6cf7ffc2eab0946ed9d59535da765bdf290277ba576adc40784805c9cab109869e658528a6767b1b670762b0cfb5351de3e0285d87ef2f5cd8f3ae69ee42540f8b48703ef0825bbf1a9e6b330555d7fad351d2c17", @ANYBLOB="eaa2ced7a73c6cc93feab0d5e4c7f0a0718570e30518d12cfd095a1844fe7be98d8b199c354b79ce1d75d942eee5dd6ef2f664c5c74b8243976cc9018af3bb24ace9cd7c1c60de797f3f85450a25221c052d95", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa14c}}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) 2m25.135604594s ago: executing program 0 (id=278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x46, 0x8e, 0x3}, {0xc, 0x8f, 0x3f00}, {0xc}}]}, 0x54}}, 0x0) 2m23.792994584s ago: executing program 3 (id=279): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m22.576442196s ago: executing program 2 (id=281): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x98, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x54, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x22, "93682d05cbc75923451e203d7dad234ff98b22680ce038439269a9ef3f012444a095"}, {0xdd, 0x6, "2994c803658d"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_PROBE_RESP={0x9, 0x91, "6c5241db90"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) 2m22.310331741s ago: executing program 5 (id=282): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020}, 0x205b) 2m22.261148715s ago: executing program 0 (id=283): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m21.788862091s ago: executing program 2 (id=285): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020000"], 0x68}, 0x1, 0x7}, 0x0) 2m21.528841895s ago: executing program 2 (id=286): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xc) listen(r1, 0x3) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e130100c900", @ANYRESOCT=r1], 0x16) 2m21.427985504s ago: executing program 2 (id=287): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f00000006c0)={0x5, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303031373737373737373737372c6e6c733d63703934392c63726561746f723d7af940e22c63726561746f723d0aee18b02c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d1362a84f2c001ff9431eef5603a24fd03ed91e53947f1c1b0db87d311ac2332606851a5634c431970f558844dd9de7c5411a6a043cd24b8dac907e9e8575657ddeae1a3b6113873ccbc19593f645cac58983c2694a9c166df86f5cc5fdb0a4f7285667940bab9d107a53ca4f3f986662f9c2050388a55392282348754d"], 0x1, 0x6f4, &(0x7f0000000680)="$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") setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 2m21.185099848s ago: executing program 0 (id=288): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c757466383d312c696f636861727365743d69736f383835392d31332c636865636b3d7374726963742c726f6469722c757466383d302c756e695f786c6174653d312c636f6465706167653d3836362c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c646d61736b3d30303030303030303030303030303030303030303030312c646d61736b3d30303030303030303030303030303030303030303030362c756e695f786c6174653d302c696f636861727365743d63703835352c73686f72746e616d653d77696e39352c726f6469722c6e6e6f6e756d7461696c3d312c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c757466383d312c757466383d302c756e695f786c6174653d302c0500695f786c6174653d312c696f636861727365743d6370313235352c757466383d302c646566636f6e7465010000006e636f6e66696e65645f752c00"], 0x46, 0x2d1, &(0x7f0000000740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 2m20.97407082s ago: executing program 5 (id=289): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x2, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x1000000}) 2m7.985519898s ago: executing program 33 (id=279): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m2.165093058s ago: executing program 34 (id=288): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 2m1.378491049s ago: executing program 35 (id=287): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f00000006c0)={0x5, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303031373737373737373737372c6e6c733d63703934392c63726561746f723d7af940e22c63726561746f723d0aee18b02c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d1362a84f2c001ff9431eef5603a24fd03ed91e53947f1c1b0db87d311ac2332606851a5634c431970f558844dd9de7c5411a6a043cd24b8dac907e9e8575657ddeae1a3b6113873ccbc19593f645cac58983c2694a9c166df86f5cc5fdb0a4f7285667940bab9d107a53ca4f3f986662f9c2050388a55392282348754d"], 0x1, 0x6f4, &(0x7f0000000680)="$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") setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 2m0.972834264s ago: executing program 36 (id=289): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x2, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x1000000}) 14.069789284s ago: executing program 4 (id=489): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 12.789159702s ago: executing program 1 (id=491): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea", 0xd) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 12.501874957s ago: executing program 4 (id=493): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/122, 0x7a}], 0x1, 0x4000000, 0x0) 11.367466068s ago: executing program 4 (id=494): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r0, &(0x7f0000000080)=[{&(0x7f00000005c0)="f3", 0x1}, {&(0x7f0000000000)="330ecb", 0x3}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 11.256706324s ago: executing program 1 (id=495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x300, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 11.181071824s ago: executing program 8 (id=497): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) sendmmsg$inet(r1, &(0x7f0000005d80)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000a40)='RJ', 0x2}], 0x1}}], 0x1, 0x4040040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) write$cgroup_pid(r1, &(0x7f00000004c0), 0x24) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 10.905113066s ago: executing program 4 (id=498): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) 10.820428467s ago: executing program 1 (id=499): r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 10.578020749s ago: executing program 4 (id=501): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000006c0)={0x5, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303031373737373737373737372c6e6c733d63703934392c63726561746f723d7af940e22c63726561746f723d0aee18b02c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d1362a84f2c001ff9431eef5603a24fd03ed91e53947f1c1b0db87d311ac2332606851a5634c431970f558844dd9de7c5411a6a043cd24b8dac907e9e8575657ddeae1a3b6113873ccbc19593f645cac58983c2694a9c166df86f5cc5fdb0a4f7285667940bab9d107a53ca4f3f986662f9c2050388a55392282348754d"], 0x1, 0x6f4, &(0x7f0000000680)="$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") syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40000, &(0x7f0000000d80)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") 7.060756604s ago: executing program 4 (id=503): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x40, 0x10}, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x60, 0x10}}, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x13, 0x6}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xf}, 0x0, 0x0, 0xfffffffffffffffe}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000000c0)={0x20, 0x0, 0x6, "3f36400fa1cd"}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0}) 6.082536512s ago: executing program 6 (id=504): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000040)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 5.98854364s ago: executing program 8 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x84, @private=0xa010100, 0x12, 0x3, 'sed\x00', 0x26, 0x4, 0x205b}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 4.431836519s ago: executing program 6 (id=506): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2204806, &(0x7f0000000240)={[{@map_off}, {@check_relaxed, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@mode={'mode', 0x3d, 0x9}}, {@cruft}, {@utf8, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@cruft}, {@sbsector={'sbsector', 0x3d, 0x8}}, {@dmode={'dmode', 0x3d, 0x1ff}}, {@gid}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 2.957148425s ago: executing program 8 (id=507): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xc) listen(r1, 0x3) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1301", @ANYRESOCT=r1], 0x16) 2.552579109s ago: executing program 1 (id=508): syz_usb_connect(0x0, 0x3d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r0, &(0x7f0000000080)=[{&(0x7f00000005c0)="f3", 0x1}, {&(0x7f0000000000)="330ecb", 0x3}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.444092228s ago: executing program 6 (id=509): openat(0xffffffffffffff9c, 0x0, 0x50401, 0x1b) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4010, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) 1.971849408s ago: executing program 6 (id=510): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) close(r0) 1.809301427s ago: executing program 6 (id=511): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) 1.808519328s ago: executing program 8 (id=512): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r4, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x9}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) 1.707352909s ago: executing program 6 (id=513): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4c, 0x9e, 0x58, 0x10, 0x545, 0x8080, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0x5c, 0xf, 0x46}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.677606488s ago: executing program 1 (id=514): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="8011000042000701feffffff00000020017c00"], 0x1180}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) read$FUSE(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) socket$tipc(0x1e, 0x2, 0x0) r3 = memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r3, 0x2e, 0x4608, @void}, 0x10) 1.049933748s ago: executing program 1 (id=515): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40601, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000880)=""/185, 0xb9}, 0x40000002) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80201) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 461.059497ms ago: executing program 8 (id=516): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c93010000c00050017e3"], 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x6, 0x6c1, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x42, 0x42) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000000c0)={0x3ff, 0x6, 0x8, 0x5}) 0s ago: executing program 8 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") kernel console output (not intermixed with test programs): .0: non-zero urb status (-71) [ 247.352456][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.359074][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.365685][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.372298][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.378911][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.385524][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.392136][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.400043][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.406657][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.413273][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.419899][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.426513][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.433131][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.439748][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.446369][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.452987][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.459632][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.466247][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.472858][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.479475][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.486093][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.492707][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.500682][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.507317][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.514098][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.520734][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.527371][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.534026][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.540674][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.547307][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.553982][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.560637][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.567293][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.574053][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.580696][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.587326][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.593995][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.602168][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.608805][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.615446][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.622091][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.628719][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.635364][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.641995][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.648627][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.655267][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.661906][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.668532][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.675209][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.681848][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.688482][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.695132][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.703348][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.710000][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.716627][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.723253][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.729881][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.736507][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.743158][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.749801][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.756447][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.763103][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.769735][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.776395][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.783052][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.789682][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.796334][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.802994][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.811260][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.817894][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.824549][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.831195][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.837824][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.844450][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.851091][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.857721][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.864392][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.871047][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.877678][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.884335][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.891018][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.897648][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.904282][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.912526][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.919167][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.925815][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.932477][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.939109][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.945736][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.952374][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.959007][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.965651][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.972290][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.978919][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.985574][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.992231][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 