last executing test programs: 31.06840858s ago: executing program 0 (id=1252): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x2, 0x0, &(0x7f00000001c0)) 13.383375931s ago: executing program 4 (id=1305): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f00000000c0)=""/44, 0x2c) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) getdents(r0, &(0x7f0000000040)=""/44, 0x2c) 12.918427749s ago: executing program 4 (id=1308): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000005600)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x3efd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x2, 0x80, 0xc2, 0x5}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x200002a6, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 8.732409493s ago: executing program 4 (id=1329): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="050001"], 0x48}}, 0x0) 8.455260384s ago: executing program 4 (id=1332): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x0) chdir(&(0x7f0000000180)='./bus\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x80000004) 7.889311631s ago: executing program 4 (id=1334): syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x40800) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa97, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x0) 7.396765048s ago: executing program 2 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0) 6.660038819s ago: executing program 4 (id=1344): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000002c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x10420, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x103, 0x0) 6.659704678s ago: executing program 2 (id=1345): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 6.118987507s ago: executing program 2 (id=1348): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240)='vxfs\x00', 0x0, 0x0) 6.061621879s ago: executing program 0 (id=1254): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c801400078009000600cb8b"], 0x44}}, 0x0) 5.802021599s ago: executing program 0 (id=1352): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @local}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0xfffe, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x0, 0xffeffffffffffffd}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b80000001900674c0000000000000000fc020000000000000000000000000000ffffffff0000000000000000"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b80000001900674c0000000000000000fc020000000000000000000000000000ffffffff000000000000000000"], 0xb8}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x7f, "97e459420578769f1cd0ba4758109eca771bbe5646cbbd7cd296ba0869cc8f8b0abfb8da402a2e28e6004e7178bfe6718bff57a73592b755abf37609aa58983445d1437f9ea674708c411ef25c3d515737508593404f60f5f05ecfcb93a78e9e1926a63a3b36c8824cf0f2a44bf5220cdbdca0cd3f2a0e8c83703e2c55c9f4"}, &(0x7f0000000280)=0x87) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000540)={r7, @in6={{0xa, 0x4e23, 0x7fffffff, @local, 0x80000000}}}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB='\b\b\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x2}, {}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x1, 0x0, {0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x0, 0x2}}, @void, @void}, 0x4c) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b0000000080211000001080211000000fe01110000000000000002000000"], 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.636303191s ago: executing program 2 (id=1354): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x14018, &(0x7f00000004c0)=ANY=[@ANYBLOB="6465636f6d706f73652c666f7263652c6e6f626172726965722c706172743d3078303030303030303030303030633538612c6465636f6d706f73652c6e6f626172726965722c6e6c733d6d6163726f6d616e2c6e6f626172726965722c747970653d0bc4d8612c0059918aafb809720798d1ef21d6a229e637d1478ded69f0287999ffb445d9017e7c3f0628f3aef4c5df69d200309b2aedad65814db128388a5bd483b30135a2fe27b944fedaac7f29dc41bd6159b4e5c53de01b7f1344a95e17afdab4e339326e423965f6cc32f7a68cbe21a5ea350315c662629dd265928bae39"], 0x3, 0x6af, &(0x7f0000000a40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES8=0x0, @ANYRES32], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4443c, &(0x7f0000001cc0)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="f1bcde2281a84392f4e66ff7ef22aa9af727ceae8a8ec95fc1b73083de2de825a0cb2b0be774fdb33650d7dace27c16bc23b2f7c7fb72585548939698f280d138aa9255a8a924008f8477e82ba11cdb11efd5ca2f1ab049ce2ccc415d2daf8dac725533a558d561654faf5e0924f1376174f374d664fad4a6ab24ec0e822e7f9426e8e5de1fe58085a0ae86fd02a118b9365961834d46208b9fb4cb1a1fa962a8b0000dc2e319379ea1e5a07aeb3f9cd4e648df4dd18e6253e7b2310a78d63a232a2a40758027a472e7d263ef567a84166f26ee56e701c63a886378788a512f28edec086b1c0823c028840eeaf3f5d8769023c01218614f4fa40be9892e7a285ac63f7f97aaa5b8ecc86e28c6193bc21a2b833e5c9c703c4cfa063dd34c245706bde3d7ac373ab04b62b4111b59eabd436dd97e788a36ef25bad99be2aa924949558c800"/353, @ANYBLOB="b4b2fafbec89c997d7775a6d144390d25f00d44df3543806bff2ef6123", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRES64], 0x0, 0x0, &(0x7f0000000000)) 5.465488662s ago: executing program 5 (id=1355): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) 4.767134968s ago: executing program 5 (id=1358): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000000)=ANY=[], 0x5a, 0x20d, &(0x7f0000000200)="$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") creat(&(0x7f0000000540)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x163042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) 4.758309453s ago: executing program 2 (id=1359): mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x5, 0x5, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x6, 0x7ff, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 4.337721971s ago: executing program 0 (id=1363): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/nfsfs\x00') getdents64(r1, 0xffffffffffffffff, 0x43) 4.299002334s ago: executing program 5 (id=1365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}}, 0x0) 4.168166307s ago: executing program 1 (id=1368): mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={0x100000, 0x70}, 0x20) 4.008689162s ago: executing program 0 (id=1369): r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x965a, &(0x7f0000012c40)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0xc0205865, &(0x7f00000000c0)=ANY=[]) 4.008300756s ago: executing program 2 (id=1370): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00000000050001"], 0x28}}, 0x0) 3.916393141s ago: executing program 5 (id=1371): futex(0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0) 3.488680056s ago: executing program 1 (id=1373): write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28) r0 = io_uring_setup(0x1d7b, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) 3.487615561s ago: executing program 3 (id=1374): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd072f5b89c3043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b90007cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b8003"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x8, 0x50}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@cgroup=r2, r4, 0x26}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r6 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000780)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r0, @ANYRESHEX, @ANYRESOCT=r1, @ANYRES8=r6, @ANYRES64, @ANYBLOB="1e69fa67ccd8929d8e26769dc0267e3aa86653a07ab492ac7d6ce554a47f70874aca3731419e3f41d65f7e003b82f42a432921187a07bca1ff82897376b38fdd609408e734dbffe08f2ff03209e541325a0f1eca3e7f2c1a2a8c8fea8f3b3fd0e9bfe6b3ad175492ae19b6c1de85706fe011300544236aadb503775bcb4267b68070f8b7f90ed1ef6a06d0c2ed00e5a6ad213a41e5f390b3585e4d1ee971c4"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r7, &(0x7f0000000300)=[{&(0x7f0000000580)=""/198, 0xc6}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000680), &(0x7f0000000040)=@udp6=r3}, 0x20) r8 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000000680)=""/224) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e25, 0x2, @local, 0x4}, 0x5c, 0x0}}], 0x1, 0x0) unshare(0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 3.469605815s ago: executing program 5 (id=1375): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 2.392378394s ago: executing program 1 (id=1376): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4000000d, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, @pix_mp}) 2.169345875s ago: executing program 3 (id=1377): prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6) 2.157930978s ago: executing program 1 (id=1378): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/721], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe40, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b60800", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28) 1.956453754s ago: executing program 3 (id=1379): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, &(0x7f0000000000)=0xaeaf) 1.808795008s ago: executing program 1 (id=1380): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1004000, &(0x7f0000000280)=ANY=[@ANYBLOB="747970653dd88d17102c6e6c733d61736369692c00b65c5e80ee881a8017a99080db5f384bdecc38aad57f2265deb9bc09ceaa37a446dd9779c499df84c71ac5709884f5a46a6157a859efa0011b98ed9e0084e7f30840308a546dfc131f58f11e2885d3d93d1ea670d769ec2f0aa0c9e9bc2dce36eb80f93e9c66e51cd63047e63897ad645ff9e1c43c323948225427a038840483468e20afe97ee11df867f724292017e27da8ee18b36e12ec848a02f157f0c97084870848c3f5101666aeeb41"], 0x4, 0x5ce, &(0x7f00000006c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) sendfile(r5, r4, 0x0, 0x84000e3a) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x3376039, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8e3410, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1a0a820, &(0x7f00000003c0)=ANY=[@ANYBLOB="023e875696757d5f5c0b5ce48020f0699b430f85c2322d3d60fa4c0dc91b40fc9f6cc12f4d6a747f455b25a527dbe86c7e8dcb5feb42032742a095a55e6edb26a9f5d468a13aa7e1375be62a87fbc3343da0364ed525a2c9010afaa89e6d", @ANYBLOB], 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/user\x00') syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) 618.306582ms ago: executing program 0 (id=1381): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec3ca1c0c"], 0x7) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x1fe000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x400, 0x0, 0x0, 0xfffffffc, 0x0, "4415264abf9f64514ae9ffc65902af2556c6b6"}) unshare(0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5415, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x24}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) syz_open_dev$audion(0x0, 0x5, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4b3dd39ed30267}, 0x0) mmap$snddsp_control(&(0x7f00000a3000/0xe000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000) madvise(&(0x7f000022b000/0x1000)=nil, 0x1000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') 617.94388ms ago: executing program 3 (id=1382): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) 552.768156ms ago: executing program 1 (id=1383): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = socket(0xa, 0x801, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x6, 0x1c, 0x0, 0x20000000) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="76901357eafc68e6a4d31ac3ba0da28e857e2a250f0f141abd4aa5e9502d41d5ed0b725cae189cfe3a0c8beac3922a82187393c26d6d04bed1d75188dd88c9ee67104ef12073956c950f48917363c5e888b597a089d381642a55ece5571e06f737e129e8739749aa2dd9385b13e7fd24a2d9f38d832e0698b57d9279256df3f5a63c036c63000000", @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c4b454c8325e01cb24c2f3c7bd462c5b8f86ca56891f8085dff0f000000000000b12d3c55ab09898b831162e94af5aab93746cc9c2846172beff34b815944f62e60470cf4d16331b53bb359d1c446b18974ae35bced61d48cfc8149eb43bec86d871bc7c43763c6e7daebe349c300000001000000012dc90b9a5f8d0ff4117ef90aff1413e2e919558d4a6412b5fdaa2694c41bab32c5c81e01243ccef8dcd85a46cfb92323a8070db43b1ef562691c070e2749", @ANYRESOCT, @ANYRESHEX], 0x1, 0x6f0, &(0x7f0000001540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="58e862283eb52a26ae39465e240726831849cfbacb263d906ccc3aae4f3be624288cc33f2ac967bc4a260cc2621c853fe42defa44dc5be33d170985690ac38d66f10ba0322d2f7d23a344fc2b74475aae614b0279b301281cc16107d217db8", 0x5f}, {&(0x7f0000000040)="b96928d76a6c5d7bdd0a17a2d417b188cccaa8c1e72ed8615596ae3f7f190e331228cb5ab92052", 0x27}, {&(0x7f00000003c0)="1959f5eaa65e573914e7eaea43f7a12a94bd8688be06c2e4d28ecdaa9be1ddd3c19486c91eb39e8868e02c728c94c0d8b145bd842c18772567fe8e6e7c9f5f7308844b87475c9a00bc64a40f2e7e272a51b5ba90360088708ab137443f9f1b523d95467b55ddf630217d4719eb28c221d11205fbd452151fe74cfaeb5573d7c7b5bc1f74933c21eb378b6ae3e22b165259b024e0aad4641f00fb45d22f5daf3d528e555e2324fcac0e541bed8bb6cc97390654ef", 0xb4}], 0x3, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, 0x0) lseek(r5, 0xffff, 0x0) write$FUSE_ATTR(r5, &(0x7f0000000340)={0x78}, 0x4e) fcntl$dupfd(r1, 0x0, r0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000001580)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @printk={@d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000600), 0x0, 0x5e7, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) listen(r6, 0x3) 428.678483ms ago: executing program 3 (id=1384): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f0000000240)={[{@rootdir={'rootdir', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@anchor={'anchor', 0x3d, 0x4}}, {@shortad}, {@mode={'mode', 0x3d, 0x1}}, {@shortad}, {@uid_forget}, {@umask={'umask', 0x3d, 0x2000005}}]}, 0x1, 0xc3d, &(0x7f0000000f00)="$eJzs3UFsHNd5AOD/jZYiKbcVEyeq3cbtpi1SWbFcWVJMxSrcVU2zDSDLRCjmFoArcqUuTJEESTWymzZMLz30EKAoesiJQGsUSNHAaIqit7KtCyQXHwqfeiJa2AiKHogigE/BBjP7VlxJlCWZpETZ32ev/tmZ/82892Y8IxN88wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiPjdl8+deC497FoAAA/Shcmvnjjp+Q8AnygX/f8/AAAAAAAAAAAAAADsdymKeDxSLF7YTNPV966h8+35a9enxsa3LzacqpIHqvzyM/TcyVOnv/T86Jle/PDyu+3JeHXy4rn6SwtXF5day8ut2frUfHtmYbZ1z3vYaflbHas6oH71tWuzly8v108+e+qmzddH3h987MjI2dGnjz/Vy50aGx+f7MupDXzko9/mTiM8DkYRxyPFM9//cWpGRBE774u7XDt7bbhqxLGqEVNj41VD5trN+ZVy40SvI4qIel+hRq+PHsC52JFGxGpZ/bLCx8rmTS42l5qX5lr1iebSSnulvTA/kbq1LdtTjyLOpIi1iNgYvH13A1FELVJ89/BmuhQRB3r98MVqYPCd61HsYRvvQVnP+kDEWvEInLN9bDCKeCVS/OTtImbKPsuf+ELEK2X8p4g3y/hiRCovjNMR71XX0fBDrjm7oRZF/Hl5/s9uptnqftC7r5z/Wv0r85cX+nJ795VH/vnwIO3ze9NQFNGs7vib6aP/ZQcAAAAAAAAAAAAAAACA3TYcRTwZKV7+zz+sxhVHNS798NnR3xv5+f4x40/cZT9l7rMRsVrc25jcg3kI8USaSOkhjyX+JBuKIv44j//79sOuDAAAAAAAAAAAAAAAAAAAwCdaEe9GihfeOZrWon9O8fb8lfrF5qW57qywvbl/e3OmdzqdTj11YyPH6RxXc1zLcT3HjRyjyOVzbOQ4neNqjms5rue4kWMcyOVzbOQ4neNqjms5rue4kWPUcvkcGzlO57ia41qO6zlu5Bj7ZO5eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICPkyKK+Gmk+M43NlOkiGhETEc3rg/2cgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh2kwFfGDSFH//caNdbWISNW/XUfLP05H42AZPx2N0TK+GI1zOTarWGt8+yHUn50ZSEX8KFIMDr1144Tn8z/Q/XbjMog3v7n17Zdq3Xigt3Hk/cHHjhw+Ozr+K0/caTltV4Fj59vz167Xp8bGxyf7Vtfy0T/dt24kH7fYnaYTEcuvv/Fac26utWThk7FQ6y7UYlf3PByxuzvcvYVadyHfr+Kh1+cOC439UY2thaju/dves/nYKJ//70WK33rnv3oP/N7z/+e632484eODP9l6/r9w64726Pn/eN+6F/LfRgZqEUMrVxcHjkQMLb/+xvH21eaV1pXW/OkTJ748OvrlUycGDkYMXW7PtfqWdtxVAAAAAAAAAAAAAAAAAA9WKuJ3IkXzR5upHhHXq/FaI2dHnz7+1IE4UI23umnc1quTF8/VX1q4urjUWl5uzdan5tszC7Otez3cUDXca2psfE8ac1fDe1z/4aGXFhZfX2pf+YOVbbcfGjp3aXllqTmz/eYYjiKi0b/mWFXhqbHxqtJz7eZ8VXRilwZmDqQi/jtSzJyup8/ndXn8XxneHejL7R//v9q3vlreo/F/n7rlOCkV8UGk+M2/eCI+X9XzUNzWZznvbyLFsTOfy3lxsMzr1aH7XoHuyMAPOl3/8NObc3ttf3wr97n76939rzz/hyPFD/7se/Fred3N73/YGv/Zf/4P3bqjPTr/n+lbd+im9xXsuOnk8388Urz4+Fvx63ndh73/o4hOp/OtiKM5+cb7Ofbo/H+2b91IdI/7G7vXfAAAAAAAAAAAgEfWQCribyPFU+O19Hxedy+//zd764726Pe/frFv3ewDmq9ox50KAAAAAPvEQCri3UhxZeWtG2Oo+8Z/3zz+87e35l4fS7dsrX7O9wvVewN28+d//Ubycad33mwAAAAAAAAAAAAAAAAAAADYV1Iq4vk8n/r0XeZTX48UL//vMzkvHSnzevPAj1R/Dl1YmD9+bm5uYaa50rw016pPLjZnWmXZz0SKzb/+XC5bVPOr9+ab787xPtRpz7VOlLlLkWL873q53bnYe3OTd+cD787FXuZ+KlL8z9/fnNubx/qzW7kny9y/ihRf/+ftc49s5Z4qc78XKX749Xov91CZ23s/avedpEO1mGs9O7Mwd9urUAEAAAAAAAAAAAAAAAAAAOB+DaQi/jRS/N/VtVjNw/7z/P+9Gfhrvdw3v9k33/8trlfz/I9U8//fafmjzP8/smstBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR0eKIt6IFIsXNtP6YPm9a+h8e/7a9amx8f7kzo2l4VSVPFDll5+h506eOv2l50fP9OJ25ffOk/Hq5MVz9ZcWri4utZaXW7P1qfn2zMJs6573sNPyW13XdazqgPrV167NXr68XD/57KmbNl8feX/wsSMjZ0efPv5UL3dqbHx8si+nNnAfR7+vym05GEX8ZaR45vs/Tv86GFHEzvti22vnwRmuGnGsasTU2HjVkLl2c36l3DjR64giot5XqNHrowdwLnakEbFaVr+s8LGyeZOLzaXmpblWfaK5tNJeaS/MT6Rubcv21KOIMylW1yJiY/D23Q1EEa9Fiu8e3kz/NhhxoNcPX7ww+dUTJ2/J/petxWKP23kXZT3rAxFrxSNwzvaxwSjiHyPFT94+Gv8+GFGL7ie+EPFKf+KLEam8ME5HvLfNdcSjqRZF/H95/s9uprcHy/tB775y/mv1r8xfXujL7d1X9tPzoXP/1+LwLhz23u3ze9NQFPHD6o6/mf7Df9cAAAAAAAAAAAAAAAAA+0gRvxwpXnjnaKrGB98YU9yev1K/2Lw01x3W1xv7V4/4ozJ2Op1OPXVjI8fpHFdzXMvxV3P+Rv4eRS6fYyPH6RxXc1zLcT3HjRzjQC6fYyPH6RxXc1zLcT3HjRyjVoVOp/OtbvlaLp/jao5rtYiiLJ+/b+QY+2TsHgAAAAAAAAAAAAAAAAAA8PFSVP+k+M43NlM1l2ojYjq6cd18oB97PwsAAP//ihAHaQ==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) unlink(&(0x7f0000000280)='./file1\x00') read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020) 