last executing test programs: 2m2.196024657s ago: executing program 0 (id=132): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c2394f90435fc600400110a0a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m1.20453425s ago: executing program 0 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, 0x0, 0x6a) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x94}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x800, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) close(r4) 2m0.863867831s ago: executing program 0 (id=136): inotify_init() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x3ff]}, 0x45c) r1 = dup(r0) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) 1m59.640489787s ago: executing program 0 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x810801, &(0x7f0000000400)=ANY=[], 0x6, 0x1d6, &(0x7f0000000040)="$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") 1m58.151772693s ago: executing program 0 (id=139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@lx}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a043500140600fe8000000000000000000000000000bb0001"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) 1m57.803030423s ago: executing program 0 (id=140): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 1m5.832783989s ago: executing program 1 (id=215): socket$inet(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x840000000002, 0x3, 0xff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 58.421553049s ago: executing program 4 (id=220): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 58.394131698s ago: executing program 1 (id=221): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x4, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 57.150475872s ago: executing program 1 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 56.775182829s ago: executing program 4 (id=223): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$kcm(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1e, 0x5, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000)=r2, 0x4) 56.342537843s ago: executing program 4 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r5}, 0x69) 56.246859014s ago: executing program 1 (id=225): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 55.897359516s ago: executing program 4 (id=226): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000880)='./bus\x00') mkdir(&(0x7f0000000280)='./file1\x00', 0x1b) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x24) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 55.304722215s ago: executing program 4 (id=227): openat(0xffffffffffffff9c, 0x0, 0x98101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x339f7000) shmctl$IPC_STAT(0x0, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000000200)={[{@file_umask={'file_umask', 0x3d, 0x4}}, {@type={'type', 0x3d, "7763e6ef"}}, {@file_umask={'file_umask', 0x3d, 0x400}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}]}, 0x1, 0x300, &(0x7f0000000780)="$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") 54.778784695s ago: executing program 4 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000400)}], 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)) 52.629543498s ago: executing program 1 (id=230): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1004000, &(0x7f0000000280)=ANY=[@ANYBLOB="747970653dd88d17102c6e6c733d61736369692c00b65c5e80ee881a8017a99080db5f384bdecc38aad57f2265deb9bc09ceaa37a446dd9779c499df84c71ac5709884f5a46a6157a859efa0011b98ed9e0084e7f30840308a546dfc131f58f11e2885d3d93d1ea670d769ec2f0aa0c9e9bc2dce36eb80f93e9c66e51cd63047e63897ad645ff9e1c43c323948225427a038840483468e20afe97ee11df867f724292017e27da8ee18b36e12ec848a02f157f0c97084870848c3f5101666aeeb41"], 0x4, 0x5ce, &(0x7f00000006c0)="$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") open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIBMAP(r4, 0x5393, &(0x7f0000000080)) 52.045222299s ago: executing program 1 (id=231): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) 19.524041719s ago: executing program 3 (id=272): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000300)=0x200000000) 19.178572059s ago: executing program 3 (id=273): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) 10.999872413s ago: executing program 5 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 9.959565965s ago: executing program 5 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') read$FUSE(r3, &(0x7f00000039c0)={0x2020}, 0x205d) 9.499400072s ago: executing program 3 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7809], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 8.68336877s ago: executing program 5 (id=288): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r3, &(0x7f0000001540)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x3b0d, 0x0, 0x0) 5.214897283s ago: executing program 5 (id=289): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x84) mkdir(0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x0) 5.15394731s ago: executing program 2 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x38011, r2, 0xdfb8c000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) quotactl$Q_GETQUOTA(0x0, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x125f, 0x0) 4.986270999s ago: executing program 3 (id=291): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@data_ordered}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc08c5334, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) tkill(r0, 0x7) 4.283290751s ago: executing program 2 (id=292): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000280)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000004c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/58}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) 4.278513896s ago: executing program 5 (id=293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x54}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffe3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) timer_create(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) process_madvise(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000600)="230f21d6b7d12b3b810e4452fc3033eb3013b578dc8b2d60bf25552cf7532fae27ed84a0b0b2d303487ce5fc2ac919cb87fad3aac999cb849fc3b9322f15883ec0b637acba9506ac4237e2c9d261ed4f303eff4c2031e5f7ab11d7ac397434fc11e06c876c3847d7fc5d2ec47582fcaa55fff14cd95ec9ecb45f167b9bf573d6db34d90d88", 0x85}, {&(0x7f0000000180)="3c529783427cbb36678441a1d0865222a1cc7c80d5fe7006e0d20bf6c145848f1a4991bdd60d844cc35aedf9fd016f948d22a539680f24fc1a57b5", 0x3b}, {&(0x7f00000006c0)}], 0x3, 0x14, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f00000000c0)=ANY=[], 0xfe, 0x4fb, &(0x7f0000000b00)="$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") r3 = open(&(0x7f0000000040)='./file2\x00', 0x64842, 0x0) sync() pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xc700}], 0x1, 0x7000, 0x0, 0x0) 3.810589143s ago: executing program 2 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001180)={[{@uid}, {@nostrict}, {@anchor={'anchor', 0x3d, 0x4}}, {@gid_forget}, {@longad}, {}, {@undelete}, {@mode={'mode', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0x7}}]}, 0x1, 0xc52, &(0x7f0000001a00)="$eJzs3U9sHNd9B/DfGy3FpdzWTOwqThoHm7ZIZcVy9S+mYhXuqqbZFpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIGMzsW3FJkQktiiIlfz629J2deW/mvZn1DC3ozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr10+kzaZsORA2gMAPBQXBn70umz2z3/AYDH1tWd/v8fAAAAAAAAAAAAAAA4LFIU8VSkmLuyliaqzx31y+2+23fGh0e2rzaQqppHqvLlr/qZs+fOf+HFoQvdvNye+Tn1H7RPxetjVy81Xpm9NTc/tbAwNdkYn2lfn52c2vUe9lp/q5PVCWjceuP25I0bC42zL5zbtPnO4Af9TxwfvDj03Klnu2XHh0dGxjaK1HvL1+67IR07jfA4GkWcihTPf/tHqRURRez9XNQf7rXfaqDqxMmqE+PDI1VHptutmcVy42j3RBQRjZ5Kze452v5aRK3vofZhZ82IpbL5ZYNPlt0bm2vNt65NTzVGW/OL7cX27Mxo6rS27E8jiriQIpYjYrX/3t31RRG1SPHNJ9fStfzWj+o8fL4aGLxzO4p97OMulO1s9EUsF4/ANTvE+qOI1yLFj989Edfzfaa613wu4rUyvxvxdpkvR6Tyi3E+4v1tvkc8mmpRxF+U1//iWpqs7gfd+8rlLzf+cObGbE/Z7n3lQz4f7rlTHNDzYWBLPhyH/N5UjyJa1R1/Ld3/DzsAAAAAAAAAAAAAAAAAPGgDUcQnI8Wr//7H1bjiqMalP3lx6PcHf7l3zPgzv2A/ZdkXImKp2N2Y3KN5YOBoGk3pgMcSf5TVo4g/yeP/vn7QjQEAAAAAAAAAAAAAAAAAAPhIK+KHkeKl906k5eidU7w9c7NxtXVtujMrbHfu3+6c6evr6+uN1MlmzomcSzmXc67kXM0ZRa7f39lRM3+eyLmUcznnSs7VnHEk18/ZzDmRcynncs6VnKs5o5br52zmnMi5lHM550rO1ZxxSObuBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nBRRxE8jxTe+upYiRUQzYiI6udJ/0K0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEr9qYjvRIrGHzTvrqtFRKr+7ThR/nY+mkfL/Hg0h8p8OZqXcraqrDW/fgDtZ2/6UhE/iBT99XfuXvB8/fs6n+5+DeLtr0UM5OVP1Tp5pLtx8IP+J44/eXFo5DPP7LSctmvAycvtmdt3GuPDIyNjPatr+egf71k3mI9bPJiuExELb771Rmt6emr+fhaOVgvlV+C+qj9yC6n2UemphWohaoeiGQfT903qB3WDYl+Vz//3I8Vvv/cf3Qd+5/lfj1/qfLr7hI+f/OnGTwMvbd3RLp//ta318vO/fKZv9/x/qmfdS/mnkb5aRH3x1lzf8Yj6wptvnWrfat2cujk1c/706S8ODX3x3Om+oxH1G+3pqZ6lB3K6AAAAAAAAAAAAAAAAAB6eVMTvRorWD9ZSIyLuVOO1Bi8OPXfq2SNxpBpvtWnc9utjVy81Xpm9NTc/tbAwNdkYn2lfn52c2u3h6tVwr/HhkX3pzC80sM/tH6i/Mjv35nz75h8tbrv9WP3StYXF+db17TfHQBQRzd41J6sGjw+PVI2ebrdmqqqj2w6m//D6UhH/GSmun2+kz+Z1efz/1hH+1fj/7mGXtu7oAY7//8yxjfF/H+spWh4zpSJ+Eil+6y+fic9W7TwW95yzXO5vI8XJC5/O5eJoWa7bhs57BTojA8uy/xsp/vGnm8t2x0M+tVH2zIc6uY+A8vo/GSm+8+ffil/P6za//2H7639s64726f0PT/esO7bpfQV77jr5+p+KFC8/9U78RrXm/3/u+z+679440Sm88X6Ofbr+v9qzbjAf9zcfVOcBAAAAAAAAAAAeYX2piL+LFN8bqaUX87rd/P2/ya072qe///WJnnWTe52vaJcLez6pAAAAAHBI9KUifhgpbi6+c3cM9ebx3z3jP39nY/zncNqytfpzvl+p3hvwIP/8r9dgPu7E3rsNAAAAAAAAAAAAAAAAAAAAh0pKRbyY51OfqMbzT+44n/pKpHj1v5/P5dLxslx3HvjB6vf6ldmZU5emp2frsdi6Nj3VGJtrXZ8q6z4dKdb+5tO5blHNr96db74zx/vGXOzzkWLk77tlO3Oxd+cmf3qj7Jmy7McixX/9w+ayeWrqPHd0VfZsWfavI8VX/nn7ssc3yp4ry34rUnz/K41u2WNl2e77UT+xUfaF67PFPlwVAAAAAAAAAAAAAAAAAAAAPmr6UhF/Fin+59by3bH8ef7/vp6Plbe/1jPf/xZ3qnn+B6v5/3davp/5/6v3CiztdFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg8pSjirUgxd2UtrfSXnzvql9tF3BkfHtm+2kCqah6pype/6mfOnjv/hReHLnTzcnvm9s71H7RPxutjVy81Xpm9NTc/tbAwNdkYn2lfn52c2vUe9lp/q5PVCWjceuP25I0bC42zL5zbtPnO4Af9TxwfvDj03Klnu2XHh0dGxnrK1Pru++j3SDusPxpF/FWkeP7bP0rf648oYu/nov5wr/1WA1UnTladGB8eqToy3W7NLJYbR7snooho9FRqds/RQ7gWe9KMWCqbXzb4ZNm9sbnWfOva9FRjtDW/2F5sz86Mpk5ry/40oogLKWI5Ilb7791dXxTxRqT45pNr6V/6I450z8Pnr4x96fTZndtR7GMfd6FsZ6MvYrnY+ZodPcD2PSr6o4h/ihQ/fvdE/Gt/RC06v+JzEa+V+d2It6NzvVP5xTgf8f423yMeTbUo4v/K639xLb3bX94PuveVy19OSxGzPWW795VH/vnwMB3y50k9ivh+dcdfS//mv2sAAAAAAAAAAAAAAACAQ6SIX4sUL713IlXjg++OKW7P3GxcbV2b7gzr6479646ZXl9fX2+kTjZzTuRcyrmccyXnas4ocv2czTLr6+sT+fNSzuWcKzlXc8aRXD9nM+dEzqWcyzlXcq7mjFqun7OZcyLnUs7lnCs5V3PGIRm7BwAAAAAAAAAAAAAAAAAAPF6K6p8U3/jqWlrv78wvPRGdXDEf6GPvZwEAAP//0Pr2Kw==") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 3.733500143s ago: executing program 3 (id=295): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x4f77}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.378343885s ago: executing program 2 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x0, &(0x7f0000000000)={0xb, 0x0, 0x6}) 2.307153889s ago: executing program 5 (id=297): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000c80)={{0x12, 0x1, 0x0, 0xa1, 0x3d, 0xe3, 0x8, 0x2040, 0x2950, 0x85f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x21, 0x0, 0x0, 0xd5, 0x53, 0xe5}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0x38, 0xb5}}]}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) sendmsg$key(r1, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(0x0, r3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1.205080898s ago: executing program 2 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 76.60877ms ago: executing program 2 (id=299): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 0s ago: executing program 3 (id=300): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4bb, &(0x7f0000000280)="$eJzs3MtvG8UfAPDvbh59N2l//QF9QA0FEVFImrRADxwAgdQLEhIcyjGkoSpNW9QEiVYVDQiVI+IvAI5ISJy4cAIJIeAE4gp3hFShXlo4IKO1dxO7sR3HeRjqz0eyM7MPz3x3d9azO1kH0LNK2VsSsT0ifomIoWq2foFS9c+tG1em/rxxZSqJcvmlP5LKcjdvXJkqFi3W25ZnRtKI9L0k9jcod/bS5bOTMzPTF/P82Ny5N8ZmL11+7My5ydPTp6fPTxw/fuzo+JNPTDzeVhxXl5mfxXVz39sXDuw98cqHL0yV49XvP8vquz2fXxtH1XBb5bZSilKUc4tTByvvD6360/9ddtSkk/4uVoQV6YuIbHcNVNr/UPTF4s4biuffXch806UKAusm+27atWRqX/43Xfj+Au5EiTYOPar4xs+uf4vXRvY/uu36M9n7dCX+W/mrOqc/0uxadrh6xd7XZP27Wn98eWiZ8rdHxMn5vz7KXtHwPgQAwNr6Kuv/PNqo/5fW9W125mMowxFxOCJ2R8T/ImJPRPw/7wfdHRH3rLD80m35pf2fn7Z0FFibsv7fU/nYVn3/L82XSBZyOyrxDySvnZmZPpJvk5EY2JTlx1uU8fVzP3/QbF6ppv+XvbLyi75gXo/f+zfVr3Nqcm5yFSHXuf5OxL7+RvEnCyMB2RbYGxH7Ovj8bJudeeTTA1l657al85ePv4U1GGcqfxLxcHX/z8dt8ReSaknNxifHNsfM9JGx4qhY6ocfr71Ymx+oSdfFv7m9mDZ3GmwD2f7f2vD4z+MvmkExXju78jKu/fp+02uapfs/iZPztUvkx3/NWSA7/geTlyvpwXzaW5NzcxfHIwbzCXXTJxbXLfLF8ln8I4cat//dEX9/nK+3PyKyg/jeiLgvIg7mdb8/Ih6IiEMt4v/u2Qdfb72FOjz+10AW/6lW+z9iOKkdr+8g0Xf22y+bld/e+e9YJTWST2nn/NduBVez7QAAAOC/Iq2MQSfpaJGuuTm1J7amMxdm5w6X4s3zp6pj1cMxkBZ3uoZq7oeO5/eGi/zEbfmjEbGr8p9GWyr50akLMzu6GThQeVanrv1Hmo6OVuf91uyfXoA7x4rG0WqfDvz8i7WvDLChPK8JvUv7h96l/UPv0v6hdzVq/1cjbnWhKsAG8/0PvUv7h96l/UPv0v6hJy19JL74oYVOnvRfTOw+sarV1z1RHlqXT55f+Vp96xRp1P5oR9NEEhGdFRFp62UG2yi9a4l02WWeXm6zDKzqNzGyxME8sSki2l3r6oZt1eIMkSRdOzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsgX8CAAD//zMG3Y4=") socket(0x0, 0x0, 0x0) r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000003, &(0x7f0000000040), 0x41, 0x4d1, &(0x7f0000001440)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x830000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000032000000", 0x30) kernel console output (not intermixed with test programs): g): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.762330][ T5710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.808001][ T5710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.036876][ T5710] team0: Port device team_slave_0 added [ 117.238320][ T5690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.254566][ T5690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.281299][ T5690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.381395][ T5248] Bluetooth: hci5: command tx timeout [ 118.418374][ T3004] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.503400][ T5710] team0: Port device team_slave_1 added [ 118.573321][ T5690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.600349][ T5690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.678249][ T5690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.794679][ T5295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.910861][ T3004] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.972487][ T5295] usb 5-1: Using ep0 maxpacket: 8 [ 119.014426][ T5295] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.030406][ T5295] usb 5-1: config 179 has no interface number 0 [ 119.060086][ T5295] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 119.076917][ T5295] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 119.156650][ T5295] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.186280][ T5295] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 119.209830][ T5295] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.231821][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.239866][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.253426][ T5295] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.280042][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.286436][ T5817] bridge_slave_1: left allmulticast mode [ 119.308783][ T5808] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.321968][ T5817] bridge_slave_1: left promiscuous mode [ 119.355644][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.417972][ T5817] bridge_slave_0: left allmulticast mode [ 119.426939][ T5817] bridge_slave_0: left promiscuous mode [ 119.432858][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.572944][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.587709][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.628580][ T5710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.689407][ T8] usb 5-1: USB disconnect, device number 3 [ 119.690279][ T5690] hsr_slave_0: entered promiscuous mode [ 119.695406][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 119.709327][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 119.735878][ T5690] hsr_slave_1: entered promiscuous mode [ 119.815513][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.845256][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.873292][ T5710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.915147][ T5494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.108428][ T5710] hsr_slave_0: entered promiscuous mode [ 120.130648][ T5710] hsr_slave_1: entered promiscuous mode [ 120.143488][ T5710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.153155][ T5710] Cannot create hsr debugfs directory [ 120.420820][ T3004] bridge_slave_1: left allmulticast mode [ 120.434012][ T3004] bridge_slave_1: left promiscuous mode [ 120.446258][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.454728][ T5248] Bluetooth: hci5: command tx timeout [ 120.500011][ T3004] bridge_slave_0: left allmulticast mode [ 120.513010][ T3004] bridge_slave_0: left promiscuous mode [ 120.521707][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.547994][ T3004] bridge_slave_1: left allmulticast mode [ 120.563936][ T3004] bridge_slave_1: left promiscuous mode [ 120.570820][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.635049][ T3004] bridge_slave_0: left allmulticast mode [ 120.640816][ T3004] bridge_slave_0: left promiscuous mode [ 120.665667][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.604136][ T5840] loop4: detected capacity change from 0 to 16 [ 121.634669][ T5840] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.138916][ T3004] bridge0: left promiscuous mode [ 122.535124][ T5248] Bluetooth: hci5: command tx timeout [ 123.135964][ T3004] team0: Port device vlan2 removed [ 123.321704][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.358155][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.385126][ T3004] bond0 (unregistering): Released all slaves [ 123.631581][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.686037][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.722066][ T3004] bond0 (unregistering): Released all slaves [ 123.925905][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.024839][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 124.100234][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.133377][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.154643][ T8] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 124.174735][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.212443][ T8] usb 5-1: config 0 descriptor?? [ 124.339981][ T5494] veth0_vlan: entered promiscuous mode [ 124.615322][ T5248] Bluetooth: hci5: command tx timeout [ 124.645874][ T8] hid (null): bogus close delimiter [ 124.726247][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.743706][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.764646][ T5790] bridge_slave_0: entered allmulticast mode [ 124.771870][ T5790] bridge_slave_0: entered promiscuous mode [ 124.840017][ T5494] veth1_vlan: entered promiscuous mode [ 124.854655][ T8] usb 5-1: string descriptor 0 read error: -22 [ 124.999124][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.017248][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.039042][ T5790] bridge_slave_1: entered allmulticast mode [ 125.073697][ T8] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input8 [ 125.096205][ T5790] bridge_slave_1: entered promiscuous mode [ 125.156609][ T8] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 125.324243][ T1117] usb 5-1: USB disconnect, device number 4 [ 125.473343][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.487443][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.520865][ T3004] hsr_slave_0: left promiscuous mode [ 125.534265][ T3004] hsr_slave_1: left promiscuous mode [ 125.542779][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.552172][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.561057][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.572762][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.587676][ T3004] hsr_slave_0: left promiscuous mode [ 125.603125][ T3004] hsr_slave_1: left promiscuous mode [ 125.609592][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.620026][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.632502][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.640632][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.685736][ T3004] veth1_macvtap: left promiscuous mode [ 125.691407][ T3004] veth0_macvtap: left promiscuous mode [ 125.697774][ T3004] veth1_vlan: left promiscuous mode [ 125.703347][ T3004] veth0_vlan: left promiscuous mode [ 125.711193][ T3004] veth1_macvtap: left promiscuous mode [ 125.716866][ T3004] veth0_macvtap: left promiscuous mode [ 125.722716][ T3004] veth1_vlan: left promiscuous mode [ 125.729054][ T3004] veth0_vlan: left promiscuous mode [ 126.303748][ T5868] loop4: detected capacity change from 0 to 8 [ 126.983478][ T5870] loop4: detected capacity change from 0 to 1024 [ 127.191834][ T5870] hfsplus: can't free extent [ 127.313698][ T62] hfsplus: b-tree write err: -5, ino 4 [ 127.443803][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 127.526828][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 130.410237][ T5247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 130.426532][ T5247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 130.434310][ T5247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 130.445612][ T5247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.498779][ T5247] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 130.515744][ T5247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 130.548632][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 130.612191][ T5882] loop4: detected capacity change from 0 to 32768 [ 130.619776][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 130.742099][ T5882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.120 (5882) [ 130.842413][ T5882] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.886984][ T5882] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 130.904967][ T5882] BTRFS info (device loop4): using free-space-tree [ 131.501436][ T5232] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.627864][ T5790] team0: Port device team_slave_0 added [ 131.727755][ T5790] team0: Port device team_slave_1 added [ 131.942021][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.957613][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.007260][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.065754][ T5690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.116413][ T5904] loop4: detected capacity change from 0 to 2048 [ 132.118563][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.136445][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.169294][ T5904] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 132.174158][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.182076][ T5904] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 132.223719][ T5690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.231205][ T5904] UDF-fs: Scanning with blocksize 512 failed [ 132.247718][ T5904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.265465][ T5494] veth0_macvtap: entered promiscuous mode [ 132.307084][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.335779][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.370887][ T5690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.401872][ T5690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.428505][ T5494] veth1_macvtap: entered promiscuous mode [ 132.487089][ T5790] hsr_slave_0: entered promiscuous mode [ 132.496640][ T5790] hsr_slave_1: entered promiscuous mode [ 132.511641][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.523981][ T5790] Cannot create hsr debugfs directory [ 132.614801][ T5247] Bluetooth: hci7: command tx timeout [ 132.767019][ T5906] loop4: detected capacity change from 0 to 128 [ 132.810409][ T5494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.822196][ T5494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.832385][ T5494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.847231][ T5494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.858873][ T5494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.865536][ T5906] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 132.869890][ T5494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.891698][ T5494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.943489][ T5906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.969940][ T5494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.995695][ T5494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.072256][ T5494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.094858][ T5494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.114854][ T5494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.137308][ T5494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.175822][ T5494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.313911][ T5494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.342736][ T5494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.386246][ T5494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.414016][ T5494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.499430][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 134.263809][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.423752][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.534882][ T5883] bridge_slave_0: entered allmulticast mode [ 134.714326][ T5247] Bluetooth: hci7: command tx timeout [ 134.724689][ T5883] bridge_slave_0: entered promiscuous mode [ 134.791121][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.804788][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.822368][ T5883] bridge_slave_1: entered allmulticast mode [ 134.830335][ T5883] bridge_slave_1: entered promiscuous mode [ 135.055544][ T5690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.863555][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.036101][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.069312][ T5690] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.182591][ T5790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.381008][ T5790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.410960][ T5710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.453314][ T5883] team0: Port device team_slave_0 added [ 136.485841][ T5710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.493954][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.806293][ T5247] Bluetooth: hci7: command tx timeout [ 137.320196][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.401408][ T5790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.482906][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.490090][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.529563][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.536721][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.708895][ T5883] team0: Port device team_slave_1 added [ 137.813684][ T5710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.841749][ T5710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.963165][ T5790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.025809][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.033647][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.107838][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.142607][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.172878][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.201607][ T5690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.212884][ T5690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.387476][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.395110][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.523295][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.806856][ T5957] block device autoloading is deprecated and will be removed. [ 138.854656][ T5247] Bluetooth: hci7: command tx timeout [ 139.066561][ T5957] syz.4.126: attempt to access beyond end of device [ 139.066561][ T5957] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 139.123691][ T5883] hsr_slave_0: entered promiscuous mode [ 139.594106][ T5883] hsr_slave_1: entered promiscuous mode [ 139.797023][ T5883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.815434][ T5883] Cannot create hsr debugfs directory [ 141.135075][ T5690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.236765][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.246759][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.266026][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.331337][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.348481][ T5978] binder_alloc: 5977: binder_alloc_buf size 8 failed, no address space [ 141.357083][ T5978] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 141.467438][ T5883] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.591860][ T5710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.677426][ T5883] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.918658][ T5883] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.097201][ T5883] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.147078][ T5710] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.182449][ T5993] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.132'. [ 142.226531][ T5993] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.132'. [ 142.287226][ T5690] veth0_vlan: entered promiscuous mode [ 142.341322][ T5690] veth1_vlan: entered promiscuous mode [ 142.361576][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.368740][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.427507][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.434676][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.732450][ T5883] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.767772][ T5883] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.799085][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.082442][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.112907][ T5883] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.165914][ T5883] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.396344][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.403509][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.415748][ T6023] loop0: detected capacity change from 0 to 512 [ 143.497705][ T6023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 143.542432][ T6023] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.804085][ T5690] veth0_macvtap: entered promiscuous mode [ 144.040967][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.048143][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.148513][ T6034] input: syz0 as /devices/virtual/input/input9 [ 144.158915][ T5690] veth1_macvtap: entered promiscuous mode [ 144.241090][ T1117] kernel read not supported for file /uinput (pid: 1117 comm: kworker/1:2) [ 144.310962][ T6038] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.368370][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.404752][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.425432][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.471752][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.492940][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.522401][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.553226][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.582316][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.609349][ T5690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.621621][ T5494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 144.784579][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.803605][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.813617][ T5349] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.015863][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.027227][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.037623][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.049341][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.123218][ T6055] loop0: detected capacity change from 0 to 8 [ 145.140813][ T6055] syz.0.138: attempt to access beyond end of device [ 145.140813][ T6055] loop0: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 145.156268][ T6055] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 145.163939][ T6055] unable to read xattr id index table [ 145.409513][ T5690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.629234][ T5690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.805506][ T5690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.816775][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.896750][ T5710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.957791][ T5690] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.974758][ T5349] usb 5-1: Using ep0 maxpacket: 8 [ 145.981744][ T5349] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 145.989681][ T5690] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.993218][ T5349] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 146.043535][ T5349] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.044577][ T5690] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.071619][ T5349] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.119316][ T5349] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.123181][ T5690] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.145382][ T5349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.395994][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.422802][ T5349] usb 5-1: GET_CAPABILITIES returned 0 [ 146.440533][ T5349] usbtmc 5-1:16.0: can't read capabilities [ 146.568542][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.707312][ T5349] usb 5-1: USB disconnect, device number 5 [ 146.755002][ T2585] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.762179][ T2585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.867882][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.875025][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.903438][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.922766][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.950085][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.973629][ T5710] veth0_vlan: entered promiscuous mode [ 147.108662][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.121887][ T5710] veth1_vlan: entered promiscuous mode [ 147.129728][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.372330][ T5710] veth0_macvtap: entered promiscuous mode [ 147.438931][ T5790] veth0_vlan: entered promiscuous mode [ 147.471320][ T5710] veth1_macvtap: entered promiscuous mode [ 147.543946][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.857447][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.950503][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.384408][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.617483][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.648154][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.678887][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.704570][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.723188][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.734078][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.756375][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.790755][ T6095] TCP: out of memory -- consider tuning tcp_mem [ 149.803655][ T6095] TCP: out of memory -- consider tuning tcp_mem [ 149.887130][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.188017][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.218191][ T6098] loop4: detected capacity change from 0 to 1024 [ 150.223607][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.252090][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.292080][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.333637][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.346627][ T6098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.373607][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.424618][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.434449][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.474773][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.522340][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.544420][ T5790] veth1_vlan: entered promiscuous mode [ 150.550323][ T5232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.579301][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.667194][ T5710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.676126][ T5295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.708916][ T5710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.744851][ T5710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.775468][ T5710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.939044][ T5295] usb 4-1: config 0 has no interfaces? [ 150.968221][ T5790] veth0_macvtap: entered promiscuous mode [ 150.982996][ T5295] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 151.850624][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.868525][ T5295] usb 4-1: config 0 descriptor?? [ 151.888673][ T5790] veth1_macvtap: entered promiscuous mode [ 151.989126][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.006330][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.110752][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.164560][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.174459][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.193046][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.203024][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.214322][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.224413][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.235481][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.247346][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.250451][ T932] usb 4-1: USB disconnect, device number 2 [ 152.257897][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.257916][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.257936][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.259886][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.322763][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.334347][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.346246][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.357463][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.367803][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.378792][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.390720][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.405128][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.415381][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.426232][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.437178][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.453035][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.466887][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.484760][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.492590][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.494215][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.517022][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.531727][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.541823][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.762121][ T6119] loop2: detected capacity change from 0 to 512 [ 153.295467][ T6119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.349389][ T6119] EXT4-fs (loop2): 1 truncate cleaned up [ 153.417011][ T6119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.490475][ T5883] veth0_vlan: entered promiscuous mode [ 153.503173][ T5883] veth1_vlan: entered promiscuous mode [ 153.527870][ T5883] veth0_macvtap: entered promiscuous mode [ 153.537578][ T5883] veth1_macvtap: entered promiscuous mode [ 153.556076][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.566877][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.577756][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.589942][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.599462][ T6119] syz.2.94 (pid 6119) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 153.600205][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.621522][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.631493][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.642066][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.652011][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.662583][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.852378][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.891154][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.901223][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.912071][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.109091][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.951903][ T6133] loop4: detected capacity change from 0 to 512 [ 154.959055][ T6133] EXT4-fs: Ignoring removed orlov option [ 155.151301][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.197108][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.224598][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.263897][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.456747][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.467472][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.477956][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.482988][ T5710] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 155.510572][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.510598][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.510618][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.510633][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.510651][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.794948][ T5710] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 156.066931][ T5710] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.225103][ T6133] ext3: Unknown parameter 'subj_role' [ 156.230628][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.283021][ T5710] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 156.511638][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.537507][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.580285][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.618240][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.628401][ T5883] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.640174][ T5883] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.649879][ T5883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.659511][ T5883] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.089471][ T6147] loop3: detected capacity change from 0 to 64 [ 157.108412][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.118773][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.376119][ T5248] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 157.385468][ T5248] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 157.395840][ T5248] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 157.403548][ T5248] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 157.411482][ T5248] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 157.418953][ T5248] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 157.488077][ T5710] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 157.555133][ T5710] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 157.645539][ T5710] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 157.677937][ T5710] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 158.930421][ T5710] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 160.314921][ T5710] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 160.636300][ T5248] Bluetooth: hci8: command tx timeout [ 160.645570][ T5710] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 160.676225][ T5710] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 160.697771][ T5710] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 160.773659][ T5710] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 160.838364][ T5710] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 160.908251][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.994662][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.097284][ T5710] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 161.189825][ T5710] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 161.457794][ T6175] loop4: detected capacity change from 0 to 64 [ 161.487189][ T5710] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 162.080346][ T5710] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 162.133214][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.217670][ T6182] loop3: detected capacity change from 0 to 8 [ 162.252528][ T6182] syz.3.161: attempt to access beyond end of device [ 162.252528][ T6182] loop3: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 162.267782][ T6182] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 162.276587][ T6182] unable to read xattr id index table [ 162.548494][ T5710] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 162.824636][ T5248] Bluetooth: hci8: command tx timeout [ 162.848338][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.864891][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.128403][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.101455][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.096234][ T5248] Bluetooth: hci8: command tx timeout [ 166.287236][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.787311][ T6205] loop5: detected capacity change from 0 to 128 [ 167.240876][ T5247] Bluetooth: hci8: command