last executing test programs: 1m44.949984099s ago: executing program 1 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x4181) 1m44.661762596s ago: executing program 1 (id=129): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fcb602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9", @ANYRES16, @ANYRESHEX, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x6245, &(0x7f0000012d80)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1m42.951753683s ago: executing program 1 (id=140): accept$ax25(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) 1m42.334470715s ago: executing program 1 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x100000, 0x0) 1m42.317310835s ago: executing program 1 (id=147): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000001840)=""/4090, 0xffa) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/34, 0x43) 1m41.568193014s ago: executing program 1 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0xba01}, 0x0) 1m41.194210375s ago: executing program 32 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0xba01}, 0x0) 1m25.206261756s ago: executing program 4 (id=270): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aaadb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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") r0 = memfd_create(&(0x7f0000000040)='\xf3u\t\x9f\x918\xc0ud\xb0l \xfd\xd7\x03\x00\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcfV9\xbe\x11\xe3\x00\x00\x00\x00\x1f\xd1\xb1\xd6\x157e,\xe2\x87\x00\x00', 0x0) pwrite64(r0, &(0x7f0000000280)="2fc7", 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1m24.405116492s ago: executing program 4 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") rename(&(0x7f0000000c80)='./file1\x00', &(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m23.373503872s ago: executing program 4 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m22.721950652s ago: executing program 4 (id=294): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) 1m22.413860275s ago: executing program 4 (id=296): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x285}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) pselect6(0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1m21.870560718s ago: executing program 4 (id=299): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETSW2(r0, 0x540e, 0x0) 1m21.347044955s ago: executing program 33 (id=299): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$TCSETSW2(r0, 0x540e, 0x0) 50.401755103s ago: executing program 5 (id=537): prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x3f, 0x4) getsockopt$nfc_llcp(r0, 0x6, 0x6, 0x0, 0x2000e881) 50.061925259s ago: executing program 5 (id=540): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x4, 0x5}, 0x8) 49.240955656s ago: executing program 5 (id=545): syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001600), 0x1, 0x559e, &(0x7f0000006c00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48140, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') ioprio_set$pid(0x2, 0x0, 0x2007) acct(0x0) 45.607680219s ago: executing program 5 (id=555): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) sendto$inet(r0, &(0x7f0000000200)='@', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x90) 44.263976838s ago: executing program 5 (id=559): sched_setscheduler(0x0, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0600120c"], 0x9) 43.639115521s ago: executing program 5 (id=562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r1, 0x1088}], 0x46, 0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000000}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 34.550687729s ago: executing program 2 (id=603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$nfc_llcp(r1, 0x88, 0xb, 0x0, 0x2000005b) 33.910454819s ago: executing program 2 (id=604): r0 = io_uring_setup(0xc20, &(0x7f0000002000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x11, 0x20000000, r2) 33.332657905s ago: executing program 2 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.967283135s ago: executing program 3 (id=609): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) 32.845346103s ago: executing program 2 (id=610): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 32.221733499s ago: executing program 2 (id=611): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000200)=""/184, 0xb8) 31.999954115s ago: executing program 3 (id=613): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x10, 0x1, @in6={0xa, 0x4e24, 0x6, @private0}}}, 0xa0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) 31.322188624s ago: executing program 2 (id=615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20008845, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) 29.818247975s ago: executing program 7 (id=620): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x408, &(0x7f0000000040)=ANY=[], 0x1, 0x1df, &(0x7f00000004c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1002) 29.103404405s ago: executing program 7 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.378939845s ago: executing program 34 (id=562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r1, 0x1088}], 0x46, 0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000000}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 28.32394457s ago: executing program 3 (id=627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_opts(r0, 0x11a, 0x1, 0x0, 0x0) 27.990900965s ago: executing program 7 (id=629): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 27.468377194s ago: executing program 7 (id=631): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000100)=ANY=[], 0x5, 0x6131, &(0x7f00000125c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000002700)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48080, 0x0) 26.950297739s ago: executing program 3 (id=632): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000180)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@clear_cache}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x4}) 23.963682032s ago: executing program 0 (id=634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 23.806994219s ago: executing program 7 (id=635): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) 23.794273898s ago: executing program 6 (id=636): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000140)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 23.181531554s ago: executing program 6 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51a363f3cf14eed80b37912984ad104c6ea6390c3b"}}]}]}, 0x58}}, 0x0) 22.512792274s ago: executing program 3 (id=638): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chdir(&(0x7f000009df00)='./file0\x00') syz_read_part_table(0x1052, &(0x7f0000000000)="$eJzsz72twjAYBdCbl2cl6RiBNajSsQH7MANMQEvBhsgockAsgBDSOYWvr3+KL3zXZVrW/7eT8z1/SYaUpJQk422XOUm/PpinpPZJt5Rtef7bt3j1DH1K17abFsecxozrda05XD86GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8iEcAAAD//7J4CYI=") 22.225426158s ago: executing program 7 (id=639): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x0, 0x65d, &(0x7f0000001780)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x841, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000e40)='./file1\x00', 0x0, 0x0) 21.245360933s ago: executing program 35 (id=639): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x0, 0x65d, &(0x7f0000001780)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x841, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000e40)='./file1\x00', 0x0, 0x0) 21.217962382s ago: executing program 0 (id=641): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 21.211038366s ago: executing program 6 (id=642): r0 = socket(0x40000000002, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000280)=0xffffffff, 0x4) r1 = socket(0x40000000002, 0x3, 0x80000000002) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs, 0x6e) 20.736580051s ago: executing program 0 (id=643): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "caa703000000e6f29660701545c4830a7519915c1766682f9238fe21bbb3defcf64caf5f4d59cac0e04ba1c6afb4b0f607b3531aac4a898cb90bf33a842370c1"}, 0x48, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "caa770b02acce6f29660701545c4830a7519915c1766682f9238fe21bbb3defcf64caf5f4d59cac0e04ba1c6afb4b0f607b3531aac4a898cb90bf33a842370c1"}, 0x48, 0xfffffffffffffffe) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "caa770b02acce6f29660701545c4830a7519915c1766682f9238fe21bbb3defcf64caf5f4d59cac0e04ba1c6afb4b0f607b3531aac4a898cb90bf33a842370c1"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x0) 20.497840915s ago: executing program 6 (id=644): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000180)={0x0, 0xfffffffffffffdcc}) syz_open_procfs(r0, 0x0) 20.167595293s ago: executing program 0 (id=645): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x6827e, 0x124) fallocate(r0, 0x1, 0x0, 0x1000f2) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3, 0x810000, 0x6, 0x7, 0x8000, 0x39}}, 0x50) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000300)={0x24d7, 0x3}) 19.434645201s ago: executing program 6 (id=646): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 18.732998672s ago: executing program 3 (id=647): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x57, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x7d7}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40045b17, 0x0) 18.654414973s ago: executing program 6 (id=648): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 16.871802812s ago: executing program 0 (id=649): write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x248) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)={[{@noauto_da_alloc}, {@inlinecrypt}, {@auto_da_alloc}, {}, {@oldalloc}]}, 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7}) 15.873778714s ago: executing program 36 (id=615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20008845, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) 15.082146034s ago: executing program 0 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="dc7c96cd6f035175d32645ab4a0c866bd7ca3bc2642293638fee39e920037beb17b7c5d012690e51c8d31cb524f80a0a5e9dfff7f913d6d573baf2cf56ab0223c1", 0x41}, {0x0}, {0x0}], 0x3) 3.506720515s ago: executing program 37 (id=648): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 3.432736676s ago: executing program 38 (id=647): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x57, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x7d7}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40045b17, 0x0) 0s ago: executing program 39 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="dc7c96cd6f035175d32645ab4a0c866bd7ca3bc2642293638fee39e920037beb17b7c5d012690e51c8d31cb524f80a0a5e9dfff7f913d6d573baf2cf56ab0223c1", 0x41}, {0x0}, {0x0}], 0x3) kernel console output (not intermixed with test programs): [ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.400990][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 98.479951][ T5899] usb 4-1: USB disconnect, device number 4 [ 98.542003][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 98.561023][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 98.733062][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.743215][ T25] tipc: Node number set to 2886997162 [ 98.757812][ T8] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.779108][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.799836][ T8] usb 6-1: config 0 descriptor?? [ 98.821817][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 99.022302][ T5848] Bluetooth: hci3: command tx timeout [ 99.091009][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 99.218718][ T6449] netlink: 104 bytes leftover after parsing attributes in process `syz.2.179'. [ 99.230004][ T8] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 99.265430][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0003/input/input6 [ 99.338916][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.367740][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.413310][ T1139] bond0 (unregistering): Released all slaves [ 99.450624][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.463193][ T8] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 99.490384][ T6387] chnl_net:caif_netlink_parms(): no params data found [ 99.528774][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.886503][ T6457] loop4: detected capacity change from 0 to 2048 [ 99.990996][ T5899] usb 6-1: USB disconnect, device number 3 [ 100.065822][ T6463] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.302721][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.186'. [ 100.369055][ T6465] netlink: 'syz.3.186': attribute type 7 has an invalid length. [ 100.410911][ T6465] netlink: 'syz.3.186': attribute type 8 has an invalid length. [ 100.418580][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 100.494985][ T6465] gretap0: entered promiscuous mode [ 100.521697][ T6465] batadv_slave_1: entered promiscuous mode [ 100.532425][ T5898] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.576553][ T6465] gretap0: left promiscuous mode [ 100.592001][ T6465] batadv_slave_1: left promiscuous mode [ 100.603692][ T6479] loop4: detected capacity change from 0 to 256 [ 100.687682][ T6387] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.737626][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.745266][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 100.762525][ T6387] bridge_slave_0: entered allmulticast mode [ 100.770064][ T6387] bridge_slave_0: entered promiscuous mode [ 100.776488][ T5898] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 100.785748][ T5898] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.835058][ T5898] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.873670][ T5898] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.918571][ T6460] loop2: detected capacity change from 0 to 32768 [ 100.930964][ T5898] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.968997][ T6460] btrfs: Deprecated parameter 'usebackuproot' [ 100.992333][ T5898] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 101.000129][ T6460] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 101.017975][ T5898] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.051873][ T6460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.185 (6460) [ 101.064989][ T5898] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.105563][ T5898] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.106138][ T5848] Bluetooth: hci3: command tx timeout [ 101.170948][ T6460] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.199604][ T6495] netlink: 596 bytes leftover after parsing attributes in process `syz.4.191'. [ 101.235119][ T5898] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.272639][ T6460] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 101.292296][ T5898] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 101.303430][ T5898] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.317239][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.331404][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.373512][ T5898] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.385524][ T6387] bridge_slave_1: entered allmulticast mode [ 101.385543][ T5898] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.402895][ T5898] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.421700][ T6387] bridge_slave_1: entered promiscuous mode [ 101.437239][ T6491] netlink: 'syz.4.191': attribute type 29 has an invalid length. [ 101.446782][ T5898] usb 1-1: string descriptor 0 read error: -22 [ 101.483693][ T5898] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.504827][ T6494] netlink: 'syz.4.191': attribute type 29 has an invalid length. [ 101.541159][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.665549][ T6460] BTRFS info (device loop2): rebuilding free space tree [ 101.678989][ T5898] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 101.753560][ T6460] BTRFS info (device loop2): disabling free space tree [ 101.815991][ T6460] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.868651][ T1139] hsr_slave_0: left promiscuous mode [ 101.887419][ T6460] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.951171][ T1139] hsr_slave_1: left promiscuous mode [ 101.974114][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.983550][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.028891][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.047424][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.107094][ T8] usb 1-1: USB disconnect, device number 4 [ 102.108792][ T1139] veth1_macvtap: left promiscuous mode [ 102.130776][ T1139] veth0_macvtap: left promiscuous mode [ 102.147319][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.162557][ T1139] veth1_vlan: left promiscuous mode [ 102.175013][ T1139] veth0_vlan: left promiscuous mode [ 102.780947][ C1] net_ratelimit: 3 callbacks suppressed [ 102.780970][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 102.848746][ T6547] Process accounting resumed [ 103.099759][ T6549] loop0: detected capacity change from 0 to 4096 [ 103.171287][ T6552] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.182061][ T5848] Bluetooth: hci3: command tx timeout [ 103.192111][ T6545] loop2: detected capacity change from 0 to 32768 [ 103.247175][ T6545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.204 (6545) [ 103.299993][ T6545] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.311485][ T6545] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 103.320210][ T6545] BTRFS info (device loop2): disk space caching is enabled [ 103.328474][ T6545] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 103.537390][ T6545] BTRFS info (device loop2): rebuilding free space tree [ 103.576589][ T6545] BTRFS info (device