426.604034ms ago: executing program 5 (id=1385): socket(0x840000000002, 0x3, 0xfa) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x2, 0x4) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRESHEX=r0], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f00000005c0)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) listen(r0, 0x2000003) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt(r3, 0x0, 0x1ff, &(0x7f0000000140), 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0x50) 0s ago: executing program 3 (id=1386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000300)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@ssd_spread}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(r1, &(0x7f00000002c0)='./file1\x00', 0x4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$snddsp_control(&(0x7f00000a3000/0xe000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x8c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc7d}]}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x98a8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x815}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}]}, 0x8c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): nds beyond EOD, truncated [ 349.034531][ T8885] loop3: p149 start 4177526784 is beyond EOD, truncated [ 349.050011][ T8885] loop3: p150 start 8388612 is beyond EOD, truncated [ 349.056845][ T8885] loop3: p151 size 32937 extends beyond EOD, truncated [ 349.077958][ T8885] loop3: p152 start 4177526784 is beyond EOD, truncated [ 349.097444][ T8885] loop3: p153 start 8388612 is beyond EOD, truncated [ 349.105656][ T8885] loop3: p154 size 32937 extends beyond EOD, truncated [ 349.139514][ T8885] loop3: p155 start 4177526784 is beyond EOD, truncated [ 349.160112][ T8885] loop3: p156 start 8388612 is beyond EOD, truncated [ 349.169410][ T8885] loop3: p157 size 32937 extends beyond EOD, truncated [ 349.209130][ T8885] loop3: p158 start 4177526784 is beyond EOD, truncated [ 349.209369][ T8712] hsr_slave_0: entered promiscuous mode [ 349.225545][ T8922] loop2: detected capacity change from 0 to 32768 [ 349.248389][ T8885] loop3: p159 start 8388612 is beyond EOD, truncated [ 349.256211][ T8712] hsr_slave_1: entered promiscuous mode [ 349.269080][ T8885] loop3: p160 size 32937 extends beyond EOD, truncated [ 349.274236][ T8922] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.713 (8922) [ 349.290860][ T8712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.303574][ T8885] loop3: p161 start 4177526784 is beyond EOD, truncated [ 349.313300][ T8712] Cannot create hsr debugfs directory [ 349.313529][ T8885] loop3: p162 start 8388612 is beyond EOD, truncated [ 349.355153][ T8922] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 349.369573][ T8885] loop3: p163 size 32937 extends beyond EOD, truncated [ 349.378411][ T8922] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 349.396053][ T8922] BTRFS info (device loop2): using free-space-tree [ 349.433787][ T8885] loop3: p164 start 4177526784 is beyond EOD, truncated [ 349.544529][ T8885] loop3: p165 start 8388612 is beyond EOD, truncated [ 349.551874][ T8885] loop3: p166 size 32937 extends beyond EOD, truncated [ 349.591663][ T8885] loop3: p167 start 4177526784 is beyond EOD, truncated [ 349.598649][ T8885] loop3: p168 start 8388612 is beyond EOD, truncated [ 349.630481][ T8885] loop3: p169 size 32937 extends beyond EOD, truncated [ 349.721777][ T8885] loop3: p170 start 4177526784 is beyond EOD, truncated [ 349.729493][ T8885] loop3: p171 start 8388612 is beyond EOD, truncated [ 349.737772][ T8885] loop3: p172 size 32937 extends beyond EOD, truncated [ 349.751657][ T8885] loop3: p173 start 4177526784 is beyond EOD, truncated [ 349.758714][ T8885] loop3: p174 start 8388612 is beyond EOD, truncated [ 349.765541][ T8885] loop3: p175 size 32937 extends beyond EOD, truncated [ 349.773969][ T8885] loop3: p176 start 4177526784 is beyond EOD, truncated [ 349.781030][ T8885] loop3: p177 start 8388612 is beyond EOD, truncated [ 349.787814][ T8885] loop3: p178 size 32937 extends beyond EOD, truncated [ 349.818358][ T8885] loop3: p179 start 4177526784 is beyond EOD, truncated [ 349.848946][ T8885] loop3: p180 start 8388612 is beyond EOD, truncated [ 349.911314][ T8885] loop3: p181 size 32937 extends beyond EOD, truncated [ 349.931173][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 349.961699][ T8885] loop3: p182 start 4177526784 is beyond EOD, truncated [ 349.980141][ T8885] loop3: p183 start 8388612 is beyond EOD, truncated [ 349.994861][ T8885] loop3: p184 size 32937 extends beyond EOD, truncated [ 350.030922][ T8885] loop3: p185 start 4177526784 is beyond EOD, truncated [ 350.051048][ T8885] loop3: p186 start 8388612 is beyond EOD, truncated [ 350.078632][ T8885] loop3: p187 size 32937 extends beyond EOD, truncated [ 350.106084][ T8885] loop3: p188 start 4177526784 is beyond EOD, truncated [ 350.150921][ T8885] loop3: p189 start 8388612 is beyond EOD, truncated [ 350.178022][ T8885] loop3: p190 size 32937 extends beyond EOD, truncated [ 350.209187][ T8885] loop3: p191 start 4177526784 is beyond EOD, truncated [ 350.222335][ T8248] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 350.238714][ T8885] loop3: p192 start 8388612 is beyond EOD, truncated [ 350.246602][ T8885] loop3: p193 size 32937 extends beyond EOD, truncated [ 350.282253][ T8885] loop3: p194 start 4177526784 is beyond EOD, truncated [ 350.300120][ T8885] loop3: p195 start 8388612 is beyond EOD, truncated [ 350.316167][ T8885] loop3: p196 size 32937 extends beyond EOD, truncated [ 350.337190][ T1276] bridge_slave_1: left allmulticast mode [ 350.367575][ T8885] loop3: p197 start 4177526784 is beyond EOD, truncated [ 350.376378][ T1276] bridge_slave_1: left promiscuous mode [ 350.406424][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.425315][ T8885] loop3: p198 start 8388612 is beyond EOD, truncated [ 350.448201][ T8885] loop3: p199 size 32937 extends beyond EOD, truncated [ 350.467283][ T8885] loop3: p200 start 4177526784 is beyond EOD, truncated [ 350.478216][ T1276] bridge_slave_0: left allmulticast mode [ 350.484779][ T1276] bridge_slave_0: left promiscuous mode [ 350.491171][ T8885] loop3: p201 start 8388612 is beyond EOD, truncated [ 350.498874][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.509579][ T8885] loop3: p202 size 32937 extends beyond EOD, truncated [ 350.526935][ T8885] loop3: p203 start 4177526784 is beyond EOD, truncated [ 350.544734][ T8885] loop3: p204 start 8388612 is beyond EOD, truncated [ 350.551837][ T8885] loop3: p205 size 32937 extends beyond EOD, truncated [ 350.560690][ T8885] loop3: p206 start 4177526784 is beyond EOD, truncated [ 350.570964][ T8885] loop3: p207 start 8388612 is beyond EOD, truncated [ 350.582835][ T8885] loop3: p208 size 32937 extends beyond EOD, truncated [ 350.592346][ T8885] loop3: p209 start 4177526784 is beyond EOD, truncated [ 350.599314][ T8885] loop3: p210 start 8388612 is beyond EOD, truncated [ 350.627270][ T8885] loop3: p211 size 32937 extends beyond EOD, truncated [ 350.671713][ T8885] loop3: p212 start 4177526784 is beyond EOD, truncated [ 350.715091][ T8885] loop3: p213 start 8388612 is beyond EOD, truncated [ 350.725284][ T8885] loop3: p214 size 32937 extends beyond EOD, truncated [ 350.765297][ T8885] loop3: p215 start 4177526784 is beyond EOD, truncated [ 350.796404][ T8885] loop3: p216 start 8388612 is beyond EOD, truncated [ 350.811655][ T8885] loop3: p217 size 32937 extends beyond EOD, truncated [ 350.832877][ T8885] loop3: p218 start 4177526784 is beyond EOD, truncated [ 350.839850][ T8885] loop3: p219 start 8388612 is beyond EOD, truncated [ 350.847857][ T8885] loop3: p220 size 32937 extends beyond EOD, truncated [ 350.857394][ T8885] loop3: p221 start 4177526784 is beyond EOD, truncated [ 350.864539][ T8885] loop3: p222 start 8388612 is beyond EOD, truncated [ 350.915705][ T8885] loop3: p223 size 32937 extends beyond EOD, truncated [ 350.927505][ T8885] loop3: p224 start 4177526784 is beyond EOD, truncated [ 350.958522][ T8885] loop3: p225 start 8388612 is beyond EOD, truncated [ 350.965398][ T8885] loop3: p226 size 32937 extends beyond EOD, truncated [ 350.999590][ T8885] loop3: p227 start 4177526784 is beyond EOD, truncated [ 351.029890][ T8885] loop3: p228 start 8388612 is beyond EOD, truncated [ 351.037018][ T8885] loop3: p229 size 32937 extends beyond EOD, truncated [ 351.068424][ T8885] loop3: p230 start 4177526784 is beyond EOD, truncated [ 351.080788][ T8885] loop3: p231 start 8388612 is beyond EOD, truncated [ 351.087498][ T8885] loop3: p232 size 32937 extends beyond EOD, truncated [ 351.118928][ T8885] loop3: p233 start 4177526784 is beyond EOD, truncated [ 351.147125][ T8885] loop3: p234 start 8388612 is beyond EOD, truncated [ 351.155112][ T8885] loop3: p235 size 32937 extends beyond EOD, truncated [ 351.182501][ T8885] loop3: p236 start 4177526784 is beyond EOD, truncated [ 351.189475][ T8885] loop3: p237 start 8388612 is beyond EOD, truncated [ 351.207832][ T8885] loop3: p238 size 32937 extends beyond EOD, truncated [ 351.246530][ T8885] loop3: p239 start 4177526784 is beyond EOD, truncated [ 351.254771][ T8885] loop3: p240 start 8388612 is beyond EOD, truncated [ 351.263488][ T8885] loop3: p241 size 32937 extends beyond EOD, truncated [ 351.290553][ T8885] loop3: p242 start 4177526784 is beyond EOD, truncated [ 351.297528][ T8885] loop3: p243 start 8388612 is beyond EOD, truncated [ 351.309231][ T8885] loop3: p244 size 32937 extends beyond EOD, truncated [ 351.317734][ T8885] loop3: p245 start 4177526784 is beyond EOD, truncated [ 351.326206][ T8885] loop3: p246 start 8388612 is beyond EOD, truncated [ 351.334300][ T8885] loop3: p247 size 32937 extends beyond EOD, truncated [ 351.342790][ T8885] loop3: p248 start 4177526784 is beyond EOD, truncated [ 351.349767][ T8885] loop3: p249 start 8388612 is beyond EOD, truncated [ 351.356992][ T5235] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 351.383463][ T8885] loop3: p250 size 32937 extends beyond EOD, truncated [ 351.399421][ T8885] loop3: p251 start 4177526784 is beyond EOD, truncated [ 351.414673][ T8885] loop3: p252 start 8388612 is beyond EOD, truncated [ 351.421575][ T8885] loop3: p253 size 32937 extends beyond EOD, truncated [ 351.447538][ T8885] loop3: p254 start 4177526784 is beyond EOD, truncated [ 351.455424][ T8885] loop3: p255 start 8388612 is beyond EOD, truncated [ 351.487747][ T8964] loop1: detected capacity change from 0 to 32768 [ 351.512108][ T8964] XFS: ikeep mount option is deprecated. [ 351.552320][ T5235] usb 3-1: Using ep0 maxpacket: 8 [ 351.562404][ T5235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.573626][ T5235] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 351.582752][ T5235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.600791][ T8964] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 351.649020][ T5235] usb 3-1: config 0 descriptor?? [ 351.661801][ T5235] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 351.679035][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.697434][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.716791][ T8964] XFS (loop1): Ending clean mount [ 351.718957][ T1276] bond0 (unregistering): Released all slaves [ 351.744508][ T8964] XFS (loop1): Quotacheck needed: Please wait. [ 351.854078][ T8964] XFS (loop1): Quotacheck: Done. [ 352.033741][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'. [ 352.096516][ T7947] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 352.143526][ T5395] udevd[5395]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 352.157434][ T5419] udevd[5419]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 352.175931][ T5287] udevd[5287]: inotify_add_watch(7, /dev/loop3p22, 10) failed: No such file or directory [ 352.189539][ T7134] udevd[7134]: inotify_add_watch(7, /dev/loop3p10, 10) failed: No such file or directory [ 352.206731][ T5291] udevd[5291]: inotify_add_watch(7, /dev/loop3p25, 10) failed: No such file or directory [ 352.210362][ T5235] gspca_vc032x: reg_r err -110 [ 352.248152][ T5288] udevd[5288]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 352.287507][ T5699] udevd[5699]: inotify_add_watch(7, /dev/loop3p13, 10) failed: No such file or directory [ 352.294949][ T8977] udevd[8977]: inotify_add_watch(7, /dev/loop3p34, 10) failed: No such file or directory [ 352.313137][ T8974] udevd[8974]: inotify_add_watch(7, /dev/loop3p28, 10) failed: No such file or directory [ 352.332894][ T5644] udevd[5644]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 352.347978][ T5235] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 352.642573][ T29] audit: type=1326 audit(2000000134.709:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.2.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab913779f9 code=0x0 [ 354.015189][ T8989] netlink: 296 bytes leftover after parsing attributes in process `syz.3.862'. [ 354.250686][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 354.515916][ T1276] hsr_slave_0: left promiscuous mode [ 354.556431][ T1276] hsr_slave_1: left promiscuous mode [ 354.589215][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.624303][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.658171][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.670573][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.715283][ T1276] veth1_macvtap: left promiscuous mode [ 354.721931][ T1276] veth0_macvtap: left promiscuous mode [ 354.727698][ T1276] veth1_vlan: left promiscuous mode [ 354.733623][ T1276] veth0_vlan: left promiscuous mode [ 354.869367][ T5290] usb 3-1: USB disconnect, device number 9 [ 354.984984][ T9004] netlink: 256 bytes leftover after parsing attributes in process `syz.2.866'. [ 356.131821][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 356.175881][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 356.218563][ T29] audit: type=1800 audit(2000000138.309:240): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.868" name="/" dev="fuse" ino=1 res=0 errno=0 [ 356.835190][ T9017] loop3: detected capacity change from 0 to 256 [ 356.888943][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.897899][ T9017] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 356.932469][ T8677] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 357.050527][ T8677] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 357.208369][ T9015] loop1: detected capacity change from 0 to 40427 [ 357.216311][ T9015] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 357.224168][ T9015] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 357.235430][ T9015] F2FS-fs (loop1): invalid crc value [ 357.267217][ T9015] F2FS-fs (loop1): Found nat_bits in checkpoint [ 357.405791][ T9015] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 357.413826][ T9015] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 357.562109][ T8677] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.624712][ T8677] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.833132][ T9032] loop3: detected capacity change from 0 to 128 [ 358.455930][ T9032] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.526153][ T9032] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.666345][ T7306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.337710][ T8677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.459492][ T8677] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.499598][ T1263] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.506770][ T1263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.661060][ T1263] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.668284][ T1263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.705937][ T8487] veth0_vlan: entered promiscuous mode [ 359.785691][ T8487] veth1_vlan: entered promiscuous mode [ 360.071589][ T8487] veth0_macvtap: entered promiscuous mode [ 360.092575][ T8712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 360.109675][ T8487] veth1_macvtap: entered promiscuous mode [ 360.196888][ T8712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 360.239213][ T8712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.272572][ T8712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 