247.998884][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.005515][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.013764][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.020398][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.027032][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.033681][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.040334][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.046960][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.053623][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.060267][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.066893][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.073531][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.080168][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.086797][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.093439][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.100105][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.106752][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.114916][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.121552][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.128180][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.134857][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.141486][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.148112][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.154770][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.161416][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.168054][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.174716][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.181365][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.187992][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.194656][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.201293][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.207924][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.215571][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.222946][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.229581][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.236248][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.242879][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.249505][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.256146][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.262780][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.269413][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.276076][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.282704][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.289328][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.296027][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.302636][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.309251][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.317490][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.324157][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.330815][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.337428][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.344049][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.350689][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.357305][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.363916][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.370559][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.377175][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.383800][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.390533][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.397146][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.403772][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.410396][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.417008][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.424985][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.431663][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.438278][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.444895][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.451533][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.458145][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.464774][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.471401][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.478022][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.484651][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.491273][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.497886][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.504503][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.511140][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.517750][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.525721][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.532412][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.539048][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.545671][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.552295][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.558903][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.565547][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.572188][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.578805][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.585427][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.592051][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.598684][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.605293][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.611931][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.618545][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.626561][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.633220][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.639836][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.646469][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.653114][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.659728][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.666341][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.672976][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.679593][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.686199][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.692814][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.699427][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.706062][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.712671][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.719278][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.728486][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.737095][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.743814][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.750480][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.757150][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.763831][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.770511][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.777137][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.783760][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.790420][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.797049][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.803708][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.810372][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.816990][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.823609][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.832072][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.840077][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.846726][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.853420][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.860041][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.866713][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.873421][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.880100][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.886729][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.893391][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.900066][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.906676][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.913332][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.920024][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.926654][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.935004][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.943129][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.949778][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.956450][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.963114][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.969755][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.976501][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.983165][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.989862][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 248.996513][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.003219][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.009851][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.016467][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.023156][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.029844][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.039245][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.045924][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.052595][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.059212][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.065886][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.072537][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.079162][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.085829][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.092504][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.099129][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.105796][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.112411][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.119040][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.125733][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.132490][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.142139][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.148787][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.155454][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.162073][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.168714][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.175387][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.182138][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.188767][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.195519][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.202164][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.208976][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.216603][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.223237][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.229879][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 249.243535][ T6883] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 249.277453][ T6883] usb 2-1: USB disconnect, device number 9 [ 249.607346][ T7122] loop1: detected capacity change from 0 to 1024 [ 250.172879][ T49] kworker/u8:3: attempt to access beyond end of device [ 250.172879][ T49] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.366211][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 250.366261][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.366287][ T49] Workqueue: writeback wb_workfn (flush-7:2) [ 250.366349][ T49] Call Trace: [ 250.366361][ T49] [ 250.366374][ T49] dump_stack_lvl+0x16c/0x1f0 [ 250.366424][ T49] f2fs_handle_critical_error+0x624/0x9f0 [ 250.366469][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.366516][ T49] ? f2fs_build_fault_attr+0x53/0x1f0 [ 250.366588][ T49] f2fs_write_end_io+0x958/0xcf0 [ 250.366636][ T49] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 250.366686][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.366741][ T49] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 250.366790][ T49] bio_endio+0x713/0x860 [ 250.366846][ T49] submit_bio_noacct+0x306/0x1f60 [ 250.366897][ T49] __submit_merged_bio+0x33c/0x770 [ 250.366947][ T49] __submit_merged_write_cond+0x319/0x3f0 [ 250.367004][ T49] f2fs_write_cache_pages+0x2067/0x2570 [ 250.367084][ T49] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 250.367136][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.367183][ T49] ? ret_from_fork_asm+0x1a/0x30 [ 250.367244][ T49] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 250.367302][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.367346][ T49] ? arch_stack_walk+0x94/0x100 [ 250.367412][ T49] ? __pfx_stack_trace_save+0x10/0x10 [ 250.367525][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.367575][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.367628][ T49] f2fs_write_data_pages+0x4ad/0xd90 [ 250.367688][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.367758][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.367802][ T49] ? __lock_acquire+0xb8a/0x1c90 [ 250.367866][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.367921][ T49] do_writepages+0x27a/0x600 [ 250.367965][ T49] ? __pfx_do_writepages+0x10/0x10 [ 250.368001][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.368045][ T49] ? reacquire_held_locks+0xcd/0x1f0 [ 250.368105][ T49] ? writeback_sb_inodes+0x3b0/0xfa0 [ 250.368160][ T49] __writeback_single_inode+0x160/0xfb0 [ 250.368212][ T49] ? __pfx___writeback_single_inode+0x10/0x10 [ 250.368260][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.368303][ T49] ? do_raw_spin_unlock+0x172/0x230 [ 250.368347][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.368398][ T49] writeback_sb_inodes+0x60d/0xfa0 [ 250.368467][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 250.368515][ T49] ? ret_from_fork_asm+0x1a/0x30 [ 250.368629][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.368673][ T49] ? rcu_is_watching+0x12/0xc0 [ 250.368721][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.368770][ T49] ? queue_io+0x3f6/0x520 [ 250.368816][ T49] wb_writeback+0x419/0xb70 [ 250.368879][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 250.368924][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.368981][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.369025][ T49] ? mark_held_locks+0x49/0x80 [ 250.369092][ T49] wb_workfn+0x14d/0xbe0 [ 250.369146][ T49] ? try_to_wake_up+0x160/0x1870 [ 250.369194][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 250.369248][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.369297][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.369347][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.369391][ T49] ? rcu_is_watching+0x12/0xc0 [ 250.369447][ T49] process_one_work+0x9cf/0x1b70 [ 250.369507][ T49] ? __pfx_process_one_work+0x10/0x10 [ 250.369553][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.369612][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.369656][ T49] ? assign_work+0x1a0/0x250 [ 250.369697][ T49] worker_thread+0x6c8/0xf10 [ 250.369753][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.369804][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.369849][ T49] ? __kthread_parkme+0x19e/0x250 [ 250.369905][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.369953][ T49] ? __pfx_worker_thread+0x10/0x10 [ 250.369994][ T49] kthread+0x3c5/0x780 [ 250.370032][ T49] ? __pfx_kthread+0x10/0x10 [ 250.370071][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.370115][ T49] ? rcu_is_watching+0x12/0xc0 [ 250.370165][ T49] ? __pfx_kthread+0x10/0x10 [ 250.370203][ T49] ret_from_fork+0x675/0x7d0 [ 250.370239][ T49] ? __pfx_kthread+0x10/0x10 [ 250.370277][ T49] ret_from_fork_asm+0x1a/0x30 [ 250.370354][ T49] [ 251.164854][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 251.244139][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.260546][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 251.268392][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 251.276618][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 251.290624][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.368853][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.388426][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.400652][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.408822][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.418177][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 252.717117][ T7125] chnl_net:caif_netlink_parms(): no params data found [ 252.837755][ T7135] netlink: 868 bytes leftover after parsing attributes in process `syz.6.298'. [ 253.379896][ T5839] Bluetooth: hci6: command tx timeout [ 253.825853][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.835165][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.843594][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.855532][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.863483][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.921585][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 253.931637][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 253.976861][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 254.001192][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 254.009608][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 254.076962][ T5839] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 254.343721][ T7155] loop6: detected capacity change from 0 to 128 [ 254.383317][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.610100][ T52] Bluetooth: hci7: command tx timeout [ 255.348249][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.410124][ T52] Bluetooth: hci6: command tx timeout [ 255.714797][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.969981][ T52] Bluetooth: hci4: command tx timeout [ 256.050754][ T52] Bluetooth: hci8: command tx timeout [ 256.182111][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.221022][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.228243][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.240327][ T7125] bridge_slave_0: entered allmulticast mode [ 256.689877][ T52] Bluetooth: hci7: command tx timeout [ 257.025209][ T7125] bridge_slave_0: entered promiscuous mode [ 257.082366][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.101387][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 257.135675][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.148578][ T7125] bridge_slave_1: entered allmulticast mode [ 257.157906][ T7125] bridge_slave_1: entered promiscuous mode [ 257.385419][ T7176] loop1: detected capacity change from 0 to 256 [ 257.595055][ T5839] Bluetooth: hci6: command tx timeout [ 257.635915][ T7176] FAT-fs (loop1): Directory bread(block 64) failed [ 257.672979][ T7176] FAT-fs (loop1): Directory bread(block 65) failed [ 257.679610][ T7176] FAT-fs (loop1): Directory bread(block 66) failed [ 257.708451][ T7176] FAT-fs (loop1): Directory bread(block 67) failed [ 257.740606][ T7176] FAT-fs (loop1): Directory bread(block 68) failed [ 257.751765][ T7176] FAT-fs (loop1): Directory bread(block 69) failed [ 257.758490][ T7176] FAT-fs (loop1): Directory bread(block 70) failed [ 257.766921][ T7176] FAT-fs (loop1): Directory bread(block 71) failed [ 257.773804][ T7176] FAT-fs (loop1): Directory bread(block 72) failed [ 257.783267][ T7176] FAT-fs (loop1): Directory bread(block 73) failed [ 258.050327][ T5839] Bluetooth: hci4: command tx timeout [ 258.112118][ T7125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.130631][ T5839] Bluetooth: hci8: command tx timeout [ 258.230693][ T7125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.318429][ T5839] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 258.328568][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 258.328614][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.328639][ T5839] Workqueue: hci3 hci_rx_work [ 258.328688][ T5839] Call Trace: [ 258.328699][ T5839] [ 258.328714][ T5839] dump_stack_lvl+0x16c/0x1f0 [ 258.328772][ T5839] sysfs_warn_dup+0x7f/0xa0 [ 258.328816][ T5839] sysfs_create_dir_ns+0x24b/0x2b0 [ 258.328860][ T5839] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 258.328901][ T5839] ? find_held_lock+0x2b/0x80 [ 258.328957][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.329002][ T5839] ? do_raw_spin_unlock+0x172/0x230 [ 258.329049][ T5839] kobject_add_internal+0x2c4/0x9b0 [ 258.329113][ T5839] kobject_add+0x16e/0x240 [ 258.329167][ T5839] ? __pfx_kobject_add+0x10/0x10 [ 258.329224][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.329270][ T5839] ? do_raw_spin_unlock+0x172/0x230 [ 258.329315][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.329361][ T5839] ? kobject_put+0xab/0x5a0 [ 258.329416][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.329470][ T5839] device_add+0x288/0x1aa0 [ 258.329533][ T5839] ? __pfx_dev_set_name+0x10/0x10 [ 258.329572][ T5839] ? __pfx_device_add+0x10/0x10 [ 258.329632][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.329677][ T5839] ? mgmt_send_event_skb+0x2fb/0x460 [ 258.329733][ T5839] hci_conn_add_sysfs+0x17e/0x230 [ 258.329807][ T5839] le_conn_complete_evt+0x1260/0x2150 [ 258.329863][ T5839] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 258.329904][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.329959][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.330013][ T5839] hci_le_conn_complete_evt+0x23c/0x370 [ 258.330068][ T5839] hci_le_meta_evt+0x357/0x5e0 [ 258.330115][ T5839] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 258.330166][ T5839] hci_event_packet+0x685/0x11c0 [ 258.330210][ T5839] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 258.330260][ T5839] ? __pfx_hci_event_packet+0x10/0x10 [ 258.330302][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.330351][ T5839] ? kcov_remote_start+0x3c9/0x6d0 [ 258.330402][ T5839] ? lockdep_hardirqs_on+0x7c/0x110 [ 258.330451][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.330507][ T5839] hci_rx_work+0x2c5/0x16b0 [ 258.330556][ T5839] ? rcu_is_watching+0x12/0xc0 [ 258.330614][ T5839] process_one_work+0x9cf/0x1b70 [ 258.330675][ T5839] ? __pfx_process_one_work+0x10/0x10 [ 258.330717][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.330781][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.330825][ T5839] ? assign_work+0x1a0/0x250 [ 258.330867][ T5839] worker_thread+0x6c8/0xf10 [ 258.330930][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 258.330972][ T5839] kthread+0x3c5/0x780 [ 258.331011][ T5839] ? __pfx_kthread+0x10/0x10 [ 258.331051][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 258.331096][ T5839] ? rcu_is_watching+0x12/0xc0 [ 258.331147][ T5839] ? __pfx_kthread+0x10/0x10 [ 258.331187][ T5839] ret_from_fork+0x675/0x7d0 [ 258.331219][ T5839] ? __pfx_kthread+0x10/0x10 [ 258.331258][ T5839] ret_from_fork_asm+0x1a/0x30 [ 258.331338][ T5839] [ 258.685485][ T5839] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 258.699894][ T5839] Bluetooth: hci3: failed to register connection device [ 258.778701][ T52] Bluetooth: hci7: command tx timeout [ 258.930436][ T7147] chnl_net:caif_netlink_parms(): no params data found [ 259.022109][ T7125] team0: Port device team_slave_0 added [ 259.090092][ T5901] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 259.205487][ T7125] team0: Port device team_slave_1 added [ 259.252194][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 259.262899][ T5901] usb 2-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 259.276026][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.296959][ T5901] usb 2-1: config 0 descriptor?? [ 259.650061][ T52] Bluetooth: hci6: command tx timeout [ 259.788882][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.817412][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.879856][ T7125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.913217][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.929925][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.986246][ T7200] netlink: 4456 bytes leftover after parsing attributes in process `syz.6.312'. [ 259.986589][ T7125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.063041][ T7140] chnl_net:caif_netlink_parms(): no params data found [ 260.146987][ T52] Bluetooth: hci4: command tx timeout [ 260.210196][ T52] Bluetooth: hci8: command tx timeout [ 260.342223][ T7147] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.349563][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.357560][ T7147] bridge_slave_0: entered allmulticast mode [ 260.366897][ T7147] bridge_slave_0: entered promiscuous mode [ 260.377110][ T49] bridge_slave_1: left allmulticast mode [ 260.384178][ T49] bridge_slave_1: left promiscuous mode [ 260.390371][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.405516][ T49] bridge_slave_0: left allmulticast mode [ 260.411820][ T49] bridge_slave_0: left promiscuous mode [ 260.417656][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.783392][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.796603][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.808251][ T49] bond0 (unregistering): Released all slaves [ 260.838210][ T7125] hsr_slave_0: entered promiscuous mode [ 260.845290][ T7125] hsr_slave_1: entered promiscuous mode [ 260.851125][ T52] Bluetooth: hci7: command tx timeout [ 260.858858][ T7125] debugfs: 'hsr0' already exists in 'hsr' [ 260.864912][ T7125] Cannot create hsr debugfs directory [ 260.940855][ T5901] pegasus 2-1:0.0: can't locate MII phy, using default [ 260.948815][ T7147] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.966804][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.984755][ T7147] bridge_slave_1: entered allmulticast mode [ 261.003302][ T7147] bridge_slave_1: entered promiscuous mode [ 261.184792][ T5901] pegasus 2-1:0.0: eth9, D-Link DSB-650TX, 76:b8:40:b1:60:fd [ 261.219995][ T5901] usb 2-1: USB disconnect, device number 10 [ 261.408576][ T7147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.261635][ T52] Bluetooth: hci4: command tx timeout [ 262.291119][ T52] Bluetooth: hci8: command tx timeout [ 262.565850][ T7147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.623739][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.624480][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.624654][ T7140] bridge_slave_0: entered allmulticast mode [ 262.626743][ T7140] bridge_slave_0: entered promiscuous mode [ 262.641765][ T7140] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.641888][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.642069][ T7140] bridge_slave_1: entered allmulticast mode [ 262.644116][ T7140] bridge_slave_1: entered promiscuous mode [ 263.096982][ T7220] loop6: detected capacity change from 0 to 40427 [ 263.115519][ T7220] F2FS-fs (loop6): invalid crc value [ 263.310222][ T7220] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 263.321403][ T7220] F2FS-fs (loop6): Start checkpoint disabled! [ 263.705842][ T7220] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 263.749922][ T7220] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 264.786039][ T60] kworker/u8:4: attempt to access beyond end of device [ 264.786039][ T60] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 264.803606][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 264.803652][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.803677][ T60] Workqueue: writeback wb_workfn (flush-7:6) [ 264.803739][ T60] Call Trace: [ 264.803762][ T60] [ 264.803776][ T60] dump_stack_lvl+0x16c/0x1f0 [ 264.803828][ T60] f2fs_handle_critical_error+0x624/0x9f0 [ 264.803873][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.803918][ T60] ? f2fs_build_fault_attr+0x53/0x1f0 [ 264.803992][ T60] f2fs_write_end_io+0x958/0xcf0 [ 264.804043][ T60] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 264.804094][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.804151][ T60] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 264.804195][ T60] bio_endio+0x713/0x860 [ 264.804253][ T60] submit_bio_noacct+0x306/0x1f60 [ 264.804306][ T60] __submit_merged_bio+0x33c/0x770 [ 264.804358][ T60] __submit_merged_write_cond+0x319/0x3f0 [ 264.804417][ T60] f2fs_write_cache_pages+0x2067/0x2570 [ 264.804503][ T60] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 264.804561][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.804607][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.804651][ T60] ? find_held_lock+0x2b/0x80 [ 264.804702][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.804765][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.804809][ T60] ? do_raw_spin_unlock+0x172/0x230 [ 264.804871][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.804915][ T60] ? f2fs_available_free_memory+0x279/0xa30 [ 264.805053][ T60] ? __lock_acquire+0xb8a/0x1c90 [ 264.805117][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.805171][ T60] f2fs_write_data_pages+0x4ad/0xd90 [ 264.805234][ T60] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 264.805301][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.805346][ T60] ? __lock_acquire+0xb8a/0x1c90 [ 264.805407][ T60] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 264.805464][ T60] do_writepages+0x27a/0x600 [ 264.805514][ T60] ? __pfx_do_writepages+0x10/0x10 [ 264.805550][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.805594][ T60] ? reacquire_held_locks+0xcd/0x1f0 [ 264.805657][ T60] ? writeback_sb_inodes+0x3b0/0xfa0 [ 264.805715][ T60] __writeback_single_inode+0x160/0xfb0 [ 264.805783][ T60] ? __pfx___writeback_single_inode+0x10/0x10 [ 264.805831][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.805875][ T60] ? do_raw_spin_unlock+0x172/0x230 [ 264.805920][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.805972][ T60] writeback_sb_inodes+0x60d/0xfa0 [ 264.806046][ T60] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 264.806094][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.806138][ T60] ? mark_held_locks+0x49/0x80 [ 264.806272][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.806316][ T60] ? rcu_is_watching+0x12/0xc0 [ 264.806365][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.806410][ T60] ? queue_io+0x3f6/0x520 [ 264.806458][ T60] wb_writeback+0x419/0xb70 [ 264.806518][ T60] ? __pfx_wb_writeback+0x10/0x10 [ 264.806563][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.806622][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.806666][ T60] ? mark_held_locks+0x49/0x80 [ 264.806735][ T60] wb_workfn+0x14d/0xbe0 [ 264.806801][ T60] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.806851][ T60] ? __pfx_wb_workfn+0x10/0x10 [ 264.806906][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.806955][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.807006][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.807051][ T60] ? rcu_is_watching+0x12/0xc0 [ 264.807108][ T60] process_one_work+0x9cf/0x1b70 [ 264.807173][ T60] ? __pfx_process_one_work+0x10/0x10 [ 264.807215][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.807273][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.807317][ T60] ? assign_work+0x1a0/0x250 [ 264.807360][ T60] worker_thread+0x6c8/0xf10 [ 264.807427][ T60] ? __pfx_worker_thread+0x10/0x10 [ 264.807469][ T60] kthread+0x3c5/0x780 [ 264.807507][ T60] ? __pfx_kthread+0x10/0x10 [ 264.807550][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.807595][ T60] ? rcu_is_watching+0x12/0xc0 [ 264.807645][ T60] ? __pfx_kthread+0x10/0x10 [ 264.807684][ T60] ret_from_fork+0x675/0x7d0 [ 264.807717][ T60] ? __pfx_kthread+0x10/0x10 [ 264.807766][ T60] ret_from_fork_asm+0x1a/0x30 [ 264.807850][ T60] [ 264.808262][ T60] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 264.832287][ T52] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 264.836180][ T7145] chnl_net:caif_netlink_parms(): no params data found [ 265.270882][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.277195][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.295579][ T7147] team0: Port device team_slave_0 added [ 265.309431][ T49] hsr_slave_0: left promiscuous mode [ 265.326019][ T49] hsr_slave_1: left promiscuous mode [ 265.339553][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.349864][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.367818][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.375672][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.401384][ T49] veth1_macvtap: left promiscuous mode [ 265.407028][ T49] veth0_macvtap: left promiscuous mode [ 265.413192][ T49] veth1_vlan: left promiscuous mode [ 265.420367][ T49] veth0_vlan: left promiscuous mode [ 270.220251][ T49] team0 (unregistering): Port device team_slave_1 removed [ 270.284148][ T6869] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 270.353684][ T49] team0 (unregistering): Port device team_slave_0 removed [ 270.445474][ T6869] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 270.455688][ T6869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.477835][ T6869] usb 7-1: Product: syz [ 270.482364][ T6869] usb 7-1: Manufacturer: syz [ 270.492697][ T6869] usb 7-1: SerialNumber: syz [ 270.502781][ T6869] usb 7-1: config 0 descriptor?? [ 270.620100][ T5810] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 270.727700][ T6869] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 270.801765][ T5810] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 270.816871][ T5810] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 270.837077][ T5810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 270.867628][ T5810] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.889227][ T5810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 270.919883][ T5810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 270.939471][ T5810] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 270.949740][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 270.960973][ T5810] usb 2-1: Product: syz [ 270.965791][ T5810] usb 2-1: Manufacturer: syz [ 270.986124][ T7140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.008903][ T7246] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 271.041908][ T5810] cdc_wdm 2-1:1.0: skipping garbage [ 271.057358][ T5810] cdc_wdm 2-1:1.0: skipping garbage [ 271.079231][ T5810] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 271.089530][ T7147] team0: Port device team_slave_1 added [ 271.095321][ T5810] cdc_wdm 2-1:1.0: Unknown control protocol [ 271.196114][ T7140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.259723][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 271.267205][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 271.273492][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 271.280095][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 271.287289][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 271.293901][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 271.300275][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 271.306882][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 271.313480][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 271.319608][ T7147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.320076][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 271.320291][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 271.337246][ T7147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.339622][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 271.372318][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 271.378923][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 271.385850][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 271.392447][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 271.398781][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 271.405374][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 271.411699][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 271.418306][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 271.425221][ T7147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.430485][ T6883] usb 2-1: USB disconnect, device number 11 [ 271.436148][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 271.454114][ T7147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.462154][ T7147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.513982][ T7147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.600863][ T7140] team0: Port device team_slave_0 added [ 271.656352][ T7140] team0: Port device team_slave_1 added [ 271.706831][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.714552][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.722402][ T7145] bridge_slave_0: entered allmulticast mode [ 271.730329][ T7145] bridge_slave_0: entered promiscuous mode [ 271.739720][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.750366][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.757666][ T7145] bridge_slave_1: entered allmulticast mode [ 271.768554][ T7145] bridge_slave_1: entered promiscuous mode [ 271.778965][ T7140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.786185][ T7140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.812443][ T7140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.826148][ T7140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.833256][ T7140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.863985][ T6869] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 271.877892][ T6869] usb 7-1: USB disconnect, device number 3 [ 271.887116][ T7140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.026746][ T7147] hsr_slave_0: entered promiscuous mode [ 272.033770][ T7147] hsr_slave_1: entered promiscuous mode [ 272.041264][ T7147] debugfs: 'hsr0' already exists in 'hsr' [ 272.046994][ T7147] Cannot create hsr debugfs directory [ 272.232357][ T7145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.285973][ T7140] hsr_slave_0: entered promiscuous mode [ 272.303491][ T7140] hsr_slave_1: entered promiscuous mode [ 272.582491][ T7140] debugfs: 'hsr0' already exists in 'hsr' [ 272.589935][ T7140] Cannot create hsr debugfs directory [ 272.606375][ T7145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.917152][ T7278] loop6: detected capacity change from 0 to 256 [ 273.924444][ T7278] exfat: Unknown parameter '' [ 274.152322][ T7145] team0: Port device team_slave_0 added [ 274.265980][ T7145] team0: Port device team_slave_1 added [ 274.286447][ T7125] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 274.298942][ T7125] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.379585][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.397330][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.426502][ T7145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.441017][ T5839] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 275.495123][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.520688][ T7125] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 275.539266][ T7125] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.767399][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.781993][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.808624][ T7145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.057304][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.668493][ T7145] hsr_slave_0: entered promiscuous mode [ 277.681096][ T7145] hsr_slave_1: entered promiscuous mode [ 277.687528][ T7145] debugfs: 'hsr0' already exists in 'hsr' [ 277.703136][ T7145] Cannot create hsr debugfs directory [ 280.151717][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.181848][ T7332] loop6: detected capacity change from 0 to 4096 [ 280.260144][ T7335] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.595004][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.853811][ T5839] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 281.523800][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.655885][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.683567][ T7140] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 281.729371][ T7125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.788785][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.825400][ T7140] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 281.842996][ T7140] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 281.923080][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.951842][ T7349] loop1: detected capacity change from 0 to 32768 [ 281.963553][ T7140] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 281.968966][ T7349] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.341 (7349) [ 282.033535][ T7349] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 282.055084][ T7349] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 282.120940][ T7125] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.284318][ T7147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 282.338697][ T7349] BTRFS info (device loop1): rebuilding free space tree [ 282.392096][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.399255][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.467816][ T7349] BTRFS info (device loop1): enabling ssd optimizations [ 282.479354][ T7147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 282.511300][ T7349] BTRFS info (device loop1): using spread ssd allocation scheme [ 282.527085][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.534313][ T6108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.559994][ T7349] BTRFS info (device loop1): turning on async discard [ 282.566790][ T7349] BTRFS info (device loop1): enabling free space tree [ 282.580100][ T7349] BTRFS info (device loop1): force clearing of disk cache [ 282.614553][ T7147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 282.655802][ T7351] loop6: detected capacity change from 0 to 32768 [ 282.666880][ T7147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.764515][ T7351] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 282.795967][ T5836] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 282.887411][ T7351] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 283.267903][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.370397][ T6114] ocfs2: Unmounting device (7,6) on (node local) [ 283.653405][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.747786][ T7145] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 283.863865][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.891229][ T7145] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 283.913688][ T7145] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 283.982932][ T7145] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 284.002889][ T7396] loop1: detected capacity change from 0 to 32768 [ 284.015649][ T7396] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.343 (7396) [ 284.073055][ T7396] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.084640][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.100647][ T7396] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 284.169910][ T6883] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 284.175642][ T7140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.320858][ T7396] BTRFS info (device loop1): allowing degraded mounts [ 284.335115][ T6883] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 284.344691][ T7396] BTRFS info (device loop1): enabling ssd optimizations [ 284.381384][ T7396] BTRFS info (device loop1): turning on async discard [ 284.388187][ T7396] BTRFS info (device loop1): enabling free space tree [ 284.395139][ T6883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.415452][ T7140] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.427082][ T6883] usb 7-1: config 0 descriptor?? [ 284.441927][ T7396] BTRFS info (device loop1): force zlib compression, level 3 [ 284.681922][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.689094][ T6125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.837572][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.844802][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.874875][ T6883] ath6kl: Unsupported hardware version: 0x0 [ 284.907320][ T6883] ath6kl: Failed to init ath6kl core: -22 [ 284.933378][ T6883] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 284.942304][ T49] bridge_slave_1: left allmulticast mode [ 284.947946][ T49] bridge_slave_1: left promiscuous mode [ 284.988716][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.999410][ T5836] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.041929][ T49] bridge_slave_0: left allmulticast mode [ 285.047867][ T49] bridge_slave_0: left promiscuous mode [ 285.062622][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.092875][ T6883] usb 7-1: USB disconnect, device number 4 [ 285.149330][ T49] bridge_slave_1: left allmulticast mode [ 285.166780][ T49] bridge_slave_1: left promiscuous mode [ 285.202111][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.256083][ T49] bridge_slave_0: left allmulticast mode [ 285.267427][ T49] bridge_slave_0: left promiscuous mode [ 285.284550][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.332758][ T49] bridge_slave_1: left allmulticast mode [ 285.349241][ T49] bridge_slave_1: left promiscuous mode [ 285.362523][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.431102][ T49] bridge_slave_0: left allmulticast mode [ 285.436794][ T49] bridge_slave_0: left promiscuous mode [ 285.450026][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.576405][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.611075][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.626628][ T49] bond0 (unregistering): Released all slaves [ 290.174980][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.186821][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.208932][ T49] bond0 (unregistering): Released all slaves [ 290.942774][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.144237][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.158675][ T49] bond0 (unregistering): Released all slaves [ 291.215994][ T7145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.244344][ T7145] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.296930][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.304133][ T6125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.317076][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.324244][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.356574][ T7147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.438012][ T7145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.448553][ T7145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.508351][ T7125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.599979][ T6883] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 291.632012][ T7147] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.676303][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.683559][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.697377][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.704561][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.786684][ T6883] usb 7-1: config 1 interface 0 has no altsetting 0 [ 291.799116][ T6883] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 291.829099][ T6883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.888856][ T6883] usb 7-1: Product: syz [ 291.942725][ T6883] usb 7-1: Manufacturer: syz [ 291.947359][ T6883] usb 7-1: SerialNumber: syz [ 292.031483][ T7490] ip6t_srh: unknown srh invflags 4000 [ 292.582662][ T7147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.244769][ T6883] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 293.761690][ T7140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.856432][ T7145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.245054][ T7147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.770696][ T49] hsr_slave_0: left promiscuous mode [ 294.795483][ T49] hsr_slave_1: left promiscuous mode [ 294.818381][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.839696][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.864339][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.887406][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.919431][ T49] hsr_slave_0: left promiscuous mode [ 294.935679][ T49] hsr_slave_1: left promiscuous mode [ 294.947645][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.958180][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.968487][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.976619][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.993776][ T49] hsr_slave_0: left promiscuous mode [ 295.001799][ T49] hsr_slave_1: left promiscuous mode [ 295.007872][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.016552][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.024974][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.032739][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.085617][ T49] veth1_macvtap: left promiscuous mode [ 295.091821][ T49] veth0_macvtap: left promiscuous mode [ 295.097470][ T49] veth1_vlan: left promiscuous mode [ 295.103994][ T49] veth0_vlan: left promiscuous mode [ 295.112961][ T49] veth1_macvtap: left promiscuous mode [ 295.118572][ T49] veth0_macvtap: left promiscuous mode [ 295.124505][ T49] veth1_vlan: left promiscuous mode [ 295.130110][ T49] veth0_vlan: left promiscuous mode [ 295.136978][ T49] veth1_macvtap: left promiscuous mode [ 295.142926][ T49] veth0_macvtap: left promiscuous mode [ 295.148605][ T49] veth1_vlan: left promiscuous mode [ 295.171933][ C0] usblp0: nonzero write bulk status received: -71 [ 295.182846][ T5909] usb 7-1: USB disconnect, device number 5 [ 295.210587][ T5909] usblp0: removed [ 296.764518][ T49] team0 (unregistering): Port device team_slave_1 removed [ 296.897613][ T49] team0 (unregistering): Port device team_slave_0 removed [ 299.547286][ T49] team0 (unregistering): Port device team_slave_1 removed [ 299.583426][ T49] team0 (unregistering): Port device team_slave_0 removed [ 299.589330][ T7565] binder: 7564:7565 ioctl c0306201 0 returned -14 [ 300.109057][ T49] team0 (unregistering): Port device team_slave_1 removed [ 300.137124][ T49] team0 (unregistering): Port device team_slave_0 removed [ 300.453352][ T7125] veth0_vlan: entered promiscuous mode [ 300.565244][ T7125] veth1_vlan: entered promiscuous mode [ 300.654224][ T7140] veth0_vlan: entered promiscuous mode [ 300.712462][ T7140] veth1_vlan: entered promiscuous mode [ 301.747768][ T7140] veth0_macvtap: entered promiscuous mode [ 301.795626][ T7125] veth0_macvtap: entered promiscuous mode [ 301.823512][ T7140] veth1_macvtap: entered promiscuous mode [ 301.836264][ T7125] veth1_macvtap: entered promiscuous mode [ 301.917678][ T7140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.982402][ T7147] veth0_vlan: entered promiscuous mode [ 302.017213][ T7125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.046585][ T7140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.088020][ T6125] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.121626][ T7145] veth0_vlan: entered promiscuous mode [ 302.176603][ T6125] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.199895][ T6125] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.271350][ T7125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.290140][ T6125] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.303911][ T7147] veth1_vlan: entered promiscuous mode [ 302.683926][ T7595] loop1: detected capacity change from 0 to 40427 [ 302.707930][ T7595] F2FS-fs (loop1): invalid crc value [ 303.298180][ T7145] veth1_vlan: entered promiscuous mode [ 304.242967][ T7595] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 304.292154][ T7595] F2FS-fs (loop1): Start checkpoint disabled! [ 304.346255][ T7595] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 304.357151][ T7595] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 304.675059][ T6125] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.722475][ T36] kworker/u8:2: attempt to access beyond end of device [ 304.722475][ T36] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 304.780828][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 304.780878][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.780905][ T36] Workqueue: writeback wb_workfn (flush-7:1) [ 304.780967][ T36] Call Trace: [ 304.780979][ T36] [ 304.780994][ T36] dump_stack_lvl+0x16c/0x1f0 [ 304.781054][ T36] f2fs_handle_critical_error+0x624/0x9f0 [ 304.781100][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.781147][ T36] ? f2fs_build_fault_attr+0x53/0x1f0 [ 304.781221][ T36] f2fs_write_end_io+0x958/0xcf0 [ 304.781272][ T36] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 304.781326][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.781383][ T36] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 304.781427][ T36] bio_endio+0x713/0x860 [ 304.781486][ T36] submit_bio_noacct+0x306/0x1f60 [ 304.781540][ T36] __submit_merged_bio+0x33c/0x770 [ 304.781593][ T36] __submit_merged_write_cond+0x319/0x3f0 [ 304.781653][ T36] f2fs_write_cache_pages+0x2067/0x2570 [ 304.781739][ T36] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 304.781798][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.781844][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.781889][ T36] ? find_held_lock+0x2b/0x80 [ 304.781942][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.781992][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.782044][ T36] ? do_raw_spin_unlock+0x172/0x230 [ 304.782106][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.782152][ T36] ? f2fs_available_free_memory+0x279/0xa30 [ 304.782290][ T36] ? __lock_acquire+0xb8a/0x1c90 [ 304.782360][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.782414][ T36] f2fs_write_data_pages+0x4ad/0xd90 [ 304.782479][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 304.782547][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.782592][ T36] ? __lock_acquire+0xb8a/0x1c90 [ 304.782655][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 304.782712][ T36] do_writepages+0x27a/0x600 [ 304.782759][ T36] ? __pfx_do_writepages+0x10/0x10 [ 304.782793][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.782839][ T36] ? reacquire_held_locks+0xcd/0x1f0 [ 304.782902][ T36] ? writeback_sb_inodes+0x3b0/0xfa0 [ 304.782958][ T36] __writeback_single_inode+0x160/0xfb0 [ 304.783014][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 304.783070][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.783116][ T36] ? do_raw_spin_unlock+0x172/0x230 [ 304.783161][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.783214][ T36] writeback_sb_inodes+0x60d/0xfa0 [ 304.783291][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 304.783418][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.783464][ T36] ? rcu_is_watching+0x12/0xc0 [ 304.783516][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.783562][ T36] ? queue_io+0x3f6/0x520 [ 304.783610][ T36] wb_writeback+0x419/0xb70 [ 304.783672][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 304.783718][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.783779][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.783825][ T36] ? mark_held_locks+0x49/0x80 [ 304.783897][ T36] wb_workfn+0x14d/0xbe0 [ 304.783953][ T36] ? try_to_wake_up+0x160/0x1870 [ 304.784004][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 304.784065][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.784116][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.784169][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.784214][ T36] ? rcu_is_watching+0x12/0xc0 [ 304.784274][ T36] process_one_work+0x9cf/0x1b70 [ 304.784335][ T36] ? __pfx_update_gid_event_work_handler+0x10/0x10 [ 304.784400][ T36] ? __pfx_process_one_work+0x10/0x10 [ 304.784444][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.784503][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.784549][ T36] ? assign_work+0x1a0/0x250 [ 304.784594][ T36] worker_thread+0x6c8/0xf10 [ 304.784662][ T36] ? __pfx_worker_thread+0x10/0x10 [ 304.784706][ T36] kthread+0x3c5/0x780 [ 304.784745][ T36] ? __pfx_kthread+0x10/0x10 [ 304.784787][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.784832][ T36] ? rcu_is_watching+0x12/0xc0 [ 304.784883][ T36] ? __pfx_kthread+0x10/0x10 [ 304.784925][ T36] ret_from_fork+0x675/0x7d0 [ 304.784958][ T36] ? __pfx_kthread+0x10/0x10 [ 304.784998][ T36] ret_from_fork_asm+0x1a/0x30 [ 304.785088][ T36] [ 304.785102][ T36] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 305.289888][ T6125] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.298661][ T6125] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.429308][ T6125] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.497147][ T7147] veth0_macvtap: entered promiscuous mode [ 305.534437][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.559823][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.589489][ T7147] veth1_macvtap: entered promiscuous mode [ 305.621828][ T7145] veth0_macvtap: entered promiscuous mode [ 305.771862][ T7145] veth1_macvtap: entered promiscuous mode [ 305.820201][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.828034][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.860502][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.885076][ T7147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.897186][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.909069][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.940372][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.951033][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.132034][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.163462][ T7147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.226696][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.257400][ T800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.483997][ T800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.507336][ T800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.536644][ T800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.599905][ T6895] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 307.732026][ T800] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.766631][ T800] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.786855][ T6895] usb 7-1: Using ep0 maxpacket: 8 [ 307.823235][ T6895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.839506][ T800] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.856159][ T6895] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.874040][ T6895] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.883164][ T800] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.891974][ T6895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.912057][ T6895] usb 7-1: config 0 descriptor?? [ 307.939503][ T6895] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 308.050342][ T5839] Bluetooth: hci0: command tx timeout [ 308.136772][ T6915] usb 7-1: USB disconnect, device number 6 [ 308.327813][ T800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.351121][ T800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.457373][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.490963][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.636384][ T800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.712763][ T800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.956010][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.985581][ T7652] netlink: 4456 bytes leftover after parsing attributes in process `syz.6.380'. [ 309.078222][ T7654] loop1: detected capacity change from 0 to 256 [ 309.085717][ T7654] exfat: Unknown parameter 'fsmagic' [ 309.979154][ T800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.020059][ T800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.083975][ T7611] chnl_net:caif_netlink_parms(): no params data found [ 310.130408][ T5839] Bluetooth: hci0: command tx timeout [ 310.309531][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.572676][ T6915] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 311.714000][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.843917][ T6915] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 311.870025][ T6915] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 312.367064][ T5839] Bluetooth: hci0: command tx timeout [ 312.865463][ T7683] loop1: detected capacity change from 0 to 1024 [ 313.106126][ T6915] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 313.217982][ T6915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.489972][ T6915] usb 7-1: Product: syz [ 313.500210][ T6915] usb 7-1: Manufacturer: syz [ 313.511642][ T6915] usb 7-1: SerialNumber: syz [ 313.669674][ T6915] usb 7-1: config 0 descriptor?? [ 313.812410][ T6915] usb 7-1: can't set config #0, error -71 [ 313.833720][ T6915] usb 7-1: USB disconnect, device number 7 [ 314.026548][ T7689] loop8: detected capacity change from 0 to 1024 [ 314.039292][ T7689] EXT4-fs: Ignoring removed orlov option [ 314.295556][ T7689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.500527][ T30] audit: type=1800 audit(1763707041.055:6): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.387" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 314.521079][ T5839] Bluetooth: hci0: command tx timeout [ 315.181634][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.225689][ T7695] loop1: detected capacity change from 0 to 1024 [ 315.931385][ T7695] hfsplus: xattr search failed [ 316.257220][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.319941][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.400654][ T7611] bridge_slave_0: entered allmulticast mode [ 316.460343][ T7611] bridge_slave_0: entered promiscuous mode [ 316.526467][ T7140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.538790][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.548478][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.556511][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.556576][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.572806][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.695971][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.743476][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.080728][ T7611] bridge_slave_1: entered allmulticast mode [ 317.310866][ T7611] bridge_slave_1: entered promiscuous mode [ 317.760542][ T7611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.822591][ T7611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.267349][ T7732] fuse: Bad value for 'fd' [ 318.421022][ T7611] team0: Port device team_slave_0 added [ 318.480417][ T7611] team0: Port device team_slave_1 added [ 318.743824][ T7737] loop8: detected capacity change from 0 to 4096 [ 318.852007][ T52] Bluetooth: hci1: command tx timeout [ 318.861339][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.908268][ T7738] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.920877][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.999914][ T7611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.059333][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.138590][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.229868][ T7611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.271494][ T49] bridge_slave_1: left allmulticast mode [ 319.292135][ T49] bridge_slave_1: left promiscuous mode [ 