tx timeout [ 167.422353][ T6205] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.445187][ T5256] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.473331][ T5256] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.481791][ T5256] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.486525][ T6205] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.493523][ T5256] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.532197][ T5256] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 167.539633][ T5256] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.106241][ T5710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.169843][ T5883] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 168.208320][ T6145] chnl_net:caif_netlink_parms(): no params data found [ 168.229570][ T35] bridge_slave_1: left allmulticast mode [ 168.239544][ T35] bridge_slave_1: left promiscuous mode [ 168.253799][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.275272][ T35] bridge_slave_0: left allmulticast mode [ 169.281001][ T35] bridge_slave_0: left promiscuous mode [ 169.286826][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.585402][ T5883] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 169.615601][ T5883] EXT4-fs error (device loop5): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 169.661876][ T5256] Bluetooth: hci4: command tx timeout [ 169.879431][ T5883] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 169.974135][ T5883] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 170.043396][ T5883] EXT4-fs error (device loop5): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 170.120595][ T5883] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 170.208339][ T5883] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 170.295584][ T5883] EXT4-fs error (device loop5): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 170.313525][ T5883] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 171.372775][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.394944][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.467108][ T6252] Cannot find map_set index 0 as target [ 171.612515][ T35] bond0 (unregistering): Released all slaves [ 171.734574][ T5256] Bluetooth: hci4: command tx timeout [ 172.322219][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 172.331478][ T6244] vcan0: Master is either lo or non-ether device [ 172.589251][ T5883] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.814627][ T5256] Bluetooth: hci4: command tx timeout [ 174.144305][ T6265] loop1: detected capacity change from 0 to 764 [ 174.224678][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.233147][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.241415][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.249949][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.260025][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.267537][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.457926][ T6270] loop4: detected capacity change from 0 to 128 [ 174.491299][ T6270] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.503940][ T6270] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.610154][ T29] audit: type=1804 audit(1728593753.326:9): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.183" name="/newroot/62/mnt/file1" dev="loop4" ino=12 res=1 errno=0 [ 174.730853][ T5232] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.800582][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.809305][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.857929][ T6145] bridge_slave_0: entered allmulticast mode [ 174.875875][ T6145] bridge_slave_0: entered promiscuous mode [ 175.085346][ T5256] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.101046][ T6280] loop4: detected capacity change from 0 to 2048 [ 175.107634][ T5256] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.117653][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.124942][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.132190][ T6145] bridge_slave_1: entered allmulticast mode [ 175.138261][ T5256] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.146595][ T6145] bridge_slave_1: entered promiscuous mode [ 175.185255][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.205326][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.244592][ T5256] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.256564][ T5256] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 175.264973][ T5256] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.292349][ T6281] loop1: detected capacity change from 0 to 1024 [ 175.360133][ T6281] loop1: detected capacity change from 0 to 128 [ 175.415803][ T6280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.495317][ T35] hsr_slave_0: left promiscuous mode [ 175.513000][ T6281] Bluetooth: MGMT ver 1.23 [ 175.522316][ T35] hsr_slave_1: left promiscuous mode [ 175.533852][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.544996][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.555359][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.563613][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.595929][ T35] veth1_macvtap: left promiscuous mode [ 175.601564][ T35] veth0_macvtap: left promiscuous mode [ 175.609124][ T35] veth1_vlan: left promiscuous mode [ 175.614446][ T35] veth0_vlan: left promiscuous mode [ 175.625794][ T6280] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.652827][ T6280] EXT4-fs (loop4): Remounting filesystem read-only [ 175.918443][ T5247] Bluetooth: hci4: command tx timeout [ 176.112208][ T6302] loop1: detected capacity change from 0 to 1024 [ 176.134185][ T5232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.181145][ T6302] Cannot find add_set index 0 as target [ 176.237591][ T6302] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 176.378018][ T5247] Bluetooth: hci1: command tx timeout [ 176.387388][ T6307] loop4: detected capacity change from 0 to 2048 [ 176.558392][ T6310] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.334792][ T5247] Bluetooth: hci6: command tx timeout [ 177.527100][ T35] team0 (unregistering): Port device team_slave_1 removed [ 177.580272][ T35] team0 (unregistering): Port device team_slave_0 removed [ 177.625639][ T6315] loop1: detected capacity change from 0 to 1024 [ 177.681917][ T6315] hfsplus: invalid gid specified [ 177.689383][ T6315] hfsplus: unable to parse mount options [ 177.744637][ T5295] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 177.904677][ T5295] usb 5-1: Using ep0 maxpacket: 8 [ 177.926502][ T5295] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 177.934895][ T5295] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.950688][ T5295] usb 5-1: config 0 has no interface number 0 [ 177.972584][ T5295] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.993720][ T5295] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 178.004573][ T5295] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 178.039843][ T5295] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.072692][ T5295] usb 5-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 178.085411][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.093704][ T5295] usb 5-1: Product: syz [ 178.102344][ T5295] usb 5-1: Manufacturer: syz [ 178.107800][ T5295] usb 5-1: SerialNumber: syz [ 178.124106][ T5295] usb 5-1: config 0 descriptor?? [ 178.360720][ T6314] netlink: 104 bytes leftover after parsing attributes in process `syz.4.192'. [ 178.380594][ T5295] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 178.398392][ T5295] usb 5-1: USB disconnect, device number 6 [ 178.454694][ T5247] Bluetooth: hci1: command tx timeout [ 178.721857][ T6145] team0: Port device team_slave_0 added [ 178.789915][ T6208] chnl_net:caif_netlink_parms(): no params data found [ 178.860414][ T6145] team0: Port device team_slave_1 added [ 179.183672][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.201936][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.231998][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.409610][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.422741][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.424743][ T5247] Bluetooth: hci6: command tx timeout [ 179.449013][ T5295] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 180.545107][ T5247] Bluetooth: hci1: command tx timeout [ 180.624550][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.801128][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.812287][ T5295] usb 2-1: Using ep0 maxpacket: 16 [ 180.831609][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.840995][ T5295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 180.932969][ T6208] bridge_slave_0: entered allmulticast mode [ 180.952237][ T5295] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 180.957869][ T6208] bridge_slave_0: entered promiscuous mode [ 180.964059][ T5295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.995023][ T5295] usb 2-1: config 0 descriptor?? [ 181.011954][ T6145] hsr_slave_0: entered promiscuous mode [ 181.045185][ T6145] hsr_slave_1: entered promiscuous mode [ 181.051897][ T6145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.059701][ T6145] Cannot create hsr debugfs directory [ 181.169416][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.227350][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.240404][ T6208] bridge_slave_1: entered allmulticast mode [ 181.255807][ T6208] bridge_slave_1: entered promiscuous mode [ 181.361816][ T6208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.397319][ T6208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.504799][ T5247] Bluetooth: hci6: command tx timeout [ 181.624809][ T6321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.653161][ T6321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.741258][ T5295] hid (null): invalid report_count 983040256 [ 181.777130][ T5295] hid (null): unknown global tag 0xc [ 181.811348][ T6208] team0: Port device team_slave_0 added [ 181.831528][ T5295] hid-generic 0003:0158:0100.0004: unknown main item tag 0x0 [ 181.918127][ T5295] hid-generic 0003:0158:0100.0004: invalid report_count 983040256 [ 181.945022][ T5295] hid-generic 0003:0158:0100.0004: item 0 4 1 9 parsing failed [ 181.960505][ T5295] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22 [ 181.992216][ T5295] usb 2-1: USB disconnect, device number 5 [ 182.091301][ T6208] team0: Port device team_slave_1 added [ 182.134196][ T6266] chnl_net:caif_netlink_parms(): no params data found [ 182.340954][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.482064][ T6349] loop4: detected capacity change from 0 to 2048 [ 182.515023][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.521982][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.565347][ T6208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.580919][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.588679][ T6349] loop4: p2 < > [ 182.598333][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.625522][ T5247] Bluetooth: hci1: command tx timeout [ 182.631043][ T6208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.151107][ T5507] udevd[5507]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 183.180618][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.699413][ T5247] Bluetooth: hci6: command tx timeout [ 183.952038][ T6282] chnl_net:caif_netlink_parms(): no params data found [ 184.072411][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.068540][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.219097][ T6208] hsr_slave_0: entered promiscuous mode [ 185.226854][ T6208] hsr_slave_1: entered promiscuous mode [ 185.237677][ T6208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.248366][ T6208] Cannot create hsr debugfs directory [ 185.491212][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.500384][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.508031][ T6266] bridge_slave_0: entered allmulticast mode [ 185.536218][ T6266] bridge_slave_0: entered promiscuous mode [ 185.614332][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.643298][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.672080][ T6266] bridge_slave_1: entered allmulticast mode [ 185.709836][ T6266] bridge_slave_1: entered promiscuous mode [ 186.046165][ T6266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.177493][ T6266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.228584][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.236581][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.246260][ T6282] bridge_slave_0: entered allmulticast mode [ 186.253444][ T6282] bridge_slave_0: entered promiscuous mode [ 186.299597][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.307570][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.315885][ T6282] bridge_slave_1: entered allmulticast mode [ 186.324404][ T6282] bridge_slave_1: entered promiscuous mode [ 186.403696][ T6266] team0: Port device team_slave_0 added [ 186.527353][ T6266] team0: Port device team_slave_1 added [ 186.623790][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.808949][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.827058][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.842611][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.879229][ T6266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.939763][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.135874][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.170400][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.194962][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.318324][ T6266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.960430][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.211548][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.298500][ T6266] hsr_slave_0: entered promiscuous mode [ 188.308289][ T6266] hsr_slave_1: entered promiscuous mode [ 188.315736][ T6266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.323297][ T6266] Cannot create hsr debugfs directory [ 188.380299][ T6208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.404877][ T6145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.440369][ T6145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.469089][ T6145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.495165][ T5300] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 188.517146][ T6282] team0: Port device team_slave_0 added [ 188.523471][ T6145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.664775][ T5300] usb 5-1: Using ep0 maxpacket: 8 [ 188.680487][ T6208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.705464][ T5300] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 188.725790][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.745994][ T5300] usb 5-1: config 0 descriptor?? [ 188.828891][ T6282] team0: Port device team_slave_1 added [ 189.931026][ T6208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.995099][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.003009][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.034396][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.084041][ T6208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.116216][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.124309][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.163079][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.429318][ T6282] hsr_slave_0: entered promiscuous mode [ 190.443263][ T6282] hsr_slave_1: entered promiscuous mode [ 190.455716][ T6282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.463295][ T6282] Cannot create hsr debugfs directory [ 190.532308][ T35] bridge_slave_1: left allmulticast mode [ 190.550502][ T35] bridge_slave_1: left promiscuous mode [ 190.563768][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.579658][ T35] bridge_slave_0: left allmulticast mode [ 190.586572][ T35] bridge_slave_0: left promiscuous mode [ 190.592407][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.618609][ T35] bridge_slave_1: left allmulticast mode [ 190.626667][ T35] bridge_slave_1: left promiscuous mode [ 190.632822][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.652349][ T35] bridge_slave_0: left allmulticast mode [ 190.661268][ T35] bridge_slave_0: left promiscuous mode [ 190.670588][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.683616][ T35] bridge_slave_1: left allmulticast mode [ 190.689869][ T35] bridge_slave_1: left promiscuous mode [ 190.696426][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.705559][ T5255] Bluetooth: hci3: command 0x0406 tx timeout [ 190.733584][ T35] bridge_slave_0: left allmulticast mode [ 190.749769][ T35] bridge_slave_0: left promiscuous mode [ 190.776621][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.794689][ T5248] Bluetooth: hci0: command 0x0406 tx timeout [ 190.798829][ T5247] Bluetooth: hci2: command 0x0406 tx timeout [ 191.386961][ T6401] loop1: detected capacity change from 0 to 64 [ 191.876600][ T5300] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 191.889820][ T5300] asix 5-1:0.0: probe with driver asix failed with error -71 [ 191.932321][ T5300] usb 5-1: USB disconnect, device number 7 [ 192.726120][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.765754][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.794749][ T35] bond0 (unregistering): Released all slaves [ 192.972003][ T6408] loop4: detected capacity change from 0 to 2048 [ 193.062219][ T6408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.199316][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.243614][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.273942][ T35] bond0 (unregistering): Released all slaves [ 193.486876][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.510971][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.546080][ T35] bond0 (unregistering): Released all slaves [ 193.746239][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.753190][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.153608][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.911831][ T6208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.106223][ T6409] loop1: detected capacity change from 0 to 32768 [ 195.135281][ T6409] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.209 (6409) [ 195.200039][ T6145] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.237091][ T6208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.264997][ T6409] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.293864][ T6409] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 195.305662][ T6409] BTRFS info (device loop1): using free-space-tree [ 195.330300][ T6208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.609968][ T6208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.571269][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.578441][ T6178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.714264][ T6409] BTRFS error (device loop1): open_ctree failed [ 196.725960][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.733066][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.953340][ T35] hsr_slave_0: left promiscuous mode [ 196.974083][ T35] hsr_slave_1: left promiscuous mode [ 197.001851][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.019831][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.038384][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.074260][ T6458] loop4: detected capacity change from 0 to 1024 [ 197.144899][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.147709][ T6458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.183157][ T6458] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.212914][ T35] hsr_slave_0: left promiscuous mode [ 197.520844][ T6458] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 197.538100][ T6458] EXT4-fs (loop4): This should not happen!! Data will be lost [ 197.538100][ T6458] [ 197.548529][ T6458] EXT4-fs (loop4): Total free blocks count 0 [ 197.555584][ T35] hsr_slave_1: left promiscuous mode [ 197.565694][ T6458] EXT4-fs (loop4): Free/Dirty block details [ 197.571585][ T6458] EXT4-fs (loop4): free_blocks=0 [ 197.577527][ T6458] EXT4-fs (loop4): dirty_blocks=0 [ 197.582557][ T6458] EXT4-fs (loop4): Block reservation details [ 197.590229][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.597981][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.605474][ T6458] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 197.613834][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.621494][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.657424][ T35] hsr_slave_0: left promiscuous mode [ 197.663344][ T35] hsr_slave_1: left promiscuous mode [ 197.669937][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.677875][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.696983][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.704390][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.757068][ T5232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.828483][ T35] veth1_macvtap: left promiscuous mode [ 197.834088][ T35] veth0_macvtap: left promiscuous mode [ 197.864934][ T35] veth1_vlan: left promiscuous mode [ 197.870306][ T35] veth0_vlan: left promiscuous mode [ 197.880992][ T35] veth1_macvtap: left promiscuous mode [ 197.924796][ T35] veth0_macvtap: left promiscuous mode [ 197.930448][ T35] veth1_vlan: left promiscuous mode [ 197.941870][ T35] veth0_vlan: left promiscuous mode [ 197.982424][ T35] veth1_macvtap: left promiscuous mode [ 197.995794][ T35] veth0_macvtap: left promiscuous mode [ 198.003999][ T35] veth1_vlan: left promiscuous mode [ 198.015198][ T35] veth0_vlan: left promiscuous mode [ 198.060292][ T29] audit: type=1804 audit(1728593776.776:10): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.213" name="/newroot/75/bus/file0" dev="overlay" ino=428 res=1 errno=0 [ 198.085641][ T6463] evm: overlay not supported [ 198.449111][ T6468] sock: sock_set_timeout: `syz.4.214' (pid 6468) tries to set negative timeout [ 199.053823][ T6472] loop4: detected capacity change from 0 to 128 [ 202.322672][ T35] team0 (unregistering): Port device team_slave_1 removed [ 202.390541][ T35] team0 (unregistering): Port device team_slave_0 removed [ 203.309129][ T35] team0 (unregistering): Port device team_slave_1 removed [ 203.375452][ T35] team0 (unregistering): Port device team_slave_0 removed [ 204.486431][ T35] team0 (unregistering): Port device team_slave_1 removed [ 204.533070][ T35] team0 (unregistering): Port device team_slave_0 removed [ 205.089364][ T6470] vcan0: entered promiscuous mode [ 205.113583][ T6470] vlan2: entered promiscuous mode [ 205.385986][ T6470] vcan0: left promiscuous mode [ 205.823179][ T6145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.395878][ T6208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.432488][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.445672][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.452760][ T6180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.664112][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.671376][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.800116][ T6145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.031388][ T6282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.085784][ T6282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.139669][ T6282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.237168][ T6282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.309964][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 207.558562][ T6266] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.643243][ T6145] veth0_vlan: entered promiscuous mode [ 207.682173][ T6266] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.788485][ T6266] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.865549][ T6266] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.917244][ T6145] veth1_vlan: entered promiscuous mode [ 207.951333][ T6540] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 208.201548][ T6145] veth0_macvtap: entered promiscuous mode [ 208.248597][ T6145] veth1_macvtap: entered promiscuous mode [ 208.273373][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.293102][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.293957][ T6550] loop4: detected capacity change from 0 to 1024 [ 208.313690][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.336183][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.359924][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.374445][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.394092][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.413896][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.445310][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.499107][ T6208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.554418][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.574454][ T6550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.635675][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.656502][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.678423][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.689310][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.703009][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.723363][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.733833][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.754842][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.776864][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.821508][ T5232] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 208.841762][ T5232] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 208.912566][ T6145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.927165][ T6145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.937398][ T6145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.946475][ T6145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.986069][ T6266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.021340][ T6282] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.106133][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.113248][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.156968][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.164058][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.230323][ T5232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.290771][ T6266] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.325937][ T6266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.336748][ T6266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.551297][ T145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.616469][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.623577][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.728835][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.736009][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.910555][ T5248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.919957][ T5248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.928057][ T5248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.935965][ T5248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.944438][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.952118][ T5248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.980010][ T6208] veth0_vlan: entered promiscuous mode [ 210.027543][ T6178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.074221][ T6178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.089938][ T145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.248732][ T6545] loop1: detected capacity change from 0 to 40427 [ 210.265502][ T6266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.283904][ T145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.309746][ T6545] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 210.337199][ T6545] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 210.356928][ T6208] veth1_vlan: entered promiscuous mode [ 210.439101][ T6545] F2FS-fs (loop1): invalid crc value [ 210.470895][ T6545] F2FS-fs (loop1): Found nat_bits in checkpoint [ 210.529761][ T145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.661828][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.721406][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.754893][ T6208] veth0_macvtap: entered promiscuous mode [ 210.771428][ T6208] veth1_macvtap: entered promiscuous mode [ 210.877523][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.898957][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.912371][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.924155][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.934256][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.945544][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.955557][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.970474][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.981368][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.992082][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.005715][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.019791][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.040968][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.053290][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.063629][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.082925][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.094948][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.112317][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.124357][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.135340][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.145534][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.157373][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.171231][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.210488][ T145] bridge_slave_1: left allmulticast mode [ 211.218995][ T145] bridge_slave_1: left promiscuous mode [ 211.228376][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.245797][ T145] bridge_slave_0: left allmulticast mode [ 211.251459][ T145] bridge_slave_0: left promiscuous mode [ 211.264668][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.699944][ T6578] loop1: detected capacity change from 0 to 1024 [ 211.853737][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.873894][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.889432][ T145] bond0 (unregistering): Released all