360.333532][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.348546][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.362682][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.385313][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.413407][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.448523][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.461182][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.540518][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.594960][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.636801][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.670085][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.685670][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.699707][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.723298][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.793715][ T8487] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.827781][ T8487] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.841567][ T9069] loop1: detected capacity change from 0 to 64 [ 360.862101][ T8487] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.882070][ T8487] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.158058][ T8677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.218589][ T9073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.883'. [ 361.483291][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.536286][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.805985][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.842505][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.883843][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.947083][ T8712] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.995061][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.002273][ T5695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.117179][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.124390][ T5695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.142544][ T9071] loop3: detected capacity change from 0 to 32768 [ 362.221719][ T9088] loop1: detected capacity change from 0 to 512 [ 362.403461][ T9088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.484484][ T9088] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.574944][ T9094] netlink: 6 bytes leftover after parsing attributes in process `syz.5.776'. [ 363.634594][ T8677] veth0_vlan: entered promiscuous mode [ 363.647967][ T8677] veth1_vlan: entered promiscuous mode [ 365.039371][ T29] audit: type=1800 audit(2000000146.299:241): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.897" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 365.138774][ T7947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.190591][ T29] audit: type=1804 audit(2000000146.379:242): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.897" name="/newroot/41/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 365.358301][ T8677] veth0_macvtap: entered promiscuous mode [ 365.420346][ T8677] veth1_macvtap: entered promiscuous mode [ 365.577759][ T8677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.640153][ T8677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.681268][ T8677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.722570][ T8677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.757374][ T8677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.791164][ T8677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.813468][ T9114] loop5: detected capacity change from 0 to 2048 [ 365.822199][ T8677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.855828][ T8677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.861013][ T9114] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 365.890630][ T9114] UDF-fs: Scanning with blocksize 512 failed [ 365.896196][ T8677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.953434][ T8677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.981333][ T9114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.061722][ T8677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.246234][ T8677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.279797][ T8677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.724283][ T8677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.775797][ T8677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.786312][ T8677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.814556][ T8677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.836677][ T8677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.921813][ T8677] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.980056][ T8677] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.988808][ T8677] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.037140][ T8677] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.270694][ T9138] loop5: detected capacity change from 0 to 2048 [ 368.330176][ T9140] loop2: detected capacity change from 0 to 512 [ 368.337180][ T9140] ext4: Unknown parameter 'fsuuid' [ 368.392709][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.406256][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.412853][ T8712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.443774][ T9138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.495402][ T29] audit: type=1326 audit(2000000150.589:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda181779f9 code=0x7ffc0000 [ 368.551854][ T29] audit: type=1326 audit(2000000150.619:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7fda181779f9 code=0x7ffc0000 [ 368.574069][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.645765][ T29] audit: type=1326 audit(2000000150.619:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda181779f9 code=0x7ffc0000 [ 368.687953][ T9155] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.896: bg 0: block 32: padding at end of block bitmap is not set [ 368.792901][ T29] audit: type=1326 audit(2000000150.619:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda181779f9 code=0x7ffc0000 [ 368.886156][ T29] audit: type=1326 audit(2000000150.619:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda181779f9 code=0x7ffc0000 [ 368.919794][ T29] audit: type=1326 audit(2000000150.619:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda181779f9 code=0x7ffc0000 [ 368.952265][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.135665][ T9155] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 369.222543][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.428609][ T29] audit: type=1326 audit(2000000150.619:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda181779f9 code=0x7ffc0000 [ 369.513699][ T8712] veth0_vlan: entered promiscuous mode [ 369.672021][ T29] audit: type=1326 audit(2000000150.619:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda181779f9 code=0x7ffc0000 [ 369.695151][ T8712] veth1_vlan: entered promiscuous mode [ 369.747054][ T8487] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /3/file0: bad entry in directory: inode out of bounds - offset=92, inode=32784, rec_len=16, size=2048 fake=0 [ 369.978148][ T8712] veth0_macvtap: entered promiscuous mode [ 369.988114][ T8487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.029841][ T8712] veth1_macvtap: entered promiscuous mode [ 370.118883][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 370.118906][ T29] audit: type=1326 audit(2000000152.209:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.1.907" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ac9779f9 code=0x0 [ 370.153341][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.226322][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.280144][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.309531][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.352316][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.388312][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.424981][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.470030][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.493682][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.519201][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.543267][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.592758][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.634273][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.674260][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.720605][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.757962][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.778862][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.817391][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.829503][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.855917][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.866754][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.902314][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.916423][ T9201] loop4: detected capacity change from 0 to 2048 [ 370.987884][ T8712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.014898][ T8712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.031908][ T9201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.040899][ T8712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.044099][ T5332] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 371.053009][ T8712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.203146][ T8677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.362470][ T5332] usb 4-1: Using ep0 maxpacket: 16 [ 371.382446][ T9212] loop5: detected capacity change from 0 to 1024 [ 371.387592][ T5332] usb 4-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 371.432302][ T9212] hfsplus: unable to parse mount options [ 371.440696][ T5332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.491739][ T5332] usb 4-1: config 0 descriptor?? [ 371.515003][ T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.552618][ T5332] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 371.562541][ T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.683660][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.726070][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.728321][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.771497][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.820080][ T5228] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 371.828304][ T9225] loop5: detected capacity change from 0 to 1024 [ 372.057001][ T5228] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 372.130076][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.210233][ T5332] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 372.211839][ T5228] usb 3-1: config 0 descriptor?? [ 372.229764][ T5332] sq905c 4-1:0.0: Get version command failed [ 372.236157][ T5332] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 372.664261][ T5228] usb 3-1: bad CDC descriptors [ 373.107927][ T9235] tap0: tun_chr_ioctl cmd 1074025672 [ 373.111578][ T5228] usb 3-1: USB disconnect, device number 10 [ 373.115586][ T9235] tap0: ignored: set checksum enabled [ 373.330907][ T5241] Bluetooth: hci3: command 0x1407 tx timeout [ 373.337808][ T5248] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 373.437348][ T9247] loop3: detected capacity change from 0 to 1024 [ 373.455493][ T9247] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 373.491664][ T9247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.538377][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 374.233977][ T9268] netlink: 'syz.0.930': attribute type 33 has an invalid length. [ 374.330147][ T9268] netlink: 152 bytes leftover after parsing attributes in process `syz.0.930'. [ 374.486706][ T9272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.946'. [ 374.665599][ T8] usb 4-1: USB disconnect, device number 10 [ 374.714888][ T7306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.135224][ T9291] loop3: detected capacity change from 0 to 256 [ 375.181767][ T9291] exfat: Deprecated parameter 'utf8' [ 375.244508][ T9289] loop2: detected capacity change from 0 to 1024 [ 375.290964][ T9291] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 375.420455][ T9289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.931270][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'. [ 378.134931][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.199478][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.373099][ T8248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.477072][ T9327] loop1: detected capacity change from 0 to 512 [ 378.520931][ T9327] EXT4-fs: Ignoring removed oldalloc option [ 378.561252][ T9330] netlink: 153632 bytes leftover after parsing attributes in process `syz.0.947'. [ 378.590541][ T9327] EXT4-fs: Ignoring removed oldalloc option [ 378.622586][ T9330] netlink: zone id is out of range [ 378.633346][ T9327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 378.651889][ T9330] netlink: zone id is out of range [ 378.758264][ T9327] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.949: invalid indirect mapped block 83886080 (level 1) [ 378.852696][ T9330] netlink: zone id is out of range [ 378.861588][ T9330] netlink: zone id is out of range [ 378.872833][ T9330] netlink: zone id is out of range [ 378.878062][ T9327] EXT4-fs (loop1): Remounting filesystem read-only [ 378.917926][ T9330] netlink: zone id is out of range [ 378.932587][ T9330] netlink: zone id is out of range [ 378.939349][ T9330] netlink: zone id is out of range [ 378.946398][ T9330] netlink: zone id is out of range [ 378.951900][ T9330] netlink: zone id is out of range [ 378.961551][ T9327] EXT4-fs (loop1): 1 orphan inode deleted [ 378.980993][ T9327] EXT4-fs (loop1): 1 truncate cleaned up [ 378.997702][ T9327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.238381][ T7947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.672693][ T9376] syz.3.962[9376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.672874][ T9376] syz.3.962[9376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.704317][ T9380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.964'. [ 383.889844][ T9380] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 384.178917][ T9397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.311667][ T9384] bond0: (slave macvlan2): Releasing backup interface [ 384.613352][ T9411] loop0: detected capacity change from 0 to 512 [ 384.729899][ T9411] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.972: casefold flag without casefold feature [ 385.016047][ T9411] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.972: couldn't read orphan inode 15 (err -117) [ 385.050064][ T9411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.228836][ T9419] loop1: detected capacity change from 0 to 8 [ 386.223377][ T8712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.268324][ T9427] loop2: detected capacity change from 0 to 256 [ 386.327973][ T9427] exfat: Deprecated parameter 'utf8' [ 386.357720][ T9427] exfat: Deprecated parameter 'utf8' [ 386.381756][ T9430] ufs: You didn't specify the type of your ufs filesystem [ 386.381756][ T9430] [ 386.381756][ T9430] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 386.381756][ T9430] [ 386.381756][ T9430] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 386.436759][ T9427] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 386.470361][ T9430] syz.5.976: attempt to access beyond end of device [ 386.470361][ T9430] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 387.440174][ T9446] tmpfs: Bad value for 'size' [ 387.508175][ T58] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 387.700957][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 387.713680][ T58] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.960099][ T58] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.078457][ T58] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.833656][ T9463] netlink: 'syz.4.985': attribute type 1 has an invalid length. [ 389.017460][ T58] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.030643][ T58] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.031614][ T29] audit: type=1800 audit(2000000171.099:262): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.984" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 389.039672][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.310154][ T58] usb 2-1: GET_CAPABILITIES returned 0 [ 389.318107][ T58] usbtmc 2-1:16.0: can't read capabilities [ 389.458799][ T9472] loop3: detected capacity change from 0 to 512 [ 390.450188][ T5248] Bluetooth: hci3: command 0x1407 tx timeout [ 390.619487][ T9472] loop3: detected capacity change from 0 to 512 [ 390.676907][ T9472] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.792156][ T9472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 390.894833][ T9472] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.232308][ T9492] loop4: detected capacity change from 0 to 16 [ 