last executing test programs: 3m53.276532781s ago: executing program 3 (id=67): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) 3m52.64436476s ago: executing program 3 (id=69): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 3m52.292970915s ago: executing program 3 (id=71): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0xac, &(0x7f00000002c0)={0x0, 0xd6a3, 0x40, 0xfffffffe, 0xffffffde}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 3m51.505815087s ago: executing program 3 (id=75): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 3m2.17106663s ago: executing program 3 (id=75): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 2m49.219217548s ago: executing program 1 (id=219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) alarm(0x0) socket$inet_udp(0x2, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x1e, 0x109}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000100)='afs_make_fs_call2\x00', r0}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x4) r7 = open(&(0x7f0000000280)='.\x00', 0x10900, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 2m47.798877933s ago: executing program 1 (id=222): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ee, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0700081400c9"], 0xa) 2m46.9714431s ago: executing program 1 (id=225): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0xff8e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffded, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1004, 0x4, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syncfs(0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x2) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m43.863576914s ago: executing program 1 (id=230): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x161, &(0x7f0000000480)="$eJzs209LOkEcx/HP+l9/f7KsS3QIguiSqwZWN3sooptIa0l2UYLqofTsOtShW6cMl3XDVQgEd1Lfr4vz8csyM4evzhxWANZWTfuyZCk1CnuZ/EPBMr0kABEZ+p+fQwDrJ/5hegUAzHi7kLqSXt/vG4qnps4Ho3ptXI+lp+tP0m7Cr1sZZcPni2fpcPy8lZv5fC6o/5lZPzoYz/9X//RfG8prU1sq+PWm5F9aHuc9BgEAsFYsFcN54ouYLtuuUwpy0svlIKe8XAnlkyCnvVxs3LjNRW0BwJxiP/R//CU70f+JUP8DWF69/uCq7rrOLQMGSzfIRDypJWlhUyR/VzOa/mUCsGj2Xadr9/qD43an3nJaznW1Uq2el85Oy7Z38bcnr/8AVsj3n77plQAAAAAAAAAAAAAAgHlta8f0EgAAAABEJIrXiUzvEQAAAAAAAAAAAAAAAACAVfMVAAD//3OpHJU=") rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)='./file2\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m42.358848244s ago: executing program 1 (id=233): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0xff8e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffded, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1004, 0x4, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syncfs(r5) mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x2) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m39.123174895s ago: executing program 1 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 2m37.853281851s ago: executing program 32 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 1m41.397168088s ago: executing program 2 (id=396): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1m41.173852208s ago: executing program 2 (id=397): mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r2, 0xffffffffffffffe2, &(0x7f00000003c0)=""/28}) 1m40.443279364s ago: executing program 2 (id=398): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000300)={[{@utf8}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@gid}, {@utf8no}, {@shortname_win95}]}, 0x1, 0x362, &(0x7f0000000900)="$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") sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40401}, 0x10) 1m39.674964258s ago: executing program 2 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) 1m38.288218948s ago: executing program 2 (id=403): keyctl$session_to_parent(0x12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1m36.933764853s ago: executing program 2 (id=407): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000240)) 1m34.566074491s ago: executing program 33 (id=407): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000240)) 32.334340891s ago: executing program 4 (id=544): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0xff8e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffded, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1004, 0x4, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syncfs(r5) mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x2) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) 30.923679782s ago: executing program 4 (id=547): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 30.465859834s ago: executing program 4 (id=549): syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r0 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0xb9}, &(0x7f0000000340)=0x0, &(0x7f0000002300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) close(r0) 29.694869591s ago: executing program 4 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 29.40133445s ago: executing program 4 (id=553): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x0, r5, &(0x7f0000000300)="383265dc692bd9ca280c127580afc147ce607071837cf4de5dc039", 0x1b, 0x8, 0x0, 0x0, r5}]) io_cancel(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x65b, r1, &(0x7f0000000340)="fac8d82702b1ffad9165f15f78a268cecf75c378477fc59be2f07b1a389f0feb95bc1d1d5bbdc9c8b6c908891bd4a608f0c84b15356a970ce5400c9669a5c7555774b06c8838321620c7ddbc057462f507f8c8933b02175f23c1a46f501c6c5bafd1a385ff9942602b53bc2cbbd2214bbf68bebaee32c07d070c5e703b78b09d8e2e71712fb81e110e9a1906a188c9090c4e8e26e11680e120e77d5042fee2a3242804c9dd0ac1519a9f580316e4de7b71fc70d1aacd757907382016ff0d784141f349d1", 0xc4, 0xffffffffffffffff, 0x0, 0x1, r0}, &(0x7f0000000200)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 27.773858272s ago: executing program 4 (id=559): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r7, 0x2, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000300)="383265dc692bd9ca280c127580afc147ce607071837cf4de5dc039", 0x1b, 0x8, 0x0, 0x0, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x9, r5, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x2}]) io_cancel(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x65b, r1, &(0x7f0000000340)="fac8d82702b1ffad9165f15f78a268cecf75c378477fc59be2f07b1a389f0feb95bc1d1d5bbdc9c8b6c908891bd4a608f0c84b15356a970ce5400c9669a5c7555774b06c8838321620c7ddbc057462f507f8c8933b02175f23c1a46f501c6c5bafd1a385ff", 0x65, 0xffffffffffffffff, 0x0, 0x1, r0}, &(0x7f0000000200)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 27.114901754s ago: executing program 34 (id=559): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r7, 0x2, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000300)="383265dc692bd9ca280c127580afc147ce607071837cf4de5dc039", 0x1b, 0x8, 0x0, 0x0, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x9, r5, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x2}]) io_cancel(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x65b, r1, &(0x7f0000000340)="fac8d82702b1ffad9165f15f78a268cecf75c378477fc59be2f07b1a389f0feb95bc1d1d5bbdc9c8b6c908891bd4a608f0c84b15356a970ce5400c9669a5c7555774b06c8838321620c7ddbc057462f507f8c8933b02175f23c1a46f501c6c5bafd1a385ff", 0x65, 0xffffffffffffffff, 0x0, 0x1, r0}, &(0x7f0000000200)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 13.819461496s ago: executing program 3 (id=75): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 10.034163592s ago: executing program 7 (id=588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 9.432185521s ago: executing program 0 (id=589): socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=@OVL_FILEID_V1={0x2a, 0xf8, {'\x00', {0x0, 0xfb, 0x27, 0x7, 0x3, "fe121221f1c083c7151135d6fa31e026", "53607ad6b96555d8a1b65a061f56e48d11ab"}}}, 0x200000) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.927942816s ago: executing program 7 (id=592): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@grpquota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') clock_gettime(0x0, 0x0) utimes(&(0x7f00000000c0)='./file2\x00', 0x0) 7.721895749s ago: executing program 0 (id=594): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) write$char_usb(r1, &(0x7f00000000c0)='V', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_usb_disconnect(r0) 6.923237222s ago: executing program 7 (id=598): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r7, 0x2, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000300)="383265dc692bd9ca280c127580afc147ce607071837cf4de5dc039", 0x1b, 0x8, 0x0, 0x0, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x9, r5, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x2}]) io_cancel(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x65b, r1, &(0x7f0000000340)="fac8d82702b1ffad9165f15f78a268cecf75c378477fc59be2f07b1a389f0feb95bc1d1d5bbdc9c8b6c908891bd4a608f0c84b15356a970ce5400c9669a5c7555774b06c8838321620c7ddbc057462f507f8c8933b02175f23c1a46f501c6c5bafd1a385ff9942602b53bc2cbbd2214bbf68bebaee32c07d070c5e703b78b09d8e2e71712fb81e110e9a1906a188c9090c4e8e26e11680e120e77d5042fee2a3242804c9dd0ac1519a9f580316e4de7b71", 0xb1, 0xffffffffffffffff, 0x0, 0x1, r0}, &(0x7f0000000200)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 5.291094098s ago: executing program 7 (id=600): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000280)={0x20, 0x1, 0x6, "68f7e1487209"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.445608988s ago: executing program 5 (id=601): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x2, 0x405c000) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) shutdown(r0, 0x2) 4.050889156s ago: executing program 0 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000380)='./file1\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/4096, 0x9005) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0xffd3) 3.28988062s ago: executing program 5 (id=603): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.104053836s ago: executing program 0 (id=604): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2b9d}}}, 0x3a) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) 2.750506844s ago: executing program 5 (id=605): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000100), 0x26, 0x77f, &(0x7f0000000b00)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) mount(0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.142026673s ago: executing program 7 (id=606): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @remote, 0x0, 0x700}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0xd, 0x16, @rand_addr=' \x01\x00', @private0, 0x0, 0x0, 0x1, 0x300}}) 1.873647434s ago: executing program 5 (id=607): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.663229407s ago: executing program 7 (id=608): unshare(0x22020400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x6276, &(0x7f0000003680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1808000, &(0x7f00000031c0)=ANY=[], 0x1, 0x6cd, &(0x7f00000005c0)="$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") fsync(r0) 1.38719766s ago: executing program 5 (id=609): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000140)={r4, 0xffffffff, 0x1ff, 0x9, 0x3, [], [0xc0, 0x4, 0x7, 0x2], [0x8, 0x81, 0x53cc, 0x35], [0x5, 0x8, 0x7, 0x7fff]}) 1.201759502s ago: executing program 0 (id=610): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r7, 0x2, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000300)="383265dc692bd9ca280c127580afc147ce607071837cf4de5dc039", 0x1b, 0x8, 0x0, 0x0, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x9, r5, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x2}]) io_cancel(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x65b, r1, &(0x7f0000000340)="fac8d82702b1ffad9165f15f78a268cecf75c378477fc59be2f07b1a389f0feb95bc1d1d5bbdc9c8b6c908891bd4a608f0c84b15356a970ce5400c9669a5c7555774b06c8838321620c7ddbc057462f507f8c8933b02175f23c1a46f501c6c5bafd1a385ff9942602b53bc2cbbd2214bbf68bebaee32c07d070c5e703b78b09d8e2e71712fb81e110e9a1906a188c9090c4e8e26e11680e120e77d5042fee2a3242804c9dd0ac1519a9f580316e4de7b71", 0xb1, 0xffffffffffffffff, 0x0, 0x1, r0}, &(0x7f0000000200)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.20159902s ago: executing program 6 (id=242): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) 126.498531ms ago: executing program 5 (id=611): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 0s ago: executing program 0 (id=612): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) kernel console output (not intermixed with test programs): ode [ 213.996349][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.100117][ T7081] loop4: detected capacity change from 0 to 32768 [ 214.291048][ T7081] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.360396][ T7081] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop4": -EINTR [ 214.392211][ T7081] XFS (loop4): log mount failed [ 215.385252][ T7117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.727205][ T7124] loop0: detected capacity change from 0 to 8 [ 216.035413][ T5149] Bluetooth: hci0: command tx timeout [ 216.176711][ T7129] loop5: detected capacity change from 0 to 16 [ 216.249027][ T7129] erofs (device loop5): mounted with root inode @ nid 36. [ 216.384925][ T7133] loop0: detected capacity change from 0 to 512 [ 216.407093][ T7133] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 216.430458][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.440863][ T7133] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 216.470110][ T7133] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 216.489534][ T7133] EXT4-fs (loop0): 1 truncate cleaned up [ 216.494993][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.497865][ T7133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.536713][ T1164] bond0 (unregistering): Released all slaves [ 216.642236][ T7099] batadv_slave_1: entered promiscuous mode [ 216.661007][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.706477][ T7120] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.723447][ T7120] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 216.779319][ T7104] batadv_slave_1: left promiscuous mode [ 216.812861][ T7120] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 216.888727][ T7120] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.908619][ T7120] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 216.972237][ T6785] hsr_slave_0: entered promiscuous mode [ 216.972917][ T7120] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 216.992154][ T6785] hsr_slave_1: entered promiscuous mode [ 217.007161][ T6785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.033705][ T7120] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 217.049924][ T6785] Cannot create hsr debugfs directory [ 217.055530][ T7120] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 217.157545][ T7120] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 217.927565][ T7120] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 217.956990][ T7120] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 217.991381][ T7120] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 