loop2): disabling free space tree [ 103.591351][ T6545] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.641016][ T6545] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.717885][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 103.721169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.830985][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 103.840107][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 103.986825][ T5847] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.382746][ T5957] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.580628][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 104.588946][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.610187][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.626067][ T6578] loop0: detected capacity change from 0 to 24 [ 104.636661][ T5957] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 104.646987][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.669671][ T5957] usb 3-1: config 0 descriptor?? [ 104.860979][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 104.933838][ T6580] loop0: detected capacity change from 0 to 4096 [ 104.956596][ T6580] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 105.057299][ T6580] ntfs3(loop0): ino=0, attr_set_size [ 105.072624][ T6580] ntfs3(loop0): ino=0, attr_set_size [ 105.080048][ T6580] ntfs3(loop0): ino=0, attr_set_size [ 105.087027][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.095456][ T6387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.099106][ T6387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.138333][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.273163][ T5848] Bluetooth: hci3: command tx timeout [ 105.441194][ T5957] usb 3-1: string descriptor 0 read error: -71 [ 105.474226][ T5957] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 105.486131][ T6387] team0: Port device team_slave_0 added [ 105.503053][ T6387] team0: Port device team_slave_1 added [ 105.519492][ T6591] loop4: detected capacity change from 0 to 512 [ 105.528456][ T5957] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -32 [ 105.565600][ T5957] usb 3-1: USB disconnect, device number 2 [ 105.601765][ T6591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.615795][ T6596] loop0: detected capacity change from 0 to 64 [ 105.722739][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.729724][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.771321][ T6591] EXT4-fs (loop4): 1 truncate cleaned up [ 105.824727][ T6591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.834361][ T6600] loop3: detected capacity change from 0 to 8192 [ 105.845231][ T6387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.901059][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 105.912998][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.936596][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.048062][ T6387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.244387][ T6387] hsr_slave_0: entered promiscuous mode [ 106.331328][ T6387] hsr_slave_1: entered promiscuous mode [ 106.401054][ T6387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.410945][ T5957] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.452229][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.461528][ T6387] Cannot create hsr debugfs directory [ 106.566681][ T5957] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.580948][ T6616] loop5: detected capacity change from 0 to 64 [ 106.610203][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 106.631510][ T6617] 9pnet_fd: Insufficient options for proto=fd [ 106.648574][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 106.714499][ T5957] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.800388][ T5957] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.841907][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.892998][ T5957] usb 1-1: config 0 descriptor?? [ 106.940934][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 107.083964][ T6639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.163801][ T6387] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 107.251234][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.408628][ T6387] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 107.439248][ T6642] loop3: detected capacity change from 0 to 32768 [ 107.459486][ T5957] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 107.461072][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 107.466948][ T5957] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 107.480997][ T5957] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 107.489348][ T5957] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 107.500068][ T5957] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 107.530508][ T6642] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 107.533974][ T6387] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 107.549770][ T8] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 107.600990][ T8] usb 3-1: config 0 has no interface number 0 [ 107.607881][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 107.626714][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 107.628846][ T29] audit: type=1800 audit(1730321788.837:3): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.235" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 107.637005][ T8] usb 3-1: config 0 interface 41 has no altsetting 0 [ 107.658089][ T6387] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.794263][ T8] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 107.803658][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.812260][ T8] usb 3-1: Product: syz [ 107.816454][ T8] usb 3-1: Manufacturer: syz [ 107.821500][ T8] usb 3-1: SerialNumber: syz [ 107.837103][ T8] usb 3-1: config 0 descriptor?? [ 107.857299][ T6633] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 107.864995][ T6633] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 107.874619][ T6642] (syz.3.235,6642,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "ÿÿ0177777777777777777777701777777777777777777777ÿ00000000000000000000000ÞýÖòL¹¬·þ É* 15‘.¾ô&sþˆ+yÛ2âº9$" or missing value [ 107.982315][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 108.060104][ T6387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.146633][ T6633] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 108.171623][ T5838] ocfs2: Unmounting device (7,3) on (node local) [ 108.176182][ T6387] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.191982][ T6633] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 108.281395][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.288931][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.437641][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.444831][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.629347][ T8] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 109.017433][ T8] dm9601 3-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 109.028405][ T8] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71 [ 109.030936][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 109.065411][ T8] usb 3-1: USB disconnect, device number 3 [ 109.109365][ T6387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.206769][ T6689] loop3: detected capacity change from 0 to 1024 [ 109.543031][ T3422] hfsplus: b-tree write err: -5, ino 4 [ 109.667716][ T25] usb 1-1: USB disconnect, device number 5 [ 109.674199][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 109.772336][ T6709] netlink: 36 bytes leftover after parsing attributes in process `syz.3.246'. [ 109.850958][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.882868][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.918447][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.970960][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.031169][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.053804][ T6387] veth0_vlan: entered promiscuous mode [ 110.060911][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 110.071085][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.106997][ T6387] veth1_vlan: entered promiscuous mode [ 110.131980][ T8] usb 6-1: config 0 descriptor?? [ 110.299884][ T6387] veth0_macvtap: entered promiscuous mode [ 110.333114][ T6387] veth1_macvtap: entered promiscuous mode [ 110.385577][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.443745][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.483855][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.510654][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.554461][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.574781][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 110.601169][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.621972][ T8] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 110.632993][ T5898] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.644759][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.670375][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.699732][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.715613][ T8] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 110.831055][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 110.847452][ T8] usb 6-1: USB disconnect, device number 4 [ 110.856950][ T5898] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 110.914960][ T5898] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.950740][ T5898] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.967416][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.979015][ T5898] usb 5-1: Product: syz [ 110.990969][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.013810][ T6387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.019807][ T6745] loop0: detected capacity change from 0 to 32768 [ 111.032187][ T5898] usb 5-1: Manufacturer: syz [ 111.065887][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.086687][ T5898] usb 5-1: SerialNumber: syz [ 111.101039][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 111.110059][ T6724] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.141394][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.151636][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.162714][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.173057][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.185883][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.197126][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.197535][ T6745] JBD2: Ignoring recovery information on journal [ 111.208104][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.253224][ T6387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.266693][ T6387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.278279][ T6387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.295634][ T6745] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.341730][ T6387] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.353196][ T6387] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.361973][ T6387] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.370709][ T6387] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.509200][ T6724] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.522085][ T5898] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 111.640915][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.648789][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.653295][ T5835] ocfs2: Unmounting device (7,0) on (node local) [ 111.677789][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.686152][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.828506][ T5957] usb 5-1: USB disconnect, device number 3 [ 112.140960][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 112.207891][ T6772] loop0: detected capacity change from 0 to 4096 [ 112.289137][ T6778] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.343284][ T29] audit: type=1800 audit(1730321793.557:4): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.263" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 112.514324][ T6785] capability: warning: `syz.4.267' uses deprecated v2 capabilities in a way that may be insecure [ 112.533810][ T6785] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 112.543725][ T6785] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.759002][ T6791] loop4: detected capacity change from 0 to 2048 [ 112.924836][ T6799] netlink: 'syz.0.268': attribute type 4 has an invalid length. [ 112.994340][ T6762] loop5: detected capacity change from 0 to 32768 [ 113.160678][ T6791] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 113.173307][ T6791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.190996][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 113.282637][ T6809] loop0: detected capacity change from 0 to 2048 [ 113.309254][ T6762] MetaData crosses page boundary!! [ 113.343772][ T6762] lblock = 631800, size = 28672 [ 113.348764][ T6762] CPU: 1 UID: 0 PID: 6762 Comm: syz.5.261 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 113.359375][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.369447][ T6762] Call Trace: [ 113.372742][ T6762] [ 113.375689][ T6762] dump_stack_lvl+0x241/0x360 [ 113.380401][ T6762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.385715][ T6762] ? __pfx__printk+0x10/0x10 [ 113.390512][ T6762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.396187][ T6762] __get_metapage+0xa24/0xef0 [ 113.400909][ T6762] dtReadFirst+0xde/0xbe0 [ 113.405281][ T6762] jfs_readdir+0x817/0x4660 [ 113.409808][ T6762] ? mark_lock+0x9a/0x360 [ 113.414194][ T6762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.419872][ T6762] ? __pfx_jfs_readdir+0x10/0x10 [ 113.424843][ T6762] ? __pfx_lock_acquire+0x10/0x10 [ 113.429931][ T6762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.435685][ T6762] ? down_write+0x18c/0x220 [ 113.440307][ T6762] ? __pfx_down_write+0x10/0x10 [ 113.445194][ T6762] ? __pfx___mutex_lock+0x10/0x10 [ 113.450246][ T6762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.455923][ T6762] ? __pfx_jfs_readdir+0x10/0x10 [ 113.460888][ T6762] wrap_directory_iterator+0x93/0xd0 [ 113.466207][ T6762] iterate_dir+0x573/0x800 [ 113.470654][ T6762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.476322][ T6762] __se_sys_getdents64+0x1d3/0x4a0 [ 113.481470][ T6762] ? __pfx___se_sys_getdents64+0x10/0x10 [ 113.487164][ T6762] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 113.493165][ T6762] ? __pfx_filldir64+0x10/0x10 [ 113.497938][ T6762] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.504287][ T6762] ? do_syscall_64+0x100/0x230 [ 113.509062][ T6762] ? do_syscall_64+0xb6/0x230 [ 113.513762][ T6762] do_syscall_64+0xf3/0x230 [ 113.518282][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.524180][ T6762] RIP: 0033:0x7f2ed977e719 [ 113.528785][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.548397][ T6762] RSP: 002b:00007f2eda543038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 113.556828][ T6762] RAX: ffffffffffffffda RBX: 00007f2ed9935f80 RCX: 00007f2ed977e719 [ 113.564852][ T6762] RDX: 0000000000000099 RSI: 0000000020000400 RDI: 0000000000000005 [ 113.572826][ T6762] RBP: 00007f2ed97f132e R08: 0000000000000000 R09: 0000000000000000 [ 113.580799][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.588784][ T6762] R13: 0000000000000000 R14: 00007f2ed9935f80 R15: 00007ffef19a1be8 [ 113.596779][ T6762] [ 113.618815][ T6762] bread failed! [ 113.762909][ T6809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.886200][ T6829] loop4: detected capacity change from 0 to 512 [ 113.999338][ T6829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.097466][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.138910][ T6829] EXT4-fs (loop4): 1 truncate cleaned up [ 114.171606][ T6829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.218832][ T6829] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.278: corrupted in-inode xattr: overlapping e_value [ 114.240914][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 114.243538][ T6829] EXT4-fs (loop4): Remounting filesystem read-only [ 114.248429][ T5899] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 114.260994][ T6829] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1772: inode #15: comm syz.4.278: unable to update i_inline_off [ 114.281947][ T6829] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.453522][ T5899] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 114.466165][ T5899] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 114.482455][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.521187][ T5899] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 114.627082][ T5899] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 114.676023][ T5899] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 114.680025][ T6853] loop0: detected capacity change from 0 to 2048 [ 114.761452][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 114.801544][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 114.802298][ T5899] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 114.824342][ T6853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.861261][ T5899] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 114.891231][ T5899] usb 3-1: Product: syz [ 114.895441][ T5899] usb 3-1: Manufacturer: syz [ 114.981379][ T5899] usb 3-1: SerialNumber: syz [ 115.015533][ T5899] usb 3-1: config 0 descriptor?? [ 115.021385][ T6830] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.049276][ T5899] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 115.121671][ T5899] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 115.147340][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.260953][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 