slaves [ 211.921985][ T6208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.931190][ T6208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.942692][ T6208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.951721][ T6208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.977333][ T5248] Bluetooth: hci0: command tx timeout [ 212.058125][ T6282] veth0_vlan: entered promiscuous mode [ 212.232887][ T6266] veth0_vlan: entered promiscuous mode [ 212.509426][ T6282] veth1_vlan: entered promiscuous mode [ 212.583486][ T6266] veth1_vlan: entered promiscuous mode [ 212.753254][ T6282] veth0_macvtap: entered promiscuous mode [ 212.792582][ T6282] veth1_macvtap: entered promiscuous mode [ 212.835293][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.854241][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.875299][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.892437][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.902626][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.919808][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.932429][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.954805][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.990414][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.012338][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.024099][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.047417][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.067223][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.219638][ T6558] chnl_net:caif_netlink_parms(): no params data found [ 213.274153][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.293080][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.303022][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.313891][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.324084][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.336150][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.352527][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.363498][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.374319][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.388674][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.399805][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.410703][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.431237][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.536599][ T6266] veth0_macvtap: entered promiscuous mode [ 213.556740][ T6266] veth1_macvtap: entered promiscuous mode [ 213.557308][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.583416][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.600917][ T145] hsr_slave_0: left promiscuous mode [ 213.616137][ T145] hsr_slave_1: left promiscuous mode [ 213.623550][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.631317][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.639946][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.647545][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.669006][ T145] veth1_macvtap: left promiscuous mode [ 213.674828][ T145] veth0_macvtap: left promiscuous mode [ 213.680423][ T145] veth1_vlan: left promiscuous mode [ 213.686809][ T145] veth0_vlan: left promiscuous mode [ 214.055852][ T5248] Bluetooth: hci0: command tx timeout [ 214.263014][ T145] team0 (unregistering): Port device team_slave_1 removed [ 214.323080][ T145] team0 (unregistering): Port device team_slave_0 removed [ 214.761067][ T6282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.780376][ T6282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.789688][ T6282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.798958][ T6282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.844258][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.858846][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.872857][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.883458][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.893608][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.904194][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.923150][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.945692][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.962835][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.973370][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.983561][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.994925][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.019259][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.118153][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.214726][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.235383][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.252643][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.262661][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.273259][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.283208][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.293764][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.309965][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.323345][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.342325][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.353981][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.393813][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.490218][ T6266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.534602][ T6266] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.558569][ T6266] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.572785][ T6266] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.618513][ T6180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.684680][ T6180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.735392][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.743452][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.753564][ T6558] bridge_slave_0: entered allmulticast mode [ 215.770466][ T6558] bridge_slave_0: entered promiscuous mode [ 215.864930][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.872135][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.939267][ T6607] loop2: detected capacity change from 0 to 512 [ 215.972521][ T6558] bridge_slave_1: entered allmulticast mode [ 215.980897][ T6607] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.023905][ T6607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 216.024055][ T6558] bridge_slave_1: entered promiscuous mode [ 216.054754][ T6607] System zones: 1-12 [ 216.068045][ T6607] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 216.097672][ T6607] EXT4-fs (loop2): 1 truncate cleaned up [ 216.135998][ T5248] Bluetooth: hci0: command tx timeout [ 216.147239][ T6607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.187278][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.257628][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.273599][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.285594][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.956127][ T6558] team0: Port device team_slave_0 added [ 216.978129][ T6558] team0: Port device team_slave_1 added [ 217.085968][ T6178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.138414][ T6178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.207439][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.225202][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.330898][ T6208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.416237][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.635985][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.656112][ T29] audit: type=1804 audit(1728593796.376:11): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.232" name="/newroot/1/bus/bus" dev="overlay" ino=31 res=1 errno=0 [ 217.673074][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.710080][ T6623] Invalid ELF header magic: != ELF [ 217.753460][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.885838][ T2537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.899609][ T2537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.974102][ T5247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.990261][ T5247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.002663][ T5247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.011039][ T5247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.019082][ T5247] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.020763][ T2537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.026469][ T5247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.059151][ T2537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.097000][ T6628] nbd2: detected capacity change from 0 to 6 [ 218.130434][ T6558] hsr_slave_0: entered promiscuous mode [ 218.137581][ T6558] hsr_slave_1: entered promiscuous mode [ 218.175394][ T6631] block nbd2: shutting down sockets [ 218.184808][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.193906][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.203406][ T6625] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.215511][ T5247] Bluetooth: hci0: command tx timeout [ 218.334734][ T6625] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.381400][ T6625] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.432245][ T6625] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.463273][ T6625] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.477459][ T6625] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.488899][ T6625] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.501177][ T6625] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.510928][ T6625] ldm_validate_partition_table(): Disk read failed. [ 218.519944][ T6625] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.530859][ T6625] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.542902][ T6625] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.573310][ T6625] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.610236][ T6625] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.700979][ T6625] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.705457][ T1117] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 218.732176][ T6625] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.736088][ T6177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.795975][ T6625] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.846156][ T6625] Dev nbd2: unable to read RDB block 0 [ 218.857838][ T6625] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.902277][ T6625] Buffer I/O error on dev nbd2, logical block 0, async page read [ 218.937498][ T1117] usb 6-1: unable to get BOS descriptor or descriptor too short [ 218.948994][ T6625] nbd2: unable to read partition table [ 218.969188][ T6625] nbd2: partition table beyond EOD, truncated [ 218.987853][ T5507] ldm_validate_partition_table(): Disk read failed. [ 219.007421][ T5507] Dev nbd2: unable to read RDB block 0 [ 219.026019][ T1117] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 219.046846][ T5507] nbd2: unable to read partition table [ 219.082693][ T1117] usb 6-1: config 1 interface 0 has no altsetting 0 [ 219.095287][ T5507] nbd2: partition table beyond EOD, truncated [ 219.122758][ T1117] usb 6-1: string descriptor 0 read error: -22 [ 219.140930][ T1117] usb 6-1: New USB device found, idVendor=05ac, idProduct=027e, bcdDevice= 0.40 [ 219.175734][ T5507] ldm_validate_partition_table(): Disk read failed. [ 219.182757][ T5507] Dev nbd2: unable to read RDB block 0 [ 219.189297][ T1117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.222442][ T5507] nbd2: unable to read partition table [ 219.241403][ T6637] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 219.268523][ T5507] nbd2: partition table beyond EOD, truncated [ 219.371635][ T6177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.104631][ T5247] Bluetooth: hci7: command tx timeout [ 220.216508][ T1117] usbhid 6-1:1.0: can't add hid device: -71 [ 220.223331][ T1117] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 220.239981][ T1117] usb 6-1: USB disconnect, device number 2 [ 220.450107][ T6664] loop2: detected capacity change from 0 to 16 [ 220.483496][ T6177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.495177][ T6664] erofs: (device loop2): mounted with root inode @ nid 36. [ 220.732203][ T5349] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 220.883206][ T6668] erofs: (device loop2): erofs_map_blocks_flatmode: inline data across blocks @ nid 36 [ 220.893369][ T6668] syz.2.236: attempt to access beyond end of device [ 220.893369][ T6668] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 221.461755][ T6177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.684619][ T5349] usb 4-1: Using ep0 maxpacket: 16 [ 221.693819][ T5349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.820969][ T5349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.831865][ T5349] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 221.841028][ T5349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.928203][ T6674] loop5: detected capacity change from 0 to 8 [ 222.003864][ T6674] syz.5.237: attempt to access beyond end of device [ 222.003864][ T6674] loop5: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 222.019085][ T6674] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 222.026880][ T6674] unable to read xattr id index table [ 222.178803][ T5247] Bluetooth: hci7: command tx timeout [ 222.599217][ T6626] chnl_net:caif_netlink_parms(): no params data found [ 222.810936][ T5349] usb 4-1: config 0 descriptor?? [ 222.926707][ T6681] loop5: detected capacity change from 0 to 256 [ 223.082262][ T6681] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 223.269004][ T29] audit: type=1800 audit(1728593801.986:12): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.240" name="bus" dev="loop5" ino=1048655 res=0 errno=0 [ 223.302615][ T6665] loop3: detected capacity change from 0 to 256 [ 223.423277][ T5248] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 223.442212][ T6665] exfat: Deprecated parameter 'namecase' [ 223.475635][ T5248] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 223.499865][ T5248] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 223.510497][ T5248] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 223.519978][ T5248] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 223.527457][ T5248] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 223.532189][ T6665] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 224.264744][ T5247] Bluetooth: hci7: command tx timeout [ 224.595955][ T5349] lenovo 0003:17EF:6009.