392.260331][ T5292] usb 2-1: USB disconnect, device number 7 [ 392.319301][ T9492] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 392.601553][ T7306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 394.122687][ T9513] loop0: detected capacity change from 0 to 2048 [ 394.179649][ T9513] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 394.284289][ T9513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.419831][ T9524] loop4: detected capacity change from 0 to 256 [ 394.460891][ T9524] exfat: Deprecated parameter 'namecase' [ 394.505940][ T9524] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 394.876126][ T9537] loop1: detected capacity change from 0 to 512 [ 394.918954][ T9537] EXT4-fs: Ignoring removed i_version option [ 395.012145][ T9537] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.1004: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 395.074711][ T9537] EXT4-fs error (device loop1): ext4_quota_enable:7025: comm syz.1.1004: Bad quota inode: 4, type: 1 [ 395.109269][ T9534] loop3: detected capacity change from 0 to 2048 [ 395.157836][ T9534] udf: Unknown parameter 'i [ 395.157836][ T9534] ' [ 395.217902][ T9543] bridge_slave_0: default FDB implementation only supports local addresses [ 395.240550][ T9537] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 395.362542][ T9537] EXT4-fs (loop1): mount failed [ 395.662669][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 395.907797][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 395.945125][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 395.986752][ T8] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 396.030513][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.076205][ T8] usb 4-1: config 0 descriptor?? [ 396.106602][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 396.316031][ T9566] loop4: detected capacity change from 0 to 16 [ 396.361419][ T5241] Bluetooth: Wrong link type (-71) [ 396.374131][ T9566] erofs: (device loop4): mounted with root inode @ nid 36. [ 396.465245][ T9571] loop5: detected capacity change from 0 to 512 [ 396.473097][ T5241] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 396.564688][ T9566] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 396.630614][ T9571] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 396.664624][ T9571] EXT4-fs (loop5): 1 truncate cleaned up [ 396.674298][ T29] audit: type=1800 audit(2000000178.769:263): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1023" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 396.708250][ T9571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.711743][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.810621][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.336815][ T8487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.606064][ T9584] loop5: detected capacity change from 0 to 512 [ 397.658902][ T9584] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.822881][ T9584] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 397.875045][ T9584] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 397.953442][ T9592] 9pnet_fd: Insufficient options for proto=fd [ 398.140412][ T9594] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 398.167782][ T5292] usb 4-1: USB disconnect, device number 11 [ 398.263115][ T9594] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 398.365539][ T9594] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 398.540354][ T9600] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 398.546174][ T9600] pim6reg0: linktype set to 776 [ 398.892663][ T8487] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 399.919063][ T5228] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 399.958906][ T9616] loop0: detected capacity change from 0 to 2048 [ 400.220287][ T5228] usb 6-1: Using ep0 maxpacket: 8 [ 400.266171][ T5228] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 400.322762][ T5228] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 400.439016][ T5228] usb 6-1: config 0 has no interface number 0 [ 400.853628][ T5241] Bluetooth: hci0: command 0x0406 tx timeout [ 400.875323][ T5228] usb 6-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 400.888392][ T5228] usb 6-1: config 0 interface 216 altsetting 94 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 400.927901][ T5228] usb 6-1: config 0 interface 216 has no altsetting 1 [ 400.984410][ T9616] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.019756][ T5228] usb 6-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 401.083614][ T5228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.106645][ T9616] [syz.0.1037/9616] FS: loop0 File: /blkio.throttle.io_serviced would truncate fibmap result [ 401.120259][ T5228] usb 6-1: Product: syz [ 401.159247][ T5228] usb 6-1: Manufacturer: syz [ 401.198981][ T5228] usb 6-1: SerialNumber: syz [ 401.241140][ T5228] usb 6-1: config 0 descriptor?? [ 401.263214][ T5228] hso 6-1:0.216: Not our interface [ 401.268879][ T5228] usb-storage 6-1:0.216: USB Mass Storage device detected [ 401.583113][ T2633] usb 6-1: USB disconnect, device number 10 [ 401.733013][ T9631] loop0: detected capacity change from 0 to 512 [ 401.818069][ T9631] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1028: bad orphan inode 4 [ 401.981295][ T9631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.199273][ T8712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.362128][ T9636] loop4: detected capacity change from 0 to 32768 [ 402.369306][ T9636] btrfs: Deprecated parameter 'usebackuproot' [ 402.375710][ T9636] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 402.400681][ T9636] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1032 (9636) [ 402.443068][ T9638] loop5: detected capacity change from 0 to 164 [ 402.570696][ T9636] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 402.580988][ T9636] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 402.590500][ T9636] BTRFS info (device loop4): disk space caching is enabled [ 402.597714][ T9636] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 402.670494][ T9638] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 402.849734][ T9645] loop0: detected capacity change from 0 to 1024 [ 403.689928][ T9638] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 403.713383][ T9645] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.960640][ T1263] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xab36da95f7d629ca8cc302fd0fd3c25f2e0c358a27b6cae5b3699304a6c15a5c level 0 [ 404.021694][ T9638] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 404.109318][ T9636] BTRFS error (device loop4): failed to load root extent [ 404.117852][ T9636] BTRFS warning (device loop4): try to load backup roots slot 1 [ 404.310463][ T9636] BTRFS info (device loop4 state M): disabling free space tree [ 404.318761][ T9636] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 404.329621][ T9636] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 404.410024][ T9636] BTRFS info (device loop4 state M): use compression, level 0 [ 404.660554][ T8677] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 405.540646][ T9679] cgroup: Invalid name [ 406.711907][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 406.814250][ T9689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.939904][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.956748][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.973609][ T9689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.983895][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.022644][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.036790][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.046189][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.249113][ T9699] loop3: detected capacity change from 0 to 16 [ 407.305465][ T9699] erofs: (device loop3): z_erofs_load_lz4_config: invalid lz4 cfgs, size=4 [ 407.656769][ T9701] loop4: detected capacity change from 0 to 4096 [ 407.707335][ T9701] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 407.841253][ T9701] ntfs3: loop4: $AttrDef is corrupted. [ 408.523271][ T5248] Bluetooth: hci5: unexpected event 0x30 length: 32 > 3 [ 408.523362][ T5248] Bluetooth: hci5: link tx timeout [ 408.536607][ T5248] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 408.538514][ T9691] chnl_net:caif_netlink_parms(): no params data found [ 408.652770][ T9721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1056'. [ 408.694797][ T5241] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 408.709315][ T9721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1056'. [ 408.720987][ T9721] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1056'. [ 408.733000][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 408.742889][ T9720] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 409.144968][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.152897][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.160271][ T9691] bridge_slave_0: entered allmulticast mode [ 409.169634][ T9691] bridge_slave_0: entered promiscuous mode [ 409.175830][ T5241] Bluetooth: hci2: command tx timeout [ 409.188125][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.196957][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.229169][ T9691] bridge_slave_1: entered allmulticast mode [ 409.284042][ T9691] bridge_slave_1: entered promiscuous mode [ 409.290096][ T2633] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 409.360419][ T5332] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 409.455141][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.503751][ T2633] usb 4-1: Using ep0 maxpacket: 8 [ 409.505286][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.531424][ T2633] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.572308][ T2633] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 409.591802][ T5332] usb 2-1: Using ep0 maxpacket: 16 [ 409.600489][ T5332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 409.610541][ T2633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.613352][ T2633] usb 4-1: config 0 descriptor?? [ 409.640832][ T5332] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 6.8a [ 409.646765][ T2633] gspca_main: spca501-2.14.0 probing 0000:0000 [ 409.656636][ T5332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.656667][ T5332] usb 2-1: Product: syz [ 409.656688][ T5332] usb 2-1: Manufacturer: syz [ 409.711180][ T5332] usb 2-1: SerialNumber: syz [ 409.718373][ T9744] netlink: 'syz.5.1065': attribute type 21 has an invalid length. [ 409.732349][ T5332] usb 2-1: config 0 descriptor?? [ 409.744949][ T5332] mcba_usb 2-1:0.0: Can't find endpoints [ 409.748317][ T9744] netlink: 'syz.5.1065': attribute type 20 has an invalid length. [ 409.811436][ T9691] team0: Port device team_slave_0 added [ 409.846003][ T9691] team0: Port device team_slave_1 added [ 409.957586][ T9] usb 2-1: USB disconnect, device number 8 [ 409.977555][ T9748] loop5: detected capacity change from 0 to 64 [ 410.021469][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.033859][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.081963][ T9691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.223854][ T29] audit: type=1326 audit(2000000192.309:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.0.1068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39e57779f9 code=0x0 [ 410.421065][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.809656][ T2633] gspca_spca501: reg write: error -110 [ 411.840958][ T5241] Bluetooth: hci5: command 0x0406 tx timeout [ 411.853793][ T5241] Bluetooth: hci2: command tx timeout [ 411.910563][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.159721][ T2633] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 413.001656][ T9691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.890081][ T5248] Bluetooth: hci2: command tx timeout [ 414.250240][ T2633] spca501 4-1:0.0: probe with driver spca501 failed with error -22 [ 414.273999][ T2633] usb 4-1: USB disconnect, device number 12 [ 415.440968][ T9767] loop4: detected capacity change from 0 to 256 [ 415.917306][ T9691] hsr_slave_0: entered promiscuous mode [ 415.974686][ T5248] Bluetooth: hci2: command tx timeout [ 416.375325][ T9691] hsr_slave_1: entered promiscuous mode [ 416.670464][ T9691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.678085][ T9691] Cannot create hsr debugfs directory [ 417.036152][ T9788] loop1: detected capacity change from 0 to 1024 [ 417.213261][ T9800] netlink: 'syz.5.1081': attribute type 4 has an invalid length. [ 417.309218][ T9800] loop5: detected capacity change from 0 to 128 [ 417.514903][ T9788] hfsplus: xattr searching failed [ 418.358622][ T9796] loop3: detected capacity change from 0 to 32768 [ 418.483458][ T9800] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 418.501959][ T9800] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 418.575625][ T9691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.666907][ T9800] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 418.781981][ T9800] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 418.827004][ T9808] hfsplus: xattr searching failed [ 418.906281][ T9800] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 418.966108][ T9691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.974781][ T9800] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 419.015275][ T9800] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 419.039331][ T9800] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 419.230155][ T8487] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 419.254404][ T9691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.394864][ T9691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.569856][ T9813] net_ratelimit: 394 callbacks suppressed [ 419.569873][ T9813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.820185][ T2633] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 419.856533][ T5696] hfsplus: b-tree write err: -5, ino 3 [ 419.988436][ T9823] loop4: detected capacity change from 0 to 128 [ 420.066508][ T2633] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 420.122206][ T2633] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.210356][ T2633] usb 6-1: config 0 has no interface number 0 [ 420.217000][ T2633] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 420.235600][ T2633] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 420.273273][ T2633] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 420.290354][ T2633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.328768][ T2633] usb 6-1: config 0 descriptor?? [ 420.360730][ T9691] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 420.385180][ T9827] loop1: detected capacity change from 0 to 1024 [ 420.394389][ T9827] EXT4-fs: Ignoring removed orlov option [ 420.400814][ T9827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.407340][ T9691] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 420.460108][ T5228] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 420.542730][ T2633] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 420.552831][ T9691] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 420.670135][ T5228] usb 1-1: Using ep0 maxpacket: 16 [ 420.690557][ T5228] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.700157][ T81] usb 6-1: Failed to submit usb control message: -71 [ 420.702669][ T2633] usb 6-1: USB disconnect, device number 11 [ 420.715109][ T5228] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.745953][ T81] usb 6-1: unable to send the bmi data to the device: -71 [ 420.842817][ T5228] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 420.845389][ T9691] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 420.852704][ T5228] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 420.875936][ T81] usb 6-1: unable to get target info from device [ 420.886445][ T5228] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 420.897206][ T5228] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 420.897241][ T81] usb 6-1: could not get target info (-71) [ 420.917514][ T9827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.920076][ T81] usb 6-1: could not probe fw (-71) [ 420.936669][ T5228] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.947208][ T5228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.955601][ T5228] usb 1-1: Product: syz [ 420.962155][ T5228] usb 1-1: Manufacturer: syz [ 420.966963][ T5228] usb 1-1: SerialNumber: syz [ 421.076462][ T7947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.147282][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 421.336994][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.381741][ T9691] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.417853][ T9839] loop1: detected capacity change from 0 to 256 [ 421.448990][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.456251][ T7259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.491155][ T5228] cdc_ncm 1-1:1.0: bind() failure [ 421.518678][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.525868][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.533147][ T5228] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 421.554066][ T5228] cdc_ncm 1-1:1.1: bind() failure [ 421.595351][ T5228] usb 1-1: USB disconnect, device number 14 [ 421.646359][ T9839] FAT-fs (loop1): Directory bread(block 64) failed [ 421.669472][ T9839] FAT-fs (loop1): Directory bread(block 65) failed [ 421.679390][ T9839] FAT-fs (loop1): Directory bread(block 66) failed [ 421.687055][ T9839] FAT-fs (loop1): Directory bread(block 67) failed [ 421.694560][ T9839] FAT-fs (loop1): Directory bread(block 68) failed [ 421.708541][ T9839] FAT-fs (loop1): Directory bread(block 69) failed [ 421.718727][ T9839] FAT-fs (loop1): Directory bread(block 70) failed [ 421.735609][ T9839] FAT-fs (loop1): Directory bread(block 71) failed [ 421.749513][ T9839] FAT-fs (loop1): Directory bread(block 72) failed [ 421.757000][ T9839] FAT-fs (loop1): Directory bread(block 73) failed [ 421.919519][ T5332] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 422.140081][ T5332] usb 6-1: Using ep0 maxpacket: 32 [ 422.145462][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.173579][ T5332] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 422.208006][ T5332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.237001][ T5332] usb 6-1: Product: syz [ 422.245583][ T5332] usb 6-1: Manufacturer: syz [ 422.250748][ T5332] usb 6-1: SerialNumber: syz [ 422.266341][ T5332] usb 6-1: config 0 descriptor?? [ 422.272213][ T9852] loop1: detected capacity change from 0 to 2048 [ 422.284714][ T5332] ums-karma 6-1:0.0: USB Mass Storage device detected [ 422.381006][ T9691] veth0_vlan: entered promiscuous mode [ 422.398414][ T9691] veth1_vlan: entered promiscuous mode [ 422.404957][ T9852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.509066][ T9691] veth0_macvtap: entered promiscuous mode [ 422.569066][ T5332] usb 6-1: USB disconnect, device number 12 [ 422.569300][ T9691] veth1_macvtap: entered promiscuous mode [ 422.624701][ T29] audit: type=1800 audit(2000000204.719:265): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1096" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 422.683105][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.729646][ T29] audit: type=1800 audit(2000000204.769:266): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1096" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 422.770585][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.786824][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.799440][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.839465][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.872035][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.916915][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.947733][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.969316][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.996314][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.034034][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.055348][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.087764][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.102033][ T7947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.117520][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.128818][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.140847][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.169416][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.197849][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.229846][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.245350][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.277954][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.313906][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.348812][ T9867] loop1: detected capacity change from 0 to 1024 [ 423.349188][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.383765][ T9691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.400198][ T9691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.426815][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.508630][ T9691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.529617][ T972] hfsplus: b-tree write err: -5, ino 4 [ 423.535359][ T9691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.560119][ T9691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.568955][ T9691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.833001][ T9873] loop5: detected capacity change from 0 to 64 [ 423.861621][ T9863] loop0: detected capacity change from 0 to 32768 [ 423.895340][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.899901][ T9863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1100 (9863) [ 423.909650][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.960137][ T9863] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 423.983700][ T9873] hfs: request for non-existent node 1547 in B*Tree [ 424.010191][ T9863] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 424.030829][ T9873] hfs: request for non-existent node 1547 in B*Tree [ 424.039794][ T9863] BTRFS info (device loop0): using free-space-tree [ 424.055409][ T5696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.084461][ T5696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.325267][ T9895] loop2: detected capacity change from 0 to 256 [ 424.364426][ T9895] exfat: Deprecated parameter 'utf8' [ 424.399537][ T9895] exfat: Deprecated parameter 'namecase' [ 424.437943][ T9895] exfat: Deprecated parameter 'namecase' [ 424.461726][ T9895] exfat: Deprecated parameter 'utf8' [ 424.480713][ T8712] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.536197][ T9895] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 424.759133][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 425.227847][ T9908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1113'. [ 425.273053][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'. [ 425.297975][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1113'. [ 425.357161][ T9910] loop4: detected capacity change from 0 to 512 [ 425.407574][ T9910] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 425.451036][ T9910] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 425.467786][ T9912] bridge0: port 3(macsec1) entered blocking state [ 425.476776][ T9875] loop1: detected capacity change from 0 to 32768 [ 425.480045][ T9910] EXT4-fs (loop4): orphan cleanup on readonly fs [ 425.518897][ T9875] XFS: noikeep mount option is deprecated. [ 425.528495][ T9912] bridge0: port 3(macsec1) entered disabled state [ 425.570590][ T9912] macsec1: entered allmulticast mode [ 425.596005][ T9910] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1114: Invalid block bitmap block 0 in block_group 0 [ 425.622978][ T9912] macsec1: entered promiscuous mode [ 425.642665][ T9875] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 425.681343][ T9924] loop5: detected capacity change from 0 to 1024 [ 425.726980][ T9910] EXT4-fs (loop4): Remounting filesystem read-only [ 425.756961][ T9910] Quota error (device loop4): write_blk: dquota write failed [ 425.821253][ T9921] loop2: detected capacity change from 0 to 512 [ 425.990180][ T29] audit: type=1800 audit(2000000207.979:267): pid=9929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1116" name="bus" dev="loop5" ino=25 res=0 errno=0 [ 426.010970][ T9910] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 426.027537][ T9921] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.1115: iget: bogus i_mode (0) [ 426.149634][ T9910] EXT4-fs (loop4): 1 orphan inode deleted [ 426.206550][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.216232][ T9921] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1115: couldn't read orphan inode 17 (err -117) [ 426.231150][ T9910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 426.260769][ T9921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.293969][ T9875] XFS (loop1): Ending clean mount [ 426.521805][ T9691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.554404][ T9875] XFS (loop1): Quotacheck needed: Please wait. [ 426.559079][ T9934] loop0: detected capacity change from 0 to 512 [ 426.583474][ T9934] EXT4-fs: Ignoring removed orlov option [ 426.607593][ T9934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 426.632094][ T8677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.725716][ T9934] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1117: corrupted in-inode xattr: overlapping e_value [ 426.798874][ T9875] XFS (loop1): Quotacheck: Done. [ 426.814163][ T9934] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1117: couldn't read orphan inode 15 (err -117) [ 426.863574][ T9934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.971268][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 427.070110][ T7947] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 427.077392][ T9934] EXT4-fs warning (device loop0): ext4_empty_dir:3105: inode #2: comm syz.0.1117: directory missing '..' [ 427.263097][ T8712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.610986][ T9955] Bluetooth: MGMT ver 1.23 [ 427.830890][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 428.950946][ T9755] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.961819][ T9755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.291746][ T9755] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.314778][ T9755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.335662][ T9755] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 429.344122][ T9755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.744174][ T9978] ieee802154 phy0 wpan0: encryption failed: -22 [ 430.089566][ T9982] loop5: detected capacity change from 0 to 2048 [ 430.222469][ T9995] loop0: detected capacity change from 0 to 64 [ 430.288294][ T9982] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only [ 430.414235][ T9982] loop5: detected capacity change from 0 to 256 [ 430.546601][ T9982] FAT-fs (loop5): Directory bread(block 64) failed [ 430.570897][ T9982] FAT-fs (loop5): Directory bread(block 65) failed [ 430.577529][ T9982] FAT-fs (loop5): Directory bread(block 66) failed [ 430.639747][ T9967] chnl_net:caif_netlink_parms(): no params data found [ 430.691668][T10006] netlink: 'syz.2.1145': attribute type 2 has an invalid length. [ 430.712503][ T9982] FAT-fs (loop5): Directory bread(block 67) failed [ 430.730403][T10006] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1145'. [ 430.739692][ T9982] FAT-fs (loop5): Directory bread(block 68) failed [ 430.739737][ T9982] FAT-fs (loop5): Directory bread(block 69) failed [ 430.830243][ T9982] FAT-fs (loop5): Directory bread(block 70) failed [ 430.866370][ T9982] FAT-fs (loop5): Directory bread(block 71) failed [ 430.888244][ T9982] FAT-fs (loop5): Directory bread(block 72) failed [ 430.933217][ T9982] FAT-fs (loop5): Directory bread(block 73) failed [ 431.128740][T10021] syz.0.1147[10021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.128919][T10021] syz.0.1147[10021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.162892][T10023] loop1: detected capacity change from 0 to 64 [ 431.434756][ T9967] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.467580][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.490286][ T9755] Bluetooth: hci4: command tx timeout [ 431.521704][ T9967] bridge_slave_0: entered allmulticast mode [ 431.548552][ T7947] hfs: request for non-existent node 131072 in B*Tree [ 431.562286][ T9967] bridge_slave_0: entered promiscuous mode [ 431.631696][ T9967] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.639072][ T9967] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.781522][ T9967] bridge_slave_1: entered allmulticast mode [ 431.860246][ T9967] bridge_slave_1: entered promiscuous mode [ 432.156249][T10035] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1154'. [ 432.238650][ T9967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.343919][ T9967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.868814][ T9967] team0: Port device team_slave_0 added [ 432.983400][ T9967] team0: Port device team_slave_1 added [ 433.496513][ T9967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.556817][ T9967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.582776][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.600084][ T9755] Bluetooth: hci4: command tx timeout [ 433.662405][ T9967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.701768][ T5293] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 433.818472][ T9967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.826385][ T9967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.852281][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.881894][T10050] loop5: detected capacity change from 0 to 8192 [ 433.892958][ T9967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.931438][T10050] loop5: p1 p2 p4 [ 433.935381][T10050] loop5: partition table partially beyond EOD, truncated [ 433.954278][T10050] loop5: p1 size 108922248 extends beyond EOD, truncated [ 433.964200][ T5293] usb 6-1: Using ep0 maxpacket: 8 [ 434.060924][T10050] loop5: p2 start 861536256 is beyond EOD, truncated [ 434.108047][T10050] loop5: p4 start 4194304 is beyond EOD, truncated [ 434.140621][ T5293] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 434.195539][ T5293] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.240089][ T5293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.288787][ T5293] usb 6-1: Product: syz [ 434.317108][ T9967] hsr_slave_0: entered promiscuous mode [ 434.323720][ T5293] usb 6-1: Manufacturer: syz [ 434.328336][ T5293] usb 6-1: SerialNumber: syz [ 434.376695][ T5293] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 434.400627][ T9967] hsr_slave_1: entered promiscuous mode [ 434.431695][ T9967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.520919][ T9967] Cannot create hsr debugfs directory [ 434.625385][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 434.637535][ T2633] usb 6-1: USB disconnect, device number 13 [ 434.657633][T10060] netlink: 'syz.0.1165': attribute type 30 has an invalid length. [ 434.699356][T10060] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 434.724664][T10060] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 435.525700][T10046] loop1: detected capacity change from 0 to 40427 [ 435.651353][ T9755] Bluetooth: hci4: command tx timeout [ 435.660066][T10046] F2FS-fs (loop1): invalid crc value [ 435.753163][T10046] F2FS-fs (loop1): Found nat_bits in checkpoint [ 435.923673][ T9967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.133958][T10072] loop0: detected capacity change from 0 to 256 [ 436.251774][T10046] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 436.651756][T10075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.208827][T10073] loop5: detected capacity change from 0 to 2048 [ 437.416400][ T29] audit: type=1800 audit(2000000219.509:268): pid=10069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1167" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 437.480564][ T9967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.731881][ T9755] Bluetooth: hci4: command tx timeout [ 437.811067][ T9967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.060830][ T9967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.499517][ T9967] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.592404][ T9967] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.646772][ T9967] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 438.693379][ T9967] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 438.712174][T10086] loop1: detected capacity change from 0 to 4096 [ 438.743209][T10086] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 438.819057][T10086] ntfs3: loop1: Failed to load $MFT (-22). [ 439.249914][ T9967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.278276][T10094] loop5: detected capacity change from 0 to 1024 [ 439.324715][T10094] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 439.338873][ T9967] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.590432][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.598342][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.652445][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.659622][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.222875][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.230109][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.942797][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 