218.105170][ T7120] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.132240][ T7120] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 218.204894][ T7120] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 218.246867][ T7120] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 218.363020][ T7120] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 218.370497][ T7150] xt_TPROXY: Can be used only with -p tcp or -p udp [ 218.413093][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 218.430545][ T7120] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 218.782578][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 218.932632][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.073490][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.954183][ T5149] Bluetooth: hci5: command 0x0c1a tx timeout [ 220.047947][ T7179] loop5: detected capacity change from 0 to 256 [ 220.107112][ T7179] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 220.129163][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 220.277273][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 220.632622][ T1164] hsr_slave_0: left promiscuous mode [ 220.672605][ T1164] hsr_slave_1: left promiscuous mode [ 220.687945][ T7186] loop0: detected capacity change from 0 to 1024 [ 220.705355][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.715112][ T7186] EXT4-fs: Ignoring removed orlov option [ 220.743038][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.756106][ T7186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.796267][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.832599][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 220.838778][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.901576][ T7186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.001743][ T7194] loop2: detected capacity change from 0 to 7 [ 221.002541][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.037546][ T5840] Dev loop2: unable to read RDB block 7 [ 221.062380][ T1164] veth1_macvtap: left promiscuous mode [ 221.084774][ T5840] loop2: unable to read partition table [ 221.090724][ T5840] loop2: partition table beyond EOD, truncated [ 221.119816][ T1164] veth0_macvtap: left promiscuous mode [ 221.152583][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 221.178261][ T1164] veth1_vlan: left promiscuous mode [ 221.214994][ T7194] Dev loop2: unable to read RDB block 7 [ 221.241670][ T7194] loop2: unable to read partition table [ 221.254475][ T1164] veth0_vlan: left promiscuous mode [ 221.262856][ T7194] loop2: partition table beyond EOD, truncated [ 221.291762][ T7194] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 221.448877][ T7198] evm: overlay not supported [ 221.852276][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.926605][ T7202] loop5: detected capacity change from 0 to 256 [ 222.033326][ T5149] Bluetooth: hci5: command 0x0c1a tx timeout [ 222.131033][ T7213] loop4: detected capacity change from 0 to 512 [ 222.194966][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 222.220627][ T7213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.270077][ T7213] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.330553][ T7213] capability: warning: `syz.4.288' uses deprecated v2 capabilities in a way that may be insecure [ 222.353472][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.449739][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.682893][ T7220] loop4: detected capacity change from 0 to 4096 [ 222.961216][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 223.125213][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.243345][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 223.636810][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 223.741154][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 224.167873][ T7227] loop4: detected capacity change from 0 to 32768 [ 224.179714][ T5149] Bluetooth: hci5: command 0x0c1a tx timeout [ 224.195576][ T7227] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.292 (7227) [ 224.256199][ T7227] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.266470][ T7227] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 224.275383][ T7227] BTRFS info (device loop4): using free-space-tree [ 224.284214][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 224.288680][ T7230] xt_TPROXY: Can be used only with -p tcp or -p udp [ 224.445219][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.077694][ T5829] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.864877][ T7250] loop4: detected capacity change from 0 to 32768 [ 225.891827][ T7250] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.294 (7250) [ 225.969366][ T7250] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 225.983392][ T7250] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 225.993302][ T7250] BTRFS info (device loop4): disk space caching is enabled [ 226.007054][ T7250] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 226.041869][ T7207] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 226.063063][ T7208] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 226.118806][ T7218] netlink: 96 bytes leftover after parsing attributes in process `syz.0.289'. [ 226.148170][ T7044] chnl_net:caif_netlink_parms(): no params data found [ 226.301348][ T7250] BTRFS info (device loop4): rebuilding free space tree [ 226.454680][ T7250] BTRFS info (device loop4): disabling free space tree [ 226.461673][ T7250] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 226.537446][ T7250] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.734974][ T7280] netlink: 'syz.5.298': attribute type 1 has an invalid length. [ 226.759362][ T7281] netlink: 92 bytes leftover after parsing attributes in process `syz.2.299'. [ 226.778101][ T30] audit: type=1800 audit(1750096802.004:12): pid=7250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.294" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 226.802626][ T7280] netlink: 20 bytes leftover after parsing attributes in process `syz.5.298'. [ 226.934641][ T5829] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 227.108162][ T7285] gretap0: entered promiscuous mode [ 227.132991][ T7285] vlan2: entered promiscuous mode [ 227.548234][ T7295] loop2: detected capacity change from 0 to 512 [ 227.615412][ T7295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.747526][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.972636][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.755210][ T7044] bridge_slave_0: entered allmulticast mode [ 228.763886][ T7044] bridge_slave_0: entered promiscuous mode [ 228.782317][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.789703][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.801659][ T7044] bridge_slave_1: entered allmulticast mode [ 228.811988][ T7044] bridge_slave_1: entered promiscuous mode [ 228.858779][ T7295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.953807][ T7295] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.090068][ T30] audit: type=1800 audit(1750096804.324:13): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.302" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 230.110973][ T7318] xt_TPROXY: Can be used only with -p tcp or -p udp [ 230.288820][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.608688][ T7044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.636906][ T7044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.751305][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 231.381437][ T7044] team0: Port device team_slave_0 added [ 231.520823][ T7346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.314'. [ 231.626609][ T7044] team0: Port device team_slave_1 added [ 231.944593][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.968782][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.015809][ T7044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.029212][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.043564][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.070063][ T7044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.866465][ T5938] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 232.974598][ T7044] hsr_slave_0: entered promiscuous mode [ 232.981440][ T7044] hsr_slave_1: entered promiscuous mode [ 233.023796][ T7367] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.067847][ T7044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.084912][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 233.092546][ T7044] Cannot create hsr debugfs directory [ 233.111578][ T5938] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 233.130236][ T5938] usb 5-1: config 179 has no interface number 0 [ 233.150108][ T5938] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 233.190429][ T7366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'. [ 233.199748][ T5938] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 233.218839][ T5925] kernel write not supported for file /uhid (pid: 5925 comm: kworker/0:4) [ 233.229642][ T5938] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 233.282323][ T5938] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 233.321682][ T5938] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 233.331431][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.365109][ T7357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.751797][ T5938] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8 [ 234.032797][ T5938] usb 5-1: USB disconnect, device number 8 [ 234.032872][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 234.047078][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 234.092939][ T5938] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 234.206148][ T6785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.336658][ T6785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.367027][ T6785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.375756][ T5925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 234.414974][ T6785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 234.549761][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 234.565127][ T5925] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 234.602927][ T5925] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.628178][ T5925] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.693841][ T5925] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.722841][ T5925] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.776708][ T5925] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.809404][ T7044] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 234.822684][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.830985][ T7405] loop0: detected capacity change from 0 to 1024 [ 234.896879][ T7044] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.009623][ T7044] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.054728][ T7044] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.089209][ T5925] usb 3-1: usb_control_msg returned -32 [ 235.109050][ T5925] usbtmc 3-1:16.0: can't read capabilities [ 235.260696][ T1146] hfsplus: b-tree write err: -5, ino 4 [ 235.319420][ T6785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.602924][ T7424] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 235.628105][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 235.663922][ T5938] usb 3-1: USB disconnect, device number 6 [ 235.808619][ T6785] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.088472][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.095875][ T6245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.435329][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.442640][ T6245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.644299][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.779275][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.794921][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.806380][ T24] usb 5-1: Product: syz [ 236.810575][ T24] usb 5-1: Manufacturer: syz [ 236.815714][ T24] usb 5-1: SerialNumber: syz [ 236.907206][ T7434] xt_TPROXY: Can be used only with -p tcp or -p udp [ 237.496145][ T6785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.846367][ T7044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.964981][ T7044] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.016693][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.024013][ T6245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.130105][ T7446] loop5: detected capacity change from 0 to 4096 [ 238.130777][ T7449] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 238.214020][ T24] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 238.225139][ T24] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 238.242678][ T24] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 238.416291][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.423593][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.475684][ T7456] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.341242][ T24] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 239.468146][ T6785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.248407][ T24] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 240.348170][ T24] usb 5-1: USB disconnect, device number 9 [ 240.425612][ T24] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 240.616316][ T7471] warning: `syz.4.344' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 240.870147][ T5838] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 240.884249][ T6785] veth0_vlan: entered promiscuous mode [ 240.942098][ T6785] veth1_vlan: entered promiscuous mode [ 241.088588][ T5838] usb 3-1: config 1 interface 0 has no altsetting 0 [ 241.118954][ T6785] veth0_macvtap: entered promiscuous mode [ 241.141209][ T5838] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 241.161483][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.375740][ T6785] veth1_macvtap: entered promiscuous mode [ 241.989165][ T5838] usb 3-1: Product: syz [ 241.993458][ T5838] usb 3-1: Manufacturer: syz [ 241.998084][ T5838] usb 3-1: SerialNumber: syz [ 242.027723][ T7492] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.840756][ T5838] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 242.937094][ T7498] loop4: detected capacity change from 0 to 128 [ 242.978436][ T7500] trusted_key: syz.5.351 sent an empty control message without MSG_MORE. [ 243.015415][ T7044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.024095][ T7498] EXT4-fs: Ignoring removed nobh option [ 243.094085][ T7498] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.271685][ T7498] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.314304][ T5838] usb 3-1: USB disconnect, device number 7 [ 243.366636][ T5838] usblp0: removed [ 243.562193][ T5829] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.043673][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.060113][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.071871][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.090610][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.109615][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.152892][ T5846] Bluetooth: hci4: command tx timeout [ 247.364187][ T7547] loop5: detected capacity change from 0 to 2048 [ 247.371989][ T7547] udf: Bad value for 'umask' [ 247.991307][ T7556] mkiss: ax0: crc mode is auto. [ 248.569635][ T7574] netlink: 'syz.4.369': attribute type 10 has an invalid length. [ 248.700015][ T7574] batman_adv: batadv0: Adding interface: team0 [ 248.732992][ T7574] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.771487][ T7574] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 248.942879][ T7580] loop2: detected capacity change from 0 to 128 [ 249.234729][ T5846] Bluetooth: hci4: command tx timeout [ 249.912221][ T7580] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.936790][ T7588] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.093356][ T7580] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.308773][ T5832] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.319135][ T5149] Bluetooth: hci4: command tx timeout [ 251.349493][ T7044] veth0_vlan: entered promiscuous mode [ 251.366975][ T7044] veth1_vlan: entered promiscuous mode [ 251.500356][ T5886] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 251.693071][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 251.729614][ T5886] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.797577][ T5886] usb 1-1: config 0 has no interface number 0 [ 251.822583][ T5886] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.853496][ T5886] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 251.871927][ T7530] chnl_net:caif_netlink_parms(): no params data found [ 251.875316][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.930878][ T5886] usb 1-1: config 0 descriptor?? [ 251.984278][ T5886] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 251.987234][ T7044] veth0_macvtap: entered promiscuous mode [ 252.040425][ T7044] veth1_macvtap: entered promiscuous mode [ 252.288018][ T5886] kernel write not supported for file /usb/iowarrior0 (pid: 5886 comm: kworker/0:3) [ 252.367687][ T5838] usb 1-1: USB disconnect, device number 4 [ 252.537658][ T3492] bridge_slave_1: left allmulticast mode [ 252.555495][ T3492] bridge_slave_1: left promiscuous mode [ 252.650800][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.762082][ T3492] bridge_slave_0: left allmulticast mode [ 252.789245][ T3492] bridge_slave_0: left promiscuous mode [ 252.802800][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.482618][ T5149] Bluetooth: hci4: command tx timeout [ 254.026833][ T7627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.860299][ T7617] loop2: detected capacity change from 0 to 32768 [ 254.949511][ T7617] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 255.182656][ T5838] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 255.200516][ T7617] XFS (loop2): Ending clean mount [ 255.922423][ T5832] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 256.012939][ T5838] usb 6-1: Using ep0 maxpacket: 8 [ 256.024601][ T5838] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 256.048054][ T5838] usb 6-1: config 179 has no interface number 0 [ 256.075092][ T5838] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 256.097979][ T5838] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 256.148322][ T5838] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.190605][ T5838] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 256.207704][ T30] audit: type=1326 audit(1750096831.444:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.4.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d6f38e929 code=0x0 [ 256.251407][ T5838] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 256.253498][ T7630] loop0: detected capacity change from 0 to 32768 [ 256.298987][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.312317][ T7630] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.381 (7630) [ 256.316981][ T7633] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 256.699278][ T7630] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 256.713183][ T7630] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 256.731981][ T7630] BTRFS info (device loop0): using free-space-tree [ 257.233263][ T7630] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 257.253086][ T7630] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 257.286539][ T5947] usb 6-1: USB disconnect, device number 8 [ 257.286557][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 257.286695][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 257.313582][ T7630] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 257.344250][ T7630] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 257.433809][ T7630] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 257.560206][ T7630] BTRFS error (device loop0): open_ctree failed: -12 [ 257.676349][ T5838] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 257.760969][ T5838] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input9 [ 257.843937][ T5947] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 258.118404][ T7671] xt_TPROXY: Can be used only with -p tcp or -p udp [ 258.788386][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.841039][ T7678] loop2: detected capacity change from 0 to 512 [ 258.864859][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.865396][ T7676] loop5: detected capacity change from 0 to 1024 [ 258.892158][ T7676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.898248][ T3492] bond0 (unregistering): Released all slaves [ 258.990098][ T7676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.168056][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.226530][ T7678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.299571][ T7678] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.709006][ T30] audit: type=1800 audit(1750096834.934:15): pid=7678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 260.032656][ T30] audit: type=1800 audit(1750096835.124:16): pid=7690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 260.213175][ T3492] hsr_slave_0: left promiscuous mode [ 260.235416][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.277259][ T3492] hsr_slave_1: left promiscuous mode [ 260.285001][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.308107][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.572270][ T3492] veth1_macvtap: left promiscuous mode [ 260.616623][ T3492] veth0_macvtap: left promiscuous mode [ 260.659337][ T3492] veth1_vlan: left promiscuous mode [ 260.692311][ T3492] veth0_vlan: left promiscuous mode [ 261.893815][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 262.002395][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 262.025296][ T7703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.363262][ T7706] loop2: detected capacity change from 0 to 256 [ 262.471612][ T7706] FAT-fs (loop2): Directory bread(block 64) failed [ 262.481549][ T7706] FAT-fs (loop2): Directory bread(block 65) failed [ 262.488557][ T7706] FAT-fs (loop2): Directory bread(block 66) failed [ 262.498072][ T7706] FAT-fs (loop2): Directory bread(block 67) failed [ 262.505944][ T7706] FAT-fs (loop2): Directory bread(block 68) failed [ 262.514633][ T7706] FAT-fs (loop2): Directory bread(block 69) failed [ 262.521476][ T7706] FAT-fs (loop2): Directory bread(block 70) failed [ 262.528134][ T7706] FAT-fs (loop2): Directory bread(block 71) failed [ 262.534994][ T7706] FAT-fs (loop2): Directory bread(block 72) failed [ 262.541556][ T7706] FAT-fs (loop2): Directory bread(block 73) failed [ 262.840577][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.395'. [ 262.936056][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.241983][ T7530] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.282984][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.293079][ T7530] bridge_slave_0: entered allmulticast mode [ 263.610138][ T7530] bridge_slave_0: entered promiscuous mode [ 263.921344][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.979992][ T7044] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.078565][ T7044] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.173273][ T7044] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.182088][ T7044] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.202996][ T7719] loop5: detected capacity change from 0 to 512 [ 264.269181][ T7530] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.280666][ T7719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.309674][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.321725][ T7530] bridge_slave_1: entered allmulticast mode [ 264.330020][ T7530] bridge_slave_1: entered promiscuous mode [ 264.406433][ T7719] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.632621][ T920] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 264.766464][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.779065][ T7530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.827278][ T920] usb 1-1: Using ep0 maxpacket: 8 [ 264.853164][ T920] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 265.438165][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.444660][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.599323][ T7530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.662585][ T920] usb 1-1: config 179 has no interface number 0 [ 265.670274][ T920] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 265.702564][ T920] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 265.723556][ T920] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.745955][ T920] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 265.759366][ T920] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 265.769634][ T920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.782589][ T7724] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 266.989458][ T7741] xt_TPROXY: Can be used only with -p tcp or -p udp [ 267.096762][ T920] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input10 [ 267.228733][ T7530] team0: Port device team_slave_0 added [ 267.459242][ T7530] team0: Port device team_slave_1 added [ 267.598808][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 267.598814][ T5886] usb 1-1: USB disconnect, device number 5 [ 267.598876][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 267.706930][ T5886] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 267.977285][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.011315][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.125318][ T7530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.203732][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.235047][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.401622][ T7530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.704939][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.726264][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.737685][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.749631][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.757974][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.279012][ T7530] hsr_slave_0: entered promiscuous mode [ 269.304865][ T7530] hsr_slave_1: entered promiscuous mode [ 269.331237][ T7530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.357616][ T7530] Cannot create hsr debugfs directory [ 269.611081][ T7766] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.277805][ T3492] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.293847][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.305311][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.315721][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.343062][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.355986][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.697231][ T7783] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.730238][ T3492] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.828579][ T7784] mkiss: ax0: crc mode is auto. [ 270.835791][ T5149] Bluetooth: hci0: command tx timeout [ 271.236855][ T7789] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.408105][ T3492] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.835689][ T3492] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.181279][ T7795] xt_TPROXY: Can be used only with -p tcp or -p udp [ 272.439436][ T5149] Bluetooth: hci1: command tx timeout [ 272.910501][ T7800] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 272.932344][ T5149] Bluetooth: hci0: command tx timeout [ 272.944130][ T7800] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 273.000070][ T7805] block nbd0: shutting down sockets [ 274.305507][ T7839] xt_TPROXY: Can be used only with -p tcp or -p udp [ 274.545142][ T5149] Bluetooth: hci1: command tx timeout [ 274.956165][ T3492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.993184][ T5149] Bluetooth: hci0: command tx timeout [ 275.017625][ T5149] Bluetooth: hci2: unexpected cc 0x042d length: 63 > 7 [ 275.024992][ T5149] Bluetooth: hci2: unexpected event for opcode 0x042d [ 275.041152][ T7843] loop5: detected capacity change from 0 to 512 [ 275.050327][ T7843] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.134725][ T7843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.236203][ T7831] loop0: detected capacity change from 0 to 32768 [ 275.251767][ T7831] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.424 (7831) [ 275.297028][ T7831] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 275.332730][ T7831] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 275.345628][ T7831] BTRFS info (device loop0): using free-space-tree [ 275.468705][ T3492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.528181][ T7863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.572040][ T7757] chnl_net:caif_netlink_parms(): no params data found [ 275.773350][ T3492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.899655][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.976173][ T7869] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 275.994150][ T7869] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 276.052454][ T7869] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 276.158027][ T7869] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 276.176295][ T7869] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 [ 276.187763][ T7869] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0 [ 276.202063][ T7869] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 7, rd 0, flush 0, corrupt 0, gen 0 [ 276.216332][ T7869] BTRFS: error (device loop0) in btrfs_commit_transaction:2533: errno=-5 IO failure (Error while writing out transaction) [ 276.328018][ T7876] xt_TPROXY: Can be used only with -p tcp or -p udp [ 276.592668][ T5149] Bluetooth: hci1: command tx timeout [ 276.735309][ T7869] BTRFS info (device loop0 state E): forced readonly [ 276.742101][ T7869] BTRFS warning (device loop0 state E): Skipping commit of aborted transaction. [ 276.783489][ T3492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.800775][ T7869] BTRFS error (device loop0 state EA): Transaction aborted (error -5) [ 276.823573][ T7878] xt_TPROXY: Can be used only with -p tcp or -p udp [ 276.842715][ T7869] BTRFS: error (device loop0 state EA) in cleanup_transaction:2021: errno=-5 IO failure [ 277.072699][ T5149] Bluetooth: hci0: command tx timeout [ 277.311415][ T5833] BTRFS info (device loop0 state EA): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 277.377687][ T7771] chnl_net:caif_netlink_parms(): no params data found [ 277.837142][ T2150] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 278.036250][ T2150] usb 5-1: Using ep0 maxpacket: 8 [ 278.052071][ T7757] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.096041][ T2150] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 278.122744][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.130083][ T7757] bridge_slave_0: entered allmulticast mode [ 278.132796][ T2150] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.170234][ T2150] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.185119][ T7757] bridge_slave_0: entered promiscuous mode [ 278.239838][ T2150] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.260540][ T2150] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.339492][ T2150] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 278.382199][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.400248][ T7530] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.440252][ T7530] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.485555][ T7757] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.522860][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.530297][ T7757] bridge_slave_1: entered allmulticast mode [ 278.622196][ T7757] bridge_slave_1: entered promiscuous mode [ 278.652217][ T2150] usb 5-1: usb_control_msg returned -32 [ 278.678144][ T5149] Bluetooth: hci1: command tx timeout [ 278.682581][ T2150] usbtmc 5-1:16.0: can't read capabilities [ 278.740654][ T7897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'. [ 278.752311][ T7897] netlink: 'syz.0.444': attribute type 7 has an invalid length. [ 278.760579][ T7897] netlink: 'syz.0.444': attribute type 8 has an invalid length. [ 278.812612][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 278.940717][ T7530] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.002705][ T7530] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 279.028495][ T2150] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 279.072772][ T5149] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 279.077178][ T7757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.083092][ T5149] Bluetooth: hci2: Injecting HCI hardware error event [ 279.100476][ T5846] Bluetooth: hci2: hardware error 0x00 [ 279.114478][ T7902] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 279.131524][ T7757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.187384][ T5938] usb 5-1: USB disconnect, device number 10 [ 279.202948][ T2150] usb 6-1: Using ep0 maxpacket: 8 [ 279.216332][ T2150] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.234302][ T2150] usb 6-1: config 0 has no interface number 0 [ 279.253086][ T2150] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 279.275360][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.286142][ T2150] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 279.304852][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.312226][ T7771] bridge_slave_0: entered allmulticast mode [ 279.323666][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.352642][ T7771] bridge_slave_0: entered promiscuous mode [ 279.354349][ T2150] usb 6-1: config 0 descriptor?? [ 279.403674][ T2150] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 279.468713][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.484066][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.498366][ T7771] bridge_slave_1: entered allmulticast mode [ 279.508903][ T7771] bridge_slave_1: entered promiscuous mode [ 279.528514][ T3492] bridge_slave_1: left allmulticast mode [ 279.541624][ T3492] bridge_slave_1: left promiscuous mode [ 279.552373][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.577996][ T3492] bridge_slave_0: left allmulticast mode [ 279.608847][ T3492] bridge_slave_0: left promiscuous mode [ 279.622993][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.649858][ T5938] kernel write not supported for file /usb/iowarrior0 (pid: 5938 comm: kworker/1:6) [ 279.666461][ T3492] bridge_slave_1: left allmulticast mode [ 279.672172][ T5938] usb 6-1: USB disconnect, device number 9 [ 279.690053][ T3492] bridge_slave_1: left promiscuous mode [ 279.712988][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.737579][ T3492] bridge_slave_0: left allmulticast mode [ 279.743468][ T3492] bridge_slave_0: left promiscuous mode [ 279.749252][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.992051][ T7916] block nbd4: shutting down sockets [ 280.168697][ T7921] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 280.389912][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.403828][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.421793][ T3492] bond0 (unregistering): Released all slaves [ 280.746905][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.765846][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.780145][ T3492] bond0 (unregistering): Released all slaves [ 280.897209][ T7757] team0: Port device team_slave_0 added [ 281.013473][ T7921] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 281.028758][ T7922] gretap1: entered allmulticast mode [ 281.071259][ T7757] team0: Port device team_slave_1 added [ 281.152603][ T5846] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 281.374408][ T7771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.397825][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.439'. [ 281.411416][ T7771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.332895][ T7939] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 283.655570][ T7957] loop4: detected capacity change from 0 to 128 [ 283.825223][ T7957] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.871923][ T7957] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.892377][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.912596][ T7958] block nbd0: shutting down sockets [ 283.945845][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.972233][ T7757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.074479][ T7771] team0: Port device team_slave_0 added [ 284.161553][ T7965] xt_TPROXY: Can be used only with -p tcp or -p udp [ 284.354774][ T5829] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.450794][ T7968] loop0: detected capacity change from 0 to 2048 [ 284.536866][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.545941][ T7972] loop5: detected capacity change from 0 to 8 [ 284.572653][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.624005][ T7968] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 284.653011][ T7968] UDF-fs: Scanning with blocksize 512 failed [ 284.671035][ T7968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.702852][ T7757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.768252][ T30] audit: type=1800 audit(1750096859.984:17): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.449" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 284.856440][ T7771] team0: Port device team_slave_1 added [ 285.239542][ T7771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.273002][ T7771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.303841][ T7986] loop5: detected capacity change from 0 to 2048 [ 285.357458][ T7986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.395911][ T7771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.749307][ T7986] UDF-fs: warning (device loop5): udf_truncate_tail_extent: Too long extent after EOF in inode 1368: i_size: 0 lbcount: 3584 extent 57+3584 [ 285.896996][ T7986] UDF-fs: error (device loop5): udf_truncate_tail_extent: Extent after EOF in inode 1368 [ 286.402596][ T3492] hsr_slave_0: left promiscuous mode [ 286.472019][ T3492] hsr_slave_1: left promiscuous mode [ 286.576150][ T7997] xt_TPROXY: Can be used only with -p tcp or -p udp [ 286.592803][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.703548][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.914605][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.975950][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.050849][ T7999] loop4: detected capacity change from 0 to 512 [ 287.136423][ T7999] EXT4-fs: Ignoring removed orlov option [ 287.142807][ T3492] hsr_slave_0: left promiscuous mode [ 287.439764][ T8001] loop5: detected capacity change from 0 to 32768 [ 287.453475][ T3492] hsr_slave_1: left promiscuous mode [ 287.459731][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.467289][ T8001] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.455 (8001) [ 287.494137][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.526597][ T8001] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 287.528679][ T7999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.538019][ T8001] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 287.574589][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.584846][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.602977][ T7999] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.767299][ T3492] veth1_macvtap: left promiscuous mode [ 287.780745][ T3492] veth0_macvtap: left promiscuous mode [ 287.796301][ T3492] veth1_vlan: left promiscuous mode [ 287.806370][ T3492] veth0_vlan: left promiscuous mode [ 287.850691][ T8001] BTRFS info (device loop5): rebuilding free space tree [ 287.866170][ T8001] BTRFS info (device loop5): disabling free space tree [ 287.873217][ T8001] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 287.888988][ T8001] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 287.909038][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.940681][ T3492] veth1_macvtap: left promiscuous mode [ 287.951271][ T3492] veth0_macvtap: left promiscuous mode [ 287.970400][ T3492] veth1_vlan: left promiscuous mode [ 288.040293][ T3492] veth0_vlan: left promiscuous mode [ 288.510619][ T8035] loop4: detected capacity change from 0 to 1024 [ 288.523316][ T5831] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 288.624959][ T8035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.147747][ T13] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 289.239534][ T13] EXT4-fs (loop4): Remounting filesystem read-only [ 289.299365][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.309835][ T8046] loop0: detected capacity change from 0 to 40427 [ 289.322067][ T8046] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 289.329923][ T8046] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 289.380943][ T8046] F2FS-fs (loop0): invalid crc value [ 289.455818][ T8048] loop5: detected capacity change from 0 to 4096 [ 289.511212][ T8046] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 289.518383][ T8046] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 290.325558][ T8062] loop5: detected capacity change from 0 to 4096 [ 290.459615][ T8062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.575599][ T8062] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 290.807362][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.750479][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 291.877350][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 292.141828][ T8079] loop4: detected capacity change from 0 to 40427 [ 292.166918][ T8079] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 292.196590][ T8079] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 292.430646][ T8079] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 292.447391][ T8079] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 292.502144][ T8079] F2FS-fs (loop4): Unrecognized mount option "f2fs" or missing value [ 294.861450][ T8130] loop4: detected capacity change from 0 to 16 [ 294.880183][ T8130] erofs (device loop4): rootino(nid 36) is not a directory(i_mode 142735) [ 295.195679][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 295.285574][ T8136] xt_TPROXY: Can be used only with -p tcp or -p udp [ 295.601871][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 296.579676][ T7771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.590537][ T7771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.670970][ T7771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.839402][ T8142] loop4: detected capacity change from 0 to 65536 [ 296.890609][ T8142] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 296.940009][ T7771] hsr_slave_0: entered promiscuous mode [ 296.971935][ T7771] hsr_slave_1: entered promiscuous mode [ 296.986108][ T7771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.998744][ T8142] XFS (loop4): Ending clean mount [ 297.007566][ T7771] Cannot create hsr debugfs directory [ 297.115132][ T7757] hsr_slave_0: entered promiscuous mode [ 297.128550][ T7757] hsr_slave_1: entered promiscuous mode [ 297.135245][ T7757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.162880][ T7757] Cannot create hsr debugfs directory [ 297.201199][ T8153] loop0: detected capacity change from 0 to 1024 [ 297.422337][ T8153] hfsplus: xattr search failed [ 297.580765][ T5829] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 298.087185][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.103998][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.141924][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.158843][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.185945][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.207497][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.223994][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.253965][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.274910][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.291495][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.308153][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.363079][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.388567][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.422078][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.460618][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.496391][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.542540][ T920] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 298.595543][ T920] hid-generic 0002:0004:0009.0005: hidraw0: HID v0.04 Device [syz0] on syz0 [ 298.631600][ T8173] loop2: detected capacity change from 0 to 7 [ 298.691498][ T8173] Dev loop2: unable to read RDB block 7 [ 298.724269][ T8173] loop2: unable to read partition table [ 298.761644][ T8173] loop2: partition table beyond EOD, truncated [ 298.790897][ T8173] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 298.830814][ T7530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.944607][ T8174] fido_id[8174]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 299.539183][ T7530] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.381493][ T8185] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.734465][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.741675][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.795281][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.802547][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.882682][ T5846] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 301.081600][ T7530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.499575][ T8208] loop4: detected capacity change from 0 to 2048 [ 302.566089][ T8208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.605570][ T7757] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 302.667030][ T7757] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.720223][ T8208] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1368: i_size: 0 lbcount: 3584 extent 57+3584 [ 302.729007][ T8204] loop5: detected capacity change from 0 to 8192 [ 302.741517][ T8208] UDF-fs: error (device loop4): udf_truncate_tail_extent: Extent after EOF in inode 1368 [ 302.756081][ T7757] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.774610][ T7757] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.128257][ T7771] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.201076][ T7771] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 303.355813][ T7771] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 303.557656][ T7771] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 304.204795][ T8227] loop0: detected capacity change from 0 to 16 [ 304.229704][ T8227] erofs (device loop0): mounted with root inode @ nid 36. [ 304.296907][ T8227] erofs (device loop0): xattr_isize 12 of nid 46 is not supported yet [ 304.713930][ T7757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.838630][ T7757] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.912679][ T5846] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 304.921461][ T5846] Bluetooth: hci3: Injecting HCI hardware error event [ 304.932439][ T5846] Bluetooth: hci3: hardware error 0x00 [ 305.876720][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.884074][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.025464][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.036969][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.056826][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.073555][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.089479][ T8250] xt_TPROXY: Can be used only with -p tcp or -p udp [ 306.097092][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.458767][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.465955][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.647533][ T7771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.009588][ T5846] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 307.195230][ T7771] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.329539][ T7757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.380206][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.387431][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.451715][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.458939][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.542834][ T2150] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 307.749405][ T2150] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 307.842103][ T2150] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 307.945146][ T2150] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.015202][ T2150] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 308.045253][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 308.100105][ T2150] usb 1-1: Product: syz [ 308.124272][ T2150] usb 1-1: Manufacturer: syz [ 308.129038][ T2150] usb 1-1: SerialNumber: syz [ 308.205827][ T13] bridge_slave_1: left allmulticast mode [ 308.211555][ T13] bridge_slave_1: left promiscuous mode [ 308.252806][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.272944][ T5846] Bluetooth: hci4: command tx timeout [ 308.308154][ T13] bridge_slave_0: left allmulticast mode [ 308.342583][ T13] bridge_slave_0: left promiscuous mode [ 308.348503][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.405141][ T2150] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 308.708529][ T24] usb 1-1: USB disconnect, device number 6 [ 308.733477][ T8263] usblp0: removed [ 309.127505][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.140774][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.152979][ T13] bond0 (unregistering): Released all slaves [ 309.327560][ T8284] loop5: detected capacity change from 0 to 256 [ 309.339761][ T8284] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.375456][ T8284] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 309.469267][ T8284] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 309.643230][ T13] hsr_slave_0: left promiscuous mode [ 309.697164][ T13] hsr_slave_1: left promiscuous mode [ 309.829373][ T8297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 309.947630][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.243821][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.364442][ T5846] Bluetooth: hci4: command tx timeout [ 310.511747][ T8299] loop0: detected capacity change from 0 to 64 [ 310.581728][ T8301] loop5: detected capacity change from 0 to 2048 [ 310.658977][ T8301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.720597][ T5833] hfs: node 4:3 still has 1 user(s)! [ 310.755492][ T8301] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.502: bg 0: block 234: padding at end of block bitmap is not set [ 310.772009][ T8301] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2048 with max blocks 1 with error 28 [ 310.802561][ T8301] EXT4-fs (loop5): This should not happen!! Data will be lost [ 310.802561][ T8301] [ 310.819954][ T8301] EXT4-fs (loop5): Total free blocks count 0 [ 310.828351][ T8301] EXT4-fs (loop5): Free/Dirty block details [ 310.835347][ T8301] EXT4-fs (loop5): free_blocks=0 [ 310.840420][ T8301] EXT4-fs (loop5): dirty_blocks=32 [ 310.850774][ T8301] EXT4-fs (loop5): Block reservation details [ 310.857054][ T8301] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 310.900315][ T8300] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 311.103779][ T13] team0 (unregistering): Port device team_slave_1 removed [ 311.183237][ T13] team0 (unregistering): Port device team_slave_0 removed [ 311.313424][ T920] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 312.268613][ T920] usb 1-1: Using ep0 maxpacket: 16 [ 312.289012][ T920] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 312.310754][ T920] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 312.329207][ T920] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 312.358865][ T920] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.373612][ T920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 312.381712][ T920] usb 1-1: SerialNumber: syz [ 312.398371][ T8312] loop5: detected capacity change from 0 to 256 [ 312.420290][ T8306] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 312.432755][ T5846] Bluetooth: hci4: command tx timeout [ 312.469957][ T8312] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 312.667068][ T920] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 312.731815][ T8249] chnl_net:caif_netlink_parms(): no params data found [ 312.750667][ T920] usb 1-1: USB disconnect, device number 7 [ 313.807347][ T7757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.519173][ T5846] Bluetooth: hci4: command tx timeout [ 315.029594][ T8327] loop0: detected capacity change from 0 to 32768 [ 315.042772][ T8327] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.509 (8327) [ 315.075943][ T8327] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 315.087650][ T8327] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 315.281966][ T8327] BTRFS info (device loop0): rebuilding free space tree [ 315.327872][ T8327] BTRFS info (device loop0): disabling free space tree [ 315.337323][ T8327] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 315.347045][ T8327] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 315.455050][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.480241][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.506353][ T8249] bridge_slave_0: entered allmulticast mode [ 315.542643][ T8249] bridge_slave_0: entered promiscuous mode [ 315.570571][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.643029][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.687654][ T8249] bridge_slave_1: entered allmulticast mode [ 315.758527][ T8249] bridge_slave_1: entered promiscuous mode [ 315.957970][ T5833] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 316.301680][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.364794][ T7771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.410155][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.282612][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'. [ 317.310607][ T8249] team0: Port device team_slave_0 added [ 317.365419][ T8380] geneve2: entered promiscuous mode [ 317.406071][ T8249] team0: Port device team_slave_1 added [ 317.473497][ T5846] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 317.473862][ T5847] Bluetooth: hci6: command 0x1003 tx timeout [ 317.709633][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.746216][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.820857][ T8249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.849972][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.860350][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.895536][ T8249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.907596][ T8392] netlink: 256 bytes leftover after parsing attributes in process `syz.0.516'. [ 319.013339][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 319.098596][ T8249] hsr_slave_0: entered promiscuous mode [ 319.130145][ T8249] hsr_slave_1: entered promiscuous mode [ 319.151484][ T8249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.177956][ T8249] Cannot create hsr debugfs directory [ 319.189913][ T7757] veth0_vlan: entered promiscuous mode [ 319.206908][ T7757] veth1_vlan: entered promiscuous mode [ 319.245667][ T7757] veth0_macvtap: entered promiscuous mode [ 319.255076][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.297946][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.322246][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.341052][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.385350][ T7757] veth1_macvtap: entered promiscuous mode [ 319.420839][ T8399] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 319.467939][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.558391][ T920] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 319.856546][ T920] usb 5-1: Using ep0 maxpacket: 8 [ 319.955269][ T920] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 320.073820][ T920] usb 5-1: config 179 has no interface number 0 [ 320.086085][ T920] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 320.102168][ T920] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 320.119503][ T920] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.139136][ T920] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 320.164756][ T920] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 320.184403][ T920] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 320.197879][ T920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.231457][ T8407] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 320.542753][ T9] usb 6-1: USB disconnect, device number 10 [ 321.114399][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.751637][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.758144][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 321.767389][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 321.778474][ T24] usb 5-1: USB disconnect, device number 11 [ 321.805530][ T7757] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.822179][ T7757] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.874808][ T7757] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.900877][ T7757] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.407162][ T8429] loop4: detected capacity change from 0 to 32768 [ 323.436982][ T8429] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.524 (8429) [ 324.067222][ T8429] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 324.079444][ T8429] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 324.113836][ T8426] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 324.170506][ T8429] BTRFS info (device loop4): rebuilding free space tree [ 324.188968][ T8426] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.195345][ T8429] BTRFS info (device loop4): disabling free space tree [ 324.202313][ T8429] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 324.212085][ T8429] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 324.244883][ T8426] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 324.268314][ T7771] veth0_vlan: entered promiscuous mode [ 324.295367][ T8426] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 324.315698][ T7771] veth1_vlan: entered promiscuous mode [ 324.385405][ T8426] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.396183][ T8426] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 324.508310][ T8426] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 324.559299][ T8426] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 324.569241][ T7771] veth0_macvtap: entered promiscuous mode [ 324.592640][ T8426] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 324.609415][ T8426] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 324.626451][ T7771] veth1_macvtap: entered promiscuous mode [ 324.719340][ T7771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.831239][ T5829] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 324.871251][ T7771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.943724][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 324.978331][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.011202][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.211600][ T9] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 325.322916][ T7771] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.366220][ T9] usb 6-1: config 0 has no interface number 0 [ 325.384800][ T7771] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.421356][ T7771] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.486066][ T7771] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.499756][ T9] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 325.568635][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.628996][ T6437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.711603][ T6437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.724826][ T9] usb 6-1: Product: syz [ 325.783843][ T9] usb 6-1: Manufacturer: syz [ 325.788501][ T9] usb 6-1: SerialNumber: syz [ 325.850303][ T9] usb 6-1: config 0 descriptor?? [ 326.174873][ T8249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.197709][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 326.203802][ T5847] Bluetooth: hci5: command 0x0c1a tx timeout [ 326.303558][ T8249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.311118][ T9] usb 6-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 326.425861][ T8249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 326.432769][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 326.497825][ T8249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 326.523263][ T9] usb 6-1: no permanent extended address found, random address set [ 326.541388][ T9] usb 6-1: atusb_probe: initialization failed, error = -524 [ 326.571946][ T9] atusb 6-1:0.128: probe with driver atusb failed with error -524 [ 326.600523][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 326.615800][ T2150] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 326.780714][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.820975][ T2150] usb 1-1: Using ep0 maxpacket: 16 [ 326.856102][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.862581][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.869016][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.881507][ T9] usb 6-1: USB disconnect, device number 11 [ 326.895031][ T2150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.922530][ T2150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.963948][ T2150] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 326.993152][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.030159][ T2150] usb 1-1: config 0 descriptor?? [ 327.098969][ T6245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.135470][ T6245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.290062][ T8249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.340574][ T8249] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.371564][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 327.384774][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 327.396399][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 327.407916][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 327.428927][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 327.661546][ T8462] loop4: detected capacity change from 0 to 32768 [ 327.701626][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.708872][ T6438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.750342][ T8462] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 327.776207][ T8462] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 327.919188][ T8462] XFS (loop4): Ending clean mount [ 327.926749][ T2150] letsketch 0003:6161:4D15.0006: Device info: ¥ [ 327.949747][ T6245] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.950378][ T8462] XFS (loop4): Quotacheck needed: Please wait. [ 328.062099][ T8462] XFS (loop4): Quotacheck: Done. [ 328.078026][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.085360][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.132922][ T2150] letsketch 0003:6161:4D15.0006: Device info: ᑔ [ 328.172693][ T6245] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.309475][ T6245] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.337145][ T2150] letsketch 0003:6161:4D15.0006: Device info: ఁ [ 328.358068][ T5829] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 328.513640][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 328.656796][ T2150] usb 1-1: Max retries (5) exceeded reading string descriptor 1 [ 328.672700][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 328.692050][ T2150] letsketch 0003:6161:4D15.0006: probe with driver letsketch failed with error -71 [ 328.915151][ T2150] usb 1-1: USB disconnect, device number 8 [ 329.552802][ T5846] Bluetooth: hci6: command tx timeout [ 329.680545][ T6245] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.774055][ T8493] loop5: detected capacity change from 0 to 1024 [ 329.954346][ T8493] hfsplus: xattr search failed [ 330.595964][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.752906][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 331.636094][ T5846] Bluetooth: hci6: command tx timeout [ 332.086717][ T6245] bridge_slave_1: left allmulticast mode [ 332.113404][ T6245] bridge_slave_1: left promiscuous mode [ 332.119228][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.238710][ T6245] bridge_slave_0: left allmulticast mode [ 332.252699][ T6245] bridge_slave_0: left promiscuous mode [ 332.295752][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.601242][ T8495] loop0: detected capacity change from 0 to 32768 [ 333.396859][ T8527] loop7: detected capacity change from 0 to 128 [ 333.485099][ T8509] loop5: detected capacity change from 0 to 32768 [ 333.614519][ T8509] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 333.714483][ T5846] Bluetooth: hci6: command tx timeout [ 333.869401][ T8533] loop7: detected capacity change from 0 to 1024 [ 333.877081][ T8509] (syz.5.545,8509,0):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=288, inode=0, rec_len=0, name_len=0 [ 333.956223][ T8533] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.027249][ T5831] ocfs2: Unmounting device (7,5) on (node local) [ 334.229742][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.294221][ T6245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.343803][ T6245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.383535][ T6245] bond0 (unregistering): Released all slaves [ 334.502417][ T8470] chnl_net:caif_netlink_parms(): no params data found [ 334.973048][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 335.052828][ T2150] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 335.078901][ T8249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.143128][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 335.154773][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.166693][ T9] usb 1-1: config 0 has no interface number 0 [ 335.191025][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.222812][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 335.238981][ T8470] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.242185][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.251500][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.254300][ T2150] usb 6-1: Using ep0 maxpacket: 32 [ 335.264370][ T2150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.278099][ T8470] bridge_slave_0: entered allmulticast mode [ 335.288819][ T9] usb 1-1: config 0 descriptor?? [ 335.299052][ T2150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.319409][ T8470] bridge_slave_0: entered promiscuous mode [ 335.323736][ T2150] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 335.351660][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 335.392653][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.432179][ T6245] hsr_slave_0: left promiscuous mode [ 335.440252][ T2150] usb 6-1: config 0 descriptor?? [ 335.466041][ T2150] hub 6-1:0.0: USB hub found [ 335.478418][ T6245] hsr_slave_1: left promiscuous mode [ 335.502048][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.525003][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.545951][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.560035][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.601761][ T6245] veth1_macvtap: left promiscuous mode [ 335.619975][ T6245] veth0_macvtap: left promiscuous mode [ 335.630769][ T6245] veth1_vlan: left promiscuous mode [ 335.645999][ T6245] veth0_vlan: left promiscuous mode [ 335.690474][ T2150] hub 6-1:0.0: 1 port detected [ 335.803829][ T5846] Bluetooth: hci6: command tx timeout [ 336.112376][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.123153][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.137602][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.146962][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.170706][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.330910][ T2150] hub 6-1:0.0: activate --> -90 [ 336.509150][ T6245] team0 (unregistering): Port device team_slave_1 removed [ 336.560386][ T6245] team0 (unregistering): Port device team_slave_0 removed [ 336.686387][ T9] usb 1-1: USB disconnect, device number 9 [ 336.745392][ T2150] usb 6-1-port1: cannot disable (err = -71) [ 336.745432][ T5838] usb 6-1: USB disconnect, device number 12 [ 337.015132][ T8470] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.022296][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.030160][ T8470] bridge_slave_1: entered allmulticast mode [ 337.038276][ T8470] bridge_slave_1: entered promiscuous mode [ 337.136666][ T8470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.174481][ T8470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.359593][ T8470] team0: Port device team_slave_0 added [ 337.395702][ T8470] team0: Port device team_slave_1 added [ 337.748960][ T8559] loop0: detected capacity change from 0 to 40427 [ 337.768003][ T8559] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 337.775876][ T8559] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 337.826619][ T8559] F2FS-fs (loop0): invalid crc value [ 337.937350][ T8559] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 337.944754][ T8559] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 338.282696][ T5847] Bluetooth: hci0: command tx timeout [ 338.848713][ T8249] veth0_vlan: entered promiscuous mode [ 339.133930][ T8559] F2FS-fs (loop0): Start checkpoint disabled! [ 339.233348][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.252587][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.284973][ T8470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.351017][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.368577][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.410218][ T8470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.492793][ T8573] loop7: detected capacity change from 0 to 256 [ 339.573270][ T8249] veth1_vlan: entered promiscuous mode [ 339.780686][ T8573] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x09567547, utbl_chksum : 0xe619d30d) [ 339.842074][ T8470] hsr_slave_0: entered promiscuous mode [ 339.883914][ T8470] hsr_slave_1: entered promiscuous mode [ 339.907918][ T8470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.916780][ T8573] exFAT-fs (loop7): start_clu is invalid cluster(0xffffffff) [ 339.936294][ T8470] Cannot create hsr debugfs directory [ 339.943364][ T8575] loop5: detected capacity change from 0 to 40427 [ 340.012749][ T8575] F2FS-fs (loop5): build fault injection rate: 690 [ 340.019340][ T8575] F2FS-fs (loop5): Image doesn't support compression [ 340.026199][ T8575] F2FS-fs (loop5): Image doesn't support compression [ 340.045628][ T8575] F2FS-fs (loop5): invalid crc value [ 340.183205][ T8575] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 340.304344][ T7771] exFAT-fs (loop7): valid_size(150994954) is greater than size(10) [ 340.337598][ T30] audit: type=1800 audit(1750096915.574:18): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.566" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 340.355402][ T8575] syz.5.566: attempt to access beyond end of device [ 340.355402][ T8575] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 340.362490][ T5847] Bluetooth: hci0: command tx timeout [ 340.373025][ T8575] CPU: 0 UID: 0 PID: 8575 Comm: syz.5.566 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 340.373079][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.373102][ T8575] Call Trace: [ 340.373115][ T8575] [ 340.373129][ T8575] dump_stack_lvl+0x16c/0x1f0 [ 340.373200][ T8575] f2fs_handle_critical_error+0x621/0x9f0 [ 340.373251][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.373299][ T8575] ? f2fs_build_fault_attr+0x53/0x1f0 [ 340.373349][ T8575] f2fs_write_end_io+0x785/0xc20 [ 340.373404][ T8575] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 340.373461][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.373519][ T8575] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 340.373569][ T8575] bio_endio+0x70d/0x850 [ 340.373611][ T8575] submit_bio_noacct+0x56d/0x1eb0 [ 340.373676][ T8575] __submit_merged_bio+0x33c/0x770 [ 340.373733][ T8575] __submit_merged_write_cond+0x319/0x3f0 [ 340.373799][ T8575] f2fs_write_cache_pages+0x2067/0x2570 [ 340.373888][ T8575] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 340.373945][ T8575] ? find_held_lock+0x2b/0x80 [ 340.373994][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.374055][ T8575] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 340.374114][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.374160][ T8575] ? is_bpf_text_address+0x94/0x1a0 [ 340.374200][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.374246][ T8575] ? kernel_text_address+0x8d/0x100 [ 340.374287][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.374332][ T8575] ? __kernel_text_address+0xd/0x40 [ 340.374370][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.374516][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.374572][ T8575] f2fs_write_data_pages+0x4ad/0xd90 [ 340.374641][ T8575] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 340.374697][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.374756][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.374808][ T8575] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 340.374871][ T8575] do_writepages+0x27a/0x600 [ 340.374939][ T8575] ? __pfx_do_writepages+0x10/0x10 [ 340.374996][ T8575] ? do_raw_spin_unlock+0x172/0x230 [ 340.375038][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.375088][ T8575] ? _raw_spin_unlock+0x28/0x50 [ 340.375149][ T8575] filemap_fdatawrite_wbc+0x104/0x160 [ 340.375210][ T8575] ? unwind_get_return_address+0x59/0xa0 [ 340.375275][ T8575] __filemap_fdatawrite_range+0xb2/0xf0 [ 340.375322][ T8575] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 340.375449][ T8575] filemap_write_and_wait_range+0xa3/0x130 [ 340.375501][ T8575] fiemap_prep+0x1ba/0x220 [ 340.375569][ T8575] f2fs_fiemap+0x170/0x1cb0 [ 340.375625][ T8575] ? __lock_acquire+0xb8a/0x1c90 [ 340.375695][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.375743][ T8575] ? __pfx_f2fs_fiemap+0x10/0x10 [ 340.375798][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.375848][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.375892][ T8575] ? find_held_lock+0x2b/0x80 [ 340.375936][ T8575] ? __might_fault+0xe3/0x190 [ 340.375977][ T8575] ? __might_fault+0xe3/0x190 [ 340.376039][ T8575] do_vfs_ioctl+0x404/0x1a60 [ 340.376110][ T8575] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 340.376205][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.376251][ T8575] ? find_held_lock+0x2b/0x80 [ 340.376293][ T8575] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.376338][ T8575] ? hook_file_ioctl_common+0x145/0x410 [ 340.376411][ T8575] __x64_sys_ioctl+0x114/0x210 [ 340.376477][ T8575] do_syscall_64+0xcd/0x4c0 [ 340.376518][ T8575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.376557][ T8575] RIP: 0033:0x7f440eb8e929 [ 340.376586][ T8575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.376623][ T8575] RSP: 002b:00007f440f94e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.376658][ T8575] RAX: ffffffffffffffda RBX: 00007f440edb5fa0 RCX: 