115.344191][ T5898] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 115.431838][ T5957] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 115.460944][ T962] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.514725][ T5898] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 115.551568][ T5898] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 115.603007][ T5957] usb 7-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 115.610966][ T5898] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.612912][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.641677][ T5899] usb 3-1: USB disconnect, device number 4 [ 115.648621][ T5957] usb 7-1: config 0 descriptor?? [ 115.668799][ T5957] usb-storage 7-1:0.0: USB Mass Storage device detected [ 115.670121][ T5898] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.677002][ T5899] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 115.706142][ T962] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.721287][ T962] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.793531][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.812911][ T962] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.835831][ T962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.846693][ T5898] usb 6-1: SerialNumber: syz [ 115.862786][ T962] usb 1-1: SerialNumber: syz [ 115.867924][ T6870] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 115.914137][ T9] usb 7-1: USB disconnect, device number 2 [ 116.110308][ T962] usb 1-1: 0:2 : does not exist [ 116.129263][ T6870] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 116.188675][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.300946][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 116.329701][ T962] usb 1-1: USB disconnect, device number 6 [ 116.408909][ T6098] udevd[6098]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.608336][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.691722][ T5898] cdc_ether 6-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.5-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 116.847008][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.994535][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.005197][ T6899] loop3: detected capacity change from 0 to 32768 [ 117.037293][ T6899] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.300 (6899) [ 117.061086][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.074650][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.082988][ T5857] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.090572][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.100468][ T8] usb 6-1: USB disconnect, device number 5 [ 117.108397][ T8] cdc_ether 6-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.5-1, Mobile Broadband Network Device [ 117.135293][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.243074][ T6899] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.257254][ T6899] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 117.276387][ T6899] BTRFS info (device loop3): using free-space-tree [ 117.340934][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 117.396179][ T6919] smc: net device bond0 applied user defined pnetid SYZ0 [ 117.483312][ T6920] smc: net device bond0 erased user defined pnetid SYZ0 [ 117.495614][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.693005][ T6948] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 117.956148][ T51] bridge_slave_1: left allmulticast mode [ 117.963087][ T51] bridge_slave_1: left promiscuous mode [ 118.016428][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.118622][ T51] bridge_slave_0: left allmulticast mode [ 118.132806][ T5838] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.166617][ T51] bridge_slave_0: left promiscuous mode [ 118.181659][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.185336][ T29] audit: type=1326 audit(1730321799.397:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed977e719 code=0x7ffc0000 [ 118.267051][ T29] audit: type=1326 audit(1730321799.437:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ed977e719 code=0x7ffc0000 [ 118.362321][ T29] audit: type=1326 audit(1730321799.437:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed977e719 code=0x7ffc0000 [ 118.390923][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 118.479836][ T29] audit: type=1326 audit(1730321799.437:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2ed977e719 code=0x7ffc0000 [ 118.616395][ T29] audit: type=1326 audit(1730321799.437:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed977e719 code=0x7ffc0000 [ 118.712780][ T29] audit: type=1326 audit(1730321799.437:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2ed977e719 code=0x7ffc0000 [ 118.851078][ T29] audit: type=1326 audit(1730321799.437:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.5.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed977e719 code=0x7ffc0000 [ 119.191216][ T5848] Bluetooth: hci4: command tx timeout [ 119.425001][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 119.570488][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.618310][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.630196][ T6979] loop3: detected capacity change from 0 to 32768 [ 119.638918][ T6979] XFS: ikeep mount option is deprecated. [ 119.650540][ T51] bond0 (unregistering): Released all slaves [ 119.677026][ T6983] loop2: detected capacity change from 0 to 32768 [ 119.696603][ T6983] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.318 (6983) [ 119.700199][ T6979] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.722308][ T6951] syzkaller1: entered promiscuous mode [ 119.727789][ T6951] syzkaller1: entered allmulticast mode [ 119.768095][ T6983] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.781347][ T6983] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 119.793095][ T6983] BTRFS info (device loop2): using free-space-tree [ 120.031152][ T6979] XFS (loop3): Ending clean mount [ 120.097903][ T6979] XFS (loop3): Quotacheck needed: Please wait. [ 120.227577][ T5957] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 120.252072][ T6979] XFS (loop3): Quotacheck: Done. [ 120.299317][ T6915] chnl_net:caif_netlink_parms(): no params data found [ 120.323380][ T5847] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.443543][ T5957] usb 6-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 120.444775][ T5838] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.454906][ T5957] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.462579][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 120.479194][ T5957] usb 6-1: config 1 has no interface number 0 [ 120.485584][ T5957] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.496795][ T5957] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 120.507269][ T5957] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 97, using maximum allowed: 30 [ 120.518463][ T5957] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 120.635407][ T5957] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.645173][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.680391][ T5957] usb 6-1: Product: syz [ 120.702849][ T5957] usb 6-1: Manufacturer: syz [ 120.707531][ T5957] usb 6-1: SerialNumber: syz [ 120.782984][ T51] hsr_slave_0: left promiscuous mode [ 120.814992][ T51] hsr_slave_1: left promiscuous mode [ 120.845801][ T7033] loop6: detected capacity change from 0 to 512 [ 120.863200][ T7033] EXT4-fs: Ignoring removed oldalloc option [ 120.872908][ T5848] Bluetooth: hci6: command 0x1003 tx timeout [ 120.879162][ T5857] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 120.905909][ T7034] loop2: detected capacity change from 0 to 256 [ 121.011755][ T7034] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 121.045880][ T7033] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.326: Parent and EA inode have the same ino 15 [ 121.072702][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.099145][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.114499][ T7034] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 121.187071][ T7045] loop3: detected capacity change from 0 to 512 [ 121.204102][ T7033] EXT4-fs (loop6): 1 orphan inode deleted [ 121.211329][ T7033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.231534][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.238995][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.283458][ T5857] Bluetooth: hci4: command tx timeout [ 121.358205][ T7045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.399710][ T51] veth1_macvtap: left promiscuous mode [ 121.411005][ T6387] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.431001][ T51] veth0_macvtap: left promiscuous mode [ 121.452829][ T51] veth1_vlan: left promiscuous mode [ 121.478352][ T7045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 121.482483][ T51] veth0_vlan: left promiscuous mode [ 121.486658][ T7045] System zones: 1-12 [ 121.501027][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 121.510749][ T964] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.536482][ T5957] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 121.542756][ T5957] cdc_ncm 6-1:1.1: bind() failure [ 121.565824][ T5957] usb 6-1: USB disconnect, device number 6 [ 121.606967][ T7045] EXT4-fs (loop3): 1 truncate cleaned up [ 121.648286][ T7045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.702104][ T964] usb 1-1: Using ep0 maxpacket: 32 [ 121.726451][ T964] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.752132][ T964] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 121.786330][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.818286][ T964] usb 1-1: config 0 descriptor?? [ 121.835680][ T964] hub 1-1:0.0: bad descriptor, ignoring hub [ 121.849199][ T964] hub 1-1:0.0: probe with driver hub failed with error -5 [ 121.896847][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.984134][ T7059] loop6: detected capacity change from 0 to 256 [ 122.332812][ T5957] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 122.487293][ T7073] loop5: detected capacity change from 0 to 64 [ 122.540953][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 122.871262][ T5957] usb 1-1: USB disconnect, device number 7 [ 122.932565][ T51] team0 (unregistering): Port device team_slave_1 removed [ 123.028051][ T51] team0 (unregistering): Port device team_slave_0 removed [ 123.082583][ T7081] netlink: 172 bytes leftover after parsing attributes in process `syz.5.339'. [ 123.251025][ T7076] loop6: detected capacity change from 0 to 32768 [ 123.277180][ T7076] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 123.350950][ T5857] Bluetooth: hci4: command tx timeout [ 123.440332][ T7076] XFS (loop6): Ending clean mount [ 123.453935][ T7076] XFS (loop6): Quotacheck needed: Please wait. [ 123.487652][ T7091] loop0: detected capacity change from 0 to 1024 [ 123.516044][ T7091] EXT4-fs: Ignoring removed orlov option [ 123.561137][ T7091] EXT4-fs (loop0): Test dummy encryption mode enabled [ 123.576972][ T7091] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 123.592280][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 123.653278][ T7091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.676863][ T7076] XFS (loop6): Quotacheck: Done. [ 123.809332][ T6387] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 123.812246][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.843259][ T7091] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 123.905337][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.933926][ T6915] bridge_slave_0: entered allmulticast mode [ 123.971925][ T6915] bridge_slave_0: entered promiscuous mode [ 123.980393][ T7091] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 123.997472][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.005232][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.054516][ T6915] bridge_slave_1: entered allmulticast mode [ 124.093954][ T6915] bridge_slave_1: entered promiscuous mode [ 124.259607][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.305526][ T7110] loop6: detected capacity change from 0 to 512 [ 124.360198][ T7110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.395599][ T7110] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.433669][ T6915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.446682][ T6915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.560402][ T7110] EXT4-fs error (device loop6): ext4_do_update_inode:5121: inode #2: comm syz.6.341: corrupted inode contents [ 124.603750][ T6915] team0: Port device team_slave_0 added [ 124.621310][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 124.639102][ T7110] EXT4-fs error (device loop6): ext4_dirty_inode:5984: inode #2: comm syz.6.341: mark_inode_dirty error [ 124.663615][ T6915] team0: Port device team_slave_1 added [ 124.691148][ T7110] EXT4-fs error (device loop6): ext4_do_update_inode:5121: inode #2: comm syz.6.341: corrupted inode contents [ 124.730417][ T7110] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.341: mark_inode_dirty error [ 124.828045][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.836700][ T7110] EXT4-fs error (device loop6): ext4_lookup:1810: inode #18: comm syz.6.341: 'wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8' linked to parent dir [ 124.860923][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.997325][ T6915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.021472][ T7125] loop0: detected capacity change from 0 to 4096 [ 125.034223][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.050023][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.062460][ T7125] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 125.138486][ T6387] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.192038][ T7125] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 125.199047][ T6915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.422450][ T5857] Bluetooth: hci4: command tx timeout [ 125.481174][ T5899] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.530419][ T6915] hsr_slave_0: entered promiscuous mode [ 125.570331][ T6915] hsr_slave_1: entered promiscuous mode [ 125.585705][ T6915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.605520][ T5835] ntfs3(loop0): ino=1a, ntfs_sync_fs failed, -22. [ 125.614568][ T6915] Cannot create hsr debugfs directory [ 125.641046][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 125.660951][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 125.669482][ T5899] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 125.749479][ T5899] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 125.760563][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.804378][ T5899] usb 3-1: Product: syz [ 125.808583][ T5899] usb 3-1: Manufacturer: syz [ 125.832060][ T5899] usb 3-1: SerialNumber: syz [ 125.839271][ T5899] usb 3-1: config 0 descriptor?? [ 125.854273][ T7132] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.872726][ T5899] hub 3-1:0.0: bad descriptor, ignoring hub [ 125.878664][ T5899] hub 3-1:0.0: probe with driver hub failed with error -5 [ 125.944883][ T5899] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 126.016001][ T7123] loop3: detected capacity change from 0 to 32768 [ 126.072071][ T964] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.090307][ T29] audit: type=1800 audit(1730321807.287:12): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.349" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 126.182278][ T962] usb 3-1: USB disconnect, device number 5 [ 126.182432][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 126.218607][ T29] audit: type=1800 audit(1730321807.357:13): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.349" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 126.288311][ T964] usb 1-1: Using ep0 maxpacket: 8 [ 126.305002][ T964] usb 1-1: config 150 has an invalid interface number: 204 but max is 0 [ 126.345807][ T964] usb 1-1: config 150 has no interface number 0 [ 126.385351][ T964] usb 1-1: config 150 interface 204 has no altsetting 0 [ 126.417273][ T964] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 126.437283][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.479008][ T6915] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 126.482544][ T964] usb 1-1: Product: syz [ 126.513060][ T964] usb 1-1: Manufacturer: syz [ 126.517713][ T964] usb 1-1: SerialNumber: syz [ 126.536598][ T6915] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 126.576123][ T6915] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 126.627492][ T6915] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 126.700906][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 126.935101][ T6915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.988113][ T964] usb 1-1: USB disconnect, device number 8 [ 127.016160][ T6915] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.042067][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.049220][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.218629][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.225816][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.342098][ T6915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.449318][ T7188] Bluetooth: MGMT ver 1.23 [ 127.456831][ T7188] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 127.741135][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 127.876886][ T7196] loop5: detected capacity change from 0 to 32768 [ 127.925764][ T7202] input: syz0 as /devices/virtual/input/input9 [ 128.075041][ T7211] loop0: detected capacity change from 0 to 2048 [ 128.098950][ T7211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.121284][ T5896] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 