441.152751][T10107] loop1: detected capacity change from 0 to 4096 [ 441.222246][T10107] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 441.270278][ T5332] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 441.500722][ T5332] usb 6-1: Using ep0 maxpacket: 8 [ 441.525056][ T5332] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 441.550601][T10126] Falling back ldisc for ptm0. [ 441.555775][ T5332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.596636][ T5332] usb 6-1: Product: syz [ 441.630377][ T5332] usb 6-1: Manufacturer: syz [ 441.635013][ T5332] usb 6-1: SerialNumber: syz [ 441.678411][ T5332] usb 6-1: config 0 descriptor?? [ 441.716713][ T5332] gspca_main: sq905-2.14.0 probing 2770:9120 [ 441.740927][T10128] loop2: detected capacity change from 0 to 128 [ 441.814324][T10128] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 441.832651][T10128] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.865774][ T9967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.100338][ T29] audit: type=1800 audit(2000000224.149:269): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1189" name="/" dev="fuse" ino=1 res=0 errno=0 [ 442.200264][ T9967] veth0_vlan: entered promiscuous mode [ 442.264002][ T9967] veth1_vlan: entered promiscuous mode [ 442.288919][T10133] loop0: detected capacity change from 0 to 40427 [ 442.297486][T10133] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 442.305389][T10133] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 442.318986][T10133] F2FS-fs (loop0): invalid crc value [ 442.369844][T10133] F2FS-fs (loop0): Found nat_bits in checkpoint [ 442.459055][ T9967] veth0_macvtap: entered promiscuous mode [ 442.470820][T10133] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 442.477900][T10133] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 442.495678][ T9691] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 442.507512][ T5332] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 442.515388][ T5332] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 442.525532][ T5332] usb 6-1: USB disconnect, device number 14 [ 442.541861][ T9967] veth1_macvtap: entered promiscuous mode [ 442.693036][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.760639][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.890008][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.938941][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.064269][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.361308][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 443.411569][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.472813][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.520076][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.602104][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.617442][T10153] netlink: 'syz.5.1196': attribute type 1 has an invalid length. [ 443.625393][T10153] netlink: 9352 bytes leftover after parsing attributes in process `syz.5.1196'. [ 443.633321][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.634593][T10153] netlink: 'syz.5.1196': attribute type 1 has an invalid length. [ 443.652583][T10153] netlink: 'syz.5.1196': attribute type 2 has an invalid length. [ 443.660576][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.666111][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1196'. [ 443.682039][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.698130][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.709548][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.725551][ T9967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.764390][T10156] netlink: 'syz.1.1197': attribute type 2 has an invalid length. [ 443.770675][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.784988][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.799442][T10156] netlink: 'syz.1.1197': attribute type 1 has an invalid length. [ 443.814331][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.860181][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.924108][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.972710][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.982834][T10159] loop2: detected capacity change from 0 to 256 [ 443.991783][T10159] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 444.004162][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.014698][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.044793][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.070045][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.090084][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.128308][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.153568][ T9967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.182892][ T9967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.213479][ T9967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.266578][ T9967] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.290501][ T9755] Bluetooth: hci0: command 0x0406 tx timeout [ 444.333287][ T9967] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.365983][ T9967] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.396965][ T9967] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.972400][T10171] loop1: detected capacity change from 0 to 32768 [ 445.048576][T10171] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 445.373573][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.400417][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.607087][T10171] XFS (loop1): Ending clean mount [ 445.633832][T10171] XFS (loop1): Quotacheck needed: Please wait. [ 445.729491][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.766907][T10171] XFS (loop1): Quotacheck: Done. [ 445.783311][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.953839][T10186] loop1: detected capacity change from 32768 to 0 [ 448.052608][T10197] netlink: 'syz.3.1120': attribute type 10 has an invalid length. [ 448.161313][T10197] team0: Port device netdevsim0 added [ 448.186505][T10199] netlink: 'syz.3.1120': attribute type 10 has an invalid length. [ 448.278491][T10203] loop2: detected capacity change from 0 to 64 [ 448.413726][T10201] loop4: detected capacity change from 0 to 2048 [ 448.528054][T10201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.637514][T10199] team0: Port device netdevsim0 removed [ 448.695779][T10199] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 448.981414][T10210] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1210: bg 0: block 32: padding at end of block bitmap is not set [ 449.129660][T10210] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 449.217700][ T7947] syz-executor: attempt to access beyond end of device [ 449.217700][ T7947] loop1: rw=432129, sector=1024, nr_sectors = 128 limit=0 [ 449.352038][ T10] XFS (loop1): log I/O error -5 [ 449.357484][ T10] XFS (loop1): Filesystem has been shut down due to log error (0x2). [ 449.365683][ T10] XFS (loop1): Please unmount the filesystem and rectify the problem(s). [ 449.390241][ T7947] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 449.512747][ T8677] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /55/file0: bad entry in directory: inode out of bounds - offset=92, inode=32784, rec_len=16, size=2048 fake=0 [ 449.735600][ T8677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.832333][ T29] audit: type=1326 audit(2000000231.919:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d65779f9 code=0x7ffc0000 [ 449.901319][ T29] audit: type=1326 audit(2000000231.919:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d65779f9 code=0x7ffc0000 [ 449.989445][ T29] audit: type=1326 audit(2000000231.929:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f12d65779f9 code=0x7ffc0000 [ 450.080994][ T29] audit: type=1326 audit(2000000231.929:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d65779f9 code=0x7ffc0000 [ 450.160357][ T29] audit: type=1326 audit(2000000231.929:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d65779f9 code=0x7ffc0000 [ 450.227285][ T29] audit: type=1326 audit(2000000231.929:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12d65779f9 code=0x7ffc0000 [ 450.349434][ T29] audit: type=1326 audit(2000000231.929:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d65779f9 code=0x7ffc0000 [ 450.406867][T10233] loop1: detected capacity change from 0 to 1024 [ 450.453498][T10234] loop4: detected capacity change from 0 to 2048 [ 450.460257][ T29] audit: type=1326 audit(2000000231.929:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12d65779f9 code=0x7ffc0000 [ 450.460320][ T29] audit: type=1326 audit(2000000231.929:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d65779f9 code=0x7ffc0000 [ 450.460377][ T29] audit: type=1326 audit(2000000231.929:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.5.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d65779f9 code=0x7ffc0000 [ 450.642016][T10233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.725389][T10234] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 450.740703][T10233] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 450.750059][T10234] UDF-fs: Scanning with blocksize 512 failed [ 450.830593][T10234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.201985][ T7947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.400294][ T5292] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 451.638891][ T5292] usb 6-1: Using ep0 maxpacket: 32 [ 451.675250][ T5292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 451.724068][ T5292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 451.785370][ T5292] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 451.852502][ T5292] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 451.900099][ T5292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.952094][ T5292] usb 6-1: Product: syz [ 451.956312][ T5292] usb 6-1: Manufacturer: syz [ 452.008759][ T5292] usb 6-1: SerialNumber: syz [ 452.081857][ T5292] usb 6-1: config 0 descriptor?? [ 452.128028][ T5292] ti_usb_3410_5052 6-1:0.0: TI USB 5052 2 port adapter converter detected [ 452.210381][ T5292] ti_usb_3410_5052 6-1:0.0: missing endpoints [ 454.168774][ T2633] usb 6-1: USB disconnect, device number 15 [ 454.263450][T10270] loop0: detected capacity change from 0 to 512 [ 454.321195][T10270] EXT4-fs (loop0): orphan cleanup on readonly fs [ 454.351731][T10270] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 454.376648][T10274] loop2: detected capacity change from 0 to 16 [ 454.490545][T10270] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 454.523432][T10274] erofs: (device loop2): mounted with root inode @ nid 36. [ 454.850841][T10270] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1229: attempt to clear invalid blocks 2 len 1 [ 454.947821][T10270] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1229: invalid indirect mapped block 1819239214 (level 0) [ 455.007676][T10270] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1229: invalid indirect mapped block 1819239214 (level 1) [ 455.063525][T10270] EXT4-fs (loop0): 1 truncate cleaned up [ 455.078495][T10270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 455.208639][T10285] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1237'. [ 455.543488][T10293] EXT4-fs error (device loop0): ext4_lookup:1808: inode #2: comm syz.0.1229: 'file1' linked to parent dir [ 455.948270][ T8712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.281326][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 456.392972][ T5366] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 456.500544][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 456.519572][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.554389][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.566416][T10314] loop0: detected capacity change from 0 to 256 [ 456.590248][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 456.591709][T10314] exfat: Deprecated parameter 'utf8' [ 456.620480][ T5366] usb 3-1: Using ep0 maxpacket: 32 [ 456.646685][ T5366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.681352][T10314] exfat: Deprecated parameter 'utf8' [ 456.686709][T10314] exfat: Deprecated parameter 'utf8' [ 456.709524][ T5366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.722671][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 456.747516][T10314] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 456.766658][ T5366] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.775857][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.815313][ T5366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.830603][ T9] usb 2-1: config 0 descriptor?? [ 456.847420][ T5366] usb 3-1: config 0 descriptor?? [ 456.864967][ T5366] hub 3-1:0.0: USB hub found [ 456.967866][T10290] loop5: detected capacity change from 0 to 32768 [ 457.033025][ T5241] Bluetooth: hci6: command 0x0406 tx timeout [ 457.033341][ T5244] Bluetooth: hci1: command 0x0406 tx timeout [ 457.081448][T10290] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1239 (10290) [ 457.101024][ T5366] hub 3-1:0.0: 1 port detected [ 457.305860][ T9] microsoft 0003:045E:07DA.000C: item fetching failed at offset 32/34 [ 457.313277][T10290] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 457.343065][ T5366] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 457.351132][ T9] microsoft 0003:045E:07DA.000C: parse failed [ 457.357353][ T9] microsoft 0003:045E:07DA.000C: probe with driver microsoft failed with error -22 [ 457.375322][T10290] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 457.390078][ T5366] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 457.423100][ T5366] usbhid 3-1:0.0: can't add hid device: -71 [ 457.451380][T10290] BTRFS info (device loop5): using free-space-tree [ 457.486443][ T5366] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 457.620641][ T5366] usb 3-1: USB disconnect, device number 11 [ 458.710530][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 458.710553][ T29] audit: type=1326 audit(2000000240.799:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.3.1251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b7db779f9 code=0x0 [ 458.768271][ T8] usb 2-1: USB disconnect, device number 9 [ 458.867589][ T8487] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 458.912123][T10344] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 458.918338][T10344] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 459.004242][T10344] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 459.010342][T10344] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 459.041365][T10344] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 459.047334][T10344] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 459.588804][T10344] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 459.595588][T10344] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 459.980871][T10372] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1257'. [ 460.404333][T10344] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 460.410461][T10344] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 460.522057][T10344] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 460.527992][T10344] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 460.663382][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 460.994636][T10389] loop4: detected capacity change from 0 to 256 [ 461.105982][T10389] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 461.292443][ T5248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.303231][ T5248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.323729][ T5248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.334307][ T5248] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.343771][ T5248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.353063][ T5248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.421484][ T9755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.430145][ T9755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.439398][ T9755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.450108][ T9755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.463304][ T9755] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.470811][ T9755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 462.701650][T10423] loop1: detected capacity change from 0 to 128 [ 463.490431][T10423] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.504036][T10423] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.600110][ T2633] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 463.630307][ T9755] Bluetooth: hci1: command tx timeout [ 463.877549][ T7947] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.900286][ T2633] usb 6-1: Using ep0 maxpacket: 16 [ 463.963821][ T2633] usb 6-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 464.034633][ T2633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.058672][T10433] loop4: detected capacity change from 0 to 1024 [ 464.100588][ T2633] usb 6-1: config 0 descriptor?? [ 464.163746][ T2633] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 464.188218][T10433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.414133][T10433] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 464.431981][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.645263][ T2633] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 465.654432][ T9755] Bluetooth: hci1: command tx timeout [ 466.170412][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.203208][ T2633] sq905c 6-1:0.0: Get version command failed [ 466.209315][ T2633] sq905c 6-1:0.0: probe with driver sq905c failed with error -110 [ 467.677059][ T2633] usb 6-1: USB disconnect, device number 16 [ 467.677476][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1270'. [ 467.733158][ T9755] Bluetooth: hci1: command tx timeout [ 467.939070][T10396] chnl_net:caif_netlink_parms(): no params data found [ 467.953884][T10458] loop5: detected capacity change from 0 to 512 [ 468.040725][T10458] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1276: casefold flag without casefold feature [ 468.076821][T10458] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1276: couldn't read orphan inode 15 (err -117) [ 468.171019][T10458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.473152][T10456] loop2: detected capacity change from 0 to 1024 [ 468.596245][T10456] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 468.740840][T10456] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 468.792278][T10456] EXT4-fs (loop2): orphan cleanup on readonly fs [ 468.798779][T10456] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.1275: Freeing blocks not in datazone - block = 0, count = 4096 [ 468.834358][T10473] EXT4-fs error (device loop5): ext4_map_blocks:609: inode #2: block 4: comm syz.5.1276: lblock 0 mapped to illegal pblock 4 (length 1) [ 468.914459][T10456] EXT4-fs (loop2): 1 orphan inode deleted [ 469.022669][T10456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 469.064695][T10396] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.162206][T10396] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.265391][T10396] bridge_slave_0: entered allmulticast mode [ 469.274624][ T8487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.319552][T10396] bridge_slave_0: entered promiscuous mode [ 469.371040][T10396] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.406306][T10396] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.438742][T10396] bridge_slave_1: entered allmulticast mode [ 469.520247][T10396] bridge_slave_1: entered promiscuous mode [ 469.601080][T10481] loop1: detected capacity change from 0 to 64 [ 469.784345][ T9691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.820533][ T9755] Bluetooth: hci1: command tx timeout [ 469.921491][T10396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.973389][T10396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.177607][ T9] kernel write not supported for file /uhid (pid: 9 comm: kworker/0:1) [ 470.254792][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1283'. [ 470.353273][T10396] team0: Port device team_slave_0 added [ 470.392053][T10396] team0: Port device team_slave_1 added [ 470.715120][T10396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.840471][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 470.848534][T10396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.040013][T10396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.110427][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 471.140512][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 471.191973][T10396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.225625][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.256054][T10396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.447107][ T9] usb 3-1: config 0 descriptor?? [ 471.811671][T10396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.003607][T10531] loop5: detected capacity change from 0 to 128 [ 472.174058][ T29] audit: type=1800 audit(2000000254.269:292): pid=10531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1294" name="file0" dev="loop5" ino=1048697 res=0 errno=0 [ 472.304770][T10396] hsr_slave_0: entered promiscuous mode [ 472.314923][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 472.343789][T10396] hsr_slave_1: entered promiscuous mode [ 472.383973][T10396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.426372][T10396] Cannot create hsr debugfs directory [ 472.438398][T10538] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1294'. [ 472.460389][T10538] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1294'. [ 473.115141][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 473.160604][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 473.220848][ T9] usb 3-1: USB disconnect, device number 12 [ 473.856658][T10396] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.754399][T10396] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.926172][T10535] loop1: detected capacity change from 0 to 40427 [ 474.947340][T10535] F2FS-fs (loop1): invalid crc value [ 474.964287][T10535] F2FS-fs (loop1): Found nat_bits in checkpoint [ 475.061939][T10535] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 475.195848][T10396] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.758252][T10396] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.199320][T10585] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 476.914789][T10587] bad cache= option: none˙˙ [ 476.914789][T10587] [ 476.980700][T10587] CIFS: VFS: bad cache= option: none˙˙ [ 477.418313][T10396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 477.459092][T10604] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1313'. [ 477.466500][T10396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 477.507009][T10604] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1313'. [ 477.520906][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1314'. [ 477.561443][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1314'. [ 477.593441][T10607] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1314'. [ 477.636577][T10396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 477.702799][T10396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 477.837084][T10613] loop1: detected capacity change from 0 to 512 [ 477.882633][T10616] loop2: detected capacity change from 0 to 512 [ 477.940328][T10613] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 477.973927][T10616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.986785][T10616] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.040830][T10613] EXT4-fs (loop1): 1 truncate cleaned up [ 478.055401][T10622] loop5: detected capacity change from 0 to 1024 [ 478.301831][T10613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.541496][T10622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 478.721261][ T29] audit: type=1800 audit(2000000260.784:293): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1315" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 478.966035][ T29] audit: type=1804 audit(2000000260.784:294): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1315" name="/newroot/51/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 479.252678][ T7947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.267211][T10633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.293835][T10396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.433360][T10396] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.489110][T10636] loop1: detected capacity change from 0 to 8 [ 479.504210][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.511431][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.568189][T10636] SQUASHFS error: lzo decompression failed, data probably corrupt [ 479.608981][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.616448][ T1298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.643284][T10636] SQUASHFS error: Failed to read block 0x91: -5 [ 479.680525][T10636] SQUASHFS error: Unable to read metadata cache entry [8f] [ 479.687746][T10636] SQUASHFS error: Unable to read inode 0x11f [ 479.706731][ T9691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.237232][T10654] loop2: detected capacity change from 0 to 128 [ 480.275591][T10654] ufs: Invalid option: "type=" or missing value [ 480.315362][T10654] ufs: wrong mount options [ 480.774681][T10396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.837416][T10671] loop4: detected capacity change from 0 to 2048 [ 480.869290][T10671] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.991315][T10396] veth0_vlan: entered promiscuous mode [ 481.037072][T10396] veth1_vlan: entered promiscuous mode [ 481.051427][T10672] loop1: detected capacity change from 0 to 1024 [ 481.159228][T10672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.216579][T10396] veth0_macvtap: entered promiscuous mode [ 481.235696][ T8677] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 481.263168][ T8677] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 481.304883][T10396] veth1_macvtap: entered promiscuous mode [ 481.406434][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.443631][T10679] loop2: detected capacity change from 0 to 64 [ 481.455984][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.470279][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.490518][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.520585][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.541327][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.571865][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.582968][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.596478][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.623966][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.644442][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.671302][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.690565][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.701561][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.711777][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.723852][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.749275][T10396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.765039][ T7947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.860845][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 481.912589][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.950081][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.998931][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.015477][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.025689][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.036654][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.047648][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.059121][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.069498][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.080249][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 482.082552][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.095732][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.107001][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 482.112954][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.128819][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 482.136348][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.151023][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.156919][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 482.161640][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.182536][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 482.206474][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.211222][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.224040][T10396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.253358][ T9] usb 6-1: config 0 descriptor?? [ 482.266929][T10683] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 482.315013][T10396] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.322008][ T9] hub 6-1:0.0: USB hub found [ 482.326917][T10396] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.341301][T10396] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.350467][T10396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.357386][T10694] loop1: detected capacity change from 0 to 8 [ 482.516203][ T9] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 482.754913][ T9759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.765747][ T9] hid-generic 0003:046D:C314.000D: item fetching failed at offset 0/1 [ 482.783653][ T9759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.801102][ T9] hid-generic 0003:046D:C314.000D: probe with driver hid-generic failed with error -22 [ 482.893103][ T1298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.906479][ T1298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.106412][T10703] syz.2.1348: attempt to access beyond end of device [ 483.106412][T10703] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 483.120927][ T9] usb 6-1: USB disconnect, device number 17 [ 483.167376][T10703] vxfs: unable to read disk superblock at 1 [ 483.174892][T10707] netlink: 'syz.0.1254': attribute type 6 has an invalid length. [ 483.203617][T10703] syz.2.1348: attempt to access beyond end of device [ 483.203617][T10703] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 483.260416][T10703] vxfs: unable to read disk superblock at 8 [ 483.268223][T10703] vxfs: can't find superblock. [ 483.448225][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'. [ 483.507245][T10713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.576202][T10713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.595543][T10717] loop2: detected capacity change from 0 to 1024 [ 483.660163][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 483.679510][ T29] audit: type=1800 audit(2000000265.764:295): pid=10717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1354" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 483.764638][T10719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1366'. [ 483.915054][ T5248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 483.927743][ T5248] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 483.943208][ T5248] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 483.956473][ T5248] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 483.968980][ T5248] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 483.991185][ T5248] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 484.131385][T10717] loop2: detected capacity change from 1024 to 0 [ 484.139761][ T9759] kworker/u8:16: attempt to access beyond end of device [ 484.139761][ T9759] loop2: rw=2049, sector=198, nr_sectors = 16 limit=0 [ 484.187796][T10722] syz.2.1354: attempt to access beyond end of device [ 484.187796][T10722] loop2: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 484.324510][ T9691] hfsplus: walked past end of dir [ 484.463974][T10732] loop5: detected capacity change from 0 to 64 [ 484.579305][T10732] minix_free_block (loop5:2): bit already cleared [ 484.601057][T10732] minix_free_block (loop5:3): bit already cleared [ 484.607517][T10732] minix_free_block (loop5:4): bit already cleared [ 484.701353][ T7259] kworker/u8:13: attempt to access beyond end of device [ 484.701353][ T7259] loop2: rw=1, sector=206, nr_sectors = 8 limit=0 [ 484.805883][ T7259] kworker/u8:13: attempt to access beyond end of device [ 484.805883][ T7259] loop2: rw=2049, sector=198, nr_sectors = 8 limit=0 [ 484.879834][ T9691] syz-executor: attempt to access beyond end of device [ 484.879834][ T9691] loop2: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 484.951926][ T9691] syz-executor: attempt to access beyond end of device [ 484.951926][ T9691] loop2: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 485.163990][T10723] chnl_net:caif_netlink_parms(): no params data found [ 485.586901][T10723] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.602507][T10723] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.609853][T10723] bridge_slave_0: entered allmulticast mode [ 485.698747][T10723] bridge_slave_0: entered promiscuous mode [ 