last executing test programs: 3m43.493500829s ago: executing program 4 (id=135): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000000c0), &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(0xffffffffffffffff, 0x8, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r4, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e", 0xba}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x5c}}, 0x4000000) sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m39.360235392s ago: executing program 4 (id=146): socket(0x2b, 0x1, 0x1) socket$kcm(0xa, 0x3, 0x87) socket$igmp6(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r0 = syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x2, 0xc00, 0x3, 0x206}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$kcm(0x2, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000"], 0xe4}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x200, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x113) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_MSG_RING={0x28, 0x29, 0x0, r0, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 3m37.277733166s ago: executing program 4 (id=149): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 3m36.788335458s ago: executing program 4 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYBLOB='\b\x00\n'], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) 3m36.364232421s ago: executing program 4 (id=154): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 3m32.353805458s ago: executing program 4 (id=161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a300001000020000000000200000000000"], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000400000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000000ffffff80180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x6f) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x5, 0x1e2, &(0x7f00000002c0)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1f, &(0x7f0000000400)={[{@lazytime}, {}, {@acl}, {@nolazytime}, {@fastboot}, {@discard_unit_section}, {@compress_cache}, {@lazytime}, {@whint_mode_user}, {@noinline_xattr}, {}, {@jqfmt_vfsv1}, {@six_active_logs}, {@background_gc_off}, {@extent_cache}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nousep_xattr#\xc5\xf8\xf5\xfe\a\xc7\xa5\x17\xe1\xb8\xd3\'\xe5\xe4\x81b\v\x91aOtR\xdb\xd6u\xfc-\xb3\xf4\xf4A-\xf7\x1f7;:\xa4fZ\xf2\t\xafrkR\xef\xe7w\xfc\xd0J`\xcb\xf48\x895b\xb7n\xfe\x8a\xc6K\xb7g\x99\xca,\xdb\xc3~\xe4\xaa9W\xa2\xfe\xaf\xce\"\xc1m\xc8\xecq\xfbG\x97AK\xdf\xa7D\x8f\xa6\xe2\xc4L7\x8e\xf5%\xac\x84n\xe1\x13\xa1u\xf00\xbe)c\x82I\xe6Pu\xaaG1-\x12\x14\xe7\x12\xd6[\x8a>\xbbc-\x11\x15\x02\xe0bW\xfew\xb3\xe4@\xf9\x94.\xf9\x00\xfa\x17\xeb8>\v\x04|\x0eYZ\xd3\x06\xb4\xdb:fKW\xc9\xebhn\x82`'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '\x15x\xd38/vjf\xfa\xb0\xe4\x00>\x85m^\xf4\x16\x18d\a\tA\xa2\xee\xdf\xf4H\xc3{I\xe8\x1c7\x1e\xf8&\xf9\x1db\xc1-\x7f\xc19\xdd\xf7\x90\vW&]\xae\x1c\xfc\xc5\xf8\xbc\xb3yZ\x89\xc4E\xc7I\xb2\xb8\x1d2\x99\xccg9\x92Y\xe3\xec\xdaI\xfc\xe5\xdb\x8b\xd9\xbdy\x80\xee\xa8\xdf\x8bMO\f\xc8\xfcdNJ\x02\x1bj\xd0\x85S\x1c\x8a\x17h!\xde\x19\xc5\xc1\xbf\x9c$\x1a\xea@2o \xc5\x12m\x86\xb5T\xbb\xf0\x8c\xf9\x98#\xcd?\x03\xbc\xd6\xf0\xbd\xbe\x88\x84\f\xacw\x9bl\x1a\xae\x9a;\xf5U\x93\xc4\x06\x13 \xc9\x01\xd1P\x80\xdf[\x97\x84\'Ec\xaaa\xedJ\xb0\xbd \xf0\xad\xe2\xf1\x9f\xbd\xf1-\x95c\b\x00\fc.\x0e\x8d\xfb/\xf0\xa3&\xeblU\xe8A\x174>\xe1\xdd\xbfbV9\x16\xeaY%\xad}\xd2GB\r\xdb\xb3\x14^\xec\xc7\xb5\x86\x0e\x1a\xb6\x12_\t\xdf5l;\xdbY\x88\x8b'}}]}, 0x1, 0x5553, &(0x7f000000b3c0)="$eJzs3M2PU1UUAPDzZhgYPsSJceGOlxCTmYRO6PAR3aGCXxFCUBeutNOWptD2TaaljKxYuDQu/E+MJq5c+je4cO3OuNC4M9H03TfAgChmih3g90tez7v33Z577wshc16bBvDMWsp//zWLo3EwIuYj4kjEnfNse9C5FF6KiGMRMXfPkVX9dzr2R8ShiDg6SX43z+TSlyfGx8/88u5v3/1wYN/hr779cXa7Bmbt5Yjob6Tzm/0Ui06K16r+xrhbxv7pcRXThd5iut4vUv/N9nqZ4WZje1yjjKc6aXyxcWM4iVd7jeYkdrpXy/6NQZpwOO5s5ynfcK2xWbZb7fUydodFGTu30rxbt9L/bbeGo5SnVeX7tEwfo9F2TP3trXbaz8b1MjYHo6o/5S1a7a1JHFexmi6aRa9VrmN9Fzd6j3uvO7ixlY/bm8NuMcjPrNZfWa2frdU3i1Z71D5da/RbZ0/ny53eZFht1G70z3WKotNrrzaL/kq+3Gk2a/V6vny+vd5tDPJ6ffXU6snamZXq7ET+1qUP814rX57E17uDG6Nub5hfLTbz9I6VfG311Ksr+fF6/v7Fy/nlKxcuXLz8wcfnP7r02sV33qgGPbCsfHnt5NparX6ytlZfeYr2vxh39j/5O+CB/X9WLXqK+4ddyWa9AIAnz8Pq/0z9DzxG/1b/Z/9Q//evV+1iHG8eub/+37wS8fjr/1D/T8Weqn9T/T8Xz2r9P4PnH7Ar6n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfWTwtfv12eLKX24ar/uarrhaqdRcRcRPz5N+Zj/46c81WehYeMX7hvDd9nUWaYzHGgOg5FxLnq+OP5x30XAAAA4On1ze1jX6RqPb0szXpB7Fp2+5GHpoc2c0c+mdbUEbGw9PN28/6nPP/R3OTlxd2vKpn8+94XW1PKVm5tcUrJ0iO3fVNI9Oh3fH5HWLwnZCnMTWE5AADAHrOzEphGFQIAAMDe9PmsF8BsZHH3M8PqC/wHUqg+EDy4owUAAAA8Me5+Pzyb6ToAAACA/0NZ//v9PwAAAHi6pd//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mLnbnLTBsIwAH82uNA/FVXd9yrdwTF6hC67rDhAL8EBsuAMuQBnILscIYIIj0OAsEjC2Fai55HMYGNef+ZnMTPSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJtuqmUV/37+vzRns71MnrsBAAAAzllXy1n9ZJL2PzfHvzaHvjf7RUSUEXGu7z6ID0eZgyanejz/6vD86qSG64g6YXeNUbN9iohfzXb3re1PAQAAAN6v1XwxTb319DDpuyC6lAZtyi+/M+UVEVFNbk8v8ErlLu9HhrJqu9/3MP5mSqsHsMaZwtKQ2zBX2rPUf/f99zM+aIrUlGffti8y270DAAAdGhw13fZCAAAA6NKfvgugH0U8TGXupwJHqWmm9z4e7QEAAABvUNF3AQAAAEDr6v5/R+v/ba3/BwAAAP1I6/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpnW1nK3mi+mTF4Yvy9lsL5PvjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAe/bnHQVCIAzCYO/6zmTuf1hp0NDYpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe/O4v/yemxplk7rWx9DySrJ0aW6fG3rlx9Ifx9WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+DFAaBIIiilWSS6E7m/oeVAt14ARHeA+HTTQsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT/Q6vrzP+DS2JKPTxrfjmeTXVePfVWPpQWPtwbz+fdzwIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjZuZ/XOKo4AOBvZna2tirGKDlERMGDXmy6ra29iQclePBPEEK6rbFbf7Q52FLEXLxJzr2IHkUEJd76P/TcQi/11sMeKojHlTc7k522QTeCM9Pk84E377vDMO/7ZiHkO+8lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQjd+dxVk8LEzjtDx3+8H19djfeaSPbm7fXY4txkmTST8ZXq5/SJbaSwQAAIDDI6vq+xDCvXxnNfbpQlH/59U1seb//tlpXNXzj9b9VV/V/rH99uv9F3cHWpiOE296fmM0PPF4Kr3/b5bd9ty/XtErnnzx7iUrvpD0g60XxnnxPJNvb916r1+ER5rIFgD4L45XfRlUvw/FftBmYgAcGr1a4V3V/9lCuzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANGG8FZ6u4iSEsNybxdGdB9fX9+pvbt9drtqZGze2w9eze8Zb5CGE8xuj4YlGZ9NtV65eu7g2Gg0vNx+8EkJoa/R3yulf/GiOi0No5fnsP/irG2l0LUjLL7sr+TwZQYs/lAAAOJDyssW6/l6+sxrPJYshTH54uP5/vRaHOev/+x+fuV0fq17/DxqbYfetbF76fOXK1WtvblxauzC8MPz0rZODtwenzp4+fXaleFey4o0JAAAA+zaZTCa7H/plq9f/6eLj6//HanGYs/7/4rvBV/WBM/X/nmaLfm1nAgAAcLg9/+qffyR7nE/6/V5Y29y8PPiyOCb9fiiik9NjC6nu25Gy1ev/bLHtrAAAAIAmjLeSh9b/z9XiMOf6/zM/vvRz/Z5ZCOFouf5/fP2z0bnmptNpTfw5cdtzBAAAoF1Hy1Zf/8+L/f/p7paHNITwxmvTuPw3gP9Y/+dl/Z+9/81P9bHq+/9PNTfFTkqXps+j6JdC6C21nREAAAAH2VNli8X+7/nO6ie/HPuwb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNP+DgAA//+yYT9Y") 3m16.606720486s ago: executing program 32 (id=161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a300001000020000000000200000000000"], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000400000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000000ffffff80180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x6f) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x5, 0x1e2, &(0x7f00000002c0)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1f, &(0x7f0000000400)={[{@lazytime}, {}, {@acl}, {@nolazytime}, {@fastboot}, {@discard_unit_section}, {@compress_cache}, {@lazytime}, {@whint_mode_user}, {@noinline_xattr}, {}, {@jqfmt_vfsv1}, {@six_active_logs}, {@background_gc_off}, {@extent_cache}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nousep_xattr#\xc5\xf8\xf5\xfe\a\xc7\xa5\x17\xe1\xb8\xd3\'\xe5\xe4\x81b\v\x91aOtR\xdb\xd6u\xfc-\xb3\xf4\xf4A-\xf7\x1f7;:\xa4fZ\xf2\t\xafrkR\xef\xe7w\xfc\xd0J`\xcb\xf48\x895b\xb7n\xfe\x8a\xc6K\xb7g\x99\xca,\xdb\xc3~\xe4\xaa9W\xa2\xfe\xaf\xce\"\xc1m\xc8\xecq\xfbG\x97AK\xdf\xa7D\x8f\xa6\xe2\xc4L7\x8e\xf5%\xac\x84n\xe1\x13\xa1u\xf00\xbe)c\x82I\xe6Pu\xaaG1-\x12\x14\xe7\x12\xd6[\x8a>\xbbc-\x11\x15\x02\xe0bW\xfew\xb3\xe4@\xf9\x94.\xf9\x00\xfa\x17\xeb8>\v\x04|\x0eYZ\xd3\x06\xb4\xdb:fKW\xc9\xebhn\x82`'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '\x15x\xd38/vjf\xfa\xb0\xe4\x00>\x85m^\xf4\x16\x18d\a\tA\xa2\xee\xdf\xf4H\xc3{I\xe8\x1c7\x1e\xf8&\xf9\x1db\xc1-\x7f\xc19\xdd\xf7\x90\vW&]\xae\x1c\xfc\xc5\xf8\xbc\xb3yZ\x89\xc4E\xc7I\xb2\xb8\x1d2\x99\xccg9\x92Y\xe3\xec\xdaI\xfc\xe5\xdb\x8b\xd9\xbdy\x80\xee\xa8\xdf\x8bMO\f\xc8\xfcdNJ\x02\x1bj\xd0\x85S\x1c\x8a\x17h!\xde\x19\xc5\xc1\xbf\x9c$\x1a\xea@2o \xc5\x12m\x86\xb5T\xbb\xf0\x8c\xf9\x98#\xcd?\x03\xbc\xd6\xf0\xbd\xbe\x88\x84\f\xacw\x9bl\x1a\xae\x9a;\xf5U\x93\xc4\x06\x13 \xc9\x01\xd1P\x80\xdf[\x97\x84\'Ec\xaaa\xedJ\xb0\xbd \xf0\xad\xe2\xf1\x9f\xbd\xf1-\x95c\b\x00\fc.\x0e\x8d\xfb/\xf0\xa3&\xeblU\xe8A\x174>\xe1\xdd\xbfbV9\x16\xeaY%\xad}\xd2GB\r\xdb\xb3\x14^\xec\xc7\xb5\x86\x0e\x1a\xb6\x12_\t\xdf5l;\xdbY\x88\x8b'}}]}, 0x1, 0x5553, &(0x7f000000b3c0)="$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") 2m46.393972241s ago: executing program 0 (id=245): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() r2 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) 2m39.744512927s ago: executing program 0 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000000240)=""/109, 0x6d}], 0x1, 0x60, 0xfdfffffefffffffe}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x1}, 0x0, 0x0, 0x8, 0x3, 0x9f, 0x5e7, 0x73, 0x7fff}}], 0xa0, 0x4800}, 0x0) 2m38.339964169s ago: executing program 0 (id=253): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2m34.787761032s ago: executing program 0 (id=259): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) 2m34.002333866s ago: executing program 0 (id=261): clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) 2m33.587058231s ago: executing program 0 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002e00090027bd7000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m17.343212313s ago: executing program 33 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002e00090027bd7000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 18.595443625s ago: executing program 2 (id=426): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120127528e855067728d000000000010231207"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f0100008366937f01fc5a02d14e0102"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 17.277237025s ago: executing program 3 (id=428): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x3, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 14.169264745s ago: executing program 2 (id=429): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x0, 0x1, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x6, 0xffffffffffffffff, 0x20, {0xc5, 0x100}, 0x4}, 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) 13.823369183s ago: executing program 1 (id=430): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@int=0x5, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r2, &(0x7f0000000300)="6ac5c6", 0x3, 0x48000, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = msgget$private(0x0, 0x31) msgsnd(r3, 0x0, 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x7f) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'das08_isa\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x402, 0x2, 0x0, 0xbdd, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0xfff, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 9.169254537s ago: executing program 2 (id=431): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@int=0x5, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r2, &(0x7f0000000300)="6ac5c6", 0x3, 0x48000, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = msgget$private(0x0, 0x31) msgsnd(r3, 0x0, 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x7f) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'das08_isa\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x402, 0x2, 0x0, 0xbdd, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0xfff, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 9.092837095s ago: executing program 1 (id=432): r0 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) 9.009531251s ago: executing program 3 (id=433): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20) 7.847329247s ago: executing program 1 (id=434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fsopen(0x0, 0x1) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x3, 0xc3, 0x3, 0x7f}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="fdffffff000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 6.303504605s ago: executing program 2 (id=435): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000000c0), &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(0xffffffffffffffff, 0x8, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r4, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e", 0xba}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x5c}}, 0x4000000) sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.245935031s ago: executing program 3 (id=436): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x0, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x6, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x7, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0xfffffffe, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x8000042, 0x3], [0x4, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x2b8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d02, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x8, 0xa4, 0x4, 0xa9, 0x5, 0x6, 0x2, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x5, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x5, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xe, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.98549559s ago: executing program 3 (id=437): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.203336402s ago: executing program 2 (id=438): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x4, 0x8009, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x5, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0xfffffffe, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x5, 0x59eb, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x10000, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffb, 0x3, 0x4, 0x2000, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x6, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c900", @ANYRESHEX], 0x16) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000fddbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="3800308014000400403a050c5baee2004ef2b6d713459a7a180001800800010003865bdd36c8e216c53b320000000c000500000000000600"], 0x54}}, 0x0) r7 = msgget(0x1, 0x101) msgrcv(r7, &(0x7f00000001c0)={0x0, ""/143}, 0x97, 0x2, 0x1800) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) 4.297443763s ago: executing program 3 (id=439): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, r0}) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 1.528096639s ago: executing program 1 (id=440): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000001480)="$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") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1021408, 0x0, 0x1, 0x0, &(0x7f0000006380)) 1.406857104s ago: executing program 2 (id=441): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="2300000010003507d05a006f", 0xc}], 0x1}, 0x200a4800) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="90", 0x1}, {&(0x7f00000002c0)="d6", 0x1}], 0x2) 1.213979842s ago: executing program 1 (id=442): r0 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) 527.829945ms ago: executing program 3 (id=443): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) accept4(r0, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 0s ago: executing program 1 (id=444): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20) kernel console output (not intermixed with test programs): : adding VLAN 0 to HW filter on device bond0 [ 101.780336][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.787412][ T5142] Bluetooth: hci1: command tx timeout [ 101.787447][ T5829] Bluetooth: hci0: command tx timeout [ 101.787475][ T5829] Bluetooth: hci3: command tx timeout [ 101.814810][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.863815][ T5142] Bluetooth: hci2: command tx timeout [ 101.889060][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.891045][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.024358][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.156276][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.160629][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.160894][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.284821][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.285398][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.416595][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.499684][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.499813][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.524642][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.603757][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.604010][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.775425][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.095064][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.135333][ T5824] veth0_vlan: entered promiscuous mode [ 103.257003][ T5824] veth1_vlan: entered promiscuous mode [ 103.293929][ T5825] veth0_vlan: entered promiscuous mode [ 103.396082][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.419272][ T5825] veth1_vlan: entered promiscuous mode [ 103.600243][ T5823] veth0_vlan: entered promiscuous mode [ 103.650981][ T5824] veth0_macvtap: entered promiscuous mode [ 103.678205][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.709738][ T5823] veth1_vlan: entered promiscuous mode [ 103.735141][ T5824] veth1_macvtap: entered promiscuous mode [ 103.801893][ T5825] veth0_macvtap: entered promiscuous mode [ 103.835001][ T5825] veth1_macvtap: entered promiscuous mode [ 103.908716][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.965076][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.986561][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.055013][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.095962][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.097187][ T5823] veth0_macvtap: entered promiscuous mode [ 104.128099][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.151481][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.175413][ T1481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.197469][ T5822] veth0_vlan: entered promiscuous mode [ 104.205826][ T5823] veth1_macvtap: entered promiscuous mode [ 104.235882][ T1481] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.286592][ T1481] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.316058][ T1481] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.316668][ T5821] veth0_vlan: entered promiscuous mode [ 104.358034][ T1481] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.503856][ T5822] veth1_vlan: entered promiscuous mode [ 104.630376][ T5821] veth1_vlan: entered promiscuous mode [ 104.667385][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.829631][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.115892][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.136884][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.155729][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.166078][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.205402][ T1473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.205429][ T1473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.345805][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.345826][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.426988][ T5822] veth0_macvtap: entered promiscuous mode [ 105.535134][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.535153][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.620801][ T5822] veth1_macvtap: entered promiscuous mode [ 105.700024][ T5821] veth0_macvtap: entered promiscuous mode [ 105.745100][ T1473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.745121][ T1473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.800737][ T5821] veth1_macvtap: entered promiscuous mode [ 105.943565][ T1473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.943584][ T1473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.013556][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.128909][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.136154][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.394096][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.449831][ T1481] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.475575][ T1473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.475596][ T1473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.481000][ T1481] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.535840][ T1481] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.573983][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 106.604192][ T1481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.624700][ T5944] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 106.645267][ T5944] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 106.645597][ T1481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.649144][ T1481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.751532][ T1481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.759668][ T1023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.414121][ T5956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.702727][ T5958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.180376][ T5959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.294469][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.294491][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.650671][ T4180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.650694][ T4180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.266324][ T5975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.571553][ T5976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.008322][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.496029][ T1481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.496050][ T1481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.499921][ T5983] loop3: detected capacity change from 0 to 16 [ 112.505979][ T5983] erofs: Unknown parameter './cgroup.net/syz1' [ 112.818138][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.818160][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.904022][ T5983] loop3: detected capacity change from 0 to 40427 [ 112.905402][ T5983] f2fs: Unknown parameter 'whint_mode' [ 118.156147][ T6008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.908000][ T6014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.199024][ T6015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.150469][ T5142] Bluetooth: Unknown LE signaling command 0xfa [ 123.150496][ T5142] Bluetooth: Wrong link type (-22) [ 123.454126][ T6044] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.35'. [ 123.898581][ T6046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.937729][ T6059] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 127.212301][ T6088] fuse: Unknown parameter 'grou00000000000000000000' [ 127.769189][ T6098] Bluetooth: MGMT ver 1.23 [ 128.039491][ T6101] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 128.384465][ T6112] netlink: 44 bytes leftover after parsing attributes in process `syz.2.59'. [ 128.426233][ T6113] loop0: detected capacity change from 0 to 128 [ 128.427267][ T6113] ======================================================= [ 128.427267][ T6113] WARNING: The mand mount option has been deprecated and [ 128.427267][ T6113] and is ignored by this kernel. Remove the mand [ 128.427267][ T6113] option from the mount to silence this warning. [ 128.427267][ T6113] ======================================================= [ 128.538995][ T6112] netlink: 44 bytes leftover after parsing attributes in process `syz.2.59'. [ 128.773250][ T6113] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 128.773431][ T6113] hpfs: filesystem error: improperly stopped [ 128.773449][ T6113] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 128.773463][ T6113] hpfs: You really don't want any checks? You are crazy... [ 128.774283][ T6113] hpfs: hpfs_map_sector(): read error [ 128.774295][ T6113] hpfs: code page support is disabled [ 128.857172][ T6113] hpfs: hpfs_map_4sectors(): unaligned read [ 128.857618][ T6113] hpfs: hpfs_map_4sectors(): unaligned read [ 128.857633][ T6113] hpfs: filesystem error: unable to find root dir [ 129.009061][ T6113] hpfs: hpfs_map_4sectors(): unaligned read [ 130.296583][ T6133] loop4: detected capacity change from 0 to 64 [ 130.937407][ T6138] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 131.019572][ T6143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.71'. [ 131.120048][ T6145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.71'. [ 131.783088][ T6146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.70'. [ 133.096193][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.096471][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.312701][ T6157] loop3: detected capacity change from 0 to 64 [ 133.547633][ T6159] loop4: detected capacity change from 0 to 1024 [ 136.658817][ T6183] lo: Caught tx_queue_len zero misconfig [ 137.205223][ T6195] loop0: detected capacity change from 0 to 1024 [ 139.093240][ T6216] fuse: Unknown parameter 'group_i00000000000000000000' [ 139.355201][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.99'. [ 140.148742][ T6234] loop2: detected capacity change from 0 to 512 [ 141.057820][ T6243] loop1: detected capacity change from 0 to 1024 [ 141.291889][ T6245] loop0: detected capacity change from 0 to 128 [ 141.782149][ T6245] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.818157][ T6245] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.911342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.931348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.941338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.951329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.961341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.971343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.981334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.991346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 142.001339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 142.011346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 142.671182][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 143.091748][ T6265] Zero length message leads to an empty skb [ 143.400685][ T5823] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.549723][ T6273] fuse: Unknown parameter 'group_i00000000000000000000' [ 144.842738][ T6282] loop2: detected capacity change from 0 to 128 [ 145.126410][ T6282] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.127497][ T6282] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.558238][ T5824] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.944929][ T6296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.061743][ T6330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.037449][ T6327] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 153.186549][ T6341] lo: Caught tx_queue_len zero misconfig [ 153.391538][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 153.815705][ T6353] loop2: detected capacity change from 0 to 32768 [ 153.835937][ T6353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.138 (6353) [ 153.912958][ T6353] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.913008][ T6353] BTRFS info (device loop2): using sha256 checksum algorithm [ 154.292650][ T6353] BTRFS info (device loop2): enabling ssd optimizations [ 154.292678][ T6353] BTRFS info (device loop2): turning on async discard [ 154.292699][ T6353] BTRFS info (device loop2): enabling free space tree [ 155.113394][ T6377] overlayfs: missing 'workdir' [ 155.497418][ T6366] loop3: detected capacity change from 0 to 4096 [ 155.660251][ T6366] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 156.174642][ T6382] loop0: detected capacity change from 0 to 128 [ 156.357205][ T6385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.077865][ T6366] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 157.458713][ T6391] syz.4.146 uses obsolete (PF_INET,SOCK_PACKET) [ 157.544189][ T6382] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.544715][ T6382] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.947465][ T6391] netlink: 208 bytes leftover after parsing attributes in process `syz.4.146'. [ 157.960473][ T6392] loop1: detected capacity change from 0 to 4096 [ 159.115780][ T6392] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 159.179817][ T5823] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.544355][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 159.581248][ T6392] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 159.647103][ T5824] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.090487][ T6407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.150'. [ 160.104172][ T6407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.150'. [ 163.194738][ T6433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.668285][ T6439] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.160'. [ 165.433520][ T6435] loop1: detected capacity change from 0 to 4096 [ 165.460607][ T6435] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 165.812588][ T6446] loop4: detected capacity change from 0 to 16 [ 165.816627][ T6451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.164'. [ 165.840327][ T6451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.164'. [ 165.853093][ T6446] erofs: Unknown parameter './cgroup.net/syz1' [ 165.931103][ T6435] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 168.387829][ T6467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.742329][ T836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 168.981552][ T836] usb 1-1: Using ep0 maxpacket: 32 [ 169.032640][ T836] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.032670][ T836] usb 1-1: config 0 has no interface number 0 [ 169.032718][ T836] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 169.032740][ T836] usb 1-1: config 0 interface 1 has no altsetting 0 [ 169.070465][ T836] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 169.070496][ T836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.070516][ T836] usb 1-1: Product: syz [ 169.070530][ T836] usb 1-1: Manufacturer: syz [ 169.070544][ T836] usb 1-1: SerialNumber: syz [ 169.153209][ T6461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.230089][ T836] usb 1-1: config 0 descriptor?? [ 169.567550][ T836] usb 1-1: can't set config #0, error -71 [ 169.647934][ T836] usb 1-1: USB disconnect, device number 2 [ 173.124744][ T6512] loop1: detected capacity change from 0 to 32768 [ 173.314980][ T6515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.682232][ T6512] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.182 (6512) [ 174.121161][ T6512] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.121218][ T6512] BTRFS info (device loop1): using sha256 checksum algorithm [ 174.329058][ T6512] BTRFS info (device loop1): enabling ssd optimizations [ 174.329087][ T6512] BTRFS info (device loop1): turning on async discard [ 174.329105][ T6512] BTRFS info (device loop1): enabling free space tree [ 174.700578][ T6188] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 175.229923][ T38] audit: type=1800 audit(1776935928.289:2): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.182" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 175.775793][ T6188] usb 3-1: Using ep0 maxpacket: 32 [ 175.788320][ T6188] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.788347][ T6188] usb 3-1: config 0 has no interface number 0 [ 175.788391][ T6188] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 175.788413][ T6188] usb 3-1: config 0 interface 1 has no altsetting 0 [ 176.004036][ T6541] loop0: detected capacity change from 0 to 32768 [ 176.007930][ T6541] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 9c2465cc-f6e4-4791-aee6-3645d0e15870 [ 176.007998][ T6541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.186 (6541) [ 176.070295][ T6541] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.070352][ T6541] BTRFS info (device loop0): using sha256 checksum algorithm [ 176.098527][ T6188] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 176.098559][ T6188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.098579][ T6188] usb 3-1: Product: syz [ 176.098593][ T6188] usb 3-1: Manufacturer: syz [ 176.098608][ T6188] usb 3-1: SerialNumber: syz [ 176.248959][ T6188] usb 3-1: config 0 descriptor?? [ 176.365400][ T6541] BTRFS info (device loop0): enabling ssd optimizations [ 176.365428][ T6541] BTRFS info (device loop0): turning on async discard [ 176.365444][ T6541] BTRFS info (device loop0): enabling free space tree [ 177.532249][ T38] audit: type=1800 audit(1776935930.619:3): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.186" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 178.038659][ T6188] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 178.159675][ T6188] cx231xx 3-1:0.1: Failed