128.137487][ T7196] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.171607][ T6915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.181190][ T5898] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.193612][ T29] audit: type=1800 audit(1730321809.397:14): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.373" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 128.301852][ T5896] usb 7-1: too many configurations: 61, using maximum allowed: 8 [ 128.373354][ T5896] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.383512][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.396260][ T5896] usb 7-1: Product: syz [ 128.400490][ T5896] usb 7-1: Manufacturer: syz [ 128.410919][ T5896] usb 7-1: SerialNumber: syz [ 128.448076][ T5896] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 128.457801][ T5898] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 128.467650][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.490967][ T5898] usb 4-1: Product: syz [ 128.495863][ T5898] usb 4-1: Manufacturer: syz [ 128.539137][ T5898] usb 4-1: SerialNumber: syz [ 128.577413][ T962] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.639936][ T5898] usb 4-1: config 0 descriptor?? [ 128.755592][ T5898] ch341 4-1:0.0: ch341-uart converter detected [ 128.781932][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 128.960763][ T7196] XFS (loop5): Ending clean mount [ 129.004868][ T7240] loop2: detected capacity change from 0 to 4096 [ 129.083048][ T7240] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 129.128973][ T5833] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.164139][ T6915] veth0_vlan: entered promiscuous mode [ 129.232513][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.248718][ T6915] veth1_vlan: entered promiscuous mode [ 129.272233][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.415965][ T29] audit: type=1800 audit(1730321810.627:15): pid=7240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.377" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 129.483554][ T6915] veth0_macvtap: entered promiscuous mode [ 129.543666][ T6915] veth1_macvtap: entered promiscuous mode [ 129.636396][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.679393][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.736064][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.747565][ T962] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 129.772311][ T5898] usb 4-1: failed to send control message: -71 [ 129.778831][ T5898] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 129.783757][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.801373][ T962] ath9k_htc: Failed to initialize the device [ 129.828402][ T5898] usb 4-1: USB disconnect, device number 5 [ 129.830993][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 129.863038][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.888384][ T5898] ch341 4-1:0.0: device disconnected [ 129.910051][ T962] usb 7-1: ath9k_htc: USB layer deinitialized [ 129.918274][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.966122][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.994236][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.020059][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.053802][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.083038][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.162370][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.183410][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.203692][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.220886][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.223436][ T962] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.259923][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.277188][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.289885][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.314109][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.324783][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.344376][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.362568][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.395990][ T962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.431159][ T6915] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.454371][ T962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.474207][ T6915] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.493485][ T962] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.522373][ T6915] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.548055][ T962] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.561091][ T6915] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.576584][ T962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.616534][ T962] usb 3-1: config 0 descriptor?? [ 130.631479][ T5898] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 130.687421][ T8] usb 7-1: USB disconnect, device number 3 [ 130.775257][ T7259] loop0: detected capacity change from 0 to 40427 [ 130.804344][ T5898] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.820645][ T7259] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff [ 130.862070][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.866518][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 130.869939][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.880892][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 130.909814][ T7259] F2FS-fs (loop0): invalid crc value [ 130.938181][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 130.944674][ T7259] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.958548][ T5898] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.000009][ T5898] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.042410][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.066417][ T962] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 131.103004][ T5898] usb 6-1: config 0 descriptor?? [ 131.120300][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.141970][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.149702][ T962] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 131.215718][ T7281] loop3: detected capacity change from 0 to 8192 [ 131.222805][ T7259] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.382796][ T7259] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x1257/0x4f10 [ 131.400630][ T962] usb 3-1: USB disconnect, device number 6 [ 131.449569][ T7259] syz.0.379: attempt to access beyond end of device [ 131.449569][ T7259] loop0: rw=34817, sector=77824, nr_sectors = 976 limit=40427 [ 131.577367][ T5898] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 131.608634][ T5898] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 131.700535][ T5898] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 131.753601][ T5835] syz-executor: attempt to access beyond end of device [ 131.753601][ T5835] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.785885][ T5835] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 131.900944][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 131.930016][ T964] usb 6-1: USB disconnect, device number 7 [ 132.161356][ T7319] loop2: detected capacity change from 0 to 256 [ 132.229098][ T7319] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 132.245538][ T7325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'. [ 132.265076][ T7325] (unnamed net_device) (uninitialized): option ad_select: invalid value (36) [ 132.291466][ T7325] Zero length message leads to an empty skb [ 132.311268][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.317683][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.678475][ T7333] loop6: detected capacity change from 0 to 4096 [ 132.892556][ T7345] input: syz1 as /devices/virtual/input/input11 [ 132.951215][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 133.497780][ T7368] loop5: detected capacity change from 0 to 1764 [ 133.563465][ T7368] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 133.829097][ T7382] loop3: detected capacity change from 0 to 16 [ 133.877001][ T7382] erofs: (device loop3): mounted with root inode @ nid 36. [ 133.893581][ T7386] loop5: detected capacity change from 0 to 1024 [ 133.980936][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 133.989094][ T5857] Bluetooth: hci0: command tx timeout [ 134.031176][ T5899] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.060178][ T7391] loop3: detected capacity change from 0 to 512 [ 134.106794][ T7391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.125055][ T7391] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.209272][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 134.224768][ T5899] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 134.238575][ T5899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 134.281668][ T5899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.328656][ T5899] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.384609][ T5899] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.396899][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.447862][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.664516][ T7378] loop6: detected capacity change from 0 to 32768 [ 134.688102][ T5899] usb 3-1: GET_CAPABILITIES returned 0 [ 134.706515][ T7378] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 134.718815][ T7378] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 134.736002][ T5899] usbtmc 3-1:16.0: can't read capabilities [ 134.755039][ T7378] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 134.767659][ T962] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 134.774721][ T962] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 134.811046][ T5896] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 134.839591][ T962] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 134.849680][ T962] gfs2: fsid=syz:syz.0: jid=0: Done [ 134.947391][ T7378] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 134.960937][ T5957] usb 3-1: USB disconnect, device number 7 [ 135.001237][ T5896] usb 8-1: Using ep0 maxpacket: 8 [ 135.015014][ T5896] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.030946][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 135.035105][ T5896] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.054939][ T7418] loop0: detected capacity change from 0 to 1024 [ 135.088653][ T5896] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.089508][ T7418] EXT4-fs: Ignoring removed orlov option [ 135.115212][ T5896] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.166169][ T7418] EXT4-fs (loop0): Test dummy encryption mode enabled [ 135.196242][ T7418] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 135.202754][ T5896] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.276234][ T5896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.335909][ T7418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.380618][ T7429] warning: `syz.5.425' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.757018][ T5896] usb 8-1: GET_CAPABILITIES returned 0 [ 135.766942][ T5896] usbtmc 8-1:16.0: can't read capabilities [ 136.033274][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.075704][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 136.087855][ T964] usb 8-1: USB disconnect, device number 2 [ 136.236865][ T7451] loop6: detected capacity change from 0 to 2048 [ 136.273043][ T7451] nilfs2: Unknown parameter 'Oobarvier' [ 136.507501][ T7451] loop6: detected capacity change from 0 to 1024 [ 136.872420][ T7476] IPVS: Error joining to the multicast group [ 137.100921][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 137.110205][ T7482] loop6: detected capacity change from 0 to 1024 [ 137.119822][ T7478] loop0: detected capacity change from 0 to 40427 [ 137.157604][ T7478] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 137.169484][ T7483] loop2: detected capacity change from 0 to 1024 [ 137.198511][ T7478] F2FS-fs (loop0): Image doesn't support compression [ 137.221204][ T7478] F2FS-fs (loop0): Image doesn't support compression [ 137.301703][ T7478] F2FS-fs (loop0): invalid crc value [ 137.311069][ T7478] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.453407][ T7498] ALSA: mixer_oss: invalid OSS volume '²}8zõ§00000' [ 137.480983][ T5896] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.570077][ T7478] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.593083][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 137.740984][ T964] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 137.757058][ T5835] syz-executor: attempt to access beyond end of device [ 137.757058][ T5835] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.771753][ T5835] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 137.847810][ T5896] usb 3-1: config 1 has an invalid descriptor of length 159, skipping remainder of the config [ 137.868975][ T5896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.924137][ T5896] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.940022][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.943708][ T964] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.959074][ T964] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.969575][ T964] usb 8-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 137.979027][ T964] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.987798][ T5900] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 137.997938][ T964] usb 8-1: config 0 descriptor?? [ 138.028879][ T5896] usb 3-1: SerialNumber: syz [ 138.140976][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 138.218551][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.231356][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.241417][ T5900] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 138.250479][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.262290][ T5900] usb 6-1: config 0 descriptor?? [ 138.334500][ T5896] usb 3-1: 0:2 : does not exist [ 138.379249][ T5896] usb 3-1: USB disconnect, device number 8 [ 138.432068][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.446155][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.475744][ T964] sony 0003:054C:024B.0009: unexpected long global item [ 138.483542][ T964] sony 0003:054C:024B.0009: parse failed [ 138.489298][ T964] sony 0003:054C:024B.0009: probe with driver sony failed with error -22 [ 138.506818][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.700218][ T964] usb 8-1: USB disconnect, device number 3 [ 138.731275][ T5900] uclogic 0003:5543:0781.000A: item fetching failed at offset 5/7 [ 138.754622][ T5900] uclogic 0003:5543:0781.000A: parse failed [ 138.760624][ T5900] uclogic 0003:5543:0781.000A: probe with driver uclogic failed with error -22 [ 138.963622][ T962] usb 6-1: USB disconnect, device number 8 [ 139.082010][ T7537] loop0: detected capacity change from 0 to 1024 [ 139.136798][ T7537] EXT4-fs: quotafile must be on filesystem root [ 139.164901][ T29] audit: type=1326 audit(1730321820.367:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.6.459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f809097e719 code=0x0 [ 139.191016][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 139.598084][ T7558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.631501][ T7521] loop3: detected capacity change from 0 to 32768 [ 139.672664][ T7562] trusted_key: syz.0.461 sent an empty control message without MSG_MORE. [ 139.700504][ T7521] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 139.774179][ T7521] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.085087][ T7521] XFS (loop3): Ending clean mount [ 140.130362][ T7521] XFS (loop3): Quotacheck needed: Please wait. [ 140.159370][ T7585] loop2: detected capacity change from 0 to 7 [ 140.173152][ T7585] Dev loop2: unable to read RDB block 7 [ 140.220982][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.229346][ T7521] XFS (loop3): Quotacheck: Done. [ 140.251619][ T7585] loop2: unable to read partition table [ 140.329979][ T7585] loop2: partition table beyond EOD, truncated [ 140.349146][ T7591] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.475'. [ 140.366063][ T7585] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 140.388442][ T7590] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.475'. [ 140.501344][ T5210] Dev loop2: unable to read RDB block 7 [ 140.506993][ T5210] loop2: unable to read partition table [ 140.513231][ T5210] loop2: partition table beyond EOD, truncated [ 140.578026][ T7561] loop7: detected capacity change from 0 to 32768 [ 140.637456][ T7561] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.464 (7561) [ 140.664493][ T5838] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.673625][ T7561] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.765493][ T7561] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 140.816976][ T7561] BTRFS info (device loop7): using free-space-tree [ 141.274752][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 141.519358][ T7561] BTRFS info (device loop7): space_info DATA+METADATA has 98304 free, is not full [ 141.528999][ T7561] BTRFS info (device loop7): space_info total=3276800, used=53248, pinned=0, reserved=12288, may_use=3112960, readonly=0 zone_unusable=0 [ 141.543249][ T7561] BTRFS info (device loop7): global_block_rsv: size 1441792 reserved 1441792 [ 141.552509][ T7561] BTRFS info (device loop7): trans_block_rsv: size 0 reserved 0 [ 141.560171][ T7561] BTRFS info (device loop7): chunk_block_rsv: size 0 reserved 0 [ 141.567955][ T7561] BTRFS info (device loop7): delayed_block_rsv: size 98304 reserved 98304 [ 141.576574][ T7561] BTRFS info (device loop7): delayed_refs_rsv: size 786432 reserved 786432 [ 141.889367][ T7661] loop2: detected capacity change from 0 to 1024 [ 141.943265][ T7665] loop5: detected