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0 [ 224.919801][ T932] usb 4-1: USB disconnect, device number 3 [ 225.026354][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.033487][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.053621][ T6626] bridge_slave_0: entered allmulticast mode [ 225.080979][ T6626] bridge_slave_0: entered promiscuous mode [ 225.094821][ T6177] bridge_slave_1: left allmulticast mode [ 225.100618][ T6177] bridge_slave_1: left promiscuous mode [ 225.108616][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.116168][ T1117] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 225.274596][ T1117] usb 6-1: Using ep0 maxpacket: 32 [ 225.321072][ T6177] bridge_slave_0: left allmulticast mode [ 225.326987][ T6177] bridge_slave_0: left promiscuous mode [ 225.333260][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.337217][ T1117] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.353150][ T1117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 225.366410][ T1117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 225.597609][ T5247] Bluetooth: hci8: command tx timeout [ 226.227500][ T1117] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 226.237183][ T1117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.264760][ T1117] usb 6-1: config 0 descriptor?? [ 226.271393][ T6698] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 226.285591][ T1117] hub 6-1:0.0: USB hub found [ 226.305551][ T5247] Bluetooth: hci7: command tx timeout [ 226.512583][ T1117] hub 6-1:0.0: 2 ports detected [ 226.756031][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.772291][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.789916][ T6177] bond0 (unregistering): Released all slaves [ 226.841821][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.849361][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.858319][ T6626] bridge_slave_1: entered allmulticast mode [ 226.886288][ T6626] bridge_slave_1: entered promiscuous mode [ 227.152110][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.334413][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.508832][ T6177] hsr_slave_0: left promiscuous mode [ 227.526950][ T6177] hsr_slave_1: left promiscuous mode [ 227.562638][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.575135][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.585949][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.601861][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.643314][ T6177] veth1_macvtap: left promiscuous mode [ 227.655113][ T5247] Bluetooth: hci8: command tx timeout [ 227.662471][ T6177] veth0_macvtap: left promiscuous mode [ 227.680447][ T6177] veth1_vlan: left promiscuous mode [ 227.686151][ T6177] veth0_vlan: left promiscuous mode [ 228.517066][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 228.577609][ T5356] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 228.580486][ T5300] usb 6-1: USB disconnect, device number 3 [ 228.584723][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 229.122788][ T6626] team0: Port device team_slave_0 added [ 229.171635][ T6558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.218859][ T6626] team0: Port device team_slave_1 added [ 229.453108][ T6558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.993870][ T5238] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 230.036277][ T5247] Bluetooth: hci8: command tx timeout [ 230.057101][ T6558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.436828][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.451225][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.002268][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.047058][ T6558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 231.059587][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.067433][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.102127][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.178637][ T5238] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 231.188020][ T5238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.251416][ T5238] usb 4-1: Product: syz [ 231.290347][ T5238] usb 4-1: Manufacturer: syz [ 231.304683][ T5238] usb 4-1: SerialNumber: syz [ 231.325510][ T5238] usb 4-1: config 0 descriptor?? [ 231.519689][ T6626] hsr_slave_0: entered promiscuous mode [ 231.546855][ T5238] usb-storage 4-1:0.0: USB Mass Storage device detected [ 231.606897][ T6626] hsr_slave_1: entered promiscuous mode [ 231.669084][ T6626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.676963][ T6626] Cannot create hsr debugfs directory [ 231.735996][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 231.765147][ T5238] usb 4-1: USB disconnect, device number 4 [ 232.055020][ T5247] Bluetooth: hci8: command tx timeout [ 233.367244][ T6745] nbd5: detected capacity change from 0 to 6 [ 233.377243][ T6747] block nbd5: shutting down sockets [ 234.501611][ T6767] loop3: detected capacity change from 0 to 256 [ 234.538377][ T6766] loop2: detected capacity change from 0 to 1024 [ 234.551112][ T6766] ext4: Unknown parameter 'func' [ 234.614608][ T6767] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xd6472dfc, utbl_chksum : 0xe619d30d) [ 235.883111][ T6177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.023280][ T6786] loop5: detected capacity change from 0 to 256 [ 236.193001][ T6177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.402538][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.431136][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.372677][ T6558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.383266][ T6558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.458106][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.465565][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.546214][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.553333][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.596501][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.603684][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.616125][ T6686] bridge_slave_0: entered allmulticast mode [ 237.625897][ T6686] bridge_slave_0: entered promiscuous mode [ 237.635910][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.644251][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.650801][ T6786] FAT-fs (loop5): Directory bread(block 64) failed [ 237.651515][ T6686] bridge_slave_1: entered allmulticast mode [ 237.665607][ T6686] bridge_slave_1: entered promiscuous mode [ 237.697359][ T6786] FAT-fs (loop5): Directory bread(block 65) failed [ 237.704192][ T6786] FAT-fs (loop5): Directory bread(block 66) failed [ 237.780952][ T6177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.791560][ T6786] FAT-fs (loop5): Directory bread(block 67) failed [ 237.798579][ T6786] FAT-fs (loop5): Directory bread(block 68) failed [ 237.839474][ T6786] FAT-fs (loop5): Directory bread(block 69) failed [ 237.877859][ T6786] FAT-fs (loop5): Directory bread(block 70) failed [ 237.884394][ T6786] FAT-fs (loop5): Directory bread(block 71) failed [ 237.909361][ T6786] FAT-fs (loop5): Directory bread(block 72) failed [ 237.916639][ T6786] FAT-fs (loop5): Directory bread(block 73) failed [ 237.998355][ T6805] loop3: detected capacity change from 0 to 1024 [ 238.034844][ T6805] EXT4-fs: Ignoring removed orlov option [ 238.084232][ T6805] EXT4-fs (loop3): Test dummy encryption mode enabled [ 238.120436][ T6805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.209423][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.489716][ T6177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.127578][ T6282] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.161657][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.654908][ T6829] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.268'. [ 242.100367][ T6686] team0: Port device team_slave_0 added [ 242.317365][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.532274][ T6686] team0: Port device team_slave_1 added [ 245.687520][ T6854] loop2: detected capacity change from 0 to 128 [ 245.710760][ T6854] syz.2.274 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 245.989356][ T6856] loop2: detected capacity change from 0 to 1024 [ 245.998171][ T6856] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 246.095783][ T6856] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 246.128778][ T6856] EXT4-fs (loop2): orphan cleanup on readonly fs [ 246.145565][ T6856] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=2 [ 246.164957][ T6856] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 246.203788][ T6856] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 246.233309][ T6856] EXT4-fs (loop2): 1 truncate cleaned up [ 246.253936][ T6856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.308037][ T6856] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.275: corrupted in-inode xattr: overlapping e_value [ 246.372342][ T6856] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.275: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 246.451186][ T6858] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.275: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 246.507997][ T6856] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.275: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 246.625230][ T6859] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.275: corrupted in-inode xattr: overlapping e_value [ 246.691076][ T6856] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.275: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 246.746327][ T6856] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.275: corrupted in-inode xattr: overlapping e_value [ 246.794431][ T6856] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.275: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 246.846801][ T6858] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.275: corrupted in-inode xattr: overlapping e_value [ 246.900620][ T6856] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.275: corrupted in-inode xattr: overlapping e_value [ 247.026199][ T6208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.413934][ T6177] bridge_slave_1: left allmulticast mode [ 247.427989][ T6177] bridge_slave_1: left promiscuous mode [ 247.433719][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.452181][ T6177] bridge_slave_0: left allmulticast mode [ 247.459625][ T6177] bridge_slave_0: left promiscuous mode [ 247.471501][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.994863][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.016239][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.031658][ T6177] bond0 (unregistering): Released all slaves [ 248.073703][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.123490][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.265136][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.290386][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.308738][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.541674][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.825524][ T5247] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 249.835009][ T5247] Bluetooth: hci4: Injecting HCI hardware error event [ 249.843985][ T5248] Bluetooth: hci4: hardware error 0x00 [ 250.225362][ T6686] hsr_slave_0: entered promiscuous mode [ 250.234997][ T6686] hsr_slave_1: entered promiscuous mode [ 250.364263][ T6686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.658786][ T6686] Cannot create hsr debugfs directory [ 250.670680][ T6558] veth0_vlan: entered promiscuous mode [ 250.683061][ T6558] veth1_vlan: entered promiscuous mode [ 251.716608][ T6626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.985611][ T5248] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 252.129486][ T6887] loop2: detected capacity change from 0 to 1024 [ 252.155409][ T6887] EXT4-fs: Ignoring removed oldalloc option [ 252.177209][ T6887] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 252.263260][ T6626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.327272][ T6626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.375577][ T6887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.412300][ T6626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.558680][ T6177] hsr_slave_0: left promiscuous mode [ 252.616135][ T6177] hsr_slave_1: left promiscuous mode [ 252.685732][ T29] audit: type=1804 audit(1728593831.406:13): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.282" name="/newroot/25/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 252.764875][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.788577][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.896535][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.938944][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.026944][ T6177] veth1_macvtap: left promiscuous mode [ 253.055087][ T6177] veth0_macvtap: left promiscuous mode [ 253.087913][ T6177] veth1_vlan: left promiscuous mode [ 253.107938][ T6177] veth0_vlan: left promiscuous mode [ 253.178788][ T6208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.504891][ T5300] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 255.194987][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.201410][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.548154][ T5300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.558493][ T5300] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.586757][ T5300] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.601208][ T5300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.616728][ T5300] usb 3-1: SerialNumber: syz [ 255.658171][ T6924] input: syz0 as /devices/virtual/input/input10 [ 258.900778][ T5300] usb 3-1: 0:2 : does not exist [ 258.957181][ T6929] loop5: detected capacity change from 0 to 256 [ 258.970416][ T5300] usb 3-1: USB disconnect, device number 3 [ 259.047973][ T6929] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 259.222847][ T5507] udevd[5507]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.750796][ T6934] loop3: detected capacity change from 0 to 512 [ 259.786926][ T6934] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 260.117185][ T6940] loop5: detected capacity change from 0 to 256 [ 260.157228][ T6940] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 260.169206][ T6940] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 260.182040][ T6940] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 260.190761][ T6940] UDF-fs: Scanning with blocksize 512 failed [ 260.213563][ T6940] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 260.236526][ T6940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.380677][ T29] audit: type=1800 audit(1728593839.096:14): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.293" name="file2" dev="loop5" ino=66 res=0 errno=0 [ 260.611163][ T6949] loop2: detected capacity change from 0 to 2048 [ 260.661305][ T6949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.792751][ T29] audit: type=1800 audit(1728593839.436:15): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.294" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 262.867231][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 263.098046][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 263.258521][ T5238] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 263.417380][ T5238] usb 6-1: Using ep0 maxpacket: 8 [ 263.425961][ T5238] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 263.445513][ T5238] usb 6-1: config 0 has no interface number 1 [ 263.462193][ T5238] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 263.495731][ T5238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.519880][ T5238] usb 6-1: Product: syz [ 263.529196][ T5238] usb 6-1: Manufacturer: syz [ 263.557999][ T5238] usb 6-1: SerialNumber: syz [ 263.571318][ T5238] usb 6-1: config 0 descriptor?? [ 263.591475][ T5238] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 263.848707][ T2027] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 263.850621][ T5238] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 263.866792][ T2027] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 263.909284][ T5238] usb 6-1: USB disconnect, device number 4 [ 264.030779][ T6558] veth0_macvtap: entered promiscuous mode [ 264.135208][ T30] INFO: task syz.5.111:5812 blocked for more than 143 seconds. [ 264.142855][ T30] Not tainted 6.12.0-rc2-syzkaller-00100-geb952c47d154 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 264.180631][ T6558] veth1_macvtap: entered promiscuous mode [ 264.194606][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.203300][ T30] task:syz.5.111 state:D stack:25936 pid:5812 tgid:5811 ppid:5235 flags:0x00004004 [ 264.339068][ T30] Call Trace: [ 264.342412][ T30] [ 264.413658][ T30] __schedule+0x1895/0x4b30 [ 264.463639][ T30] ? __pfx___schedule+0x10/0x10 [ 264.494558][ T30] ? __pfx_lock_release+0x10/0x10 [ 264.499677][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 264.542778][ T30] ? schedule+0x90/0x320 [ 264.557696][ T30] schedule+0x14b/0x320 [ 264.561930][ T30] schedule_preempt_disabled+0x13/0x30 [ 264.600359][ T30] __mutex_lock+0x6a7/0xd70 [ 264.605568][ T30] ? __mutex_lock+0x52a/0xd70 [ 264.610279][ T30] ? br_ioctl_call+0x57/0xb0 [ 264.624591][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 264.629659][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 264.647224][ T30] br_ioctl_call+0x57/0xb0 [ 264.672998][ T30] dev_ifsioc+0xc20/0xe70 [ 264.701426][ T30] ? __pfx_dev_ifsioc+0x10/0x10 [ 264.715761][ T30] ? dev_load+0x21/0x1f0 [ 264.729450][ T30] dev_ioctl+0x719/0x1340 [ 264.733919][ T30] sock_do_ioctl+0x240/0x460 [ 264.764985][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 264.770175][ T30] sock_ioctl+0x626/0x8e0 [ 264.795574][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 264.815820][ T30] ? hook_file_ioctl+0x6e/0x2d0 [ 264.820826][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.829953][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 264.842538][ T30] __se_sys_ioctl+0xfb/0x170 [ 264.847844][ T30] do_syscall_64+0xf3/0x230 [ 264.852544][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.858986][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.865437][ T30] RIP: 0033:0x7f05ceb7dff9 [ 264.870010][ T30] RSP: 002b:00007f05cf8b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.878945][ T30] RAX: ffffffffffffffda RBX: 00007f05ced35f80 RCX: 00007f05ceb7dff9 [ 264.888645][ T30] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000004 [ 264.899144][ T30] RBP: 00007f05cebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 264.907471][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.915787][ T30] R13: 0000000000000000 R14: 00007f05ced35f80 R15: 00007ffe565c2628 [ 264.924029][ T30] [ 264.964878][ T30] [ 264.964878][ T30] Showing all locks held in the system: [ 265.051060][ T30] 6 locks held by kworker/u8:1/12: [ 265.076531][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 265.154662][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 265.216615][ T30] #2: ffff8880119b8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 265.264599][ T30] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0xc7/0x330 [ 265.309998][ T30] #4: ffffffff9a5af808 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580 [ 265.352041][ T5817] unregister_netdevice: waiting for bridge0 to become free. Usage count = 2 [ 265.361197][ T30] #5: ffffffff8f09b7b8 (pool_lock){-.-.}-{2:2}, at: alloc_object+0x1ba/0x6d0 [ 265.384897][ T5817] ref_tracker: bridge0@ffff88802d47c620 has 1/1 users at [ 265.384897][ T5817] dev_ifsioc+0xbfe/0xe70 [ 265.384897][ T5817] dev_ioctl+0x719/0x1340 [ 265.384897][ T5817] sock_do_ioctl+0x240/0x460 [ 265.384897][ T5817] sock_ioctl+0x626/0x8e0 [ 265.384897][ T5817] __se_sys_ioctl+0xfb/0x170 [ 265.384897][ T5817] do_syscall_64+0xf3/0x230 [ 265.384897][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.384897][ T5817] [ 265.454811][ T30] 1 lock held by khungtaskd/30: [ 265.459681][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 265.536883][ T30] 3 locks held by kworker/u8:4/62: [ 265.595126][ T30] #0: ffff88802da3f148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 265.664621][ T30] #1: ffffc900015d7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 265.723922][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 265.745354][ T30] 3 locks held by kworker/u8:5/145: [ 265.774995][ T30] 2 locks held by pvrusb2-context/2027: [ 265.780565][ T30] #0: ffff88806ce64188 (&hdw->big_lock_mutex){+.+.}-{3:3}, at: pvr2_hdw_initialize+0xca/0x3d10 [ 265.797153][ T30] #1: ffffffff8e7e0ff0 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0x140/0x300 [ 265.808486][ T30] 2 locks held by getty/5000: [ 265.813179][ T30] #0: ffff88803221a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 265.835188][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 265.863971][ T30] 6 locks held by kworker/0:3/5238: [ 265.874585][ T30] #0: ffff888021add948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 265.886335][ T30] #1: ffffc900032bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 265.898553][ T30] #2: ffff888144bb9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 265.908632][ T30] #3: ffff88805d93d190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 265.918046][ T30] #4: ffff88805c5b8160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 265.928831][ T30] #5: ffff88806ce64188 (&hdw->big_lock_mutex){+.+.}-{3:3}, at: pvr2_hdw_disconnect+0x6e/0x520 [ 265.939336][ T30] 4 locks held by udevd/5507: [ 265.944060][ T30] #0: ffff888053d9a418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 265.953190][ T30] #1: ffff888024dbd088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 265.962797][ T30] #2: ffff88805b017878 (kn->active#27){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 265.973891][ T30] #3: ffff88805d93d190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 265.983641][ T30] 1 lock held by syz.5.111/5812: [ 265.989104][ T30] #0: ffffffff8fcb6808 (br_ioctl_mutex){+.+.}-{3:3}, at: br_ioctl_call+0x57/0xb0 [ 266.007656][ T30] 2 locks held by syz.5.111/5817: [ 266.017031][ T30] #0: ffffffff8fcb6808 (br_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x5c3/0x8e0 [ 266.031850][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 266.043088][ T30] 5 locks held by kworker/u8:10/6177: [ 266.054168][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 266.073861][ T30] #1: ffffc90004347d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 266.086063][ T30] #2: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 266.097387][ T30] #3: ffff888027365428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x110/0x2e0 [ 266.108310][ T30] #4: ffffffff8e93d240 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 266.119864][ T30] 3 locks held by syz-executor/6282: [ 266.125826][ T30] #0: ffff888067f68d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 266.136211][ T30] #1: ffff888067f68078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 266.151604][ T30] #2: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 266.163218][ T30] 3 locks held by syz-executor/6558: [ 266.168919][ T30] #0: ffff88807ff24d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 266.179634][ T30] #1: ffff88807ff24078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 266.189556][ T30] #2: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 266.200762][ T30] 3 locks held by syz-executor/6626: [ 266.206191][ T30] #0: ffff8880503ccd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 266.218362][ T30] #1: ffff8880503cc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 266.234545][ T30] #2: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 266.245014][ T30] 4 locks held by syz-executor/6686: [ 266.250503][ T30] #0: ffff88805b824d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 266.261411][ T30] #1: ffff88805b824078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 266.271993][ T30] #2: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 266.284800][ T30] #3: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 266.296383][ T30] 3 locks held by syz.5.297/6960: [ 266.301426][ T30] #0: ffff888069778d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 266.312951][ T30] #1: ffff888069778078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 266.323974][ T30] #2: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 266.334536][ T30] 1 lock held by syz.2.299/6965: [ 266.339566][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 266.356691][ T30] [ 266.359075][ T30] ============================================= [ 266.359075][ T30] [ 266.372144][ T30] NMI backtrace for cpu 0 [ 266.376488][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00100-geb952c47d154 #0 [ 266.386997][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 266.397046][ T30] Call Trace: [ 266.400317][ T30] [ 266.403264][ T30] dump_stack_lvl+0x241/0x360 [ 266.407944][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.413139][ T30] ? __pfx__printk+0x10/0x10 [ 266.417757][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 266.422722][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 266.428186][ T30] ? _printk+0xd5/0x120 [ 266.432363][ T30] ? __pfx__printk+0x10/0x10 [ 266.436970][ T30] ? __wake_up_klogd+0xcc/0x110 [ 266.441848][ T30] ? __pfx__printk+0x10/0x10 [ 266.446463][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.452131][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 266.457264][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 266.463260][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 266.469255][ T30] watchdog+0xff4/0x1040 [ 266.473517][ T30] ? watchdog+0x1ea/0x1040 [ 266.478224][ T30] ? __pfx_watchdog+0x10/0x10 [ 266.482914][ T30] kthread+0x2f2/0x390 [ 266.486989][ T30] ? __pfx_watchdog+0x10/0x10 [ 266.491677][ T30] ? __pfx_kthread+0x10/0x10 [ 266.496272][ T30] ret_from_fork+0x4d/0x80 [ 266.500704][ T30] ? __pfx_kthread+0x10/0x10 [ 266.505298][ T30] ret_from_fork_asm+0x1a/0x30 [ 266.510102][ T30] [ 266.514107][ T30] Sending NMI from CPU 0 to CPUs 1: [ 266.520212][ C1] NMI backtrace for cpu 1 [ 266.520227][ C1] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc2-syzkaller-00100-geb952c47d154 #0 [ 266.520253][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 266.520268][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 266.520300][ C1] RIP: 0010:debug_check_no_obj_freed+0x2cc/0x580 [ 266.520338][ C1] Code: 00 00 49 89 c4 49 89 c5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 e7 e8 b8 03 3c fd 49 8b 04 24 <48> 89 44 24 38 49 8d 5c 24 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 [ 266.520359][ C1] RSP: 0018:ffffc90000107940 EFLAGS: 00000046 [ 266.520378][ C1] RAX: ffff888059779150 RBX: ffff88814b421788 RCX: dffffc0000000000 [ 266.520396][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90000107820 [ 266.520413][ C1] RBP: ffffc90000107a88 R08: 0000000000000003 R09: fffff52000020f04 [ 266.520430][ C1] R10: dffffc0000000000 R11: fffff52000020f04 R12: ffff88802d725af0 [ 266.520448][ C1] R13: 1ffff11005ae4b5e R14: ffff88802dcea238 R15: 0000000000000001 [ 266.520468][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 266.520488][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.520505][ C1] CR2: 0000000020291000 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 266.520523][ C1] Call Trace: [ 266.520531][ C1] [ 266.520540][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 266.520568][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 266.520611][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 266.520638][ C1] ? nmi_handle+0x2a/0x5a0 [ 266.520673][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 266.520706][ C1] ? nmi_handle+0x151/0x5a0 [ 266.520730][ C1] ? nmi_handle+0x2a/0x5a0 [ 266.520756][ C1] ? debug_check_no_obj_freed+0x2cc/0x580 [ 266.520790][ C1] ? default_do_nmi+0x63/0x160 [ 266.520820][ C1] ? exc_nmi+0x123/0x1f0 [ 266.520847][ C1] ? end_repeat_nmi+0xf/0x53 [ 266.520878][ C1] ? debug_check_no_obj_freed+0x2cc/0x580 [ 266.520914][ C1] ? debug_check_no_obj_freed+0x2cc/0x580 [ 266.520950][ C1] ? debug_check_no_obj_freed+0x2cc/0x580 [ 266.520986][ C1] [ 266.520993][ C1] [ 266.521011][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 266.521049][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.521079][ C1] ? ieee80211_iface_work+0x272/0xf20 [ 266.521112][ C1] kmem_cache_free+0x11f/0x420 [ 266.521150][ C1] ieee80211_iface_work+0x272/0xf20 [ 266.521189][ C1] cfg80211_wiphy_work+0x2dd/0x490 [ 266.521218][ C1] ? process_scheduled_works+0x976/0x1850 [ 266.521252][ C1] process_scheduled_works+0xa65/0x1850 [ 266.521304][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 266.521343][ C1] ? assign_work+0x364/0x3d0 [ 266.521379][ C1] worker_thread+0x870/0xd30 [ 266.521422][ C1] ? __kthread_parkme+0x169/0x1d0 [ 266.521459][ C1] ? __pfx_worker_thread+0x10/0x10 [ 266.521493][ C1] kthread+0x2f2/0x390 [ 266.521515][ C1] ? __pfx_worker_thread+0x10/0x10 [ 266.521548][ C1] ? __pfx_kthread+0x10/0x10 [ 266.521571][ C1] ret_from_fork+0x4d/0x80 [ 266.521611][ C1] ? __pfx_kthread+0x10/0x10 [ 266.521634][ C1] ret_from_fork_asm+0x1a/0x30 [ 266.521677][ C1] [ 266.833172][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 266.840047][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00100-geb952c47d154 #0 [ 266.850565][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 266.860631][ T30] Call Trace: [ 266.863911][ T30] [ 266.866840][ T30] dump_stack_lvl+0x241/0x360 [ 266.871534][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.876739][ T30] ? __pfx__printk+0x10/0x10 [ 266.881353][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 266.887363][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.893007][ T30] ? vscnprintf+0x5d/0x90 [ 266.897358][ T30] panic+0x349/0x880 [ 266.901269][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.906911][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 266.913075][ T30] ? __pfx_panic+0x10/0x10 [ 266.917504][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 266.922883][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.928523][ T30] ? __irq_work_queue_local+0x137/0x410 [ 266.934100][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.939743][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 266.945124][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 266.951285][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 266.957449][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.963084][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 266.969247][ T30] watchdog+0x1033/0x1040 [ 266.973593][ T30] ? watchdog+0x1ea/0x1040 [ 266.978030][ T30] ? __pfx_watchdog+0x10/0x10 [ 266.982719][ T30] kthread+0x2f2/0x390 [ 266.986792][ T30] ? __pfx_watchdog+0x10/0x10 [ 266.991479][ T30] ? __pfx_kthread+0x10/0x10 [ 266.996075][ T30] ret_from_fork+0x4d/0x80 [ 267.000509][ T30] ? __pfx_kthread+0x10/0x10 [ 267.005101][ T30] ret_from_fork_asm+0x1a/0x30 [ 267.009892][ T30] [ 267.013117][ T30] Kernel Offset: disabled [ 267.017436][ T30] Rebooting in 86400 seconds..