to read PCB config [ 178.159936][ T6188] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 178.619967][ T6188] usb 3-1: USB disconnect, device number 2 [ 179.999490][ T5822] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.177381][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.221634][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.222963][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.224618][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.229721][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.909967][ T6588] loop1: detected capacity change from 0 to 128 [ 182.286187][ T6588] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.307884][ T6588] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.321746][ T5823] BTRFS info (device loop0): last unmount of filesystem 9c2465cc-f6e4-4791-aee6-3645d0e15870 [ 183.381449][ T60] Bluetooth: hci5: command tx timeout [ 183.493142][ T6580] chnl_net:caif_netlink_parms(): no params data found [ 183.731855][ T6602] loop2: detected capacity change from 0 to 2048 [ 183.733800][ T6602] nilfs2: Unknown parameter '0177777777777777777777701777777777777777777777' [ 184.016498][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.016965][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.017295][ T6580] bridge_slave_0: entered allmulticast mode [ 184.051014][ T6580] bridge_slave_0: entered promiscuous mode [ 184.072069][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.072502][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.072865][ T6580] bridge_slave_1: entered allmulticast mode [ 184.076875][ T6580] bridge_slave_1: entered promiscuous mode [ 184.222615][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.375800][ T6580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.398350][ T6580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.898193][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 184.969959][ T5899] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 185.151524][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 185.258019][ T5899] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.258049][ T5899] usb 3-1: config 0 has no interface number 0 [ 185.258092][ T5899] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 185.258113][ T5899] usb 3-1: config 0 interface 1 has no altsetting 0 [ 185.269513][ T5899] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 185.269611][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.269667][ T5899] usb 3-1: Product: syz [ 185.269717][ T5899] usb 3-1: Manufacturer: syz [ 185.269760][ T5899] usb 3-1: SerialNumber: syz [ 185.461372][ T5829] Bluetooth: hci5: command tx timeout [ 185.597858][ T5899] usb 3-1: config 0 descriptor?? [ 185.869680][ T5829] Bluetooth: hci3: command 0x2016 tx timeout [ 186.012444][ T5899] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 186.014127][ T5899] cx231xx 3-1:0.1: Failed to read PCB config [ 186.014206][ T5899] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 186.084102][ T5899] usb 3-1: USB disconnect, device number 3 [ 186.350039][ T5829] Bluetooth: hci4: command 0x2016 tx timeout [ 186.653959][ T6615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.711018][ T6580] team0: Port device team_slave_0 added [ 186.733424][ T6580] team0: Port device team_slave_1 added [ 186.823406][ T5899] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 186.923493][ T6628] fuse: Bad value for 'user_id' [ 186.923513][ T6628] fuse: Bad value for 'user_id' [ 186.971700][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 186.979099][ T5899] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.979126][ T5899] usb 3-1: config 0 has no interface number 0 [ 186.979174][ T5899] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 186.979196][ T5899] usb 3-1: config 0 interface 1 has no altsetting 0 [ 187.033339][ T5899] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 187.033372][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.033392][ T5899] usb 3-1: Product: syz [ 187.033406][ T5899] usb 3-1: Manufacturer: syz [ 187.033420][ T5899] usb 3-1: SerialNumber: syz [ 187.260135][ T5899] usb 3-1: config 0 descriptor?? [ 187.598783][ T5829] Bluetooth: hci5: command tx timeout [ 187.715396][ T5899] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 187.715928][ T5899] cx231xx 3-1:0.1: Failed to read PCB config [ 187.715995][ T5899] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 187.820385][ T5899] usb 3-1: USB disconnect, device number 4 [ 187.943658][ T5835] Bluetooth: hci3: command 0x2016 tx timeout [ 188.428557][ T60] Bluetooth: hci4: command 0x2016 tx timeout [ 188.519780][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.519799][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.519826][ T6580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.922821][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 189.501842][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.501859][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.501883][ T6580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.615016][ T6652] loop1: detected capacity change from 0 to 512 [ 189.625782][ T5142] Bluetooth: hci5: command tx timeout [ 189.701537][ T5142] Bluetooth: hci1: command 0x2016 tx timeout [ 189.721596][ T6652] EXT4-fs (loop1): Test dummy encryption mode enabled [ 189.721617][ T6652] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 189.721631][ T6652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.868358][ T6652] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.212: bad orphan inode 131083 [ 189.878114][ T6652] loop1: lost filesystem error report for type 5 error -117 [ 189.892892][ C0] EXT4-fs (loop1): initial error at time 1776935943: ext4_orphan_get:1423 [ 189.892926][ C0] EXT4-fs (loop1): last error at time 1776935943: ext4_orphan_get:1423 [ 190.162153][ T6652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.277492][ T6652] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 190.350883][ T6652] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 190.484243][ T6665] fuse: Bad value for 'fd' [ 190.526229][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.819822][ T6669] loop1: detected capacity change from 0 to 8192 [ 190.976694][ T1473] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.247172][ T38] audit: type=1800 audit(1776935944.649:4): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.216" name="file1" dev="loop1" ino=1048605 res=0 errno=0 [ 191.250561][ T6658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.783690][ T5142] Bluetooth: hci1: command 0x2016 tx timeout [ 191.875036][ T6685] loop2: detected capacity change from 0 to 2048 [ 191.940562][ T6685] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 191.967960][ T6685] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 191.983142][ T6685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.654160][ T1473] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.934189][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 193.705288][ T6580] hsr_slave_0: entered promiscuous mode [ 193.717565][ T6580] hsr_slave_1: entered promiscuous mode [ 193.728286][ T6580] debugfs: 'hsr0' already exists in 'hsr' [ 193.728314][ T6580] Cannot create hsr debugfs directory [ 194.312676][ T6693] loop1: detected capacity change from 0 to 32768 [ 194.508106][ T6702] loop0: detected capacity change from 0 to 32768 [ 194.547943][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.548048][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.609085][ T6702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.225 (6702) [ 194.636453][ T1473] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.640420][ T6702] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.640455][ T6702] BTRFS info (device loop0): using sha256 checksum algorithm [ 194.934782][ T6693] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.997329][ T6702] BTRFS info (device loop0): enabling ssd optimizations [ 194.997359][ T6702] BTRFS info (device loop0): turning on async discard [ 194.997376][ T6702] BTRFS info (device loop0): enabling free space tree [ 195.395603][ T38] audit: type=1800 audit(1776935948.799:5): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.225" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 195.567631][ T6693] XFS (loop1): Ending clean mount [ 195.890466][ T5822] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.347508][ T1473] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.371726][ T6734] fuse: Bad value for 'fd' [ 198.415801][ T5823] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.423011][ T6749] loop1: detected capacity change from 0 to 128 [ 199.472041][ T6749] EXT4-fs (loop1): Test dummy encryption mode enabled [ 199.556889][ T6749] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.574334][ T6749] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.920896][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.944538][ T1473] bridge_slave_1: left allmulticast mode [ 199.944683][ T1473] bridge_slave_1: left promiscuous mode [ 199.963786][ T1473] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.008188][ T6743] loop3: detected capacity change from 0 to 32768 [ 200.210132][ T6743] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 200.361600][ T6743] XFS (loop3): Ending clean mount [ 200.421793][ T1473] bridge_slave_0: left allmulticast mode [ 200.421829][ T1473] bridge_slave_0: left promiscuous mode [ 200.422105][ T1473] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.520127][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 200.520198][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 201.815853][ T5825] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.656027][ T6791] loop3: detected capacity change from 0 to 32768 [ 203.680027][ T6791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.238 (6791) [ 203.720134][ T6791] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.720168][ T6791] BTRFS info (device loop3): using sha256 checksum algorithm [ 203.957512][ T6791] BTRFS info (device loop3): enabling ssd optimizations [ 203.957545][ T6791] BTRFS info (device loop3): turning on async discard [ 203.957563][ T6791] BTRFS info (device loop3): enabling free space tree [ 204.744423][ T38] audit: type=1800 audit(1776935958.019:6): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.238" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 205.275074][ T1473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.409624][ T1473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.593116][ T1473] bond0 (unregistering): Released all slaves [ 205.744818][ T6812] fuse: Bad value for 'fd' [ 205.943939][ T6754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.129041][ T5825] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.441381][ T6818] loop0: detected capacity change from 0 to 32768 [ 206.448971][ T6818] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 980ad6d4-093f-4411-99f5-48bc9088dcb6 [ 206.449039][ T6818] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.242 (6818) [ 206.501635][ T6818] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.501669][ T6818] BTRFS info (device loop0): using sha256 checksum algorithm [ 206.662200][ T6781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.827075][ T6818] BTRFS info (device loop0): enabling ssd optimizations [ 206.827105][ T6818] BTRFS info (device loop0): turning on async discard [ 206.827122][ T6818] BTRFS info (device loop0): enabling free space tree [ 207.125474][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1 [ 207.127086][ T6835] loop2: detected capacity change from 0 to 4096 [ 207.173358][ T6835] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 207.667901][ T38] audit: type=1800 audit(1776935960.809:7): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.242" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 208.207914][ T6841] loop1: detected capacity change from 0 to 2048 [ 208.855579][ T6841] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 208.943804][ T6841] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 209.095577][ T6841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.569494][ T6835] ntfs3(loop2): Failed to read $AttrDef (-4). [ 211.670452][ T6843] loop2: detected capacity change from 0 to 128 [ 211.788703][ T6580] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.027359][ T6843] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.034772][ T6843] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.070105][ T6852] loop1: detected capacity change from 0 to 64 [ 212.354125][ T5823] BTRFS info (device loop0): last unmount of filesystem 980ad6d4-093f-4411-99f5-48bc9088dcb6 [ 213.154566][ T6580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.364055][ T6580] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.859914][ T6580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.855242][ T6580] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.042119][ T6868] loop3: detected capacity change from 0 to 32768 [ 217.371045][ T6580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.522770][ T5827] Bluetooth: hci1: command 0x2016 tx timeout [ 217.523385][ T5827] Bluetooth: hci4: command 0x2016 tx timeout [ 217.556199][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 217.980284][ T6868] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop3": -EINTR [ 218.069446][ T5832] Bluetooth: hci3: command 0x2016 tx timeout [ 218.103541][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'. [ 218.268115][ T6580] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.499569][ T6580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.761783][ T6888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.830644][ T5824] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.255062][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 220.450588][ T5487] 8021q: adding VLAN 0 to HW filter on device eth2 [ 224.068676][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 224.068703][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 224.345136][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 225.620606][ T1473] hsr_slave_0: left promiscuous mode [ 225.662787][ T1473] hsr_slave_1: left promiscuous mode [ 225.711033][ T1473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.711151][ T1473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.745448][ T1473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.745479][ T1473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.793806][ T6929] loop2: detected capacity change from 0 to 32768 [ 225.826570][ T5142] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 225.915763][ T6929] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 226.350447][ T6929] XFS (loop2): Ending clean mount [ 226.377235][ T1473] veth1_macvtap: left promiscuous mode [ 226.385899][ T1473] veth0_macvtap: left promiscuous mode [ 226.386301][ T1473] veth1_vlan: left promiscuous mode [ 226.402520][ T1473] veth0_vlan: left promiscuous mode [ 226.544059][ T5824] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 226.614817][ T6945] loop1: detected capacity change from 0 to 32768 [ 226.810945][ T6945] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 227.034485][ T6945] XFS (loop1): Ending clean mount [ 227.511958][ T5822] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.308321][ T6982] loop2: detected capacity change from 0 to 32768 [ 233.312884][ T6982] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.274 (6982) [ 233.378281][ T6982] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.378325][ T6982] BTRFS info (device loop2): using sha256 checksum algorithm [ 233.604804][ T6982] BTRFS info (device loop2): enabling ssd optimizations [ 233.604833][ T6982] BTRFS info (device loop2): turning on async discard [ 233.604850][ T6982] BTRFS info (device loop2): enabling free space tree [ 234.114952][ T38] audit: type=1800 audit(1776935986.071:8): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.274" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 235.253958][ T5824] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 236.808697][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 237.249659][ T7012] loop1: detected capacity change from 0 to 32768 [ 237.321328][ T1473] team0 (unregistering): Port device team_slave_1 removed [ 237.327921][ T7012] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.278 (7012) [ 237.356888][ T7012] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.356925][ T7012] BTRFS info (device loop1): using sha256 checksum algorithm [ 237.552012][ T1473] team0 (unregistering): Port device team_slave_0 removed [ 237.642363][ T7012] BTRFS info (device loop1): enabling ssd optimizations [ 237.642391][ T7012] BTRFS info (device loop1): turning on async discard [ 237.642414][ T7012] BTRFS info (device loop1): enabling free space tree [ 237.734341][ T38] audit: type=1800 audit(1776935989.514:9): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.278" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 239.696579][ T5822] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.920770][ T6580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.955241][ T6580] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.769186][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.769576][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.893646][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.893831][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.300880][ T7047] netlink: 'syz.3.283': attribute type 10 has an invalid length. [ 241.422504][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.486581][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.538397][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.540094][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.547371][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.550977][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.749806][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.834743][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.834939][ T7047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.861003][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.868812][ T7047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.913257][ T7047] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 242.652735][ T7057] loop2: detected capacity change from 0 to 32768 [ 242.696944][ T7057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.285 (7057) [ 242.724923][ T7057] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.724994][ T7057] BTRFS info (device loop2): using sha256 checksum algorithm [ 242.967003][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.286'. [ 243.150094][ T7057] BTRFS info (device loop2): enabling ssd optimizations [ 243.150124][ T7057] BTRFS info (device loop2): turning on async discard [ 243.150141][ T7057] BTRFS info (device loop2): enabling free space tree [ 243.561711][ T7082] loop1: detected capacity change from 0 to 64 [ 244.022153][ T60] Bluetooth: hci0: command tx timeout [ 244.147361][ T38] audit: type=1800 audit(1776935995.354:10): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.285" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 244.697612][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.988501][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.009019][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.029064][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.153814][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.275826][ T60] Bluetooth: hci0: command tx timeout [ 246.648350][ T5824] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.728077][ T7098] fuse: Bad value for 'user_id' [ 246.728097][ T7098] fuse: Bad value for 'user_id' [ 248.188179][ T5487] 8021q: adding VLAN 0 to HW filter on device eth3 [ 250.551486][ T5142] Bluetooth: hci2: command tx timeout [ 250.551854][ T5142] Bluetooth: hci0: command tx timeout [ 252.086763][ T7114] netlink: 'syz.2.288': attribute type 10 has an invalid length. [ 252.604773][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.849429][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.857974][ T7114] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.858172][ T7114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.858559][ T7114] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.858771][ T7114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.865366][ T7114] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 253.446359][ T7124] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 253.553535][ T5835] Bluetooth: hci0: command tx timeout [ 253.553571][ T5835] Bluetooth: hci2: command tx timeout [ 253.625660][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.655717][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.685997][ T7124] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.686625][ T7124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.687041][ T7124] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.687233][ T7124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.760001][ T7124] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 254.327039][ T7131] netlink: 'syz.1.297': attribute type 10 has an invalid length. [ 254.491080][ T7133] loop2: detected capacity change from 0 to 32768 [ 254.538970][ T7133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.298 (7133) [ 254.566214][ T7133] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.566248][ T7133] BTRFS info (device loop2): using sha256 checksum algorithm [ 254.672391][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.672602][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.897919][ T7133] BTRFS info (device loop2): enabling ssd optimizations [ 254.897945][ T7133] BTRFS info (device loop2): turning on async discard [ 254.897959][ T7133] BTRFS info (device loop2): enabling free space tree [ 254.988879][ T38] audit: type=1800 audit(1776936005.657:11): pid=7133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.298" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 255.334205][ T7129] loop3: detected capacity change from 0 to 32768 [ 255.679778][ T7129] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 255.763952][ T5142] Bluetooth: hci2: command tx timeout [ 256.206685][ T7129] XFS (loop3): Ending clean mount [ 256.368722][ T7152] loop1: detected capacity change from 0 to 32768 [ 256.475286][ T7152] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 725e6c48-bdef-4d68-b966-afcdbc630d0b [ 256.475353][ T7152] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.299 (7152) [ 256.631664][ T7152] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.631698][ T7152] BTRFS info (device loop1): using sha256 checksum algorithm [ 256.919637][ T5825] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 257.137792][ T5824] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.237399][ T7152] BTRFS info (device loop1): enabling ssd optimizations [ 257.237430][ T7152] BTRFS info (device loop1): turning on async discard [ 257.237448][ T7152] BTRFS info (device loop1): enabling free space tree [ 257.378115][ T38] audit: type=1800 audit(1776936007.884:12): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.299" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 258.001091][ T5142] Bluetooth: hci2: command tx timeout [ 258.959523][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.959606][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.850174][ T5822] BTRFS info (device loop1): last unmount of filesystem 725e6c48-bdef-4d68-b966-afcdbc630d0b [ 263.304287][ T7204] loop3: detected capacity change from 0 to 32768 [ 263.401172][ T7204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.305 (7204) [ 263.663756][ T7211] loop1: detected capacity change from 0 to 32768 [ 263.682971][ T7211] BTRFS info: device /dev/loop1 (7:1) using temp-fsid af848182-fe19-411c-a211-04a1f5a9a735 [ 263.683041][ T7211] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.306 (7211) [ 263.767968][ T7211] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.768004][ T7211] BTRFS info (device loop1): using sha256 checksum algorithm [ 264.017589][ T7211] BTRFS info (device loop1): enabling ssd optimizations [ 264.017620][ T7211] BTRFS info (device loop1): turning on async discard [ 264.017637][ T7211] BTRFS info (device loop1): enabling free space tree [ 264.084437][ T7040] chnl_net:caif_netlink_parms(): no params data found [ 264.315592][ T7204] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 264.315618][ T7204] BTRFS info (device loop3): using sha256 checksum algorithm [ 264.819158][ T38] audit: type=1800 audit(1776936014.500:13): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.306" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 266.178437][ T5487] 8021q: adding VLAN 0 to HW filter on device eth4 [ 266.256351][ T7204] BTRFS error (device loop3): open_ctree failed: -4 [ 267.131738][ T5822] BTRFS info (device loop1): last unmount of filesystem af848182-fe19-411c-a211-04a1f5a9a735 [ 267.826493][ T7264] loop2: detected capacity change from 0 to 32768 [ 267.840845][ T7264] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.310 (7264) [ 267.902945][ T7264] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.902971][ T7264] BTRFS info (device loop2): using sha256 checksum algorithm [ 268.054939][ T7264] BTRFS info (device loop2): enabling ssd optimizations [ 268.054960][ T7264] BTRFS info (device loop2): turning on async discard [ 268.054972][ T7264] BTRFS info (device loop2): enabling free space tree [ 270.029833][ T38] audit: type=1800 audit(1776936019.413:14): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.310" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 272.277468][ T7088] chnl_net:caif_netlink_parms(): no params data found [ 274.260332][ T7302] loop1: detected capacity change from 0 to 32768 [ 274.264029][ T7302] BTRFS info: device /dev/loop1 (7:1) using temp-fsid ce95c77c-c313-42e2-a26b-02a4450e9eb4 [ 274.264094][ T7302] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.315 (7302) [ 274.325591][ T7302] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.325624][ T7302] BTRFS info (device loop1): using sha256 checksum algorithm [ 274.554483][ T7302] BTRFS info (device loop1): enabling ssd optimizations [ 274.554510][ T7302] BTRFS info (device loop1): turning on async discard [ 274.554528][ T7302] BTRFS info (device loop1): enabling free space tree [ 274.665627][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.665978][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.666316][ T7040] bridge_slave_0: entered allmulticast mode [ 274.711911][ T7040] bridge_slave_0: entered promiscuous mode [ 275.018189][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.018503][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.018837][ T7040] bridge_slave_1: entered allmulticast mode [ 275.182031][ T38] audit: type=1800 audit(1776936024.513:15): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.315" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 275.840431][ T7040] bridge_slave_1: entered promiscuous mode [ 276.453849][ T5824] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.854557][ T5822] BTRFS info (device loop1): last unmount of filesystem ce95c77c-c313-42e2-a26b-02a4450e9eb4 [ 277.221173][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.305999][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.477564][ T1473] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.668988][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.669431][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.669887][ T7088] bridge_slave_0: entered allmulticast mode [ 282.677032][ T7088] bridge_slave_0: entered promiscuous mode [ 282.693601][ T7040] team0: Port device team_slave_0 added [ 282.804113][ T7345] loop3: detected capacity change from 0 to 32768 [ 282.806796][ T7345] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.321 (7345) [ 282.831609][ T7345] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.831643][ T7345] BTRFS info (device loop3): using sha256 checksum algorithm [ 283.032743][ T7359] fuse: Unknown parameter 'use00000000000000000000' [ 283.059165][ T7345] BTRFS info (device loop3): enabling ssd optimizations [ 283.059186][ T7345] BTRFS info (device loop3): turning on async discard [ 283.059204][ T7345] BTRFS info (device loop3): enabling free space tree [ 283.867196][ T38] audit: type=1800 audit(1776936032.421:16): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.321" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 284.249862][ T7343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.270481][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.270823][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.271195][ T7088] bridge_slave_1: entered allmulticast mode [ 284.364976][ T7088] bridge_slave_1: entered promiscuous mode [ 284.492091][ T7040] team0: Port device team_slave_1 added [ 284.773656][ T5825] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.055092][ T6188] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 285.108679][ T1473] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.252032][ T6188] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 285.252065][ T6188] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 285.252091][ T6188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 285.252113][ T6188] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 285.256054][ T6188] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 285.256084][ T6188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.256104][ T6188] usb 3-1: Product: syz [ 285.256118][ T6188] usb 3-1: Manufacturer: syz [ 285.256132][ T6188] usb 3-1: SerialNumber: syz [ 285.385043][ T6188] usb 3-1: config 0 descriptor?? [ 285.394911][ T7370] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.428628][ T6188] usb 3-1: ucan: probing device on interface #0 [ 285.428660][ T6188] usb 3-1: ucan: invalid in_ep MaxPacketSize [ 285.428675][ T6188] usb 3-1: ucan: probe failed; try to update the device firmware [ 285.598961][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.628852][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.628870][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.628898][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.732563][ T6188] usb 3-1: USB disconnect, device number 5 [ 286.018756][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.047256][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.047273][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.047300][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.618873][ T7383] loop1: detected capacity change from 0 to 64 [ 286.789214][ T7385] netlink: 'syz.2.329': attribute type 2 has an invalid length. [ 286.907090][ T1473] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.197838][ T7389] netlink: 'syz.3.330': attribute type 10 has an invalid length. [ 287.443125][ T1473] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.641324][ T7088] team0: Port device team_slave_0 added [ 287.642596][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.643116][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.764467][ T7088] team0: Port device team_slave_1 added [ 289.051270][ T7396] loop3: detected capacity change from 0 to 32768 [ 289.091745][ T7396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.332 (7396) [ 289.113748][ T7396] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.113781][ T7396] BTRFS info (device loop3): using sha256 checksum algorithm [ 289.324045][ T7396] BTRFS info (device loop3): enabling ssd optimizations [ 289.324074][ T7396] BTRFS info (device loop3): turning on async discard [ 289.324091][ T7396] BTRFS info (device loop3): enabling free space tree [ 289.676969][ T7040] hsr_slave_0: entered promiscuous mode [ 289.679391][ T7040] hsr_slave_1: entered promiscuous mode [ 289.682587][ T7040] debugfs: 'hsr0' already exists in 'hsr' [ 289.682666][ T7040] Cannot create hsr debugfs directory [ 290.113900][ T38] audit: type=1800 audit(1776936038.307:17): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.332" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 290.469379][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.469397][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.469423][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.503976][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.503993][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.504021][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.760985][ T7422] netlink: 44 bytes leftover after parsing attributes in process `syz.2.335'. [ 290.846359][ T7423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.335'. [ 291.174511][ T5825] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 292.750282][ T7088] hsr_slave_0: entered promiscuous mode [ 292.774075][ T7088] hsr_slave_1: entered promiscuous mode [ 292.777945][ T7088] debugfs: 'hsr0' already exists in 'hsr' [ 292.777975][ T7088] Cannot create hsr debugfs directory [ 292.969310][ T7434] loop2: detected capacity change from 0 to 64 [ 293.419846][ T7436] loop3: detected capacity change