capacity change from 0 to 64 [ 142.170293][ T6915] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.301077][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 142.423675][ T7673] loop5: detected capacity change from 0 to 1024 [ 142.495666][ T7673] EXT4-fs: Ignoring removed oldalloc option [ 142.610814][ T7673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.689829][ T7645] loop3: detected capacity change from 0 to 32768 [ 142.709528][ T7645] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.476 (7645) [ 142.768016][ T7645] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.828871][ T7645] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 143.100256][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.143124][ T7645] BTRFS info (device loop3): rebuilding free space tree [ 143.272470][ T7645] BTRFS info (device loop3): disabling free space tree [ 143.303611][ T7645] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 143.340953][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 143.369971][ T7645] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 143.628040][ T7717] loop6: detected capacity change from 0 to 1024 [ 143.660217][ T7645] BTRFS info (device loop3): balance: start -d -m [ 143.728412][ T7717] hfsplus: extend alloc file! (8192,65536,366) [ 143.814372][ T7721] loop5: detected capacity change from 0 to 2048 [ 143.903244][ T7645] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 144.012401][ T7727] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.380928][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 144.535956][ T7645] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 144.782846][ T7744] loop5: detected capacity change from 0 to 256 [ 144.784125][ T7716] loop7: detected capacity change from 0 to 40427 [ 144.817458][ T7645] BTRFS info (device loop3): balance: canceled [ 144.834102][ T7716] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 144.864545][ T7716] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 144.875063][ T7744] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 145.016073][ T7716] F2FS-fs (loop7): Found nat_bits in checkpoint [ 145.117953][ T5838] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 145.260727][ T7716] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 145.268706][ T7716] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 145.303200][ T7753] loop2: detected capacity change from 0 to 64 [ 145.342114][ T7716] syz.7.500: attempt to access beyond end of device [ 145.342114][ T7716] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 145.357395][ T7716] syz.7.500: attempt to access beyond end of device [ 145.357395][ T7716] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 145.420912][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.537362][ T7761] loop0: detected capacity change from 0 to 512 [ 145.645185][ T7762] syz.7.500: attempt to access beyond end of device [ 145.645185][ T7762] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 145.743641][ T7761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.791446][ T6915] syz-executor: attempt to access beyond end of device [ 145.791446][ T6915] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.876413][ T6915] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 145.882729][ T7761] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.055802][ T7781] loop6: detected capacity change from 0 to 512 [ 146.143244][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.228970][ T7781] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 146.363724][ T7796] netlink: 5300 bytes leftover after parsing attributes in process `syz.3.525'. [ 146.388746][ T7796] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 146.398854][ T7781] EXT4-fs error (device loop6): ext4_orphan_get:1388: inode #15: comm syz.6.519: iget: bad i_size value: -67835469387268086 [ 146.429986][ T7781] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.519: couldn't read orphan inode 15 (err -117) [ 146.444142][ T7781] EXT4-fs (loop6): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.460927][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 146.474286][ T7781] ext2 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.723726][ T7802] loop0: detected capacity change from 0 to 512 [ 146.760687][ T7802] EXT4-fs (loop0): Test dummy encryption mode enabled [ 146.794206][ T7802] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.520: corrupted in-inode xattr: invalid ea_ino [ 146.849812][ T7802] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.520: couldn't read orphan inode 12 (err -117) [ 146.993783][ T6387] EXT4-fs (loop6): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 146.994214][ T7802] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.280026][ T5835] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 147.297286][ T7826] unknown channel width for channel at 909000KHz? [ 147.323144][ T7826] unknown channel width for channel at 909000KHz? [ 147.329683][ T7826] unknown channel width for channel at 909000KHz? [ 147.500911][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 147.921295][ T964] IPVS: starting estimator thread 0... [ 148.035811][ T7835] IPVS: using max 15 ests per chain, 36000 per kthread [ 148.241887][ T7844] 9pnet_fd: Insufficient options for proto=fd [ 148.267161][ T7842] loop6: detected capacity change from 0 to 2048 [ 148.331200][ T5957] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 148.416211][ T7842] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.541077][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 148.608242][ T7850] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.627200][ T5957] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.749989][ T5957] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.841298][ T5957] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 148.913671][ T5957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.990366][ T5957] usb 8-1: config 0 descriptor?? [ 149.490338][ T5957] steelseries 0003:1038:1410.000B: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 149.581571][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 149.678664][ T5957] usb 8-1: USB disconnect, device number 4 [ 150.372231][ T7870] loop3: detected capacity change from 0 to 256 [ 150.620924][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 151.660960][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 151.685500][ T7854] loop5: detected capacity change from 0 to 32768 [ 151.779328][ T7854] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.545 (7854) [ 152.700983][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 153.198314][ T7872] loop0: detected capacity change from 0 to 32768 [ 153.210936][ T964] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.449176][ T964] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.548273][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.696033][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 153.740909][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 153.820909][ T964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.959460][ T964] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.053112][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.155735][ T964] usb 4-1: config 0 descriptor?? [ 154.515601][ T7907] loop6: detected capacity change from 0 to 256 [ 154.646384][ T7907] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 154.693181][ T964] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x5 [ 154.755820][ T964] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 154.781749][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 154.803209][ T964] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 154.993533][ T964] usb 4-1: USB disconnect, device number 6 [ 155.276477][ T29] audit: type=1800 audit(1730321836.437:17): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.561" name="file1" dev="loop6" ino=1048646 res=0 errno=0 [ 155.615610][ T7922] loop7: detected capacity change from 0 to 2048 [ 155.820980][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 156.243367][ T7922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.358893][ T7934] loop3: detected capacity change from 0 to 512 [ 156.499161][ T7934] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.566: corrupted in-inode xattr: invalid ea_ino [ 156.520075][ T7934] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.566: couldn't read orphan inode 15 (err -117) [ 156.547208][ T7934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.810751][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.860932][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 157.262455][ T7948] loop0: detected capacity change from 0 to 64 [ 157.888384][ T5835] hfs: node 4:3 still has 1 user(s)! [ 157.901181][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 157.993030][ T5857] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 158.002025][ T5857] Bluetooth: hci0: Injecting HCI hardware error event [ 158.011505][ T5857] Bluetooth: hci0: hardware error 0x00 [ 158.431511][ T7970] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.536889][ T7970] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 158.940931][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 158.990263][ T29] audit: type=1326 audit(1730321840.197:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad5b7e719 code=0x7fc00000 [ 159.291094][ T29] audit: type=1326 audit(1730321840.367:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdad5b7e719 code=0x7fc00000 [ 159.375789][ T29] audit: type=1326 audit(1730321840.367:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad5b7e719 code=0x7fc00000 [ 159.429467][ T29] audit: type=1326 audit(1730321840.367:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad5b7e719 code=0x7fc00000 [ 159.463233][ T29] audit: type=1326 audit(1730321840.367:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad5b7e719 code=0x7fc00000 [ 159.556652][ T29] audit: type=1326 audit(1730321840.367:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad5b7e719 code=0x7fc00000 [ 159.664161][ T29] audit: type=1326 audit(1730321840.367:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad5b7e719 code=0x7fc00000 [ 159.811029][ T29] audit: type=1326 audit(1730321840.367:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad5b7e719 code=0x7fc00000 [ 159.919107][ T29] audit: type=1326 audit(1730321840.367:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad5b7e719 code=0x7fc00000 [ 159.990928][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 160.073999][ T7958] loop3: detected capacity change from 0 to 32768 [ 160.198235][ T7995] loop0: detected capacity change from 0 to 512 [ 160.217103][ T7995] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.248859][ T7995] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.288454][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.7.590'. [ 160.298789][ T7998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.356402][ T7958] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop3": -EINTR [ 160.480055][ T7995] EXT4-fs (loop0): 1 truncate cleaned up [ 160.518355][ T7995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.591272][ T7998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.705258][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 160.705283][ T29] audit: type=1804 audit(1730321841.917:82): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.589" name="/newroot/100/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 160.773224][ T7998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.783411][ T7998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.936120][ T29] audit: type=1800 audit(1730321842.007:83): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.589" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 161.028939][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 161.089193][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.243528][ T8009] loop2: detected capacity change from 0 to 2048 [ 161.319799][ T8009] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 161.477786][ T8014] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.886605][ T8021] loop3: detected capacity change from 0 to 2048 [ 162.061098][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 162.074682][ T8021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.200369][ T8021] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.316497][ T5857] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 162.412910][ T29] audit: type=1800 audit(1730321843.627:84): pid=8021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.591" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 162.517145][ T8021] fs-verity (loop3, inode 13): Error -22 reading file data [ 162.602944][ T29] audit: type=1800 audit(1730321843.797:85): pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.591" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 162.624213][ T8021] fs-verity (loop3, inode 13): Error -22 building Merkle tree [ 162.969082][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.100972][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 164.141028][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 164.343636][ T8058] loop3: detected capacity change from 0 to 1024 [ 164.351528][ T8017] loop6: detected capacity change from 0 to 32768 [ 164.419474][ T8017] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.595 (8017) [ 164.607947][ T8017] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 164.741333][ T8017] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 164.841364][ T8017] BTRFS info (device loop6): disk space caching is enabled [ 164.920983][ T8017] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 164.937041][ T64] hfsplus: b-tree write err: -5, ino 4 [ 165.057640][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 165.101719][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 165.101996][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 165.102272][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 165.111188][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 165.111462][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 165.111715][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 165.111981][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 165.112376][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 165.112654][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 165.112917][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 165.138741][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 165.139061][ T8017] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 165.191074][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 165.252051][ T8017] BTRFS error (device loop6): open_ctree failed [ 165.899430][ T8090] loop2: detected capacity change from 0 to 1024 [ 165.993312][ T8090] EXT4-fs: Ignoring removed orlov option [ 166.007433][ T8090] EXT4-fs (loop2): Test dummy encryption mode enabled [ 166.007580][ T8090] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 166.091748][ T8090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.221280][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 166.514235][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.261018][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 167.584433][ T8110] loop6: detected capacity change from 0 to 128 [ 167.720047][ T8110] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.821525][ T8110] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.202490][ T8123] loop7: detected capacity change from 0 to 8 [ 168.300989][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 168.331819][ T6387] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.758827][ T8131] loop0: detected capacity change from 0 to 256 [ 168.911836][ T8131] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 168.975035][ T8096] loop3: detected capacity change from 0 to 40427 [ 169.179157][ T29] audit: type=1800 audit(1730321850.387:86): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.623" name="file1" dev="loop0" ino=1048647 res=0 errno=0 [ 169.341025][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 170.380971][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 171.201582][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.212064][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.219929][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.229119][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.237494][ T5848] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 171.263460][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.430976][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 172.460965][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 172.542603][ T8161] chnl_net:caif_netlink_parms(): no params data found [ 173.089227][ T8153] loop7: detected capacity change from 0 to 32768 [ 173.255239][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.353168][ T5857] Bluetooth: hci6: command tx timeout [ 173.379936][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.459466][ T8161] bridge_slave_0: entered allmulticast mode [ 173.501063][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.535167][ T8161] bridge_slave_0: entered promiscuous mode [ 173.585494][ T8160] loop3: detected capacity change from 0 to 32768 [ 173.627460][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.731062][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.738361][ T8161] bridge_slave_1: entered allmulticast mode [ 173.763969][ T8160] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.632 (8160) [ 173.903250][ T8161] bridge_slave_1: entered promiscuous mode [ 174.002771][ T8160] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.136238][ T8160] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 174.203033][ T6915] non-latin1 character 0x2e66 found in JFS file name [ 174.229353][ T8160] BTRFS info (device loop3): using free-space-tree [ 174.260994][ T6915] mount with iocharset=utf8 to access [ 174.299382][ T8160] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 174.299727][ T8160] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 174.394419][ T8161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.469328][ T8160] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 174.469672][ T8160] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 174.541282][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.607637][ T8160] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 174.658859][ T8160] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 174.772276][ T8160] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 174.831889][ T8161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.971458][ T8160] BTRFS error (device loop3): open_ctree failed [ 175.180853][ C0] sched: DL replenish lagged too much [ 175.421438][ T5857] Bluetooth: hci6: command tx timeout [ 175.581124][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 175.679607][ T8211] tipc: Started in network mode [ 175.694217][ T8211] tipc: Node identity 7f000001, cluster identity 4711 [ 175.744775][ T8211] tipc: Enabled bearer , priority 10 [ 175.870922][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 176.131280][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 176.152604][ T8161] team0: Port device team_slave_0 added [ 176.211125][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.285433][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.340995][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.401787][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.482544][ T25] usb 4-1: config 0 descriptor?? [ 176.533434][ T25] hub 4-1:0.0: USB hub found [ 176.621165][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 176.865851][ T64] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.876792][ T5900] tipc: Node number set to 2130706433 [ 176.912173][ T8224] raw_sendmsg: syz.6.642 forgot to set AF_INET. Fix it! [ 177.347152][ T8161] team0: Port device team_slave_1 added [ 177.501441][ T5857] Bluetooth: hci6: command tx timeout [ 177.634389][ T8216] loop3: detected capacity change from 0 to 8192 [ 177.661023][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 177.802304][ T64] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.894509][ T8216] loop3: p1 < > p2 < p5 > p4 [ 177.961209][ T8216] loop3: p4 size 16776960 extends beyond EOD, truncated [ 178.050395][ T8216] loop3: p5 size 16776960 extends beyond EOD, truncated [ 178.242963][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.272035][ T25] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 178.356975][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 178.364718][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.435134][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 178.568165][ T25] usb 4-1: USB disconnect, device number 7 [ 178.577673][ T8161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.688398][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.701092][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 178.721314][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.741280][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.749681][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.760522][ T8234] input: syz1 as /devices/virtual/input/input12 [ 178.768247][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.800656][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.811336][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.851089][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.054511][ T8161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.581271][ T5848] Bluetooth: hci6: command tx timeout [ 179.741102][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 179.748489][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.914423][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 179.950652][ T8232] loop0: detected capacity change from 0 to 32768 [ 179.968871][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.998343][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.028203][ T8232] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.645 (8232) [ 180.067563][ T25] usb 4-1: Product: syz [ 180.090773][ T25] usb 4-1: Manufacturer: syz [ 180.129038][ T25] usb 4-1: SerialNumber: syz [ 180.146620][ T8232] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.178038][ T8245] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.238563][ T8232] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 180.288095][ T8232] BTRFS info (device loop0): using free-space-tree [ 180.451821][ T8232] BTRFS info (device loop0): rebuilding free space tree [ 180.498039][ T25] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 180.571249][ T25] usb 4-1: USB disconnect, device number 8 [ 180.791005][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 180.861158][ T5848] Bluetooth: hci4: command tx timeout [ 181.017393][ T5835] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.101010][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 181.351119][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 181.392449][ T25] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 181.413056][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.461128][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.523134][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 181.595770][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.677287][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 1024 [ 181.761147][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.820976][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 181.882414][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.951054][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.053187][ T8245] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 182.098592][ T8275] loop0: detected capacity change from 0 to 512 [ 182.149696][ T8275] EXT4-fs: inline encryption not supported [ 182.220974][ T8275] EXT4-fs: Ignoring removed oldalloc option [ 182.330178][ T25] usb 4-1: usb_control_msg returned -32 [ 182.352927][ T8275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 182.383685][ T25] usbtmc 4-1:16.0: can't read capabilities [ 182.441766][ T8275] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.488067][ T25] usb 4-1: USB disconnect, device number 9 [ 182.861061][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.946561][ T5857] Bluetooth: hci4: command tx timeout [ 182.960578][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.978980][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.988844][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.999430][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.007333][ T5857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.016035][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.901120][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 184.941070][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 185.023780][ T5848] Bluetooth: hci4: command tx timeout [ 185.981083][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 187.021068][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 187.101231][ T5848] Bluetooth: hci4: command tx timeout [ 188.061058][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 189.101048][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.141058][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 191.181483][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 192.221093][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.261085][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.771349][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.777698][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.311103][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 195.064020][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 195.085922][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 195.104907][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 195.113395][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 195.131140][ T5844] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 195.139399][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 195.215031][ T5147] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 195.231583][ T5147] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 195.239336][ T5147] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 195.247902][ T5147] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 195.257530][ T5147] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 195.267942][ T5147] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 195.341021][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 195.830752][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 195.841105][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 196.381026][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 197.421062][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.149753][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 198.180236][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 198.198796][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 198.211852][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 198.219444][ T5844] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 198.227334][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 198.461037][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.679518][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 199.501015][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 200.541065][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 201.581033][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 202.621029][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 203.661010][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 204.701009][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 205.741035][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 206.781026][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.821127][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 208.861014][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 209.901028][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 210.941033][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 211.980978][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 213.020998][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 214.060991][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 215.101008][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 216.141045][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 217.181004][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 218.221020][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.261030][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.301031][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 221.341003][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 221.424179][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 222.380994][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 223.421025][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 224.461847][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 225.501006][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 226.540997][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 227.580996][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 228.620989][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 229.661006][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 230.271164][ T5858] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 230.284169][ T5858] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 230.293549][ T5858] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 230.301763][ T5858] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 230.310154][ T5858] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 230.319962][ T5858] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 230.700985][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 231.741000][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 232.791877][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 233.820996][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 234.860983][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.900999][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 236.940979][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 237.304429][ T5856] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 237.313540][ T5856] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 237.321733][ T5856] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 237.330245][ T5856] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 237.338923][ T5856] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 237.348598][ T5856] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 237.981095][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 239.020985][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 240.061008][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.101092][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 242.141038][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 242.793394][ T5854] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 242.803372][ T5854] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 242.811902][ T5854] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 242.820153][ T5854] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 242.830878][ T5854] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 242.842788][ T5854] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 243.180984][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.221022][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.271003][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 246.301046][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 247.340988][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.381000][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.421058][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 250.460993][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 251.500984][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.540991][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.580990][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.631008][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.881560][ T5853] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 254.893355][ T5853] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 254.902971][ T5853] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 254.912481][ T5853] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 254.920189][ T5853] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 254.931109][ T5853] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 255.186307][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.192969][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.418248][ T8313] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 255.428624][ T8313] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 255.438179][ T8313] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 255.446638][ T8313] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 255.454417][ T8313] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 255.461877][ T8313] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 255.661000][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.700992][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 257.741032][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.348832][ T8310] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 258.360659][ T8310] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 258.369831][ T8310] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 258.378136][ T8310] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 258.386809][ T8310] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 258.395059][ T8310] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 258.781025][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.821008][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.860999][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 261.234663][ T64] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.901054][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 262.940998][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.980995][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.021004][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.061009][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 267.101022][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 268.141000][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 269.181021][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 270.220987][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 271.271060][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 272.301054][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 273.341020][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 274.380991][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 275.420995][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 276.460985][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.501006][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.541160][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 279.581011][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 280.620990][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 