00007f440eb8e929 [ 340.376683][ T8575] RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000005 [ 340.376708][ T8575] RBP: 00007f440ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 340.376731][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.376755][ T8575] R13: 0000000000000000 R14: 00007f440edb5fa0 R15: 00007ffcbaf11128 [ 340.376806][ T8575] [ 340.376819][ T8575] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 340.833145][ T5938] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 341.034289][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 341.059294][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.092609][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 341.101810][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.189878][ T5938] usb 1-1: config 0 descriptor?? [ 341.200175][ T6245] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.222917][ T5938] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 341.386152][ T8556] chnl_net:caif_netlink_parms(): no params data found [ 341.484104][ T6245] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.516817][ T8249] veth0_macvtap: entered promiscuous mode [ 341.587385][ T8249] veth1_macvtap: entered promiscuous mode [ 341.691750][ T6245] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.802003][ T6245] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.873509][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 341.909681][ T8556] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.917053][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.926332][ T8556] bridge_slave_0: entered allmulticast mode [ 341.934674][ T8556] bridge_slave_0: entered promiscuous mode [ 341.950090][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.020069][ T8556] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.031230][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.047096][ T8556] bridge_slave_1: entered allmulticast mode [ 342.061366][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 342.063701][ T8556] bridge_slave_1: entered promiscuous mode [ 342.083946][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 342.094167][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.106830][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.131623][ T24] usb 6-1: Product: syz [ 342.147447][ T24] usb 6-1: Manufacturer: syz [ 342.152195][ T24] usb 6-1: SerialNumber: syz [ 342.187424][ T24] usb 6-1: config 0 descriptor?? [ 342.308672][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.7.571'. [ 342.409605][ T8556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.432728][ T5847] Bluetooth: hci0: command tx timeout [ 342.456922][ T24] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 342.626876][ T8249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.639927][ T920] usb 1-1: USB disconnect, device number 10 [ 342.652397][ T8249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.681858][ T8249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.695669][ T8249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.757338][ T8556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.974604][ T8600] loop7: detected capacity change from 0 to 512 [ 343.085622][ T8556] team0: Port device team_slave_0 added [ 343.094837][ T8600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.107598][ T8556] team0: Port device team_slave_1 added [ 343.171509][ T8600] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.252196][ T6245] bridge_slave_1: left allmulticast mode [ 343.265395][ T6245] bridge_slave_1: left promiscuous mode [ 343.271598][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.344876][ T6245] bridge_slave_0: left allmulticast mode [ 343.352818][ T6245] bridge_slave_0: left promiscuous mode [ 343.360509][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.418205][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.582670][ T5938] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 343.626250][ T8607] loop7: detected capacity change from 0 to 4096 [ 343.783021][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 343.796212][ T5938] usb 1-1: config 0 has no interfaces? [ 343.817797][ T5938] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 343.839169][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.865246][ T5938] usb 1-1: config 0 descriptor?? [ 343.878085][ T24] usb write operation failed. (-71) [ 343.907815][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 343.943294][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 343.950340][ T24] usb 6-1: media controller created [ 343.976805][ T24] usb read operation failed. (-71) [ 344.010955][ T24] usb write operation failed. (-71) [ 344.020233][ T8609] binder: 8608:8609 ioctl c0306201 200000000640 returned -22 [ 344.036309][ T24] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 344.073225][ T24] usb 6-1: USB disconnect, device number 13 [ 344.295090][ T5938] usb 1-1: USB disconnect, device number 11 [ 344.439133][ T6245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.466517][ T6245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.471040][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.577'. [ 344.487835][ T6245] bond0 (unregistering): Released all slaves [ 344.512708][ T5847] Bluetooth: hci0: command tx timeout [ 344.516166][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.525112][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.551161][ T8556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.573767][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.580724][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.629181][ T8556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.848821][ T8556] hsr_slave_0: entered promiscuous mode [ 344.855905][ T8556] hsr_slave_1: entered promiscuous mode [ 344.862332][ T8556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.870391][ T8556] Cannot create hsr debugfs directory [ 345.431001][ T6437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.448372][ T6437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.579708][ T6245] hsr_slave_0: left promiscuous mode [ 345.589725][ T6245] hsr_slave_1: left promiscuous mode [ 345.596697][ T6245] batman_adv: batadv0: Removing interface: team0 [ 345.604104][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.611628][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.620024][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.628438][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.652573][ T5938] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 345.662275][ T6245] veth1_macvtap: left promiscuous mode [ 345.668080][ T6245] veth0_macvtap: left promiscuous mode [ 345.674060][ T6245] veth1_vlan: left promiscuous mode [ 345.679474][ T6245] veth0_vlan: left promiscuous mode [ 345.805530][ T5938] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 345.809178][ T8619] loop5: detected capacity change from 0 to 32768 [ 345.825979][ T5938] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.852592][ T5938] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.874948][ T5938] usb 8-1: config 0 interface 0 has no altsetting 0 [ 345.877411][ T8619] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 345.883538][ T5938] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.899257][ T5938] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.910380][ T5938] usb 8-1: config 0 interface 0 has no altsetting 0 [ 345.918615][ T5938] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.929466][ T5938] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.940576][ T5938] usb 8-1: config 0 interface 0 has no altsetting 0 [ 345.950435][ T5938] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.959775][ T5938] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.971032][ T5938] usb 8-1: config 0 interface 0 has no altsetting 0 [ 345.979435][ T5938] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.988605][ T5938] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.999731][ T5938] usb 8-1: config 0 interface 0 has no altsetting 0 [ 346.007983][ T5938] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.017200][ T5938] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.028441][ T5938] usb 8-1: config 0 interface 0 has no altsetting 0 [ 346.039355][ T5938] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.048446][ T5938] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.060995][ T5938] usb 8-1: config 0 interface 0 has no altsetting 0 [ 346.069611][ T5938] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.078970][ T5938] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.090603][ T5938] usb 8-1: config 0 interface 0 has no altsetting 0 [ 346.109473][ T5938] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 346.121574][ T5938] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 346.131878][ T5938] usb 8-1: Product: syz [ 346.136610][ T5938] usb 8-1: Manufacturer: syz [ 346.141347][ T5938] usb 8-1: SerialNumber: syz [ 346.170748][ T8619] XFS (loop5): Ending clean mount [ 346.175036][ T5938] usb 8-1: config 0 descriptor?? [ 346.189701][ T5938] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 346.190739][ T8619] XFS (loop5): Quotacheck needed: Please wait. [ 346.295772][ T8619] XFS (loop5): Quotacheck: Done. [ 346.487117][ T5831] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 346.707381][ C1] usb 8-1: yurex_control_callback - control failed: -71 [ 346.735748][ T5938] usb 8-1: USB disconnect, device number 2 [ 346.758412][ T5938] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 347.045521][ T6245] team0 (unregistering): Port device team_slave_1 removed [ 347.168331][ T6245] team0 (unregistering): Port device team_slave_0 removed [ 348.232976][ T5938] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 348.386879][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.394955][ T8470] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 348.407340][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.417483][ T5938] usb 8-1: config 0 has no interfaces? [ 348.432242][ T5938] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 348.437221][ T8470] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 348.465313][ T5938] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.479574][ T5938] usb 8-1: config 0 descriptor?? [ 348.544785][ T8470] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 348.632142][ T8470] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 349.037336][ T6245] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.120994][ T8556] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 349.190107][ T6245] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.210539][ T8556] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 349.234540][ T8556] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 349.281056][ T6245] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.300227][ T8556] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 349.367199][ T6245] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.391099][ T8470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.464862][ T8470] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.500595][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.507810][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.571111][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.578324][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.717294][ T6245] bridge_slave_1: left allmulticast mode [ 349.724708][ T6245] bridge_slave_1: left promiscuous mode [ 349.730473][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.743286][ T6245] bridge_slave_0: left allmulticast mode [ 349.748955][ T6245] bridge_slave_0: left promiscuous mode [ 349.755475][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.254430][ T6245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.271718][ T6245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.294205][ T6245] bond0 (unregistering): Released all slaves [ 350.300223][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.302210][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.317303][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.326472][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.334985][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.460925][ T8470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.691311][ T8556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.750092][ T6245] hsr_slave_0: left promiscuous mode [ 350.757669][ T6245] hsr_slave_1: left promiscuous mode [ 350.778389][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.788187][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.797177][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.805082][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.834695][ T6245] veth1_macvtap: left promiscuous mode [ 350.840286][ T6245] veth0_macvtap: left promiscuous mode [ 350.846344][ T6245] veth1_vlan: left promiscuous mode [ 350.851723][ T6245] veth0_vlan: left promiscuous mode [ 351.030746][ T9] usb 8-1: USB disconnect, device number 3 [ 351.457721][ T8669] loop7: detected capacity change from 0 to 32768 [ 351.627046][ T8669] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.585 (8669) [ 351.811480][ T8669] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 351.821842][ T8669] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm [ 352.132842][ T8669] BTRFS info (device loop7): rebuilding free space tree [ 352.152213][ T8669] BTRFS info (device loop7): disabling free space tree [ 352.159269][ T8669] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 352.169043][ T8669] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 352.335510][ T8690] loop0: detected capacity change from 0 to 256 [ 352.372397][ T8690] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 352.392307][ T8689] loop5: detected capacity change from 0 to 256 [ 352.442119][ T5847] Bluetooth: hci3: command tx timeout [ 352.459358][ T8689] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 352.719310][ T7771] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 352.762773][ T8689] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 353.756066][ T6245] team0 (unregistering): Port device team_slave_1 removed [ 353.802892][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 353.818722][ T6245] team0 (unregistering): Port device team_slave_0 removed [ 353.962606][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 353.981047][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.992689][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.013982][ T9] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 354.027973][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.053106][ T9] usb 1-1: config 0 descriptor?? [ 354.082389][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 354.318139][ T920] usb 1-1: USB disconnect, device number 12 [ 354.522642][ T5847] Bluetooth: hci3: command tx timeout [ 354.941101][ T8556] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.030542][ T8470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.059768][ T8710] loop7: detected capacity change from 0 to 1024 [ 355.103250][ T8710] EXT4-fs: Ignoring removed orlov option [ 355.139647][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.146953][ T6437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.162682][ T8710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.256678][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.263936][ T6437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.285099][ T8710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.453544][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 355.495385][ T8661] chnl_net:caif_netlink_parms(): no params data found [ 355.654397][ T24] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 355.693622][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.715957][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.772646][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 355.810224][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.853385][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.885014][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 355.901053][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.911188][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.963453][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 355.999727][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.029170][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.060962][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.081043][ T7771] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.126306][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.143251][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.166889][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.217397][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.224668][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.224740][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.224791][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.226083][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.281854][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.316903][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.328461][ T8661] bridge_slave_0: entered allmulticast mode [ 356.334892][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 356.348294][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.361320][ T8661] bridge_slave_0: entered promiscuous mode [ 356.367206][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.367278][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.367328][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.371153][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 356.401677][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.439247][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.532667][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 356.549182][ T8661] bridge_slave_1: entered allmulticast mode [ 356.581174][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.598484][ T5847] Bluetooth: hci3: command tx timeout [ 356.686502][ T9] usb 6-1: config 0 has no interface number 0 [ 356.734788][ T8661] bridge_slave_1: entered promiscuous mode [ 356.777641][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.931436][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 357.067358][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.239111][ T24] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 357.247877][ T24] usb 1-1: Product: syz [ 357.252099][ T24] usb 1-1: Manufacturer: syz [ 357.256803][ T24] usb 1-1: SerialNumber: syz [ 357.266898][ T24] usb 1-1: config 0 descriptor?? [ 357.271465][ T9] usb 6-1: config 0 descriptor?? [ 357.278964][ T24] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 357.331878][ T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 357.590423][ T8661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.613530][ T24] usb 6-1: USB disconnect, device number 14 [ 357.666768][ T8661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.804218][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 357.804785][ T9] usb 1-1: USB disconnect, device number 13 [ 357.834205][ T8661] team0: Port device team_slave_0 added [ 357.855591][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 357.857020][ T8661] team0: Port device team_slave_1 added [ 357.942903][ T2150] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 357.980371][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.988161][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.014308][ T8661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.042644][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.049621][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.078410][ T8661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.102951][ T2150] usb 8-1: Using ep0 maxpacket: 16 [ 358.113700][ T2150] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 358.121812][ T2150] usb 8-1: config 0 has no interface number 0 [ 358.162567][ T2150] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 358.183769][ T2150] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 358.205049][ T2150] usb 8-1: config 0 interface 41 has no altsetting 0 [ 358.222626][ T2150] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 358.231699][ T2150] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.254045][ T2150] usb 8-1: Product: syz [ 358.258262][ T2150] usb 8-1: Manufacturer: syz [ 358.281098][ T8556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.293677][ T2150] usb 8-1: SerialNumber: syz [ 358.301857][ T2150] usb 8-1: config 0 descriptor?? [ 358.324212][ T8470] veth0_vlan: entered promiscuous mode [ 358.331019][ T8749] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 358.342647][ T8749] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 358.348993][ T8661] hsr_slave_0: entered promiscuous mode [ 358.388638][ T8661] hsr_slave_1: entered promiscuous mode [ 358.412289][ T8661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.451365][ T8661] Cannot create hsr debugfs directory [ 358.539589][ T8470] veth1_vlan: entered promiscuous mode [ 358.603747][ T8749] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 358.611100][ T8749] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 358.676995][ T5847] Bluetooth: hci3: command tx timeout [ 359.026608][ T8470] veth0_macvtap: entered promiscuous mode [ 359.091077][ T8470] veth1_macvtap: entered promiscuous mode [ 359.193804][ T8763] loop0: detected capacity change from 0 to 40427 [ 359.205630][ T8763] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 359.213511][ T8763] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 359.370630][ T8763] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 359.378114][ T8763] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 359.409053][ T2150] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 359.444050][ T8763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 359.451865][ T8763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 359.459690][ T8763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 359.468009][ T8763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 359.475684][ T8763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 359.483354][ T8763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 359.490954][ T8763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 359.552398][ T8763] syz.0.602: attempt to access beyond end of device [ 359.552398][ T8763] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 359.757053][ T8470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.829242][ T2150] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 359.840364][ T8470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.870680][ T8470] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.912352][ T8470] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.912472][ T2150] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 359.940239][ T8470] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.969787][ T2150] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 360.002051][ T8470] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.012259][ T2150] usb 8-1: USB disconnect, device number 4 [ 360.174212][ T8781] loop5: detected capacity change from 0 to 2048 [ 360.229016][ T8781] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 360.340018][ T8781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.407360][ T8781] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.531539][ T8781] fs-verity: sha512 using implementation "sha512-avx2" [ 360.582527][ T8556] veth0_vlan: entered promiscuous mode [ 360.788800][ T8556] veth1_vlan: entered promiscuous mode [ 360.832304][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.919065][ T6245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.984248][ T6245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.129241][ T6245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.132044][ T8556] veth0_macvtap: entered promiscuous mode [ 361.180930][ T6245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.238318][ T8556] veth1_macvtap: entered promiscuous mode [ 361.414913][ T8661] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.501219][ T8556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.574635][ T8661] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.660267][ T8556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.666125][ T8799] loop7: detected capacity change from 0 to 32768 [ 361.705553][ T8799] [ 361.705553][ T8799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 361.705553][ T8799] [ 361.707275][ T8661] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 361.729469][ T8799] [ 361.729469][ T8799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 361.729469][ T8799] [ 361.740215][ T8799] [ 361.740215][ T8799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 361.740215][ T8799] [ 361.750889][ T8799] [ 361.750889][ T8799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 361.750889][ T8799] [ 361.761367][ T8799] [ 361.761367][ T8799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 361.761367][ T8799] [ 361.787744][ T109] [ 361.787744][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 361.787744][ T109] [ 362.517399][ T8799] [ 362.517399][ T8799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.517399][ T8799] [ 362.528322][ T8799] [ 362.528322][ T8799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.528322][ T8799] [ 362.539528][ T8661] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 362.592809][ T109] [ 362.592809][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.592809][ T109] [ 362.614748][ T49] [ 362.614748][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.614748][ T49] [ 362.661937][ T49] [ 362.661937][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.661937][ T49] [ 362.727216][ T8556] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.747969][ T8799] [ 362.747969][ T8799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.747969][ T8799] [ 362.759909][ T8799] [ 362.759909][ T8799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.759909][ T8799] [ 362.776266][ T109] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 362.788366][ T109] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 362.796789][ T109] CPU: 1 UID: 0 PID: 109 Comm: jfsCommit Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 362.806879][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.816951][ T109] RIP: 0010:write_special_inodes+0xa9/0x170 [ 362.822887][ T109] Code: 2e e8 7b 29 38 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 43 29 38 08 48 8d [ 362.842519][ T109] RSP: 0018:ffffc90002707bd8 EFLAGS: 00010216 [ 362.848613][ T109] RAX: 0000000000000006 RBX: ffff888029c52800 RCX: ffffffff81f2727e [ 362.856606][ T109] RDX: 0000000000000000 RSI: ffffffff81f27231 RDI: 0000000000000030 [ 362.864586][ T109] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 362.872567][ T109] R10: 0000000000000000 R11: 0000000000002c00 R12: ffffffff81f339a0 [ 362.880547][ T109] R13: 0000000000000000 R14: ffff888025920800 R15: ffffc90002709112 [ 362.888530][ T109] FS: 0000000000000000(0000) GS:ffff88812485a000(0000) knlGS:0000000000000000 [ 362.897473][ T109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.904068][ T109] CR2: 00007fa9e27fdd20 CR3: 000000000e382000 CR4: 0000000000350ef0 [ 362.912056][ T109] Call Trace: [ 362.915346][ T109] [ 362.918292][ T109] lmLogSync+0xd2/0x820 [ 362.922486][ T109] ? __pfx_lmLogSync+0x10/0x10 [ 362.927282][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.932940][ T109] ? find_held_lock+0x2b/0x80 [ 362.937646][ T109] jfs_syncpt+0x89/0xa0 [ 362.941828][ T109] txEnd+0x30a/0x5a0 [ 362.945748][ T109] jfs_lazycommit+0x783/0xb30 [ 362.950458][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 362.955687][ T109] ? __pfx_default_wake_function+0x10/0x10 [ 362.961522][ T109] ? lockdep_hardirqs_on+0x7c/0x110 [ 362.966756][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.972417][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.978088][ T109] ? __kthread_parkme+0x19e/0x250 [ 362.983146][ T109] ? __pfx_jfs_lazycommit+0x10/0x10 [ 362.988376][ T109] kthread+0x3c5/0x780 [ 362.992460][ T109] ? __pfx_kthread+0x10/0x10 [ 362.997070][ T109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.002726][ T109] ? rcu_is_watching+0x12/0xc0 [ 363.007607][ T109] ? __pfx_kthread+0x10/0x10 [ 363.012207][ T109] ret_from_fork+0x5d7/0x6f0 [ 363.016827][ T109] ? __pfx_kthread+0x10/0x10 [ 363.021452][ T109] ret_from_fork_asm+0x1a/0x30 [ 363.026246][ T109] [ 363.029266][ T109] Modules linked in: [ 363.035266][ T109] ---[ end trace 0000000000000000 ]--- [ 363.040767][ T8556] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.056440][ T8556] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.065680][ T8556] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.129166][ T109] RIP: 0010:write_special_inodes+0xa9/0x170 [ 363.135640][ T109] Code: 2e e8 7b 29 38 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 43 29 38 08 48 8d [ 363.176522][ T8818] loop0: detected capacity change from 0 to 1024 [ 363.199990][ T109] RSP: 0018:ffffc90002707bd8 EFLAGS: 00010216 [ 363.217231][ T109] RAX: 0000000000000006 RBX: ffff888029c52800 RCX: ffffffff81f2727e [ 363.226619][ T109] RDX: 0000000000000000 RSI: ffffffff81f27231 RDI: 0000000000000030 [ 363.244345][ T8818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.259542][ T109] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 363.299123][ T109] R10: 0000000000000000 R11: 0000000000002c00 R12: ffffffff81f339a0 [ 363.308395][ T109] R13: 0000000000000000 R14: ffff888025920800 R15: ffffc90002709112 [ 363.317705][ T109] FS: 0000000000000000(0000) GS:ffff88812485a000(0000) knlGS:0000000000000000 [ 363.327426][ T109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.342307][ T109] CR2: 00007f440c9f5f98 CR3: 0000000058822000 CR4: 0000000000350ef0 [ 363.360634][ T109] Kernel panic - not syncing: Fatal exception [ 363.367058][ T109] Kernel Offset: disabled [ 363.371389][ T109] Rebooting in 86400 seconds..