485.708160][T10723] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.716265][T10723] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.723611][T10723] bridge_slave_1: entered allmulticast mode [ 485.732864][T10723] bridge_slave_1: entered promiscuous mode [ 486.052303][ T5248] Bluetooth: hci6: command tx timeout [ 486.716670][T10723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.780105][ T5228] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 486.811884][T10723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.984709][ T5228] usb 6-1: Using ep0 maxpacket: 32 [ 487.006051][ T5228] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.040091][ T5228] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.058874][ T5228] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 487.093016][T10723] team0: Port device team_slave_0 added [ 487.099343][ T5228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.119760][T10751] loop0: detected capacity change from 0 to 32768 [ 487.130467][T10723] team0: Port device team_slave_1 added [ 487.142620][ T5228] hub 6-1:4.0: USB hub found [ 487.221532][T10751] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 487.344023][T10723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.353983][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.379255][ T5228] hub 6-1:4.0: 2 ports detected [ 487.396046][T10723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.408289][ T5228] usb 6-1: selecting invalid altsetting 1 [ 487.420803][ T9755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.433145][ T9755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.441315][ T5228] hub 6-1:4.0: Using single TT (err -22) [ 487.447059][ T9755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.457494][T10786] loop1: detected capacity change from 0 to 1024 [ 487.461048][T10723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.471016][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.498864][T10723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.512571][ T9755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.523848][ T9755] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 487.532142][ T9755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 487.590300][ T5228] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 487.712593][ T29] audit: type=1800 audit(2000000269.734:296): pid=10788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1380" name="bus" dev="loop1" ino=25 res=0 errno=0 [ 487.733044][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.800058][ T5228] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 487.829608][T10751] XFS (loop0): Ending clean mount [ 487.880250][ T5228] usb 6-1: USB disconnect, device number 18 [ 488.335856][T10788] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.370466][ T9755] Bluetooth: hci6: command tx timeout [ 488.430367][T10396] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 488.484299][T10723] hsr_slave_0: entered promiscuous mode [ 488.530804][T10723] hsr_slave_1: entered promiscuous mode [ 488.561712][T10723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.569314][T10723] Cannot create hsr debugfs directory [ 488.912293][T10799] loop1: detected capacity change from 0 to 1024 [ 489.066849][T10799] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 489.101280][ T5366] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 489.102342][T10799] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 492.220730][ T5248] Bluetooth: hci6: command tx timeout [ 492.229160][ T9755] Bluetooth: hci2: command tx timeout [ 495.331176][ T9755] Bluetooth: hci2: command tx timeout [ 495.336930][ T9755] Bluetooth: hci6: command tx timeout [ 497.410956][ T9755] Bluetooth: hci2: command tx timeout [ 500.370165][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 500.378371][ T30] Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 504.610125][ T9755] Bluetooth: hci2: command tx timeout [ 504.640756][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.702595][ T5366] usb 6-1: Using ep0 maxpacket: 32 [ 504.730329][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.780177][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.788959][ T30] task:kworker/u8:1 state:D stack:20240 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 504.897949][ T35] hfsplus: b-tree write err: -5, ino 4 [ 504.944549][ T30] Workqueue: ib-unreg-wq ib_unregister_work [ 504.970057][ T30] Call Trace: [ 504.972009][ T5366] usb 6-1: device descriptor read/all, error -71 [ 504.988945][ T30] [ 505.000116][ T30] __schedule+0x1800/0x4a60 SYZFAIL: failed to send rpc fd=3 want=512 sent=0 n=-1 (errno 32: Broken pipe) [ 505.042806][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.048489][ T30] ? __pfx___schedule+0x10/0x10 [ 505.080085][ T30] ? __pfx_lock_release+0x10/0x10 [ 505.085261][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.106425][ T30] ? kthread_data+0x52/0xd0 [ 505.111610][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.117278][ T30] ? wq_worker_sleeping+0x66/0x240 [ 505.122867][ T30] ? schedule+0x90/0x320 [ 505.127145][ T30] schedule+0x14b/0x320 [ 505.132992][ T30] schedule_timeout+0xb0/0x310 [ 505.137790][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 505.170664][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 505.176703][ T30] ? wait_for_completion+0x2fe/0x620 [ 505.210064][ T30] ? wait_for_completion+0x2fe/0x620 [ 505.215391][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.232913][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.238585][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 505.260161][ T30] ? wait_for_completion+0x2fe/0x620 [ 505.265490][ T30] wait_for_completion+0x355/0x620 [ 505.272398][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 505.278072][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.294597][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.304314][ T30] ? remove_client_context+0xc0/0x1e0 [ 505.309706][ T30] disable_device+0x1c4/0x360 [ 505.314737][ T30] ? __pfx_disable_device+0x10/0x10 [ 505.327756][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.333774][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 505.348397][ T30] __ib_unregister_device+0x2a9/0x3c0 [ 505.353892][ T30] ? process_scheduled_works+0x945/0x1830 [ 505.359662][ T30] ib_unregister_work+0x19/0x30 [ 505.367284][ T30] process_scheduled_works+0xa2e/0x1830 [ 505.373007][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 505.379035][ T30] ? assign_work+0x364/0x3d0 [ 505.384588][ T30] worker_thread+0x86d/0xd40 [ 505.389410][ T30] ? __kthread_parkme+0x169/0x1d0 [ 505.394557][ T30] ? __pfx_worker_thread+0x10/0x10 [ 505.399695][ T30] kthread+0x2f2/0x390 [ 505.403872][ T30] ? __pfx_worker_thread+0x10/0x10 [ 505.409020][ T30] ? __pfx_kthread+0x10/0x10 [ 505.414115][ T30] ret_from_fork+0x4d/0x80 [ 505.418576][ T30] ? __pfx_kthread+0x10/0x10 [ 505.423302][ T30] ret_from_fork_asm+0x1a/0x30 [ 505.428135][ T30] [ 505.433940][ T30] [ 505.433940][ T30] Showing all locks held in the system: [ 505.442747][ T30] 3 locks held by kworker/u8:1/12: [ 505.489716][ T30] #0: ffff888015f43148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 505.539811][ T30] #1: ffffc90000117d00 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 505.599812][ T30] #2: ffff8880224506b0 (&device->unregistration_lock){+.+.}-{3:3}, at: __ib_unregister_device+0x261/0x3c0 [ 505.620004][ T30] 1 lock held by khungtaskd/30: [ 505.624869][ T30] #0: ffffffff8e9382a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 505.660077][ T30] 4 locks held by kworker/u8:8/1276: [ 505.665382][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 505.710090][ T30] #1: ffffc90004687d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 505.749905][ T30] #2: ffffffff8fc75090 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 505.759447][ T30] #3: ffffffff8e93d540 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 505.800077][ T30] 2 locks held by kworker/u8:9/1298: [ 505.805402][ T30] 2 locks held by getty/4975: [ 505.820317][ T30] #0: ffff88802b2bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 505.838811][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 505.851275][ T30] 6 locks held by kworker/0:6/5366: [ 505.856487][ T30] #0: ffff88801b2f4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 505.868392][ T30] #1: ffffc90004a17d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 505.881855][ T30] #2: ffffffff8e9382a0 (rcu_read_lock){....}-{1:2}, at: page_ext_get+0x20/0x2a0 [ 505.900312][ T30] #3: ffff8880b922a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 505.909703][ T30] #4: ffffffff95193508 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 505.949691][ T30] #5: ffff888016b24618 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb0/0x1470 [ 505.973015][ T30] 1 lock held by syz-executor/8487: [ 505.978229][ T30] #0: ffffffff8fc81c08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 505.993960][ T30] 2 locks held by syz.3.1079/9801: [ 505.999098][ T30] #0: ffffffff8fc75090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 506.009066][ T30] #1: ffff8880224506b0 (&device->unregistration_lock){+.+.}-{3:3}, at: rdma_dev_change_netns+0x3a/0x2f0 [ 506.020729][ T30] 1 lock held by syz-executor/9967: [ 506.025935][ T30] #0: ffffffff8fc81c08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 506.035380][ T30] 3 locks held by syz-executor/10396: [ 506.041104][ T30] #0: ffff888052a6cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 506.057548][ T30] #1: ffff888052a6c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 506.067678][ T30] #2: ffffffff8fded528 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 506.078132][ T30] 2 locks held by syz-executor/10785: [ 506.084830][ T30] #0: ffffffff8fc75090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 506.094725][ T30] #1: ffffffff8e93d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 506.105895][ T30] [ 506.108249][ T30] ============================================= [ 506.108249][ T30] [ 506.154250][ T30] NMI backtrace for cpu 1 [ 506.158613][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 506.169127][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 506.179191][ T30] Call Trace: [ 506.182524][ T30] [ 506.185461][ T30] dump_stack_lvl+0x241/0x360 [ 506.190174][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.195407][ T30] ? __pfx__printk+0x10/0x10 [ 506.200020][ T30] ? vprintk_emit+0x631/0x770 [ 506.204719][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 506.209768][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 506.214735][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 506.220308][ T30] ? _printk+0xd5/0x120 [ 506.224488][ T30] ? __pfx__printk+0x10/0x10 [ 506.229102][ T30] ? __wake_up_klogd+0xcc/0x110 [ 506.233971][ T30] ? __pfx__printk+0x10/0x10 [ 506.238576][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.244221][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 506.249256][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 506.255247][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 506.261242][ T30] watchdog+0xfee/0x1030 [ 506.265503][ T30] ? watchdog+0x1ea/0x1030 [ 506.269937][ T30] ? __pfx_watchdog+0x10/0x10 [ 506.274634][ T30] kthread+0x2f2/0x390 [ 506.278718][ T30] ? __pfx_watchdog+0x10/0x10 [ 506.283409][ T30] ? __pfx_kthread+0x10/0x10 [ 506.288014][ T30] ret_from_fork+0x4d/0x80 [ 506.292445][ T30] ? __pfx_kthread+0x10/0x10 [ 506.297060][ T30] ret_from_fork_asm+0x1a/0x30 [ 506.301852][ T30] [ 506.305898][ T30] Sending NMI from CPU 1 to CPUs 0: [ 506.311505][ C0] NMI backtrace for cpu 0 [ 506.311518][ C0] CPU: 0 UID: 0 PID: 972 Comm: kworker/u8:6 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 506.311545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 506.311559][ C0] Workqueue: bat_events batadv_nc_worker [ 506.311591][ C0] RIP: 0010:__lock_acquire+0x605/0x2040 [ 506.311627][ C0] Code: 21 f9 8a 00 48 0f a3 1d 59 20 03 12 73 26 48 69 c3 c8 00 00 00 48 8d 98 00 47 41 93 48 ba 00 00 00 00 00 fc ff df 48 8b 34 24 <48> 8b 7c 24 08 e9 9f 00 00 00 48 c7 c0 80 69 f2 94 48 c1 e8 03 48 [ 506.311647][ C0] RSP: 0018:ffffc90003be78f0 EFLAGS: 00000056 [ 506.311666][ C0] RAX: 00000000000019c8 RBX: ffffffff934160c8 RCX: ffffffff816fc79f [ 506.311684][ C0] RDX: dffffc0000000000 RSI: ffff88802162a8e0 RDI: ffffffff9372e800 [ 506.311702][ C0] RBP: 0000000000000002 R08: ffffffff9372e807 R09: 1ffffffff26e5d00 [ 506.311718][ C0] R10: dffffc0000000000 R11: fffffbfff26e5d01 R12: ffff888021629e00 [ 506.311736][ C0] R13: 0000000000000021 R14: 1ffff110042c552a R15: ffff88802162a950 [ 506.311756][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 506.311776][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.311792][ C0] CR2: 00007f6b7e837d60 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 506.311811][ C0] Call Trace: [ 506.311820][ C0] [ 506.311829][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 506.311854][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 506.311889][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 506.311926][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 506.311957][ C0] ? nmi_handle+0x151/0x5a0 [ 506.311979][ C0] ? nmi_handle+0x2a/0x5a0 [ 506.312002][ C0] ? __lock_acquire+0x605/0x2040 [ 506.312034][ C0] ? default_do_nmi+0x63/0x160 [ 506.312061][ C0] ? exc_nmi+0x123/0x1f0 [ 506.312086][ C0] ? end_repeat_nmi+0xf/0x53 [ 506.312117][ C0] ? __lock_acquire+0x5df/0x2040 [ 506.312150][ C0] ? __lock_acquire+0x605/0x2040 [ 506.312182][ C0] ? __lock_acquire+0x605/0x2040 [ 506.312216][ C0] ? __lock_acquire+0x605/0x2040 [ 506.312248][ C0] [ 506.312256][ C0] [ 506.312276][ C0] lock_acquire+0x1ed/0x550 [ 506.312307][ C0] ? batadv_nc_worker+0xcb/0x610 [ 506.312346][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 506.312379][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.312409][ C0] ? batadv_nc_worker+0xcb/0x610 [ 506.312438][ C0] ? __pfx_lock_release+0x10/0x10 [ 506.312473][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 506.312512][ C0] batadv_nc_worker+0xec/0x610 [ 506.312539][ C0] ? batadv_nc_worker+0xcb/0x610 [ 506.312568][ C0] ? batadv_nc_worker+0xcb/0x610 [ 506.312599][ C0] ? process_scheduled_works+0x945/0x1830 [ 506.312630][ C0] process_scheduled_works+0xa2e/0x1830 [ 506.312679][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 506.312717][ C0] ? assign_work+0x364/0x3d0 [ 506.312750][ C0] worker_thread+0x86d/0xd40 [ 506.312791][ C0] ? __kthread_parkme+0x169/0x1d0 [ 506.312827][ C0] ? __pfx_worker_thread+0x10/0x10 [ 506.312859][ C0] kthread+0x2f2/0x390 [ 506.312894][ C0] ? __pfx_worker_thread+0x10/0x10 [ 506.312926][ C0] ? __pfx_kthread+0x10/0x10 [ 506.312963][ C0] ret_from_fork+0x4d/0x80 [ 506.312996][ C0] ? __pfx_kthread+0x10/0x10 [ 506.313032][ C0] ret_from_fork_asm+0x1a/0x30 [ 506.313075][ C0] [ 506.390058][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 506.390076][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 506.390106][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 506.390122][ T30] Call Trace: [ 506.390134][ T30] [ 506.390145][ T30] dump_stack_lvl+0x241/0x360 [ 506.390191][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.390231][ T30] ? __pfx__printk+0x10/0x10 [ 506.390265][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 506.390311][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.390343][ T30] ? vscnprintf+0x5d/0x90 [ 506.390375][ T30] panic+0x349/0x860 [ 506.390411][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.390445][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 506.390477][ T30] ? __pfx_panic+0x10/0x10 [ 506.390511][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 506.390542][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.390573][ T30] ? __irq_work_queue_local+0x137/0x410 [ 506.390616][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.390648][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 506.390676][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 506.390706][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 506.390739][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.390771][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 506.390806][ T30] watchdog+0x102d/0x1030 [ 506.390845][ T30] ? watchdog+0x1ea/0x1030 [ 506.390890][ T30] ? __pfx_watchdog+0x10/0x10 [ 506.390927][ T30] kthread+0x2f2/0x390 [ 506.390967][ T30] ? __pfx_watchdog+0x10/0x10 [ 506.391003][ T30] ? __pfx_kthread+0x10/0x10 [ 506.391045][ T30] ret_from_fork+0x4d/0x80 [ 506.391082][ T30] ? __pfx_kthread+0x10/0x10 [ 506.391123][ T30] ret_from_fork_asm+0x1a/0x30 [ 506.391177][ T30] [ 506.398092][ T30] Kernel Offset: disabled [ 506.824608][ T30] Rebooting in 86400 seconds..