281.660997][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 282.701142][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 283.740991][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 284.780987][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 285.821007][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 286.860988][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 287.900993][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 288.941136][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 289.980990][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 290.383503][ T8318] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 290.400719][ T8318] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 290.408835][ T8318] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 290.417588][ T8318] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 290.425528][ T8318] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 290.434686][ T8318] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 291.021836][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 292.060998][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 293.100989][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 294.141014][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 295.180989][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 296.221093][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 297.261007][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 297.441048][ T8329] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 297.453085][ T8329] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 297.463709][ T8329] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 297.472854][ T8329] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 297.480531][ T8329] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 297.489751][ T8329] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 298.225398][ T8325] Bluetooth: hci6: command 0x0406 tx timeout [ 298.301091][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 299.341030][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 300.381002][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 301.188654][ T5147] Bluetooth: hci0: command tx timeout [ 301.194755][ T5844] Bluetooth: hci8: command tx timeout [ 301.201507][ T5857] Bluetooth: hci9: command tx timeout [ 301.207689][ T5857] Bluetooth: hci7: command tx timeout [ 301.421000][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 302.460986][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 302.851883][ T5844] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 302.862883][ T5844] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 302.878358][ T5844] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 302.887986][ T5844] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 302.896345][ T5844] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 302.905242][ T5844] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 303.261213][ T5839] Bluetooth: hci0: command tx timeout [ 303.266720][ T5839] Bluetooth: hci8: command tx timeout [ 303.276193][ T5848] Bluetooth: hci9: command tx timeout [ 303.286357][ T5857] Bluetooth: hci7: command tx timeout [ 303.355338][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 303.500988][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 304.541000][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 305.341292][ T5839] Bluetooth: hci8: command tx timeout [ 305.346762][ T5839] Bluetooth: hci9: command tx timeout [ 305.352530][ T5848] Bluetooth: hci0: command tx timeout [ 305.364579][ T5857] Bluetooth: hci7: command tx timeout [ 305.580999][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 306.621007][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 307.421121][ T5857] Bluetooth: hci7: command tx timeout [ 307.426627][ T5857] Bluetooth: hci9: command tx timeout [ 307.435287][ T5839] Bluetooth: hci0: command tx timeout [ 307.440717][ T5839] Bluetooth: hci8: command tx timeout [ 307.661114][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 308.701031][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 309.751039][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 310.781009][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 311.820992][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 312.861004][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 313.900993][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 314.941009][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 314.960769][ T5857] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 314.980500][ T5857] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 314.989481][ T5857] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 315.008749][ T5857] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 315.017358][ T5857] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 315.025527][ T5857] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 315.480582][ T5848] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 315.494323][ T5848] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 315.503011][ T5848] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 315.511653][ T5848] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 315.519314][ T5848] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 315.531120][ T5848] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 315.981065][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 316.625148][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.640908][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.020998][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 318.070994][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 318.435049][ T8325] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 318.454991][ T8325] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 318.465354][ T8325] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 318.473744][ T8325] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 318.484179][ T8325] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 318.491810][ T8325] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 319.101009][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 320.140994][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 321.191018][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 322.220999][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 323.261001][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 323.826048][ T8348] Bluetooth: hci7: command 0x0406 tx timeout [ 323.840920][ T8348] Bluetooth: hci8: command 0x0406 tx timeout [ 323.846962][ T8348] Bluetooth: hci0: command 0x0406 tx timeout [ 324.303395][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 325.341107][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 326.380995][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 327.421003][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 328.460992][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 329.501006][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 330.540988][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 331.581226][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 332.621031][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 333.264516][ T30] INFO: task syz-executor:8279 blocked for more than 143 seconds. [ 333.279629][ T30] Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 333.290307][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.309593][ T30] task:syz-executor state:D stack:24128 pid:8279 tgid:8279 ppid:1 flags:0x00000004 [ 333.338114][ T30] Call Trace: [ 333.343398][ T30] [ 333.346363][ T30] __schedule+0x18af/0x4bd0 [ 333.367291][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.432954][ T30] ? __pfx___schedule+0x10/0x10 [ 333.437894][ T30] ? __pfx_lock_release+0x10/0x10 [ 333.537549][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 333.561005][ T30] ? schedule+0x90/0x320 [ 333.565310][ T30] schedule+0x14b/0x320 [ 333.569500][ T30] schedule_preempt_disabled+0x13/0x30 [ 333.584360][ T30] __mutex_lock+0x6a7/0xd70 [ 333.588936][ T30] ? __mutex_lock+0x52a/0xd70 [ 333.606616][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 333.616911][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 333.624653][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 333.630085][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 333.640284][ T30] ? __lock_acquire+0x1384/0x2050 [ 333.649796][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.659075][ T30] netlink_rcv_skb+0x1e5/0x430 [ 333.664153][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 333.679339][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.685187][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.690537][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.709003][ T30] netlink_unicast+0x7f8/0x990 [ 333.719936][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 333.730041][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.738518][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.749265][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.759146][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.769617][ T30] ? __check_object_size+0x48e/0x900 [ 333.777522][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 333.787020][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.796013][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.811694][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 333.816677][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.833650][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.838977][ T30] __sock_sendmsg+0x223/0x270 [ 333.848324][ T30] __sys_sendto+0x39b/0x4f0 [ 333.856479][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 333.866008][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.876484][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.886265][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.896479][ T30] ? exc_page_fault+0x590/0x8c0 [ 333.905769][ T30] __x64_sys_sendto+0xde/0x100 [ 333.921251][ T30] do_syscall_64+0xf3/0x230 [ 333.925812][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.940646][ T30] RIP: 0033:0x7f8c3c5805ac [ 333.945449][ T30] RSP: 002b:00007fff0a25cd90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 333.962269][ T30] RAX: ffffffffffffffda RBX: 00007f8c3d264620 RCX: 00007f8c3c5805ac [ 333.970273][ T30] RDX: 0000000000000028 RSI: 00007f8c3d264670 RDI: 0000000000000003 [ 333.988744][ T30] RBP: 0000000000000000 R08: 00007fff0a25cde4 R09: 000000000000000c [ 333.999498][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 334.016611][ T30] R13: 0000000000000000 R14: 00007f8c3d264670 R15: 0000000000000000 [ 334.030064][ T30] [ 334.040193][ T30] [ 334.040193][ T30] Showing all locks held in the system: [ 334.056946][ T30] 5 locks held by kworker/0:0/8: [ 334.066064][ T30] 1 lock held by khungtaskd/30: [ 334.076790][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 334.090636][ T30] 6 locks held by kworker/u9:0/53: [ 334.100887][ T30] #0: ffff88807dcf8948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 334.122222][ T30] #1: ffffc90000be7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 334.149154][ T30] #2: ffff88801ef04d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 334.168854][ T30] #3: ffff88801ef04078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 334.180108][ T30] #4: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 334.201900][ T30] #5: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 334.223220][ T30] 6 locks held by kworker/u8:4/64: [ 334.228361][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 334.247256][ T30] #1: ffffc900015e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 334.267827][ T30] #2: ffffffff8fcc68d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 334.280705][ T30] #3: ffff88805fb180e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 334.298629][ T30] #4: ffff88802997a250 (&devlink->lock_key#8){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 334.320614][ T30] #5: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 334.338286][ T30] 3 locks held by kworker/0:2/962: [ 334.343714][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 334.362453][ T30] #1: ffffc90003a77d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 334.385566][ T30] #2: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 334.401167][ T30] 3 locks held by kworker/u8:5/1093: [ 334.406476][ T30] #0: ffff88814d03a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 334.429008][ T30] #1: ffffc90003ed7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 334.451579][ T30] #2: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 334.468242][ T30] 5 locks held by kworker/u9:1/5147: [ 334.475193][ T30] #0: ffff8880273ce948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 334.494189][ T30] #1: ffffc9000fe37d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 334.513523][ T30] #2: ffff8880735bcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 334.530433][ T30] #3: ffff8880735bc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 334.545838][ T30] #4: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 334.574954][ T30] 1 lock held by dhcpcd/5504: [ 334.579669][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 334.596725][ T30] 2 locks held by getty/5588: [ 334.606451][ T30] #0: ffff88803146b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 334.622521][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 334.645489][ T30] 3 locks held by syz-executor/5835: [ 334.650800][ T30] #0: ffff88803430cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 334.670015][ T30] #1: ffff88803430c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 334.683591][ T30] #2: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 334.698674][ T30] 4 locks held by kworker/u9:2/5839: [ 334.704130][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 334.722799][ T30] #0: ffff88803ebbf148 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 334.743628][ T30] #1: ffffc9000343fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 334.760536][ T30] #2: ffff8880626c0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 334.778847][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 334.792919][ T30] 4 locks held by kworker/u9:3/5844: [ 334.798229][ T30] #0: ffff888065c03148 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 334.816949][ T30] #1: ffffc900033ffd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 334.837728][ T30] #2: ffff88803c8a0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 334.855170][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 334.872301][ T30] 3 locks held by syz-executor/5847: [ 334.877609][ T30] #0: ffff888034c68d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 334.894663][ T30] #1: ffff888034c68078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 334.907426][ T30] #2: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 334.922365][ T30] 4 locks held by kworker/u9:4/5848: [ 334.927670][ T30] #0: ffff88806a9ee948 ((wq_completion)hci20#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 334.947303][ T30] #1: ffffc900033efd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 334.972049][ T30] #2: ffff8880508f4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 334.990489][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 335.008717][ T30] 4 locks held by kworker/u9:5/5850: [ 335.014662][ T30] #0: ffff88807e8a7148 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.035990][ T30] #1: ffffc900033cfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.053094][ T30] #2: ffff888032fd0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 335.068006][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 335.092304][ T30] 4 locks held by kworker/u9:6/5853: [ 335.097656][ T30] #0: ffff888042122948 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.115819][ T30] #1: ffffc9000332fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.130176][ T30] #2: ffff888062ad8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 335.148480][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 335.161024][ T30] 4 locks held by kworker/u9:7/5854: [ 335.166343][ T30] #0: ffff88807be32948 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.197426][ T30] #1: ffffc9000331fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.219330][ T30] #2: ffff888067964078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 335.231188][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 335.251069][ T30] 4 locks held by kworker/u9:8/5855: [ 335.257254][ T30] #0: ffff888026d12148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.275443][ T30] #1: ffffc900044c7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.296137][ T30] #2: ffff8880646f8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 335.316369][ T30] #3: ffff8880646f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 335.336577][ T30] 5 locks held by kworker/u9:9/5856: [ 335.345586][ T30] #0: ffff88802ff55948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.366004][ T30] #1: ffffc900044b7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.385783][ T30] #2: ffff88807cd10d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 335.397462][ T30] #3: ffff88807cd10078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 335.418291][ T30] #4: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 335.438094][ T30] 4 locks held by kworker/u9:10/5857: [ 335.447123][ T30] #0: ffff888052837948 ((wq_completion)hci21#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.466548][ T30] #1: ffffc9000330fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.487024][ T30] #2: ffff8880540e4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 335.497339][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 335.515730][ T30] 4 locks held by kworker/u9:11/5858: [ 335.527110][ T30] #0: ffff888049ad4148 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.549180][ T30] #1: ffffc900044a7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.570043][ T30] #2: ffff888021704078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 335.596054][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 335.609000][ T30] 3 locks held by kworker/0:6/5898: [ 335.620011][ T30] 1 lock held by syz.5.562/7910: [ 335.627280][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 335.647803][ T30] 1 lock held by syz-executor/8279: [ 335.657367][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 335.676384][ T30] 1 lock held by syz-executor/8283: [ 335.684607][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 335.699880][ T30] 1 lock held by syz-executor/8286: [ 335.706784][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 335.721057][ T30] 1 lock held by syz-executor/8290: [ 335.726282][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 335.740972][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.761628][ T30] 1 lock held by syz-executor/8293: [ 335.780480][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 335.790408][ T30] 1 lock held by syz-executor/8297: [ 335.805709][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 335.818321][ T30] 1 lock held by syz-executor/8302: [ 335.829625][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 335.840632][ T30] 1 lock held by syz-executor/8307: [ 335.864977][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 335.880309][ T30] 4 locks held by kworker/u9:12/8310: [ 335.888377][ T30] #0: ffff8880447fe948 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.904997][ T30] #1: ffffc9000e897d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.928310][ T30] #2: ffff8880637dc078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 335.939242][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 335.958927][ T30] 1 lock held by syz-executor/8312: [ 335.968482][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 335.988820][ T30] 4 locks held by kworker/u9:13/8313: [ 335.995759][ T30] #0: ffff88807af8f148 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 336.013022][ T30] #1: ffffc9000469fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 336.031269][ T30] #2: ffff88807cd0c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 336.048460][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 336.076558][ T30] 1 lock held by syz-executor/8316: [ 336.089389][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 336.107926][ T30] 4 locks held by kworker/u9:14/8318: [ 336.113658][ T30] #0: ffff888057fda948 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 336.132082][ T30] #1: ffffc900040a7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 336.152418][ T30] #2: ffff8880626cc078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 336.172834][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 336.197169][ T30] 1 lock held by syz-executor/8320: [ 336.206704][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 336.219837][ T30] 5 locks held by kworker/u9:15/8321: [ 336.236772][ T30] #0: ffff88807facf948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 336.250163][ T30] #1: ffffc9000f967d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 336.273364][ T30] #2: ffff88807a230d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 336.289683][ T30] #3: ffff88807a230078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 336.314138][ T30] #4: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 336.327778][ T30] 5 locks held by kworker/u9:16/8325: [ 336.335479][ T30] #0: ffff88806bab4948 ((wq_completion)hci0#3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 336.353075][ T30] #1: ffffc90003bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 336.374501][ T30] #2: ffff888024478d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 336.387433][ T30] #3: ffff888024478078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 336.405711][ T30] #4: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 336.427838][ T30] 1 lock held by syz-executor/8327: [ 336.436030][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 336.450901][ T30] 4 locks held by kworker/u9:17/8329: [ 336.458292][ T30] #0: ffff8880666cb148 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 336.480966][ T30] #1: ffffc90003bc7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 336.501969][ T30] #2: ffff88805f804078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 336.517896][ T30] #3: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 336.533623][ T30] 1 lock held by syz-executor/8332: [ 336.538848][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 336.558573][ T30] 1 lock held by syz-executor/8336: [ 336.564355][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 336.581672][ T30] 1 lock held by syz-executor/8341: [ 336.589828][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 336.608109][ T30] 1 lock held by syz-executor/8344: [ 336.613780][ T30] #0: ffffffff8fcd33c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 336.639954][ T30] 5 locks held by kworker/u9:18/8346: [ 336.649576][ T30] #0: ffff888031682148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 336.669042][ T30] #1: ffffc90000ab7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 336.693260][ T30] #2: ffff8880541e8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 336.711208][ T30] #3: ffff8880541e8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 336.728405][ T30] #4: ffffffff8fe3fd28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 336.738623][ T30] [ 336.749359][ T30] ============================================= [ 336.749359][ T30] [ 336.769253][ T30] NMI backtrace for cpu 1 [ 336.773611][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 336.784139][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 336.794265][ T30] Call Trace: [ 336.797567][ T30] [ 336.800517][ T30] dump_stack_lvl+0x241/0x360 [ 336.805241][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.810481][ T30] ? __pfx__printk+0x10/0x10 [ 336.815124][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 336.820113][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 336.825610][ T30] ? _printk+0xd5/0x120 [ 336.829796][ T30] ? __pfx__printk+0x10/0x10 [ 336.834417][ T30] ? __wake_up_klogd+0xcc/0x110 [ 336.839311][ T30] ? __pfx__printk+0x10/0x10 [ 336.843933][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.849609][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 336.854683][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 336.860703][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 336.866727][ T30] watchdog+0xff4/0x1040 [ 336.871037][ T30] ? watchdog+0x1ea/0x1040 [ 336.875520][ T30] ? __pfx_watchdog+0x10/0x10 [ 336.880237][ T30] kthread+0x2f2/0x390 [ 336.884332][ T30] ? __pfx_watchdog+0x10/0x10 [ 336.889046][ T30] ? __pfx_kthread+0x10/0x10 [ 336.893672][ T30] ret_from_fork+0x4d/0x80 [ 336.898128][ T30] ? __pfx_kthread+0x10/0x10 [ 336.902742][ T30] ret_from_fork_asm+0x1a/0x30 [ 336.907563][ T30] [ 336.910901][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 336.919011][ T30] Sending NMI from CPU 1 to CPUs 0: [ 336.924916][ C0] NMI backtrace for cpu 0 [ 336.924932][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 336.924959][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 336.924975][ C0] Workqueue: wg-crypt-wg0 wg_packet_decrypt_worker [ 336.925017][ C0] RIP: 0010:dev_hard_start_xmit+0x270/0x7e0 [ 336.925050][ C0] Code: 33 02 65 88 1d fb d1 70 76 48 83 c5 20 48 89 e8 48 c1 e8 03 4d 89 ee 42 80 3c 28 00 74 08 48 89 ef e8 24 68 6b f8 4c 8b 5d 00 <4c> 89 e7 48 8b 34 24 e8 c4 ba 3d 02 41 89 c5 31 ff 89 c6 e8 b8 ad [ 336.925071][ C0] RSP: 0018:ffffc90000006b50 EFLAGS: 00000246 [ 336.925091][ C0] RAX: 1ffffffff1930ffc RBX: 0000000000000000 RCX: ffff88801cac5a00 [ 336.925109][ C0] RDX: 0000000000000100 RSI: ffffffff8d0ddae0 RDI: ffffffff8c610420 [ 336.925127][ C0] RBP: ffffffff8c987fe0 R08: ffffffff8993300b R09: 1ffffffff203a095 [ 336.925144][ C0] R10: dffffc0000000000 R11: ffffffff86746020 R12: ffff888047add000 [ 336.925163][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 336.925184][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 336.925204][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.925221][ C0] CR2: 00007ff0cb5ed460 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 336.925240][ C0] Call Trace: [ 336.925249][ C0] [ 336.925258][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 336.925293][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 336.925333][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 336.925367][ C0] ? nmi_handle+0x2a/0x5a0 [ 336.925402][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 336.925436][ C0] ? nmi_handle+0x151/0x5a0 [ 336.925461][ C0] ? nmi_handle+0x2a/0x5a0 [ 336.925486][ C0] ? dev_hard_start_xmit+0x270/0x7e0 [ 336.925516][ C0] ? default_do_nmi+0x63/0x160 [ 336.925552][ C0] ? exc_nmi+0x123/0x1f0 [ 336.925586][ C0] ? end_repeat_nmi+0xf/0x53 [ 336.925616][ C0] ? __pfx_loopback_xmit+0x10/0x10 [ 336.925650][ C0] ? dev_hard_start_xmit+0x1eb/0x7e0 [ 336.925681][ C0] ? dev_hard_start_xmit+0x270/0x7e0 [ 336.925710][ C0] ? dev_hard_start_xmit+0x270/0x7e0 [ 336.925740][ C0] ? dev_hard_start_xmit+0x270/0x7e0 [ 336.925770][ C0] [ 336.925778][ C0] [ 336.925796][ C0] __dev_queue_xmit+0x1b11/0x3ed0 [ 336.925835][ C0] ? __dev_queue_xmit+0x2da/0x3ed0 [ 336.925871][ C0] ? __lock_acquire+0x1384/0x2050 [ 336.925911][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 336.925947][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.925981][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.926014][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.926044][ C0] ? mark_lock+0x9a/0x360 [ 336.926069][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.926098][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.926140][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.926171][ C0] ? ip_finish_output2+0xa14/0x1390 [ 336.926200][ C0] ? ip_finish_output2+0x45f/0x1390 [ 336.926225][ C0] ip_finish_output2+0xd41/0x1390 [ 336.926252][ C0] ? ip_finish_output2+0x45f/0x1390 [ 336.926283][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 336.926310][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 336.926334][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.926364][ C0] ? __ip_finish_output+0x349/0x400 [ 336.926392][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 336.926441][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 336.926478][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.926511][ C0] ? synproxy_pernet+0x45/0x270 [ 336.926535][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.926567][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 336.926596][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 336.926623][ C0] ? nf_ip_checksum+0x13a/0x500 [ 336.926651][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 336.926679][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 336.926706][ C0] ? mark_lock+0x9a/0x360 [ 336.926730][ C0] ? __pfx_validate_chain+0x10/0x10 [ 336.926756][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.926787][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.926821][ C0] nft_do_chain+0x4af/0x1da0 [ 336.926861][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 336.926885][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 336.926922][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.926964][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 336.926996][ C0] nft_do_chain_inet+0x418/0x6b0 [ 336.927023][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 336.927047][ C0] ? ipt_do_table+0x312/0x1860 [ 336.927082][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 336.927105][ C0] nf_hook_slow+0xc5/0x220 [ 336.927142][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 336.927175][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 336.927207][ C0] NF_HOOK+0x29e/0x450 [ 336.927236][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.927269][ C0] ? NF_HOOK+0x9a/0x450 [ 336.927298][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 336.927331][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 336.927366][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.927396][ C0] ? ip_rcv_finish+0x406/0x560 [ 336.927428][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 336.927460][ C0] NF_HOOK+0x3a6/0x450 [ 336.927488][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.927518][ C0] ? __lock_acquire+0x1384/0x2050 [ 336.927557][ C0] ? NF_HOOK+0x9a/0x450 [ 336.927586][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 336.927616][ C0] ? ip_rcv_core+0x801/0xd10 [ 336.927648][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 336.927684][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 336.927716][ C0] __netif_receive_skb+0x2bf/0x650 [ 336.927752][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 336.927789][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 336.927821][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.927863][ C0] ? __pfx_lock_release+0x10/0x10 [ 336.927900][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 336.927932][ C0] process_backlog+0x662/0x15b0 [ 336.927971][ C0] ? process_backlog+0x33b/0x15b0 [ 336.928012][ C0] ? __pfx_process_backlog+0x10/0x10 [ 336.928048][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.928087][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.928127][ C0] __napi_poll+0xcd/0x490 [ 336.928162][ C0] net_rx_action+0x89b/0x1240 [ 336.928212][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 336.928250][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.928280][ C0] ? sched_clock+0x4a/0x70 [ 336.928322][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.928366][ C0] handle_softirqs+0x2c7/0x980 [ 336.928402][ C0] ? do_softirq+0x11b/0x1e0 [ 336.928435][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 336.928470][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.928503][ C0] do_softirq+0x11b/0x1e0 [ 336.928533][ C0] [ 336.928541][ C0] [ 336.928550][ C0] ? __pfx_do_softirq+0x10/0x10 [ 336.928582][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 336.928619][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 336.928656][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.928686][ C0] ? rcu_is_watching+0x15/0xb0 [ 336.928714][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 336.928748][ C0] ? wg_packet_decrypt_worker+0xcde/0xd80 [ 336.928785][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 336.928817][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.928853][ C0] ? wg_packet_decrypt_worker+0x8b3/0xd80 [ 336.928894][ C0] wg_packet_decrypt_worker+0xcde/0xd80 [ 336.928942][ C0] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 336.929027][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.929057][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.929095][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.929139][ C0] ? process_scheduled_works+0x976/0x1850 [ 336.929175][ C0] process_scheduled_works+0xa65/0x1850 [ 336.929226][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.929265][ C0] ? assign_work+0x364/0x3d0 [ 336.929301][ C0] worker_thread+0x870/0xd30 [ 336.929344][ C0] ? __kthread_parkme+0x169/0x1d0 [ 336.929382][ C0] ? __pfx_worker_thread+0x10/0x10 [ 336.929417][ C0] kthread+0x2f2/0x390 [ 336.929438][ C0] ? __pfx_worker_thread+0x10/0x10 [ 336.929473][ C0] ? __pfx_kthread+0x10/0x10 [ 336.929496][ C0] ret_from_fork+0x4d/0x80 [ 336.929531][ C0] ? __pfx_kthread+0x10/0x10 [ 336.929554][ C0] ret_from_fork_asm+0x1a/0x30 [ 336.929598][ C0] [ 337.859928][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 337.866826][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 337.877378][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.887799][ T30] Call Trace: [ 337.891105][ T30] [ 337.894051][ T30] dump_stack_lvl+0x241/0x360 [ 337.898771][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.904008][ T30] ? __pfx__printk+0x10/0x10 [ 337.908620][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.914647][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.920314][ T30] ? vscnprintf+0x5d/0x90 [ 337.924694][ T30] panic+0x349/0x880 [ 337.928615][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.934298][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 337.940489][ T30] ? __pfx_panic+0x10/0x10 [ 337.944929][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 337.950349][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.956026][ T30] ? __irq_work_queue_local+0x137/0x410 [ 337.961614][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.967276][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 337.972674][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 337.978864][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 337.985146][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.990808][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 337.997009][ T30] watchdog+0x1033/0x1040 [ 338.001374][ T30] ? watchdog+0x1ea/0x1040 [ 338.005836][ T30] ? __pfx_watchdog+0x10/0x10 [ 338.010547][ T30] kthread+0x2f2/0x390 [ 338.014639][ T30] ? __pfx_watchdog+0x10/0x10 [ 338.019348][ T30] ? __pfx_kthread+0x10/0x10 [ 338.023968][ T30] ret_from_fork+0x4d/0x80 [ 338.028419][ T30] ? __pfx_kthread+0x10/0x10 [ 338.033035][ T30] ret_from_fork_asm+0x1a/0x30 [ 338.037853][ T30] [ 338.041135][ T30] Kernel Offset: disabled [ 338.045458][ T30] Rebooting in 86400 seconds..