from 0 to 32768 [ 293.421906][ T7436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.336 (7436) [ 293.472569][ T7436] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 293.472604][ T7436] BTRFS info (device loop3): using sha256 checksum algorithm [ 293.671755][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 293.676216][ T7436] BTRFS info (device loop3): enabling ssd optimizations [ 293.676252][ T7436] BTRFS info (device loop3): turning on async discard [ 293.676270][ T7436] BTRFS info (device loop3): enabling free space tree [ 294.109896][ T38] audit: type=1800 audit(1776936042.247:18): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.336" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 294.564746][ T7461] loop2: detected capacity change from 0 to 32768 [ 294.568667][ T7461] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 7fb7e61d-1b9c-4973-b2de-d9130158b847 [ 294.568733][ T7461] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.341 (7461) [ 294.611984][ T7461] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 294.612013][ T7461] BTRFS info (device loop2): using sha256 checksum algorithm [ 294.965076][ T7461] BTRFS info (device loop2): enabling ssd optimizations [ 294.965105][ T7461] BTRFS info (device loop2): turning on async discard [ 294.965123][ T7461] BTRFS info (device loop2): enabling free space tree [ 295.459272][ T38] audit: type=1800 audit(1776936043.519:19): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.341" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 295.485912][ T1473] bridge_slave_1: left allmulticast mode [ 295.485949][ T1473] bridge_slave_1: left promiscuous mode [ 295.486236][ T1473] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.725081][ T5825] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.738817][ T1473] bridge_slave_0: left allmulticast mode [ 295.738851][ T1473] bridge_slave_0: left promiscuous mode [ 295.739133][ T1473] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.169915][ T7481] loop1: detected capacity change from 0 to 32768 [ 296.172859][ T7481] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 2834f827-1da8-4427-bf3d-8d11c3567819 [ 296.172942][ T7481] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.344 (7481) [ 296.225613][ T7481] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 296.225649][ T7481] BTRFS info (device loop1): using sha256 checksum algorithm [ 296.366723][ T5824] BTRFS info (device loop2): last unmount of filesystem 7fb7e61d-1b9c-4973-b2de-d9130158b847 [ 296.511197][ T7481] BTRFS info (device loop1): enabling ssd optimizations [ 296.511240][ T7481] BTRFS info (device loop1): turning on async discard [ 296.511258][ T7481] BTRFS info (device loop1): enabling free space tree [ 297.247654][ T38] audit: type=1800 audit(1776936044.989:20): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.344" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 297.687124][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 297.897581][ T1473] bridge_slave_1: left allmulticast mode [ 297.897618][ T1473] bridge_slave_1: left promiscuous mode [ 297.897906][ T1473] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.989675][ T5822] BTRFS info (device loop1): last unmount of filesystem 2834f827-1da8-4427-bf3d-8d11c3567819 [ 298.033088][ T1473] bridge_slave_0: left allmulticast mode [ 298.033125][ T1473] bridge_slave_0: left promiscuous mode [ 298.033416][ T1473] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.124038][ T7517] loop1: detected capacity change from 0 to 64 [ 301.236132][ T1473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.303032][ T1473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.332510][ T1473] bond0 (unregistering): Released all slaves [ 301.978881][ T1473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.077995][ T1473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.135169][ T1473] bond0 (unregistering): Released all slaves [ 302.191342][ T7504] batman_adv: batadv0: Adding interface: dummy0 [ 302.191355][ T7504] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.191377][ T7504] batman_adv: batadv0: Interface activated: dummy0 [ 302.242233][ T7519] netlink: 208 bytes leftover after parsing attributes in process `syz.1.350'. [ 304.260052][ T5899] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 304.441607][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 304.505328][ T5899] usb 4-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 304.505391][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 304.505419][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 304.505466][ T5899] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 304.505489][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.605638][ T5899] usb 4-1: config 0 descriptor?? [ 305.022831][ T5899] usb 4-1: USB disconnect, device number 2 [ 306.307128][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.398021][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.415846][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.463772][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.471411][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.819114][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 307.874332][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 308.438049][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.438271][ T7551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.695955][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.696101][ T7551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.649004][ T7559] netlink: 208 bytes leftover after parsing attributes in process `syz.3.361'. [ 309.669786][ T5142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 309.709085][ T60] Bluetooth: hci5: command tx timeout [ 309.737238][ T5142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 309.750696][ T5142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.769626][ T5142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.784815][ T5142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.102657][ T7551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.930252][ T5142] Bluetooth: hci5: command tx timeout [ 312.196498][ T5142] Bluetooth: hci6: command tx timeout [ 312.988632][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 314.159408][ T5142] Bluetooth: hci5: command tx timeout [ 314.408960][ T5142] Bluetooth: hci6: command tx timeout [ 315.293567][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 315.518770][ T5487] 8021q: adding VLAN 0 to HW filter on device eth5 [ 315.667423][ T7608] netlink: 'syz.3.371': attribute type 10 has an invalid length. [ 315.948965][ T7603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.384337][ T5142] Bluetooth: hci5: command tx timeout [ 316.631920][ T5142] Bluetooth: hci6: command tx timeout [ 318.037801][ T7618] comedi: valid board names for 8255 driver are: [ 318.037814][ T7618] 8255 [ 318.037819][ T7618] comedi: valid board names for vmk80xx driver are: [ 318.037825][ T7618] vmk80xx [ 318.037830][ T7618] comedi: valid board names for usbduxsigma driver are: [ 318.037837][ T7618] usbduxsigma [ 318.037841][ T7618] comedi: valid board names for usbduxfast driver are: [ 318.037848][ T7618] usbduxfast [ 318.037852][ T7618] comedi: valid board names for usbdux driver are: [ 318.037858][ T7618] usbdux [ 318.037863][ T7618] comedi: valid board names for ni6501 driver are: [ 318.037869][ T7618] ni6501 [ 318.037873][ T7618] comedi: valid board names for dt9812 driver are: [ 318.037879][ T7618] dt9812 [ 318.037884][ T7618] comedi: valid board names for ni_labpc_cs driver are: [ 318.037890][ T7618] ni_labpc_cs [ 318.037895][ T7618] comedi: valid board names for ni_daq_700 driver are: [ 318.037901][ T7618] ni_daq_700 [ 318.037906][ T7618] comedi: valid board names for labpc_pci driver are: [ 318.037912][ T7618] labpc_pci [ 318.037917][ T7618] comedi: valid board names for adl_pci9118 driver are: [ 318.037923][ T7618] pci9118dg [ 318.037927][ T7618] pci9118hg [ 318.037932][ T7618] pci9118hr [ 318.037937][ T7618] comedi: valid board names for 8255_pci driver are: [ 318.037943][ T7618] 8255_pci [ 318.037947][ T7618] comedi: valid board names for s526 driver are: [ 318.037953][ T7618] s526 [ 318.037958][ T7618] comedi: valid board names for multiq3 driver are: [ 318.037964][ T7618] multiq3 [ 318.037969][ T7618] comedi: valid board names for pcmuio driver are: [ 318.037974][ T7618] pcmuio48 [ 318.037979][ T7618] pcmuio96 [ 318.037984][ T7618] comedi: valid board names for pcmmio driver are: [ 318.037989][ T7618] pcmmio [ 318.037994][ T7618] comedi: valid board names for pcmda12 driver are: [ 318.038000][ T7618] pcmda12 [ 318.038004][ T7618] comedi: valid board names for pcmad driver are: [ 318.038010][ T7618] pcmad12 [ 318.038015][ T7618] pcmad16 [ 318.038019][ T7618] comedi: valid board names for ni_labpc driver are: [ 318.038025][ T7618] lab-pc-1200 [ 318.038030][ T7618] lab-pc-1200ai [ 318.038035][ T7618] lab-pc+ [ 318.038039][ T7618] comedi: valid board names for atmio16 driver are: [ 318.038045][ T7618] atmio16 [ 318.038050][ T7618] atmio16d [ 318.038054][ T7618] comedi: valid board names for ni_at_ao driver are: [ 318.038060][ T7618] at-ao-6 [ 318.038065][ T7618] at-ao-10 [ 318.038069][ T7618] comedi: valid board names for ni_at_a2150 driver are: [ 318.038075][ T7618] ni_at_a2150 [ 318.038080][ T7618] comedi: valid board names for adq12b driver are: [ 318.038086][ T7618] adq12b [ 318.038091][ T7618] comedi: valid board names for mpc624 driver are: [ 318.038097][ T7618] mpc624 [ 318.038101][ T7618] comedi: valid board names for c6xdigio driver are: [ 318.038107][ T7618] c6xdigio [ 318.038112][ T7618] comedi: valid board names for aio_iiro_16 driver are: [ 318.038124][ T7618] aio_iiro_16 [ 318.038129][ T7618] comedi: valid board names for aio_aio12_8 driver are: [ 318.038135][ T7618] aio_aio12_8 [ 318.038140][ T7618] aio_ai12_8 [ 318.038144][ T7618] aio_ao12_4 [ 318.038149][ T7618] comedi: valid board names for fl512 driver are: [ 318.038155][ T7618] fl512 [ 318.038159][ T7618] comedi: valid board names for dmm32at driver are: [ 318.038165][ T7618] dmm32at [ 318.038170][ T7618] comedi: valid board names for dt282x driver are: [ 318.038176][ T7618] dt2821 [ 318.038180][ T7618] dt2821-f [ 318.038185][ T7618] dt2821-g [ 318.038190][ T7618] dt2823 [ 318.038194][ T7618] dt2824-pgh [ 318.038199][ T7618] dt2824-pgl [ 318.038204][ T7618] dt2825 [ 318.038208][ T7618] dt2827 [ 318.038213][ T7618] dt2828 [ 318.038217][ T7618] dt2829 [ 318.038222][ T7618] dt21-ez [ 318.038226][ T7618] dt23-ez [ 318.038231][ T7618] dt24-ez [ 318.038235][ T7618] dt24-ez-pgl [ 318.038240][ T7618] comedi: valid board names for dt2817 driver are: [ 318.038246][ T7618] dt2817 [ 318.038251][ T7618] comedi: valid board names for dt2815 driver are: [ 318.038256][ T7618] dt2815 [ 318.038261][ T7618] comedi: valid board names for dt2814 driver are: [ 318.038267][ T7618] dt2814 [ 318.038271][ T7618] comedi: valid board names for dt2811 driver are: [ 318.038277][ T7618] dt2811-pgh [ 318.038282][ T7618] dt2811-pgl [ 318.038287][ T7618] comedi: valid board names for dt2801 driver are: [ 318.038293][ T7618] dt2801 [ 318.038297][ T7618] comedi: valid board names for das6402 driver are: [ 318.038303][ T7618] das6402-12 [ 318.038308][ T7618] das6402-16 [ 318.038313][ T7618] comedi: valid board names for das1800 driver are: [ 318.038319][ T7618] das-1701st [ 318.038323][ T7618] das-1701st-da [ 318.038328][ T7618] das-1702st [ 318.038333][ T7618] das-1702st-da [ 318.038338][ T7618] das-1702hr [ 318.038342][ T7618] das-1702hr-da [ 318.038347][ T7618] das-1701ao [ 318.038352][ T7618] das-1702ao [ 318.038357][ T7618] das-1801st [ 318.038361][ T7618] das-1801st-da [ 318.038366][ T7618] das-1802st [ 318.038371][ T7618] das-1802st-da [ 318.038375][ T7618] das-1802hr [ 318.038380][ T7618] das-1802hr-da [ 318.038385][ T7618] das-1801hc [ 318.038390][ T7618] das-1802hc [ 318.038394][ T7618] das-1801ao [ 318.038399][ T7618] das-1802ao [ 318.038404][ T7618] comedi: valid board names for das800 driver are: [ 318.038410][ T7618] das-800 [ 318.038414][ T7618] cio-das800 [ 318.038419][ T7618] das-801 [ 318.038423][ T7618] cio-das801 [ 318.038428][ T7618] das-802 [ 318.038433][ T7618] cio-das802 [ 318.038437][ T7618] cio-das802/16 [ 318.038442][ T7618] comedi: valid board names for isa-das08 driver are: [ 318.038448][ T7618] isa-das08 [ 318.038453][ T7618] das08-pgm [ 318.038457][ T7618] das08-pgh [ 318.038462][ T7618] das08-pgl [ 318.038466][ T7618] das08-aoh [ 318.038471][ T7618] das08-aol [ 318.038476][ T7618] das08-aom [ 318.038480][ T7618] das08/jr-ao [ 318.038485][ T7618] das08jr-16-ao [ 318.038490][ T7618] pc104-das08 [ 318.038495][ T7618] das08jr/16 [ 318.038499][ T7618] comedi: valid board names for das16m1 driver are: [ 318.038505][ T7618] das16m1 [ 318.038510][ T7618] comedi: valid board names for dac02 driver are: [ 318.038516][ T7618] dac02 [ 318.038520][ T7618] comedi: valid board names for rti802 driver are: [ 318.038526][ T7618] rti802 [ 318.038531][ T7618] comedi: valid board names for rti800 driver are: [ 318.038536][ T7618] rti800 [ 318.038541][ T7618] rti815 [ 318.038545][ T7618] comedi: valid board names for pcm3724 driver are: [ 318.038551][ T7618] pcm3724 [ 318.038556][ T7618] comedi: valid board names for pcl818 driver are: [ 318.038562][ T7618] pcl818l [ 318.038566][ T7618] pcl818h [ 318.038571][ T7618] pcl818hd [ 318.038575][ T7618] pcl818hg [ 318.038580][ T7618] pcl818 [ 318.038584][ T7618] pcl718 [ 318.038589][ T7618] pcm3718 [ 318.038593][ T7618] comedi: valid board names for pcl816 driver are: [ 318.038599][ T7618] pcl816 [ 318.038604][ T7618] pcl814b [ 318.038608][ T7618] comedi: valid board names for pcl812 driver are: [ 318.038614][ T7618] pcl812 [ 318.038619][ T7618] pcl812pg [ 318.038623][ T7618] acl8112pg [ 318.038628][ T7618] acl8112dg [ 318.038633][ T7618] acl8112hg [ 318.038637][ T7618] a821pgl [ 318.038642][ T7618] a821pglnda [ 318.038647][ T7618] a821pgh [ 318.038651][ T7618] a822pgl [ 318.038656][ T7618] a822pgh [ 318.038660][ T7618] a823pgl [ 318.038665][ T7618] a823pgh [ 318.038669][ T7618] pcl813 [ 318.038674][ T7618] pcl813b [ 318.038678][ T7618] acl8113 [ 318.038683][ T7618] iso813 [ 318.038687][ T7618] acl8216 [ 318.038691][ T7618] a826pg [ 318.038696][ T7618] comedi: valid board names for pcl730 driver are: [ 318.038702][ T7618] pcl730 [ 318.038706][ T7618] iso730 [ 318.038711][ T7618] acl7130 [ 318.038715][ T7618] pcm3730 [ 318.038720][ T7618] pcl725 [ 318.038724][ T7618] p8r8dio [ 318.038729][ T7618] acl7225b [ 318.038733][ T7618] p16r16dio [ 318.038738][ T7618] pcl733 [ 318.038742][ T7618] pcl734 [ 318.038747][ T7618] opmm-1616-xt [ 318.038752][ T7618] pearl-mm-p [ 318.038756][ T7618] ir104-pbf [ 318.038761][ T7618] comedi: valid board names for pcl726 driver are: [ 318.038767][ T7618] pcl726 [ 318.038771][ T7618] pcl727 [ 318.038776][ T7618] pcl728 [ 318.038780][ T7618] acl6126 [ 318.038785][ T7618] acl6128 [ 318.038789][ T7618] comedi: valid board names for pcl724 driver are: [ 318.038795][ T7618] pcl724 [ 318.038800][ T7618] pcl722 [ 318.038804][ T7618] pcl731 [ 318.038809][ T7618] acl7122 [ 318.038813][ T7618] acl7124 [ 318.038818][ T7618] pet48dio [ 318.038822][ T7618] pcmio48 [ 318.038827][ T7618] onyx-mm-dio [ 318.038832][ T7618] comedi: valid board names for pcl711 driver are: [ 318.038837][ T7618] pcl711 [ 318.038842][ T7618] pcl711b [ 318.038846][ T7618] acl8112hg [ 318.038851][ T7618] acl8112dg [ 318.038856][ T7618] comedi: valid board names for amplc_pc263 driver are: [ 318.038862][ T7618] pc263 [ 318.038866][ T7618] comedi: valid board names for amplc_pc236 driver are: [ 318.038873][ T7618] pc36at [ 318.038877][ T7618] comedi: valid board names for amplc_dio200 driver are: [ 318.038883][ T7618] pc212e [ 318.038888][ T7618] pc214e [ 318.038892][ T7618] pc215e [ 318.038897][ T7618] pc218e [ 318.038901][ T7618] pc272e [ 318.038906][ T7618] comedi: valid board names for comedi_parport driver are: [ 318.038912][ T7618] comedi_parport [ 318.038917][ T7618] comedi: valid board names for comedi_test driver are: [ 318.038923][ T7618] comedi_test [ 318.038928][ T7618] comedi: valid board names for comedi_bond driver are: [ 318.038934][ T7618] comedi_bond [ 318.856124][ T5142] Bluetooth: hci6: command tx timeout [ 319.629468][ T6650] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 319.774957][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 320.869209][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 320.927898][ T6650] usb 3-1: Using ep0 maxpacket: 32 [ 320.930363][ T6650] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 