319.297917][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.320368][ T6915] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 319.380718][ T49] bridge_slave_0: left allmulticast mode [ 319.395326][ T49] bridge_slave_0: left promiscuous mode [ 319.415867][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.400036][ T52] Bluetooth: hci1: command tx timeout [ 321.418000][ T6915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.897631][ T6915] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 321.927174][ T6915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.954165][ T6915] usb 7-1: config 0 descriptor?? [ 322.164598][ T6915] pwc: Askey VC010 type 2 USB webcam detected. [ 322.188871][ T6915] pwc: send_video_command error -71 [ 322.219600][ T6915] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 322.241109][ T6915] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 322.294360][ T6915] usb 7-1: USB disconnect, device number 8 [ 322.607347][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.619484][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.631149][ T49] bond0 (unregistering): Released all slaves [ 322.937077][ T5909] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 323.237078][ T7767] 9pnet_fd: Insufficient options for proto=fd [ 323.410178][ T52] Bluetooth: hci1: command tx timeout [ 323.632675][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 323.643273][ T5909] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 323.656043][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.668460][ T5909] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 323.678245][ T5909] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 255 [ 323.705587][ T5909] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 323.748880][ T49] hsr_slave_0: left promiscuous mode [ 323.758196][ T5909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.770595][ T49] hsr_slave_1: left promiscuous mode [ 323.776676][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.780844][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 323.813717][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.840450][ T5909] usb 2-1: SerialNumber: syz [ 323.852943][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.867037][ T7759] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.888912][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.913494][ T5909] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 323.985897][ T49] veth1_macvtap: left promiscuous mode [ 324.009911][ T49] veth0_macvtap: left promiscuous mode [ 324.025820][ T49] veth1_vlan: left promiscuous mode [ 324.040425][ T49] veth0_vlan: left promiscuous mode [ 324.130314][ T6869] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 324.209544][ T5909] usb 2-1: USB disconnect, device number 12 [ 324.300603][ T6869] usb 7-1: too many configurations: 70, using maximum allowed: 8 [ 324.315998][ T6869] usb 7-1: config index 0 descriptor too short (expected 65505, got 71) [ 324.330032][ T6869] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 324.398684][ T6869] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 324.485908][ T6869] usb 7-1: config index 1 descriptor too short (expected 65505, got 71) [ 324.514018][ T6869] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 324.614531][ T6869] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 324.918874][ T6869] usb 7-1: config index 2 descriptor too short (expected 65505, got 71) [ 324.941577][ T6869] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 324.973691][ T6869] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 325.000475][ T6869] usb 7-1: config index 3 descriptor too short (expected 65505, got 71) [ 325.020090][ T6869] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 325.052943][ T6869] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 325.083958][ T6869] usb 7-1: config index 4 descriptor too short (expected 65505, got 71) [ 325.109890][ T6869] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 325.126239][ T6869] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 325.143841][ T6869] usb 7-1: config index 5 descriptor too short (expected 65505, got 71) [ 325.168724][ T6869] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 325.191283][ T6869] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 325.237929][ T6869] usb 7-1: config index 6 descriptor too short (expected 65505, got 71) [ 325.248324][ T6869] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 325.259644][ T6869] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 325.303093][ T6869] usb 7-1: config index 7 descriptor too short (expected 65505, got 71) [ 325.325261][ T6869] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 325.348663][ T6869] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 325.367740][ T6869] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 325.377150][ T6869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.386023][ T6869] usb 7-1: Product: syz [ 325.405216][ T6869] usb 7-1: Manufacturer: syz [ 325.427566][ T6869] usb 7-1: SerialNumber: syz [ 325.467488][ T6869] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 325.549619][ T43] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 325.701727][ T52] Bluetooth: hci1: command tx timeout [ 326.119959][ T5909] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 326.205829][ T49] team0 (unregistering): Port device team_slave_1 removed [ 326.300826][ T49] team0 (unregistering): Port device team_slave_0 removed [ 326.332721][ T5909] usb 5-1: config 1 interface 0 has no altsetting 0 [ 326.342883][ T5909] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 326.369826][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.388442][ T5909] usb 5-1: Product: syz [ 326.408518][ T5909] usb 5-1: Manufacturer: syz [ 326.420100][ T5909] usb 5-1: SerialNumber: syz [ 326.499737][ T6888] usb 7-1: USB disconnect, device number 9 [ 326.696363][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.702818][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.749574][ T7810] use of bytesused == 0 is deprecated and will be removed in the future, [ 326.760274][ T7810] use the actual size instead. [ 326.880876][ T5909] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 327.170579][ T43] usb 7-1: Service connection timeout for: 256 [ 327.179345][ T43] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 327.209522][ T43] ath9k_htc: Failed to initialize the device [ 327.225572][ T6888] usb 7-1: ath9k_htc: USB layer deinitialized [ 327.247740][ T7611] hsr_slave_0: entered promiscuous mode [ 327.285945][ T7611] hsr_slave_1: entered promiscuous mode [ 328.567569][ T7823] loop6: detected capacity change from 0 to 32768 [ 328.589656][ T7823] [ 328.589656][ T7823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.589656][ T7823] [ 328.691666][ T7823] [ 328.691666][ T7823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.691666][ T7823] [ 328.716822][ T7823] [ 328.716822][ T7823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.716822][ T7823] [ 328.739349][ T7823] [ 328.739349][ T7823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.739349][ T7823] [ 328.770209][ T7823] [ 328.770209][ T7823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.770209][ T7823] [ 328.794431][ T7823] [ 328.794431][ T7823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.794431][ T7823] [ 328.816713][ T7823] [ 328.816713][ T7823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.816713][ T7823] [ 328.866233][ T112] [ 328.866233][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.866233][ T112] [ 329.003053][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.8.421'. [ 329.051562][ T6114] [ 329.051562][ T6114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.051562][ T6114] [ 329.209636][ T6114] [ 329.209636][ T6114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.209636][ T6114] [ 329.742248][ T7708] chnl_net:caif_netlink_parms(): no params data found [ 330.106566][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.177549][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.205077][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.222989][ T7708] bridge_slave_0: entered allmulticast mode [ 331.251398][ T7708] bridge_slave_0: entered promiscuous mode [ 331.328967][ T7867] loop1: detected capacity change from 0 to 4096 [ 331.399611][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.423544][ T7867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.425862][ T7871] loop6: detected capacity change from 0 to 16 [ 331.445218][ T7708] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.453539][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.456638][ T7871] erofs (device loop6): mounted with root inode @ nid 36. [ 331.461823][ T7708] bridge_slave_1: entered allmulticast mode [ 331.477512][ T7708] bridge_slave_1: entered promiscuous mode [ 331.526473][ T7871] erofs (device loop6): xattr_isize 12 of nid 46 is not supported yet [ 331.766804][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.518377][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.681337][ T6888] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 332.685732][ T7708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.722937][ T7708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.863710][ T6888] usb 2-1: config 1 interface 0 has no altsetting 0 [ 332.895268][ T6888] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 332.930657][ T6888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.954773][ T6888] usb 2-1: Product: syz [ 332.971833][ T7708] team0: Port device team_slave_0 added [ 332.980214][ T6888] usb 2-1: Manufacturer: syz [ 332.989534][ T6888] usb 2-1: SerialNumber: syz [ 332.998099][ T7708] team0: Port device team_slave_1 added [ 333.056440][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.780919][ T6888] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 333.876979][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.895029][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.958278][ T7708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.989381][ T6869] usb 5-1: USB disconnect, device number 2 [ 333.990039][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.013345][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.049303][ T7708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.061692][ T6869] usblp0: removed [ 334.281161][ T7708] hsr_slave_0: entered promiscuous mode [ 334.288188][ T7708] hsr_slave_1: entered promiscuous mode [ 334.295649][ T7708] debugfs: 'hsr0' already exists in 'hsr' [ 334.305244][ T7708] Cannot create hsr debugfs directory [ 334.679397][ T6869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 334.711980][ T7611] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 334.853806][ T6869] usb 5-1: Using ep0 maxpacket: 8 [ 334.861515][ T6869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 334.900874][ T6869] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 334.923082][ T6869] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 334.955803][ T6869] usb 5-1: Product: syz [ 334.979548][ T6869] usb 5-1: Manufacturer: syz [ 334.988463][ T7611] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 335.000416][ T6869] usb 5-1: SerialNumber: syz [ 335.034025][ T7611] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 335.132123][ T7611] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 335.185288][ T49] bridge_slave_1: left allmulticast mode [ 335.194793][ T7920] loop8: detected capacity change from 0 to 1764 [ 335.215289][ T49] bridge_slave_1: left promiscuous mode [ 335.234261][ T6869] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 335.250341][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.256199][ T6869] usb 5-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 335.289169][ T6869] usb 5-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 335.298585][ T49] bridge_slave_0: left allmulticast mode [ 335.307451][ T6869] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 335.323550][ T49] bridge_slave_0: left promiscuous mode [ 335.352277][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.435045][ T6869] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 335.477146][ T6869] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 335.518843][ T6869] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 335.555767][ T5909] usb 2-1: USB disconnect, device number 13 [ 335.628557][ T5909] usblp1: removed [ 335.832793][ T6869] usb 5-1: USB disconnect, device number 3 [ 335.861106][ T6869] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 336.691343][ T6869] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 336.865700][ T52] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 336.980647][ T6869] visor 5-1:1.0: device disconnected [ 337.606704][ T7939] loop8: detected capacity change from 0 to 16 [ 337.718234][ T7939] erofs (device loop8): mounted with root inode @ nid 36. [ 338.124742][ T7949] binder: 7948:7949 ioctl c0306201 0 returned -14 [ 338.210713][ T6915] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 339.334635][ T6915] usb 2-1: config 1 interface 0 has no altsetting 0 [ 339.359961][ T6915] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 339.403498][ T6915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.439835][ T6915] usb 2-1: Product: syz [ 339.444020][ T6915] usb 2-1: Manufacturer: syz [ 339.448619][ T6915] usb 2-1: SerialNumber: syz [ 339.496995][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.552962][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.596211][ T49] bond0 (unregistering): Released all slaves [ 339.925151][ T7981] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 339.940858][ T6915] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 340.166791][ T7983] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 340.173488][ T7983] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.186820][ T7983] vhci_hcd vhci_hcd.0: Device attached [ 340.343631][ T7984] vhci_hcd: connection closed [ 340.347843][ T60] vhci_hcd: stop threads [ 340.367484][ T60] vhci_hcd: release socket [ 340.392378][ T60] vhci_hcd: disconnect device [ 340.454757][ T6915] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 340.480019][ T6915] usb 49-1: enqueue for inactive port 0 [ 340.572076][ T6915] vhci_hcd: vhci_device speed not set [ 340.695779][ T7962] loop4: detected capacity change from 0 to 32768 [ 340.751100][ T49] hsr_slave_0: left promiscuous mode [ 340.781765][ T49] hsr_slave_1: left promiscuous mode [ 340.810921][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.818352][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.844463][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.862020][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.951606][ T49] veth1_macvtap: left promiscuous mode [ 340.962818][ T49] veth0_macvtap: left promiscuous mode [ 340.972279][ T49] veth1_vlan: left promiscuous mode [ 340.996486][ T49] veth0_vlan: left promiscuous mode [ 341.167190][ T7999] binder: 7997:7999 ioctl 0 200000000040 returned -22 [ 341.380738][ T6869] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 341.451656][ T5810] usb 2-1: USB disconnect, device number 14 [ 341.488727][ T5810] usblp0: removed [ 341.679074][ T6869] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 341.716079][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 341.734947][ T6869] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 341.744709][ T6869] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 341.873974][ T6869] usb 5-1: config 220 has no interface number 2 [ 343.561848][ T6869] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 343.781500][ T8013] binder: 8012:8013 ioctl c0306201 0 returned -14 [ 344.530122][ T6869] usb 5-1: config 220 interface 0 has no altsetting 0 [ 344.543177][ T6869] usb 5-1: config 220 interface 76 has no altsetting 0 [ 344.559833][ T6869] usb 5-1: config 220 interface 1 has no altsetting 0 [ 344.648097][ T6869] usb 5-1: string descriptor 0 read error: -71 [ 344.664594][ T6869] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 344.739988][ T6869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.064666][ T6869] usb 5-1: can't set config #220, error -71 [ 345.091657][ T6869] usb 5-1: USB disconnect, device number 4 [ 346.453272][ T8032] loop6: detected capacity change from 0 to 40427 [ 346.512981][ T8032] F2FS-fs (loop6): invalid crc value [ 346.606558][ T8032] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 346.632595][ T8039] loop1: detected capacity change from 0 to 1024 [ 346.644279][ T8032] F2FS-fs (loop6): Start checkpoint disabled! [ 347.312485][ T8032] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 347.359681][ T8032] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 347.800807][ T8044] netlink: 4456 bytes leftover after parsing attributes in process `syz.8.464'. [ 347.963847][ T6112] kworker/u8:14: attempt to access beyond end of device [ 347.963847][ T6112] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 347.990501][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 347.990549][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.990574][ T6112] Workqueue: writeback wb_workfn (flush-7:6) [ 347.990636][ T6112] Call Trace: [ 347.990647][ T6112] [ 347.990661][ T6112] dump_stack_lvl+0x16c/0x1f0 [ 347.990712][ T6112] f2fs_handle_critical_error+0x624/0x9f0 [ 347.990758][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.990804][ T6112] ? f2fs_build_fault_attr+0x53/0x1f0 [ 347.990878][ T6112] f2fs_write_end_io+0x958/0xcf0 [ 347.990929][ T6112] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 347.990982][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.991045][ T6112] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 347.991089][ T6112] bio_endio+0x713/0x860 [ 347.991147][ T6112] submit_bio_noacct+0x306/0x1f60 [ 347.991199][ T6112] __submit_merged_bio+0x33c/0x770 [ 347.991252][ T6112] __submit_merged_write_cond+0x319/0x3f0 [ 347.991312][ T6112] f2fs_write_cache_pages+0x2067/0x2570 [ 347.991398][ T6112] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 347.991454][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.991499][ T6112] ? ieee80211_inform_bss+0x781/0x1140 [ 347.991577][ T6112] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 347.991665][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.991711][ T6112] ? trace_cfg80211_return_bss+0x17f/0x200 [ 347.991752][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.991870][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.991923][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.991977][ T6112] f2fs_write_data_pages+0x4ad/0xd90 [ 347.992043][ T6112] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 347.992114][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.992159][ T6112] ? __lock_acquire+0xb8a/0x1c90 [ 347.992222][ T6112] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 347.992279][ T6112] do_writepages+0x27a/0x600 [ 347.992325][ T6112] ? __pfx_do_writepages+0x10/0x10 [ 347.992361][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.992406][ T6112] ? reacquire_held_locks+0xcd/0x1f0 [ 347.992467][ T6112] ? writeback_sb_inodes+0x3b0/0xfa0 [ 347.992522][ T6112] __writeback_single_inode+0x160/0xfb0 [ 347.992577][ T6112] ? __pfx___writeback_single_inode+0x10/0x10 [ 347.992625][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.992669][ T6112] ? do_raw_spin_unlock+0x172/0x230 [ 347.992714][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.992766][ T6112] writeback_sb_inodes+0x60d/0xfa0 [ 347.992841][ T6112] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 347.992887][ T6112] ? __lock_acquire+0xb8a/0x1c90 [ 347.993026][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.993071][ T6112] ? rcu_is_watching+0x12/0xc0 [ 347.993120][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.993165][ T6112] ? queue_io+0x3f6/0x520 [ 347.993214][ T6112] wb_writeback+0x419/0xb70 [ 347.993275][ T6112] ? __pfx_wb_writeback+0x10/0x10 [ 347.993321][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.993381][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.993426][ T6112] ? mark_held_locks+0x49/0x80 [ 347.993496][ T6112] wb_workfn+0x14d/0xbe0 [ 347.993551][ T6112] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 347.993602][ T6112] ? __pfx_wb_workfn+0x10/0x10 [ 347.993657][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.993708][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.993760][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.993805][ T6112] ? rcu_is_watching+0x12/0xc0 [ 347.993863][ T6112] process_one_work+0x9cf/0x1b70 [ 347.993928][ T6112] ? __pfx_process_one_work+0x10/0x10 [ 347.993971][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.994033][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.994078][ T6112] ? assign_work+0x1a0/0x250 [ 347.994123][ T6112] worker_thread+0x6c8/0xf10 [ 347.994190][ T6112] ? __pfx_worker_thread+0x10/0x10 [ 347.994233][ T6112] kthread+0x3c5/0x780 [ 347.994273][ T6112] ? __pfx_kthread+0x10/0x10 [ 347.994315][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.994361][ T6112] ? rcu_is_watching+0x12/0xc0 [ 347.994411][ T6112] ? __pfx_kthread+0x10/0x10 [ 347.994452][ T6112] ret_from_fork+0x675/0x7d0 [ 347.994484][ T6112] ? __pfx_kthread+0x10/0x10 [ 347.994523][ T6112] ret_from_fork_asm+0x1a/0x30 [ 347.994607][ T6112] [ 347.994622][ T6112] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 348.421693][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 348.421741][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.421766][ T6112] Workqueue: writeback wb_workfn (flush-7:6) [ 348.421826][ T6112] Call Trace: [ 348.421838][ T6112] [ 348.421851][ T6112] dump_stack_lvl+0x16c/0x1f0 [ 348.421901][ T6112] f2fs_handle_critical_error+0x624/0x9f0 [ 348.421946][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.421991][ T6112] ? f2fs_build_fault_attr+0x53/0x1f0 [ 348.422070][ T6112] f2fs_write_end_io+0x958/0xcf0 [ 348.422120][ T6112] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 348.422170][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.422225][ T6112] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 348.422269][ T6112] bio_endio+0x713/0x860 [ 348.422326][ T6112] submit_bio_noacct+0x306/0x1f60 [ 348.422379][ T6112] __submit_merged_bio+0x33c/0x770 [ 348.422431][ T6112] __submit_merged_write_cond+0x319/0x3f0 [ 348.422491][ T6112] f2fs_write_cache_pages+0x2067/0x2570 [ 348.422575][ T6112] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 348.422631][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.422675][ T6112] ? ieee80211_inform_bss+0x781/0x1140 [ 348.422752][ T6112] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 348.422840][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.422884][ T6112] ? trace_cfg80211_return_bss+0x17f/0x200 [ 348.422925][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.423049][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.423103][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.423157][ T6112] f2fs_write_data_pages+0x4ad/0xd90 [ 348.423221][ T6112] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 348.423284][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.423325][ T6112] ? __lock_acquire+0xb8a/0x1c90 [ 348.423388][ T6112] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 348.423445][ T6112] do_writepages+0x27a/0x600 [ 348.423491][ T6112] ? __pfx_do_writepages+0x10/0x10 [ 348.423526][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.423570][ T6112] ? reacquire_held_locks+0xcd/0x1f0 [ 348.423632][ T6112] ? writeback_sb_inodes+0x3b0/0xfa0 [ 348.423683][ T6112] __writeback_single_inode+0x160/0xfb0 [ 348.423737][ T6112] ? __pfx___writeback_single_inode+0x10/0x10 [ 348.423786][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.423830][ T6112] ? do_raw_spin_unlock+0x172/0x230 [ 348.423873][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.423926][ T6112] writeback_sb_inodes+0x60d/0xfa0 [ 348.424001][ T6112] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 348.424052][ T6112] ? __lock_acquire+0xb8a/0x1c90 [ 348.424187][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.424231][ T6112] ? rcu_is_watching+0x12/0xc0 [ 348.424280][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.424325][ T6112] ? queue_io+0x3f6/0x520 [ 348.424373][ T6112] wb_writeback+0x419/0xb70 [ 348.424433][ T6112] ? __pfx_wb_writeback+0x10/0x10 [ 348.424478][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.424537][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.424581][ T6112] ? mark_held_locks+0x49/0x80 [ 348.424650][ T6112] wb_workfn+0x14d/0xbe0 [ 348.424705][ T6112] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 348.424755][ T6112] ? __pfx_wb_workfn+0x10/0x10 [ 348.424809][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.424859][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.424910][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.424954][ T6112] ? rcu_is_watching+0x12/0xc0 [ 348.425015][ T6112] process_one_work+0x9cf/0x1b70 [ 348.425081][ T6112] ? __pfx_process_one_work+0x10/0x10 [ 348.425123][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.425181][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.425225][ T6112] ? assign_work+0x1a0/0x250 [ 348.425269][ T6112] worker_thread+0x6c8/0xf10 [ 348.425339][ T6112] ? __pfx_worker_thread+0x10/0x10 [ 348.425381][ T6112] kthread+0x3c5/0x780 [ 348.425420][ T6112] ? __pfx_kthread+0x10/0x10 [ 348.425460][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 348.425504][ T6112] ? rcu_is_watching+0x12/0xc0 [ 348.425554][ T6112] ? __pfx_kthread+0x10/0x10 [ 348.425594][ T6112] ret_from_fork+0x675/0x7d0 [ 348.425627][ T6112] ? __pfx_kthread+0x10/0x10 [ 348.425666][ T6112] ret_from_fork_asm+0x1a/0x30 [ 348.425749][ T6112] [ 348.425846][ T6112] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 349.495872][ T49] team0 (unregistering): Port device team_slave_1 removed [ 349.550963][ T8048] loop1: detected capacity change from 0 to 32768 [ 349.910678][ T49] team0 (unregistering): Port device team_slave_0 removed [ 350.269906][ T8073] loop4: detected capacity change from 0 to 8192 [ 351.798482][ T8089] loop8: detected capacity change from 0 to 40427 [ 351.870658][ T8089] F2FS-fs (loop8): invalid crc value [ 351.958736][ T8089] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 351.974694][ T8089] F2FS-fs (loop8): Start checkpoint disabled! [ 351.994769][ T8089] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 352.007466][ T8089] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 352.055710][ T8100] loop4: detected capacity change from 0 to 1024 [ 352.156699][ T8100] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 352.631393][ T6112] kworker/u8:14: attempt to access beyond end of device [ 352.631393][ T6112] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 352.668712][ T8100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.694711][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 352.694753][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.694777][ T6112] Workqueue: writeback wb_workfn (flush-7:8) [ 352.694837][ T6112] Call Trace: [ 352.694849][ T6112] [ 352.694862][ T6112] dump_stack_lvl+0x16c/0x1f0 [ 352.694912][ T6112] f2fs_handle_critical_error+0x624/0x9f0 [ 352.694958][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.695004][ T6112] ? f2fs_build_fault_attr+0x53/0x1f0 [ 352.695078][ T6112] f2fs_write_end_io+0x958/0xcf0 [ 352.695124][ T6112] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 352.695170][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.695221][ T6112] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 352.695262][ T6112] bio_endio+0x713/0x860 [ 352.695317][ T6112] submit_bio_noacct+0x306/0x1f60 [ 352.695368][ T6112] __submit_merged_bio+0x33c/0x770 [ 352.695416][ T6112] __submit_merged_write_cond+0x319/0x3f0 [ 352.695470][ T6112] f2fs_write_cache_pages+0x2067/0x2570 [ 352.695545][ T6112] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 352.695596][ T6112] ? __kernel_text_address+0xd/0x40 [ 352.695635][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.695677][ T6112] ? unwind_get_return_address+0x59/0xa0 [ 352.695718][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.695759][ T6112] ? arch_stack_walk+0x88/0x100 [ 352.695810][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.695929][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.695971][ T6112] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.696020][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.696066][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.696115][ T6112] f2fs_write_data_pages+0x4ad/0xd90 [ 352.696172][ T6112] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 352.696233][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.696274][ T6112] ? __lock_acquire+0xb8a/0x1c90 [ 352.696332][ T6112] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 352.696385][ T6112] do_writepages+0x27a/0x600 [ 352.696427][ T6112] ? __pfx_do_writepages+0x10/0x10 [ 352.696460][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.696502][ T6112] ? reacquire_held_locks+0xcd/0x1f0 [ 352.696558][ T6112] ? writeback_sb_inodes+0x3b0/0xfa0 [ 352.696609][ T6112] __writeback_single_inode+0x160/0xfb0 [ 352.696659][ T6112] ? __pfx___writeback_single_inode+0x10/0x10 [ 352.696703][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.696745][ T6112] ? do_raw_spin_unlock+0x172/0x230 [ 352.696799][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.696846][ T6112] writeback_sb_inodes+0x60d/0xfa0 [ 352.696911][ T6112] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 352.696958][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.696999][ T6112] ? find_held_lock+0x2b/0x80 [ 352.697102][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.697143][ T6112] ? rcu_is_watching+0x12/0xc0 [ 352.697189][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.697230][ T6112] ? queue_io+0x3f6/0x520 [ 352.697273][ T6112] wb_writeback+0x419/0xb70 [ 352.697327][ T6112] ? __pfx_wb_writeback+0x10/0x10 [ 352.697368][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.697421][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.697462][ T6112] ? mark_held_locks+0x49/0x80 [ 352.697524][ T6112] wb_workfn+0x14d/0xbe0 [ 352.697574][ T6112] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 352.697620][ T6112] ? __pfx_wb_workfn+0x10/0x10 [ 352.697669][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.697714][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.697761][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.697802][ T6112] ? rcu_is_watching+0x12/0xc0 [ 352.697854][ T6112] process_one_work+0x9cf/0x1b70 [ 352.697907][ T6112] ? __pfx_loop_rootcg_workfn+0x10/0x10 [ 352.697950][ T6112] ? __pfx_process_one_work+0x10/0x10 [ 352.697989][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.698045][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.698086][ T6112] ? assign_work+0x1a0/0x250 [ 352.698125][ T6112] worker_thread+0x6c8/0xf10 [ 352.698183][ T6112] ? __pfx_worker_thread+0x10/0x10 [ 352.698222][ T6112] kthread+0x3c5/0x780 [ 352.698257][ T6112] ? __pfx_kthread+0x10/0x10 [ 352.698293][ T6112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.698334][ T6112] ? rcu_is_watching+0x12/0xc0 [ 352.698380][ T6112] ? __pfx_kthread+0x10/0x10 [ 352.698416][ T6112] ret_from_fork+0x675/0x7d0 [ 352.698446][ T6112] ? __pfx_kthread+0x10/0x10 [ 352.698481][ T6112] ret_from_fork_asm+0x1a/0x30 [ 352.698555][ T6112] [ 352.698568][ T6112] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 353.248208][ T7147] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.165405][ T52] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 355.481170][ T7611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.507812][ T8138] loop6: detected capacity change from 0 to 512 [ 356.591820][ T8138] EXT4-fs error (device loop6): ext4_iget_extra_inode:5074: inode #15: comm syz.6.487: corrupted in-inode xattr: e_value size too large [ 356.646136][ T8136] loop4: detected capacity change from 0 to 32768 [ 356.653547][ T8136] xfs: Deprecated parameter 'attr2' [ 356.659131][ T8136] XFS: attr2 mount option is deprecated. [ 356.669387][ T7611] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.697552][ T8138] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.487: couldn't read orphan inode 15 (err -117) [ 356.752635][ T8136] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 356.769825][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.776993][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.781733][ T8138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.858090][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.865286][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.933612][ T8136] XFS (loop4): Ending clean mount [ 356.950209][ T8136] XFS (loop4): Quotacheck needed: Please wait. [ 357.145108][ T8136] XFS (loop4): Quotacheck: Done. [ 358.248845][ T6114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.319641][ T7147] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 358.598141][ T8161] ntfs3(nullb0): Primary boot signature is not NTFS. [ 358.610953][ T8161] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 359.487593][ T7708] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 359.542128][ T7708] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 359.663943][ T7708] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 359.720950][ T7708] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 360.008417][ T7611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.441854][ T7708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.484109][ T7708] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.559114][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.566316][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.632239][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.639387][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.169283][ T8237] loop6: detected capacity change from 0 to 1024 [ 363.268347][ T8236] loop4: detected capacity change from 0 to 40427 [ 363.421125][ T8236] F2FS-fs (loop4): invalid crc value [ 363.505975][ T8236] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 363.556213][ T8236] F2FS-fs (loop4): Start checkpoint disabled! [ 363.579938][ T8236] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 363.588382][ T8236] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 365.193914][ T60] kworker/u8:4: attempt to access beyond end of device [ 365.193914][ T60] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 365.340102][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 365.340151][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.340177][ T60] Workqueue: writeback wb_workfn (flush-7:4) [ 365.340238][ T60] Call Trace: [ 365.340249][ T60] [ 365.340263][ T60] dump_stack_lvl+0x16c/0x1f0 [ 365.340314][ T60] f2fs_handle_critical_error+0x624/0x9f0 [ 365.340357][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.340403][ T60] ? f2fs_build_fault_attr+0x53/0x1f0 [ 365.340475][ T60] f2fs_write_end_io+0x958/0xcf0 [ 365.340523][ T60] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 365.340574][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.340631][ T60] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 365.340674][ T60] bio_endio+0x713/0x860 [ 365.340729][ T60] submit_bio_noacct+0x306/0x1f60 [ 365.340790][ T60] __submit_merged_bio+0x33c/0x770 [ 365.340840][ T60] __submit_merged_write_cond+0x319/0x3f0 [ 365.340897][ T60] f2fs_write_cache_pages+0x2067/0x2570 [ 365.340977][ T60] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 365.341027][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.341072][ T60] ? kasan_save_stack+0x33/0x60 [ 365.341129][ T60] ? __kasan_save_free_info+0x3b/0x60 [ 365.341176][ T60] ? __kasan_slab_free+0x5f/0x80 [ 365.341236][ T60] ? kmem_cache_free+0x2d4/0x6c0 [ 365.341290][ T60] ? consume_skb+0xcc/0x100 [ 365.341330][ T60] ? netlink_broadcast_filtered+0x3ee/0xf90 [ 365.341371][ T60] ? nlmsg_notify+0x9e/0x220 [ 365.341412][ T60] ? fib6_add_rt2node+0x24ba/0x3670 [ 365.341462][ T60] ? fib6_add+0x628/0x1d90 [ 365.341509][ T60] ? ip6_ins_rt+0xb5/0x110 [ 365.341563][ T60] ? __ipv6_ifa_notify+0xa73/0xd60 [ 365.341605][ T60] ? addrconf_dad_completed+0x19a/0x10d0 [ 365.341660][ T60] ? addrconf_dad_work+0x855/0x14e0 [ 365.341712][ T60] ? process_one_work+0x9cf/0x1b70 [ 365.341751][ T60] ? worker_thread+0x6c8/0xf10 [ 365.341795][ T60] ? kthread+0x3c5/0x780 [ 365.341828][ T60] ? ret_from_fork+0x675/0x7d0 [ 365.341859][ T60] ? ret_from_fork_asm+0x1a/0x30 [ 365.341991][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.342038][ T60] ? consume_skb+0x10/0x100 [ 365.342081][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.342126][ T60] ? netlink_broadcast_filtered+0x477/0xf90 [ 365.342170][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.342222][ T60] f2fs_write_data_pages+0x4ad/0xd90 [ 365.342284][ T60] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 365.342349][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.342395][ T60] ? __lock_acquire+0xb8a/0x1c90 [ 365.342457][ T60] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 365.342513][ T60] do_writepages+0x27a/0x600 [ 365.342557][ T60] ? __pfx_do_writepages+0x10/0x10 [ 365.342593][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.342638][ T60] ? reacquire_held_locks+0xcd/0x1f0 [ 365.342699][ T60] ? writeback_sb_inodes+0x3b0/0xfa0 [ 365.342752][ T60] __writeback_single_inode+0x160/0xfb0 [ 365.342814][ T60] ? __pfx___writeback_single_inode+0x10/0x10 [ 365.342863][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.342909][ T60] ? do_raw_spin_unlock+0x172/0x230 [ 365.342954][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.343005][ T60] writeback_sb_inodes+0x60d/0xfa0 [ 365.343076][ T60] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 365.343124][ T60] ? __pfx_fib6_clean_node+0x10/0x10 [ 365.343238][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.343284][ T60] ? rcu_is_watching+0x12/0xc0 [ 365.343333][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.343377][ T60] ? queue_io+0x3f6/0x520 [ 365.343422][ T60] wb_writeback+0x419/0xb70 [ 365.343480][ T60] ? __pfx_wb_writeback+0x10/0x10 [ 365.343525][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.343583][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.343629][ T60] ? mark_held_locks+0x49/0x80 [ 365.343698][ T60] wb_workfn+0x14d/0xbe0 [ 365.343753][ T60] ? try_to_wake_up+0x160/0x1870 [ 365.343809][ T60] ? __pfx_wb_workfn+0x10/0x10 [ 365.343863][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.343912][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.343963][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.344008][ T60] ? rcu_is_watching+0x12/0xc0 [ 365.344063][ T60] process_one_work+0x9cf/0x1b70 [ 365.344118][ T60] ? __pfx_addrconf_dad_work+0x10/0x10 [ 365.344175][ T60] ? __pfx_process_one_work+0x10/0x10 [ 365.344217][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.344274][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.344319][ T60] ? assign_work+0x1a0/0x250 [ 365.344362][ T60] worker_thread+0x6c8/0xf10 [ 365.344426][ T60] ? __pfx_worker_thread+0x10/0x10 [ 365.344469][ T60] kthread+0x3c5/0x780 [ 365.344507][ T60] ? __pfx_kthread+0x10/0x10 [ 365.344546][ T60] ? srso_alias_return_thunk+0x5/0xfbef5 [ 365.344591][ T60] ? rcu_is_watching+0x12/0xc0 [ 365.344639][ T60] ? __pfx_kthread+0x10/0x10 [ 365.344679][ T60] ret_from_fork+0x675/0x7d0 [ 365.344711][ T60] ? __pfx_kthread+0x10/0x10 [ 365.344748][ T60] ret_from_fork_asm+0x1a/0x30 [ 365.344835][ T60] [ 365.344848][ T60] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 366.227923][ T7708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.477709][ T8270] loop6: detected capacity change from 0 to 164 [ 369.642891][ T8270] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 369.738284][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.748290][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.756442][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.765846][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.774491][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.138545][ T8284] binder: 8282:8284 ioctl 0 200000000040 returned -22 [ 370.381132][ T8276] chnl_net:caif_netlink_parms(): no params data found [ 370.876503][ T8301] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.514'. [ 370.933901][ T6888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 371.001282][ T5909] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 371.824812][ T5839] Bluetooth: hci4: command tx timeout [ 371.915058][ T6888] usb 5-1: Using ep0 maxpacket: 16 [ 371.975535][ T6888] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 371.986732][ T6888] usb 5-1: config 0 has no interface number 0 [ 372.010240][ T5909] usb 7-1: Using ep0 maxpacket: 16 [ 372.033931][ T6888] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 372.102130][ T5909] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 372.124077][ T6888] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 372.152050][ T5909] usb 7-1: config 0 has no interface number 0 [ 372.201854][ T5909] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 372.221262][ T6888] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 372.241579][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.249844][ T6888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.259938][ T5909] usb 7-1: Product: syz [ 372.264107][ T5909] usb 7-1: Manufacturer: syz [ 372.268702][ T5909] usb 7-1: SerialNumber: syz [ 372.291599][ T6888] usb 5-1: Product: syz [ 372.295783][ T6888] usb 5-1: Manufacturer: syz [ 372.310141][ T6888] usb 5-1: SerialNumber: syz [ 372.315848][ T5909] usb 7-1: config 0 descriptor?? [ 372.355549][ T5909] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 372.370945][ T6888] usb 5-1: config 0 descriptor?? [ 372.385423][ T8295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 372.400019][ T8295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 372.425204][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.460500][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.486346][ T8276] bridge_slave_0: entered allmulticast mode [ 372.765711][ T8276] bridge_slave_0: entered promiscuous mode [ 372.787936][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.804716][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.820237][ T8276] bridge_slave_1: entered allmulticast mode [ 372.826258][ T8295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 372.828259][ T8276] bridge_slave_1: entered promiscuous mode [ 372.880749][ T8295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 373.819970][ T6883] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 373.820578][ T8328] loop8: detected capacity change from 0 to 512 [ 373.832071][ T6883] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 373.832105][ T6883] CPU: 0 UID: 0 PID: 6883 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 373.832151][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.866100][ T6883] Workqueue: events l2cap_info_timeout [ 373.871578][ T6883] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 373.877487][ T6883] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 29 af eb fe 66 66 2e 0f 1f 84 00 00 00 [ 373.897096][ T6883] RSP: 0018:ffffc90002f979f0 EFLAGS: 00010282 [ 373.903162][ T6883] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 373.911130][ T6883] RDX: 0000000000000000 RSI: ffffffff8927bc51 RDI: dffffc000000004c [ 373.919098][ T6883] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 373.927063][ T6883] R10: 00000000ffffff80 R11: 0000000000000001 R12: ffffffff8927bc51 [ 373.935031][ T6883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.942998][ T6883] FS: 0000000000000000(0000) GS:ffff888124a06000(0000) knlGS:0000000000000000 [ 373.951930][ T6883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.958508][ T6883] CR2: 00007f7d697a6480 CR3: 000000000e182000 CR4: 0000000000350ef0 [ 373.966475][ T6883] Call Trace: [ 373.969743][ T6883] [ 373.972690][ T6883] __kasan_check_byte+0x13/0x50 [ 373.977550][ T6883] lock_acquire+0xfc/0x350 [ 373.981976][ T6883] lock_sock_nested+0x41/0xf0 [ 373.986656][ T6883] ? l2cap_sock_ready_cb+0x41/0x170 [ 373.991864][ T6883] l2cap_sock_ready_cb+0x41/0x170 [ 373.996902][ T6883] l2cap_conn_start+0x144/0xb30 [ 374.001759][ T6883] ? __pfx_l2cap_conn_start+0x10/0x10 [ 374.007138][ T6883] ? __pfx___mutex_lock+0x10/0x10 [ 374.012176][ T6883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.017818][ T6883] ? debug_object_deactivate+0x1ec/0x3a0 [ 374.023467][ T6883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.029112][ T6883] l2cap_info_timeout+0x81/0xa0 [ 374.034054][ T6883] process_one_work+0x9cf/0x1b70 [ 374.039017][ T6883] ? __pfx_process_one_work+0x10/0x10 [ 374.044394][ T6883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.050040][ T6883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.055684][ T6883] ? assign_work+0x1a0/0x250 [ 374.060278][ T6883] worker_thread+0x6c8/0xf10 [ 374.064881][ T6883] ? __pfx_worker_thread+0x10/0x10 [ 374.070000][ T6883] kthread+0x3c5/0x780 [ 374.074075][ T6883] ? __pfx_kthread+0x10/0x10 [ 374.078665][ T6883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.084305][ T6883] ? rcu_is_watching+0x12/0xc0 [ 374.089082][ T6883] ? __pfx_kthread+0x10/0x10 [ 374.093673][ T6883] ret_from_fork+0x675/0x7d0 [ 374.098261][ T6883] ? __pfx_kthread+0x10/0x10 [ 374.102852][ T6883] ret_from_fork_asm+0x1a/0x30 [ 374.107646][ T6883] [ 374.110652][ T6883] Modules linked in: [ 374.115923][ T6883] ---[ end trace 0000000000000000 ]--- [ 374.281569][ T52] Bluetooth: hci4: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 375.076164][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -110) [ 375.085969][ T6883] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 375.092682][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -32) [ 375.102341][ T6883] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 29 af eb fe 66 66 2e 0f 1f 84 00 00 00 [ 375.958501][ T6888] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 375.968904][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -32) [ 375.979316][ T52] Bluetooth: hci7: command 0x0406 tx timeout [ 375.985348][ T6888] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 376.001754][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -32) [ 376.020076][ T6888] asix 5-1:0.251: probe with driver asix failed with error -5 [ 376.029030][ T6883] RSP: 0018:ffffc90002f979f0 EFLAGS: 00010282 [ 376.043083][ T6883] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 376.089891][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -32) [ 376.133114][ T8328] EXT4-fs warning (device loop8): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop8. [ 376.274178][ T6888] usb 5-1: USB disconnect, device number 5 [ 376.280107][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -32) [ 376.289847][ T52] Bluetooth: hci4: command tx timeout [ 376.295269][ T6883] RDX: 0000000000000000 RSI: ffffffff8927bc51 RDI: dffffc000000004c [ 376.305437][ T6883] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 376.314793][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -32) [ 376.325093][ T6883] R10: 00000000ffffff80 R11: 0000000000000001 R12: ffffffff8927bc51 [ 376.333366][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -32) [ 376.349949][ T6883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.357941][ T6883] FS: 0000000000000000(0000) GS:ffff888124a06000(0000) knlGS:0000000000000000 [ 376.369842][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -32) [ 376.430867][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -32) [ 376.459851][ T6883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.486253][ T6883] CR2: 00007fce1bce0286 CR3: 0000000055c0a000 CR4: 0000000000350ef0 [ 376.509851][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -32) [ 376.535944][ T6883] Kernel panic - not syncing: Fatal exception [ 376.542317][ T6883] Kernel Offset: disabled [ 376.546629][ T6883] Rebooting in 86400 seconds..