320.930390][ T6650] usb 3-1: config 0 has no interface number 0 [ 320.938928][ T6650] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 320.938963][ T6650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.938983][ T6650] usb 3-1: Product: syz [ 320.938998][ T6650] usb 3-1: Manufacturer: syz [ 320.939012][ T6650] usb 3-1: SerialNumber: syz [ 320.973607][ T6650] usb 3-1: config 0 descriptor?? [ 321.070894][ T6650] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 321.772782][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.773589][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.060594][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.184741][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.185610][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 18 [ 322.402708][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 323.137523][ T6650] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 323.532025][ T6650] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 324.504440][ T6650] usb 3-1: USB disconnect, device number 6 [ 324.608873][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.609003][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.719569][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 325.078421][ T6650] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 325.488544][ T6650] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 325.507592][ T6650] quatech2 3-1:0.51: device disconnected [ 325.573681][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.573895][ T7653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.597602][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.597849][ T7653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.749737][ T7653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.115163][ T1473] hsr_slave_0: left promiscuous mode [ 327.160885][ T1473] hsr_slave_1: left promiscuous mode [ 327.162131][ T1473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.209265][ T1473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.371221][ T1473] hsr_slave_0: left promiscuous mode [ 327.479469][ T1473] hsr_slave_1: left promiscuous mode [ 327.480740][ T1473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.480767][ T1473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.521742][ T1473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.521763][ T1473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.677605][ T1473] veth1_macvtap: left promiscuous mode [ 327.677677][ T1473] veth0_macvtap: left promiscuous mode [ 327.677869][ T1473] veth1_vlan: left promiscuous mode [ 327.677997][ T1473] veth0_vlan: left promiscuous mode [ 327.894770][ T836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 328.193935][ T836] usb 4-1: Using ep0 maxpacket: 32 [ 328.427283][ T836] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 328.427315][ T836] usb 4-1: config 0 has no interface number 0 [ 328.601602][ T836] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 328.601635][ T836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.601656][ T836] usb 4-1: Product: syz [ 328.601670][ T836] usb 4-1: Manufacturer: syz [ 328.601763][ T836] usb 4-1: SerialNumber: syz [ 328.633965][ T836] usb 4-1: config 0 descriptor?? [ 328.706894][ T836] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 328.879248][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.882142][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.026355][ T836] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 329.120130][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.136446][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.137628][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 18 [ 329.207663][ T836] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 330.269868][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 330.314816][ T836] usb 4-1: USB disconnect, device number 3 [ 330.419170][ T836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 330.511055][ T836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 330.530815][ T836] quatech2 4-1:0.51: device disconnected [ 332.095663][ T1473] team0 (unregistering): Port device team_slave_1 removed [ 332.159232][ T1473] team0 (unregistering): Port device team_slave_0 removed [ 332.865678][ T1473] team0 (unregistering): Port device team_slave_1 removed [ 332.929870][ T1473] team0 (unregistering): Port device team_slave_0 removed [ 336.042092][ T7552] chnl_net:caif_netlink_parms(): no params data found [ 337.698204][ T7539] chnl_net:caif_netlink_parms(): no params data found [ 338.518318][ T7735] NILFS (nullb0): couldn't find nilfs on the device [ 339.370854][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.371203][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.374106][ T7552] bridge_slave_0: entered allmulticast mode [ 339.379968][ T7552] bridge_slave_0: entered promiscuous mode [ 339.442263][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.442615][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.442963][ T7552] bridge_slave_1: entered allmulticast mode [ 339.457838][ T7552] bridge_slave_1: entered promiscuous mode [ 339.905432][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.256686][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 340.318544][ T5142] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 340.318596][ T5142] CPU: 0 UID: 0 PID: 5142 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 340.318622][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.318642][ T5142] Workqueue: hci4 hci_rx_work [ 340.318688][ T5142] Call Trace: [ 340.318700][ T5142] [ 340.318711][ T5142] dump_stack_lvl+0xe8/0x150 [ 340.318741][ T5142] sysfs_create_dir_ns+0x271/0x2a0 [ 340.318770][ T5142] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 340.318796][ T5142] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 340.318829][ T5142] ? rt_spin_unlock+0x160/0x200 [ 340.318856][ T5142] kobject_add_internal+0x631/0xd10 [ 340.318901][ T5142] kobject_add+0x163/0x240 [ 340.318941][ T5142] ? __pfx_kobject_add+0x10/0x10 [ 340.318984][ T5142] ? get_device_parent+0x370/0x3a0 [ 340.319019][ T5142] device_add+0x408/0xbb0 [ 340.319053][ T5142] hci_conn_add_sysfs+0xd5/0x210 [ 340.319089][ T5142] le_conn_complete_evt+0x10e6/0x16b0 [ 340.319127][ T5142] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 340.319181][ T5142] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 340.319211][ T5142] ? lockdep_hardirqs_on+0x7a/0x110 [ 340.319244][ T5142] ? skb_pull_data+0xfb/0x200 [ 340.319275][ T5142] hci_le_conn_complete_evt+0x187/0x470 [ 340.319308][ T5142] hci_event_packet+0x659/0xef0 [ 340.319348][ T5142] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 340.319370][ T5142] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 340.319407][ T5142] ? __pfx_hci_event_packet+0x10/0x10 [ 340.319439][ T5142] ? rt_spin_unlock+0x14f/0x200 [ 340.319473][ T5142] ? hci_send_to_monitor+0xe2/0x590 [ 340.319503][ T5142] hci_rx_work+0x3ee/0x1040 [ 340.319536][ T5142] ? preempt_schedule_thunk+0x16/0x30 [ 340.319579][ T5142] ? process_one_work+0x8b7/0x1710 [ 340.319601][ T5142] process_one_work+0x9a3/0x1710 [ 340.319650][ T5142] ? __pfx_process_one_work+0x10/0x10 [ 340.319671][ T5142] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.319718][ T5142] worker_thread+0xba8/0x11e0 [ 340.319753][ T5142] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 340.319785][ T5142] ? __kthread_parkme+0x7a/0x1f0 [ 340.319812][ T5142] ? __kthread_parkme+0x19c/0x1f0 [ 340.319845][ T5142] kthread+0x388/0x470 [ 340.319876][ T5142] ? __pfx_worker_thread+0x10/0x10 [ 340.319899][ T5142] ? __pfx_kthread+0x10/0x10 [ 340.319931][ T5142] ret_from_fork+0x514/0xb70 [ 340.319959][ T5142] ? __pfx_ret_from_fork+0x10/0x10 [ 340.319985][ T5142] ? __switch_to+0xc79/0x1410 [ 340.320023][ T5142] ? __pfx_kthread+0x10/0x10 [ 340.320055][ T5142] ret_from_fork_asm+0x1a/0x30 [ 340.320103][ T5142] [ 340.320251][ T5142] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 340.320295][ T5142] Bluetooth: hci4: failed to register connection device [ 342.885164][ T7753] nbd: socks must be embedded in a SOCK_ITEM attr [ 343.054147][ T7539] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.054489][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.054845][ T7539] bridge_slave_0: entered allmulticast mode [ 343.101718][ T7539] bridge_slave_0: entered promiscuous mode [ 343.356706][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.031934][ T7539] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.032285][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.032660][ T7539] bridge_slave_1: entered allmulticast mode [ 344.085033][ T7539] bridge_slave_1: entered promiscuous mode [ 344.311503][ T5487] 8021q: adding VLAN 0 to HW filter on device eth6 [ 345.016505][ T7552] team0: Port device team_slave_0 added [ 345.097505][ T7539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.141317][ T7552] team0: Port device team_slave_1 added [ 345.220051][ T7539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.387554][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.387573][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.387615][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.413391][ T7539] team0: Port device team_slave_0 added [ 345.425793][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.425860][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.425939][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.557715][ T7539] team0: Port device team_slave_1 added [ 346.850686][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.850705][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.850732][ T7539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.187625][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.187643][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.187671][ T7539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.795810][ T7794] comedi: valid board names for 8255 driver are: [ 348.795822][ T7794] 8255 [ 348.795827][ T7794] comedi: valid board names for vmk80xx driver are: [ 348.795833][ T7794] vmk80xx [ 348.795838][ T7794] comedi: valid board names for usbduxsigma driver are: [ 348.795844][ T7794] usbduxsigma [ 348.795849][ T7794] comedi: valid board names for usbduxfast driver are: [ 348.795855][ T7794] usbduxfast [ 348.795860][ T7794] comedi: valid board names for usbdux driver are: [ 348.795866][ T7794] usbdux [ 348.795871][ T7794] comedi: valid board names for ni6501 driver are: [ 348.795877][ T7794] ni6501 [ 348.795881][ T7794] comedi: valid board names for dt9812 driver are: [ 348.795887][ T7794] dt9812 [ 348.795892][ T7794] comedi: valid board names for ni_labpc_cs driver are: [ 348.795898][ T7794] ni_labpc_cs [ 348.795903][ T7794] comedi: valid board names for ni_daq_700 driver are: [ 348.795909][ T7794] ni_daq_700 [ 348.795913][ T7794] comedi: valid board names for labpc_pci driver are: [ 348.795919][ T7794] labpc_pci [ 348.795924][ T7794] comedi: valid board names for adl_pci9118 driver are: [ 348.795930][ T7794] pci9118dg [ 348.795935][ T7794] pci9118hg [ 348.795940][ T7794] pci9118hr [ 348.795945][ T7794] comedi: valid board names for 8255_pci driver are: [ 348.795951][ T7794] 8255_pci [ 348.795956][ T7794] comedi: valid board names for s526 driver are: [ 348.795962][ T7794] s526 [ 348.795967][ T7794] comedi: valid board names for multiq3 driver are: [ 348.795972][ T7794] multiq3 [ 348.795977][ T7794] comedi: valid board names for pcmuio driver are: [ 348.795983][ T7794] pcmuio48 [ 348.795988][ T7794] pcmuio96 [ 348.795993][ T7794] comedi: valid board names for pcmmio driver are: [ 348.795999][ T7794] pcmmio [ 348.796003][ T7794] comedi: valid board names for pcmda12 driver are: [ 348.796009][ T7794] pcmda12 [ 348.796014][ T7794] comedi: valid board names for pcmad driver are: [ 348.796020][ T7794] pcmad12 [ 348.796024][ T7794] pcmad16 [ 348.796029][ T7794] comedi: valid board names for ni_labpc driver are: [ 348.796035][ T7794] lab-pc-1200 [ 348.796040][ T7794] lab-pc-1200ai [ 348.796045][ T7794] lab-pc+ [ 348.796049][ T7794] comedi: valid board names for atmio16 driver are: [ 348.796055][ T7794] atmio16 [ 348.796060][ T7794] atmio16d [ 348.796064][ T7794] comedi: valid board names for ni_at_ao driver are: [ 348.796070][ T7794] at-ao-6 [ 348.796075][ T7794] at-ao-10 [ 348.796080][ T7794] comedi: valid board names for ni_at_a2150 driver are: [ 348.796086][ T7794] ni_at_a2150 [ 348.796091][ T7794] comedi: valid board names for adq12b driver are: [ 348.796097][ T7794] adq12b [ 348.796101][ T7794] comedi: valid board names for mpc624 driver are: [ 348.796107][ T7794] mpc624 [ 348.796112][ T7794] comedi: valid board names for c6xdigio driver are: [ 348.796118][ T7794] c6xdigio [ 348.796123][ T7794] comedi: valid board names for aio_iiro_16 driver are: [ 348.796129][ T7794] aio_iiro_16 [ 348.796134][ T7794] comedi: valid board names for aio_aio12_8 driver are: [ 348.796140][ T7794] aio_aio12_8 [ 348.796145][ T7794] aio_ai12_8 [ 348.796149][ T7794] aio_ao12_4 [ 348.796154][ T7794] comedi: valid board names for fl512 driver are: [ 348.796160][ T7794] fl512 [ 348.796165][ T7794] comedi: valid board names for dmm32at driver are: [ 348.796171][ T7794] dmm32at [ 348.796175][ T7794] comedi: valid board names for dt282x driver are: [ 348.796181][ T7794] dt2821 [ 348.796186][ T7794] dt2821-f [ 348.796190][ T7794] dt2821-g [ 348.796195][ T7794] dt2823 [ 348.796199][ T7794] dt2824-pgh [ 348.796204][ T7794] dt2824-pgl [ 348.796208][ T7794] dt2825 [ 348.796213][ T7794] dt2827 [ 348.796217][ T7794] dt2828 [ 348.796222][ T7794] dt2829 [ 348.796226][ T7794] dt21-ez [ 348.796231][ T7794] dt23-ez [ 348.796235][ T7794] dt24-ez [ 348.796240][ T7794] dt24-ez-pgl [ 348.796244][ T7794] comedi: valid board names for dt2817 driver are: [ 348.796250][ T7794] dt2817 [ 348.796255][ T7794] comedi: valid board names for dt2815 driver are: [ 348.796261][ T7794] dt2815 [ 348.796265][ T7794] comedi: valid board names for dt2814 driver are: [ 348.796271][ T7794] dt2814 [ 348.796275][ T7794] comedi: valid board names for dt2811 driver are: [ 348.796281][ T7794] dt2811-pgh [ 348.796286][ T7794] dt2811-pgl [ 348.796290][ T7794] comedi: valid board names for dt2801 driver are: [ 348.796296][ T7794] dt2801 [ 348.796301][ T7794] comedi: valid board names for das6402 driver are: [ 348.796307][ T7794] das6402-12 [ 348.796311][ T7794] das6402-16 [ 348.796316][ T7794] comedi: valid board names for das1800 driver are: [ 348.796322][ T7794] das-1701st [ 348.796326][ T7794] das-1701st-da [ 348.796331][ T7794] das-1702st [ 348.796336][ T7794] das-1702st-da [ 348.796341][ T7794] das-1702hr [ 348.796345][ T7794] das-1702hr-da [ 348.796350][ T7794] das-1701ao [ 348.796355][ T7794] das-1702ao [ 348.796359][ T7794] das-1801st [ 348.796364][ T7794] das-1801st-da [ 348.796369][ T7794] das-1802st [ 348.796373][ T7794] das-1802st-da [ 348.796378][ T7794] das-1802hr [ 348.796383][ T7794] das-1802hr-da [ 348.796387][ T7794] das-1801hc [ 348.796392][ T7794] das-1802hc [ 348.796397][ T7794] das-1801ao [ 348.796401][ T7794] das-1802ao [ 348.796406][ T7794] comedi: valid board names for das800 driver are: [ 348.796412][ T7794] das-800 [ 348.852438][ T7794] cio-das800 [ 348.852461][ T7794] das-801 [ 348.852468][ T7794] cio-das801 [ 348.852474][ T7794] das-802 [ 348.852480][ T7794] cio-das802 [ 348.852487][ T7794] cio-das802/16 [ 348.852495][ T7794] comedi: valid board names for isa-das08 driver are: [ 348.852505][ T7794] isa-das08 [ 348.852513][ T7794] das08-pgm [ 348.852521][ T7794] das08-pgh [ 348.852528][ T7794] das08-pgl [ 348.852535][ T7794] das08-aoh [ 348.852542][ T7794] das08-aol [ 348.852549][ T7794] das08-aom [ 348.852556][ T7794] das08/jr-ao [ 348.852563][ T7794] das08jr-16-ao [ 348.852571][ T7794] pc104-das08 [ 348.852578][ T7794] das08jr/16 [ 348.852585][ T7794] comedi: valid board names for das16m1 driver are: [ 348.897489][ T7794] das16m1 [ 348.897507][ T7794] comedi: valid board names for dac02 driver are: [ 348.897517][ T7794] dac02 [ 348.921418][ T7794] comedi: valid board names for rti802 driver are: [ 348.921436][ T7794] rti802 [ 348.921452][ T7794] comedi: valid board names for rti800 driver are: [ 348.921462][ T7794] rti800 [ 348.923903][ T7794] rti815 [ 348.923916][ T7794] comedi: valid board names for pcm3724 driver are: [ 348.923925][ T7794] pcm3724 [ 348.923932][ T7794] comedi: valid board names for pcl818 driver are: [ 348.923941][ T7794] pcl818l [ 348.923948][ T7794] pcl818h [ 348.923955][ T7794] pcl818hd [ 348.923961][ T7794] pcl818hg [ 348.923974][ T7794] pcl818 [ 348.923979][ T7794] pcl718 [ 348.923984][ T7794] pcm3718 [ 348.923989][ T7794] comedi: valid board names for pcl816 driver are: [ 348.924019][ T7794] pcl816 [ 348.924026][ T7794] pcl814b [ 348.924033][ T7794] comedi: valid board names for pcl812 driver are: [ 348.924042][ T7794] pcl812 [ 348.924054][ T7794] pcl812pg [ 348.924059][ T7794] acl8112pg [ 348.924064][ T7794] acl8112dg [ 348.924068][ T7794] acl8112hg [ 348.924073][ T7794] a821pgl [ 348.924078][ T7794] a821pglnda [ 348.924083][ T7794] a821pgh [ 348.924088][ T7794] a822pgl [ 348.924093][ T7794] a822pgh [ 348.924097][ T7794] a823pgl [ 348.924102][ T7794] a823pgh [ 348.924106][ T7794] pcl813 [ 348.924111][ T7794] pcl813b [ 348.924115][ T7794] acl8113 [ 348.924120][ T7794] iso813 [ 348.924125][ T7794] acl8216 [ 348.924129][ T7794] a826pg [ 348.924134][ T7794] comedi: valid board names for pcl730 driver are: [ 348.924141][ T7794] pcl730 [ 348.924145][ T7794] iso730 [ 348.924150][ T7794] acl7130 [ 348.924155][ T7794] pcm3730 [ 348.924159][ T7794] pcl725 [ 348.924164][ T7794] p8r8dio [ 348.924168][ T7794] acl7225b [ 348.924173][ T7794] p16r16dio [ 348.924178][ T7794] pcl733 [ 348.924182][ T7794] pcl734 [ 348.924186][ T7794] opmm-1616-xt [ 348.924191][ T7794] pearl-mm-p [ 348.924196][ T7794] ir104-pbf [ 348.924200][ T7794] comedi: valid board names for pcl726 driver are: [ 348.924207][ T7794] pcl726 [ 348.924211][ T7794] pcl727 [ 348.924216][ T7794] pcl728 [ 348.924220][ T7794] acl6126 [ 348.924225][ T7794] acl6128 [ 348.924229][ T7794] comedi: valid board names for pcl724 driver are: [ 348.924247][ T7794] pcl724 [ 348.924252][ T7794] pcl722 [ 348.924260][ T7794] pcl731 [ 348.924265][ T7794] acl7122 [ 348.924270][ T7794] acl7124 [ 348.924274][ T7794] pet48dio [ 348.924279][ T7794] pcmio48 [ 348.924283][ T7794] onyx-mm-dio [ 348.924918][ T7794] comedi: valid board names for pcl711 driver are: [ 348.924938][ T7794] pcl711 [ 348.924943][ T7794] pcl711b [ 348.924948][ T7794] acl8112hg [ 348.924953][ T7794] acl8112dg [ 348.924958][ T7794] comedi: valid board names for amplc_pc263 driver are: [ 348.924964][ T7794] pc263 [ 348.924969][ T7794] comedi: valid board names for amplc_pc236 driver are: [ 348.924976][ T7794] pc36at [ 348.924980][ T7794] comedi: valid board names for amplc_dio200 driver are: [ 348.925007][ T7794] pc212e [ 348.925014][ T7794] pc214e [ 348.925021][ T7794] pc215e [ 348.925028][ T7794] pc218e [ 348.926780][ T7794] pc272e [ 348.926792][ T7794] comedi: valid board names for comedi_parport driver are: [ 348.926803][ T7794] comedi_parport [ 348.926810][ T7794] comedi: valid board names for comedi_test driver are: [ 348.930455][ T7794] comedi_test [ 348.937061][ T7794] comedi: valid board names for comedi_bond driver are: [ 348.942681][ T7794] comedi_bond [ 349.669503][ T7552] hsr_slave_0: entered promiscuous mode [ 349.723435][ T7552] hsr_slave_1: entered promiscuous mode [ 349.780315][ T7552] debugfs: 'hsr0' already exists in 'hsr' [ 349.780413][ T7552] Cannot create hsr debugfs directory [ 350.303415][ T5942] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 350.459097][ T7539] hsr_slave_0: entered promiscuous mode [ 350.472070][ T5942] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 350.472099][ T5942] usb 4-1: config 0 has no interface number 0 [ 350.472145][ T5942] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 350.472168][ T5942] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 350.472197][ T5942] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 350.472224][ T5942] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 350.472251][ T5942] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 350.472278][ T5942] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 350.472321][ T5942] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 350.472345][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.558233][ T7539] hsr_slave_1: entered promiscuous mode [ 350.580397][ T7539] debugfs: 'hsr0' already exists in 'hsr' [ 351.221917][ T5942] usb 4-1: config 0 descriptor?? [ 351.247093][ T7806] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.247439][ T7806] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.305632][ T5942] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 351.545118][ T7539] Cannot create hsr debugfs directory [ 354.535170][ T836] usb 4-1: USB disconnect, device number 4 [ 354.943362][ T7828] NILFS (nullb0): couldn't find nilfs on the device [ 356.489833][ T836] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 358.783893][ T5942] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 359.109054][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 359.111868][ T5942] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 359.111896][ T5942] usb 3-1: config 0 has no interface number 0 [ 359.268966][ T5942] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 359.269057][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.269123][ T5942] usb 3-1: Product: syz [ 359.269139][ T5942] usb 3-1: Manufacturer: syz [ 359.269209][ T5942] usb 3-1: SerialNumber: syz [ 359.550321][ T5835] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 359.550391][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 359.550419][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 359.550435][ T5835] Workqueue: hci1 hci_rx_work [ 359.550474][ T5835] Call Trace: [ 359.550484][ T5835] [ 359.550494][ T5835] dump_stack_lvl+0xe8/0x150 [ 359.550525][ T5835] sysfs_create_dir_ns+0x271/0x2a0 [ 359.550556][ T5835] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 359.550594][ T5835] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 359.550628][ T5835] ? rt_spin_unlock+0x160/0x200 [ 359.550657][ T5835] kobject_add_internal+0x631/0xd10 [ 359.550705][ T5835] kobject_add+0x163/0x240 [ 359.550746][ T5835] ? __pfx_kobject_add+0x10/0x10 [ 359.550790][ T5835] ? get_device_parent+0x370/0x3a0 [ 359.550826][ T5835] device_add+0x408/0xbb0 [ 359.550862][ T5835] hci_conn_add_sysfs+0xd5/0x210 [ 359.550899][ T5835] le_conn_complete_evt+0x10e6/0x16b0 [ 359.550937][ T5835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 359.550964][ T5835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 359.550995][ T5835] ? lockdep_hardirqs_on+0x7a/0x110 [ 359.551028][ T5835] ? skb_pull_data+0xfb/0x200 [ 359.551059][ T5835] hci_le_conn_complete_evt+0x187/0x470 [ 359.551093][ T5835] hci_event_packet+0x659/0xef0 [ 359.551135][ T5835] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 359.551158][ T5835] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 359.551195][ T5835] ? __pfx_hci_event_packet+0x10/0x10 [ 359.551228][ T5835] ? rt_spin_unlock+0x14f/0x200 [ 359.551264][ T5835] ? hci_send_to_monitor+0xe2/0x590 [ 359.551295][ T5835] hci_rx_work+0x3ee/0x1040 [ 359.551342][ T5835] ? process_one_work+0x8b7/0x1710 [ 359.551366][ T5835] process_one_work+0x9a3/0x1710 [ 359.551416][ T5835] ? __pfx_process_one_work+0x10/0x10 [ 359.551438][ T5835] ? do_raw_spin_lock+0x12b/0x2f0 [ 359.551484][ T5835] worker_thread+0xba8/0x11e0 [ 359.551522][ T5835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 359.551556][ T5835] ? __kthread_parkme+0x7a/0x1f0 [ 359.551591][ T5835] ? __kthread_parkme+0x19c/0x1f0 [ 359.551627][ T5835] kthread+0x388/0x470 [ 359.551658][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 359.551682][ T5835] ? __pfx_kthread+0x10/0x10 [ 359.551715][ T5835] ret_from_fork+0x514/0xb70 [ 359.551750][ T5835] ? __pfx_ret_from_fork+0x10/0x10 [ 359.551776][ T5835] ? __switch_to+0xc79/0x1410 [ 359.551814][ T5835] ? __pfx_kthread+0x10/0x10 [ 359.551847][ T5835] ret_from_fork_asm+0x1a/0x30 [ 359.551896][ T5835] [ 359.552027][ T5835] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 359.552153][ T5835] Bluetooth: hci1: failed to register connection device [ 362.108079][ T5942] usb 3-1: config 0 descriptor?? [ 362.420340][ T5942] usb 3-1: can't set config #0, error -71 [ 362.580039][ T5487] 8021q: adding VLAN 0 to HW filter on device eth7 [ 362.628033][ T5942] usb 3-1: USB disconnect, device number 7 [ 368.750899][ T7880] comedi: valid board names for 8255 driver are: [ 368.750916][ T7880] 8255 [ 368.750921][ T7880] comedi: valid board names for vmk80xx driver are: [ 368.750928][ T7880] vmk80xx [ 368.750933][ T7880] comedi: valid board names for usbduxsigma driver are: [ 368.750939][ T7880] usbduxsigma [ 368.750945][ T7880] comedi: valid board names for usbduxfast driver are: [ 368.750951][ T7880] usbduxfast [ 368.750956][ T7880] comedi: valid board names for usbdux driver are: [ 368.750962][ T7880] usbdux [ 368.750967][ T7880] comedi: valid board names for ni6501 driver are: [ 368.750973][ T7880] ni6501 [ 368.750977][ T7880] comedi: valid board names for dt9812 driver are: [ 368.750984][ T7880] dt9812 [ 368.750988][ T7880] comedi: valid board names for ni_labpc_cs driver are: [ 368.750996][ T7880] ni_labpc_cs [ 368.751002][ T7880] comedi: valid board names for ni_daq_700 driver are: [ 368.751010][ T7880] ni_daq_700 [ 368.751015][ T7880] comedi: valid board names for labpc_pci driver are: [ 368.751021][ T7880] labpc_pci [ 368.751026][ T7880] comedi: valid board names for adl_pci9118 driver are: [ 368.751033][ T7880] pci9118dg [ 368.751037][ T7880] pci9118hg [ 368.751042][ T7880] pci9118hr [ 368.751047][ T7880] comedi: valid board names for 8255_pci driver are: [ 368.751053][ T7880] 8255_pci [ 368.751057][ T7880] comedi: valid board names for s526 driver are: [ 368.751063][ T7880] s526 [ 368.751067][ T7880] comedi: valid board names for multiq3 driver are: [ 368.751073][ T7880] multiq3 [ 368.751078][ T7880] comedi: valid board names for pcmuio driver are: [ 368.751084][ T7880] pcmuio48 [ 368.751088][ T7880] pcmuio96 [ 368.751093][ T7880] comedi: valid board names for pcmmio driver are: [ 368.751098][ T7880] pcmmio [ 368.751103][ T7880] comedi: valid board names for pcmda12 driver are: [ 368.751109][ T7880] pcmda12 [ 368.751113][ T7880] comedi: valid board names for pcmad driver are: [ 368.751119][ T7880] pcmad12 [ 368.751124][ T7880] pcmad16 [ 368.751128][ T7880] comedi: valid board names for ni_labpc driver are: [ 368.751134][ T7880] lab-pc-1200 [ 368.751139][ T7880] lab-pc-1200ai [ 368.751143][ T7880] lab-pc+ [ 368.751148][ T7880] comedi: valid board names for atmio16 driver are: [ 368.751154][ T7880] atmio16 [ 368.751158][ T7880] atmio16d [ 368.751163][ T7880] comedi: valid board names for ni_at_ao driver are: [ 368.751169][ T7880] at-ao-6 [ 368.751173][ T7880] at-ao-10 [ 368.751178][ T7880] comedi: valid board names for ni_at_a2150 driver are: [ 368.751184][ T7880] ni_at_a2150 [ 368.751189][ T7880] comedi: valid board names for adq12b driver are: [ 368.751195][ T7880] adq12b [ 368.751199][ T7880] comedi: valid board names for mpc624 driver are: [ 368.751205][ T7880] mpc624 [ 368.751210][ T7880] comedi: valid board names for c6xdigio driver are: [ 368.751230][ T7880] c6xdigio [ 368.751236][ T7880] comedi: valid board names for aio_iiro_16 driver are: [ 368.751242][ T7880] aio_iiro_16 [ 368.751247][ T7880] comedi: valid board names for aio_aio12_8 driver are: [ 368.751253][ T7880] aio_aio12_8 [ 368.751258][ T7880] aio_ai12_8 [ 368.751263][ T7880] aio_ao12_4 [ 368.751284][ T7880] comedi: valid board names for fl512 driver are: [ 368.751291][ T7880] fl512 [ 368.751296][ T7880] comedi: valid board names for dmm32at driver are: [ 368.751324][ T7880] dmm32at [ 368.751332][ T7880] comedi: valid board names for dt282x driver are: [ 368.751342][ T7880] dt2821 [ 368.751350][ T7880] dt2821-f [ 368.751360][ T7880] dt2821-g [ 368.751366][ T7880] dt2823 [ 368.751373][ T7880] dt2824-pgh [ 368.751381][ T7880] dt2824-pgl [ 368.751464][ T7880] dt2825 [ 368.751473][ T7880] dt2827 [ 368.751480][ T7880] dt2828 [ 368.751493][ T7880] dt2829 [ 368.751498][ T7880] dt21-ez [ 368.751503][ T7880] dt23-ez [ 368.751507][ T7880] dt24-ez [ 368.751512][ T7880] dt24-ez-pgl [ 368.751517][ T7880] comedi: valid board names for dt2817 driver are: [ 368.751524][ T7880] dt2817 [ 368.751529][ T7880] comedi: valid board names for dt2815 driver are: [ 368.751535][ T7880] dt2815 [ 368.751539][ T7880] comedi: valid board names for dt2814 driver are: [ 368.751546][ T7880] dt2814 [ 368.751551][ T7880] comedi: valid board names for dt2811 driver are: [ 368.751557][ T7880] dt2811-pgh [ 368.751561][ T7880] dt2811-pgl [ 368.751566][ T7880] comedi: valid board names for dt2801 driver are: [ 368.751573][ T7880] dt2801 [ 368.751577][ T7880] comedi: valid board names for das6402 driver are: [ 368.751583][ T7880] das6402-12 [ 368.751588][ T7880] das6402-16 [ 368.751593][ T7880] comedi: valid board names for das1800 driver are: [ 368.751599][ T7880] das-1701st [ 368.751604][ T7880] das-1701st-da [ 368.751609][ T7880] das-1702st [ 368.751614][ T7880] das-1702st-da [ 368.751619][ T7880] das-1702hr [ 368.751623][ T7880] das-1702hr-da [ 368.751628][ T7880] das-1701ao [ 368.751633][ T7880] das-1702ao [ 368.751638][ T7880] das-1801st [ 368.751643][ T7880] das-1801st-da [ 368.751648][ T7880] das-1802st [ 368.751652][ T7880] das-1802st-da [ 368.751657][ T7880] das-1802hr [ 368.751662][ T7880] das-1802hr-da [ 368.751667][ T7880] das-1801hc [ 368.751671][ T7880] das-1802hc [ 368.751676][ T7880] das-1801ao [ 368.751681][ T7880] das-1802ao [ 368.751686][ T7880] comedi: valid board names for das800 driver are: [ 368.751692][ T7880] das-800 [ 368.751696][ T7880] cio-das800 [ 368.751701][ T7880] das-801 [ 368.751706][ T7880] cio-das801 [ 368.751710][ T7880] das-802 [ 368.751715][ T7880] cio-das802 [ 368.751720][ T7880] cio-das802/16 [ 368.751725][ T7880] comedi: valid board names for isa-das08 driver are: [ 368.751731][ T7880] isa-das08 [ 368.751736][ T7880] das08-pgm [ 368.751740][ T7880] das08-pgh [ 368.751751][ T7880] das08-pgl [ 368.751755][ T7880] das08-aoh [ 368.751760][ T7880] das08-aol [ 368.751765][ T7880] das08-aom [ 368.751769][ T7880] das08/jr-ao [ 368.751774][ T7880] das08jr-16-ao [ 368.751779][ T7880] pc104-das08 [ 368.751784][ T7880] das08jr/16 [ 368.751789][ T7880] comedi: valid board names for das16m1 driver are: [ 368.751795][ T7880] das16m1 [ 368.751800][ T7880] comedi: valid board names for dac02 driver are: [ 368.751806][ T7880] dac02 [ 368.751810][ T7880] comedi: valid board names for rti802 driver are: [ 368.751817][ T7880] rti802 [ 368.751821][ T7880] comedi: valid board names for rti800 driver are: [ 368.751828][ T7880] rti800 [ 368.751832][ T7880] rti815 [ 368.751837][ T7880] comedi: valid board names for pcm3724 driver are: [ 368.751843][ T7880] pcm3724 [ 368.751848][ T7880] comedi: valid board names for pcl818 driver are: [ 368.751854][ T7880] pcl818l [ 368.751859][ T7880] pcl818h [ 368.751863][ T7880] pcl818hd [ 368.751868][ T7880] pcl818hg [ 368.751872][ T7880] pcl818 [ 368.751877][ T7880] pcl718 [ 368.751882][ T7880] pcm3718 [ 368.751886][ T7880] comedi: valid board names for pcl816 driver are: [ 368.751892][ T7880] pcl816 [ 368.751897][ T7880] pcl814b [ 368.751902][ T7880] comedi: valid board names for pcl812 driver are: [ 368.751908][ T7880] pcl812 [ 368.751912][ T7880] pcl812pg [ 368.751917][ T7880] acl8112pg [ 368.751922][ T7880] acl8112dg [ 368.751927][ T7880] acl8112hg [ 368.751931][ T7880] a821pgl [ 368.751936][ T7880] a821pglnda [ 368.751958][ T7880] a821pgh [ 368.751965][ T7880] a822pgl [ 368.751972][ T7880] a822pgh [ 368.751981][ T7880] a823pgl [ 368.751989][ T7880] a823pgh [ 368.751996][ T7880] pcl813 [ 368.752002][ T7880] pcl813b [ 368.752009][ T7880] acl8113 [ 368.752016][ T7880] iso813 [ 368.752022][ T7880] acl8216 [ 368.752031][ T7880] a826pg [ 368.752040][ T7880] comedi: valid board names for pcl730 driver are: [ 368.752046][ T7880] pcl730 [ 368.752051][ T7880] iso730 [ 368.752056][ T7880] acl7130 [ 368.752060][ T7880] pcm3730 [ 368.752065][ T7880] pcl725 [ 368.752069][ T7880] p8r8dio [ 368.752074][ T7880] acl7225b [ 368.752078][ T7880] p16r16dio [ 368.752083][ T7880] pcl733 [ 368.752087][ T7880] pcl734 [ 368.752092][ T7880] opmm-1616-xt [ 368.752097][ T7880] pearl-mm-p [ 368.752101][ T7880] ir104-pbf [ 368.752106][ T7880] comedi: valid board names for pcl726 driver are: [ 368.752112][ T7880] pcl726 [ 368.752117][ T7880] pcl727 [ 368.752122][ T7880] pcl728 [ 368.752126][ T7880] acl6126 [ 368.752131][ T7880] acl6128 [ 368.752135][ T7880] comedi: valid board names for pcl724 driver are: [ 368.752141][ T7880] pcl724 [ 368.752146][ T7880] pcl722 [ 368.752150][ T7880] pcl731 [ 368.752155][ T7880] acl7122 [ 368.752159][ T7880] acl7124 [ 368.752163][ T7880] pet48dio [ 368.752168][ T7880] pcmio48 [ 368.752173][ T7880] onyx-mm-dio [ 368.752177][ T7880] comedi: valid board names for pcl711 driver are: [ 368.752183][ T7880] pcl711 [ 368.752188][ T7880] pcl711b [ 368.752193][ T7880] acl8112hg [ 368.752197][ T7880] acl8112dg [ 368.752202][ T7880] comedi: valid board names for amplc_pc263 driver are: [ 368.752208][ T7880] pc263 [ 368.752213][ T7880] comedi: valid board names for amplc_pc236 driver are: [ 368.752219][ T7880] pc36at [ 368.752224][ T7880] comedi: valid board names for amplc_dio200 driver are: [ 368.752230][ T7880] pc212e [ 368.752234][ T7880] pc214e [ 368.752239][ T7880] pc215e [ 368.752243][ T7880] pc218e [ 368.752248][ T7880] pc272e [ 368.752252][ T7880] comedi: valid board names for comedi_parport driver are: [ 368.752259][ T7880] comedi_parport [ 368.752264][ T7880] comedi: valid board names for comedi_test driver are: [ 368.752270][ T7880] comedi_test [ 368.752275][ T7880] comedi: valid board names for comedi_bond driver are: [ 368.752282][ T7880] comedi_bond [ 372.296012][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.304999][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.314325][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.371655][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.374648][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.500311][ T5835] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 372.500513][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 372.500542][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.500558][ T5835] Workqueue: hci3 hci_rx_work [ 372.500600][ T5835] Call Trace: [ 372.500614][ T5835] [ 372.500625][ T5835] dump_stack_lvl+0xe8/0x150 [ 372.500655][ T5835] sysfs_create_dir_ns+0x271/0x2a0 [ 372.500686][ T5835] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 372.500712][ T5835] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 372.500746][ T5835] ? rt_spin_unlock+0x160/0x200 [ 372.500779][ T5835] kobject_add_internal+0x631/0xd10 [ 372.500824][ T5835] kobject_add+0x163/0x240 [ 372.500866][ T5835] ? __pfx_kobject_add+0x10/0x10 [ 372.500908][ T5835] ? get_device_parent+0x370/0x3a0 [ 372.500945][ T5835] device_add+0x408/0xbb0 [ 372.500980][ T5835] hci_conn_add_sysfs+0xd5/0x210 [ 372.501015][ T5835] le_conn_complete_evt+0x10e6/0x16b0 [ 372.501052][ T5835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 372.501079][ T5835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 372.501111][ T5835] ? lockdep_hardirqs_on+0x7a/0x110 [ 372.501145][ T5835] ? skb_pull_data+0xfb/0x200 [ 372.501175][ T5835] hci_le_conn_complete_evt+0x187/0x470 [ 372.501208][ T5835] hci_event_packet+0x659/0xef0 [ 372.501249][ T5835] ? __pfx____migrate_enable+0x10/0x10 [ 372.501277][ T5835] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 372.501314][ T5835] ? __pfx_hci_event_packet+0x10/0x10 [ 372.501361][ T5835] ? hci_send_to_monitor+0xe2/0x590 [ 372.501391][ T5835] hci_rx_work+0x3ee/0x1040 [ 372.501448][ T5835] ? process_one_work+0x8b7/0x1710 [ 372.501471][ T5835] process_one_work+0x9a3/0x1710 [ 372.501522][ T5835] ? __pfx_process_one_work+0x10/0x10 [ 372.501543][ T5835] ? do_raw_spin_lock+0x12b/0x2f0 [ 372.501589][ T5835] worker_thread+0xba8/0x11e0 [ 372.501626][ T5835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 372.501660][ T5835] ? __kthread_parkme+0x7a/0x1f0 [ 372.501688][ T5835] ? __kthread_parkme+0x19c/0x1f0 [ 372.501723][ T5835] kthread+0x388/0x470 [ 372.501755][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 372.501778][ T5835] ? __pfx_kthread+0x10/0x10 [ 372.501810][ T5835] ret_from_fork+0x514/0xb70 [ 372.501840][ T5835] ? __pfx_ret_from_fork+0x10/0x10 [ 372.501867][ T5835] ? __switch_to+0xc79/0x1410 [ 372.501907][ T5835] ? __pfx_kthread+0x10/0x10 [ 372.501941][ T5835] ret_from_fork_asm+0x1a/0x30 [ 372.501989][ T5835] [ 372.502136][ T5835] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 372.503450][ T5835] Bluetooth: hci3: failed to register connection device [ 375.288353][ T7913] loop1: detected capacity change from 0 to 2048 [ 375.316655][ T7913] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 375.317975][ T7913] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 375.327683][ T7913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.736193][ T5899] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 375.809009][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.855405][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.859001][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.860514][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.861321][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.891729][ T5835] Bluetooth: hci0: command tx timeout [ 375.911423][ T5899] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 375.911452][ T5899] usb 3-1: config 0 has no interface number 0 [ 375.911514][ T5899] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.911537][ T5899] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 375.911564][ T5899] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 375.911589][ T5899] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 375.911615][ T5899] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 375.911642][ T5899] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.911690][ T5899] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 375.911713][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.258064][ T5142] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 376.258092][ T5142] CPU: 1 UID: 0 PID: 5142 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.258123][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.258138][ T5142] Workqueue: hci4 hci_rx_work [ 376.258175][ T5142] Call Trace: [ 376.258182][ T5142] [ 376.258192][ T5142] dump_stack_lvl+0xe8/0x150 [ 376.258222][ T5142] sysfs_create_dir_ns+0x271/0x2a0 [ 376.258251][ T5142] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 376.258279][ T5142] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 376.258311][ T5142] ? rt_spin_unlock+0x160/0x200 [ 376.258337][ T5142] kobject_add_internal+0x631/0xd10 [ 376.258382][ T5142] kobject_add+0x163/0x240 [ 376.258422][ T5142] ? __pfx_kobject_add+0x10/0x10 [ 376.258466][ T5142] ? get_device_parent+0x370/0x3a0 [ 376.258502][ T5142] device_add+0x408/0xbb0 [ 376.258536][ T5142] hci_conn_add_sysfs+0xd5/0x210 [ 376.258571][ T5142] le_conn_complete_evt+0x10e6/0x16b0 [ 376.258607][ T5142] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 376.258632][ T5142] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.258663][ T5142] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.258695][ T5142] ? skb_pull_data+0xfb/0x200 [ 376.258725][ T5142] hci_le_conn_complete_evt+0x187/0x470 [ 376.258757][ T5142] hci_event_packet+0x659/0xef0 [ 376.258796][ T5142] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 376.258818][ T5142] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 376.258854][ T5142] ? __pfx_hci_event_packet+0x10/0x10 [ 376.258884][ T5142] ? rt_spin_unlock+0x14f/0x200 [ 376.258918][ T5142] ? hci_send_to_monitor+0xe2/0x590 [ 376.258947][ T5142] hci_rx_work+0x3ee/0x1040 [ 376.258990][ T5142] ? process_one_work+0x8b7/0x1710 [ 376.259013][ T5142] process_one_work+0x9a3/0x1710 [ 376.259070][ T5142] ? __pfx_process_one_work+0x10/0x10 [ 376.259091][ T5142] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.259136][ T5142] worker_thread+0xba8/0x11e0 [ 376.259172][ T5142] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.259203][ T5142] ? __kthread_parkme+0x7a/0x1f0 [ 376.259230][ T5142] ? __kthread_parkme+0x19c/0x1f0 [ 376.259264][ T5142] kthread+0x388/0x470 [ 376.259296][ T5142] ? __pfx_worker_thread+0x10/0x10 [ 376.259318][ T5142] ? __pfx_kthread+0x10/0x10 [ 376.259349][ T5142] ret_from_fork+0x514/0xb70 [ 376.259376][ T5142] ? __pfx_ret_from_fork+0x10/0x10 [ 376.259402][ T5142] ? __switch_to+0xc79/0x1410 [ 376.259440][ T5142] ? __pfx_kthread+0x10/0x10 [ 376.259471][ T5142] ret_from_fork_asm+0x1a/0x30 [ 376.259519][ T5142] [ 376.260756][ T5142] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 376.260799][ T5142] Bluetooth: hci4: failed to register connection device [ 376.679989][ T5899] usb 3-1: config 0 descriptor?? [ 376.681260][ T7915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 376.681465][ T7915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 376.738144][ T5899] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 376.810032][ T5835] ================================================================== [ 376.810050][ T5835] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xe3/0x180 [ 376.810091][ T5835] Read of size 8 at addr ffff888026529200 by task kworker/u9:6/5835 [ 376.810110][ T5835] [ 376.810123][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.810148][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.810162][ T5835] Workqueue: hci2 hci_rx_work [ 376.810192][ T5835] Call Trace: [ 376.810201][ T5835] [ 376.810210][ T5835] dump_stack_lvl+0xe8/0x150 [ 376.810235][ T5835] print_address_description+0x55/0x1e0 [ 376.810259][ T5835] ? l2cap_sock_ready_cb+0xe3/0x180 [ 376.810288][ T5835] print_report+0x58/0x70 [ 376.810309][ T5835] kasan_report+0x117/0x150 [ 376.810352][ T5835] ? l2cap_sock_ready_cb+0xe3/0x180 [ 376.810384][ T5835] l2cap_sock_ready_cb+0xe3/0x180 [ 376.810414][ T5835] l2cap_le_start+0x25b/0x1960 [ 376.810442][ T5835] ? __pfx_l2cap_le_start+0x10/0x10 [ 376.810467][ T5835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.810497][ T5835] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.810524][ T5835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 376.810553][ T5835] ? mutex_lock_nested+0x152/0x1d0 [ 376.810573][ T5835] ? l2cap_connect_cfm+0x894/0x1560 [ 376.810601][ T5835] l2cap_connect_cfm+0x8d5/0x1560 [ 376.810632][ T5835] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 376.810661][ T5835] ? hci_connect_cfm+0x2c/0x140 [ 376.810681][ T5835] ? mutex_lock_nested+0x168/0x1d0 [ 376.810703][ T5835] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 376.810731][ T5835] hci_connect_cfm+0x95/0x140 [ 376.810753][ T5835] le_conn_complete_evt+0x1134/0x16b0 [ 376.810783][ T5835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 376.810808][ T5835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.810837][ T5835] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.810867][ T5835] ? skb_pull_data+0xfb/0x200 [ 376.810891][ T5835] hci_le_conn_complete_evt+0x187/0x470 [ 376.810917][ T5835] hci_event_packet+0x659/0xef0 [ 376.810952][ T5835] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 376.810973][ T5835] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 376.811007][ T5835] ? __pfx_hci_event_packet+0x10/0x10 [ 376.811035][ T5835] ? rt_spin_unlock+0x14f/0x200 [ 376.811062][ T5835] ? hci_send_to_monitor+0xe2/0x590 [ 376.811089][ T5835] hci_rx_work+0x3ee/0x1040 [ 376.811125][ T5835] ? process_one_work+0x8b7/0x1710 [ 376.811148][ T5835] process_one_work+0x9a3/0x1710 [ 376.811183][ T5835] ? __pfx_process_one_work+0x10/0x10 [ 376.811203][ T5835] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.811236][ T5835] worker_thread+0xba8/0x11e0 [ 376.811266][ T5835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.811297][ T5835] ? __kthread_parkme+0x7a/0x1f0 [ 376.811322][ T5835] ? __kthread_parkme+0x19c/0x1f0 [ 376.811359][ T5835] kthread+0x388/0x470 [ 376.811388][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 376.811409][ T5835] ? __pfx_kthread+0x10/0x10 [ 376.811437][ T5835] ret_from_fork+0x514/0xb70 [ 376.811461][ T5835] ? __pfx_ret_from_fork+0x10/0x10 [ 376.811485][ T5835] ? __switch_to+0xc79/0x1410 [ 376.811522][ T5835] ? __pfx_kthread+0x10/0x10 [ 376.811553][ T5835] ret_from_fork_asm+0x1a/0x30 [ 376.811588][ T5835] [ 376.811597][ T5835] [ 376.811602][ T5835] Allocated by task 7922: [ 376.811613][ T5835] kasan_save_track+0x3e/0x80 [ 376.811642][ T5835] __kasan_kmalloc+0x93/0xb0 [ 376.811670][ T5835] __kmalloc_noprof+0x3e7/0x7b0 [ 376.811699][ T5835] sk_prot_alloc+0xe7/0x210 [ 376.811728][ T5835] sk_alloc+0x3a/0x390 [ 376.811759][ T5835] bt_sock_alloc+0x3b/0x310 [ 376.811790][ T5835] l2cap_sock_create+0x147/0x330 [ 376.811816][ T5835] bt_sock_create+0x163/0x240 [ 376.811834][ T5835] __sock_create+0x4e3/0x960 [ 376.811856][ T5835] __sys_socket+0xd9/0x330 [ 376.811880][ T5835] __x64_sys_socket+0x7a/0x90 [ 376.811903][ T5835] do_syscall_64+0x15f/0xf80 [ 376.811929][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.811948][ T5835] [ 376.811953][ T5835] Freed by task 7921: [ 376.811960][ T5835] kasan_save_track+0x3e/0x80 [ 376.811982][ T5835] kasan_save_free_info+0x46/0x50 [ 376.812000][ T5835] __kasan_slab_free+0x5c/0x80 [ 376.812023][ T5835] kfree+0x1c5/0x6c0 [ 376.812045][ T5835] __sk_destruct+0x74b/0x9d0 [ 376.812069][ T5835] l2cap_sock_release+0x1c1/0x270 [ 376.812090][ T5835] __sock_release+0xb9/0x250 [ 376.812107][ T5835] sock_close+0x1c/0x30 [ 376.812122][ T5835] __fput+0x461/0xa70 [ 376.812141][ T5835] task_work_run+0x1d9/0x270 [ 376.812164][ T5835] exit_to_user_mode_loop+0xed/0x480 [ 376.812185][ T5835] do_syscall_64+0x33e/0xf80 [ 376.812207][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.812223][ T5835] [ 376.812227][ T5835] The buggy address belongs to the object at ffff888026529000 [ 376.812227][ T5835] which belongs to the cache kmalloc-2k of size 2048 [ 376.812242][ T5835] The buggy address is located 512 bytes inside of [ 376.812242][ T5835] freed 2048-byte region [ffff888026529000, ffff888026529800) [ 376.812260][ T5835] [ 376.812265][ T5835] The buggy address belongs to the physical page: [ 376.812287][ T5835] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26528 [ 376.812304][ T5835] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 376.812318][ T5835] flags: 0x80000000000040(head|node=0|zone=1) [ 376.812343][ T5835] page_type: f5(slab) [ 376.812360][ T5835] raw: 0080000000000040 ffff88813fe15000 dead000000000100 dead000000000122 [ 376.812376][ T5835] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 376.812393][ T5835] head: 0080000000000040 ffff88813fe15000 dead000000000100 dead000000000122 [ 376.812409][ T5835] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 376.812425][ T5835] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 376.812440][ T5835] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 376.812450][ T5835] page dumped because: kasan: bad access detected [ 376.812464][ T5835] page_owner tracks the page as allocated [ 376.812471][ T5835] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6836566634, free_ts 0 [ 376.812502][ T5835] post_alloc_hook+0x231/0x280 [ 376.812527][ T5835] get_page_from_freelist+0x27d6/0x2850 [ 376.812542][ T5835] __alloc_frozen_pages_noprof+0x18d/0x380 [ 376.812559][ T5835] allocate_slab+0x77/0x660 [ 376.812577][ T5835] refill_objects+0x33c/0x3d0 [ 376.812593][ T5835] __pcs_replace_empty_main+0x373/0x720 [ 376.812613][ T5835] __kmalloc_cache_noprof+0x44e/0x690 [ 376.812637][ T5835] serial_base_ctrl_add+0x56/0x1c0 [ 376.812654][ T5835] serial_core_register_port+0x347/0x2810 [ 376.812676][ T5835] serial8250_register_8250_port+0x167e/0x1fd0 [ 376.812698][ T5835] serial_pnp_probe+0x56e/0x800 [ 376.812718][ T5835] pnp_device_probe+0x30b/0x4c0 [ 376.812738][ T5835] really_probe+0x267/0xaf0 [ 376.812762][ T5835] __driver_probe_device+0x1ef/0x380 [ 376.812785][ T5835] driver_probe_device+0x4f/0x240 [ 376.812812][ T5835] __driver_attach+0x34c/0x640 [ 376.812835][ T5835] page_owner free stack trace missing [ 376.812841][ T5835] [ 376.812844][ T5835] Memory state around the buggy address: [ 376.812853][ T5835] ffff888026529100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 376.812866][ T5835] ffff888026529180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 376.812881][ T5835] >ffff888026529200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 376.812891][ T5835] ^ [ 376.812899][ T5835] ffff888026529280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 376.812911][ T5835] ffff888026529300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 376.812920][ T5835] ================================================================== [ 376.813104][ T5835] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 376.813122][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.813147][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.813164][ T5835] Workqueue: hci2 hci_rx_work [ 376.813199][ T5835] Call Trace: [ 376.813208][ T5835] [ 376.813217][ T5835] vpanic+0x56c/0xa60 [ 376.813247][ T5835] ? __pfx_vpanic+0x10/0x10 [ 376.813279][ T5835] panic+0xc5/0xd0 [ 376.813303][ T5835] ? __pfx_panic+0x10/0x10 [ 376.813349][ T5835] ? preempt_schedule_thunk+0x16/0x30 [ 376.813385][ T5835] ? preempt_schedule_thunk+0x16/0x30 [ 376.813420][ T5835] ? l2cap_sock_ready_cb+0xe3/0x180 [ 376.813450][ T5835] check_panic_on_warn+0x89/0xb0 [ 376.813482][ T5835] ? l2cap_sock_ready_cb+0xe3/0x180 [ 376.813512][ T5835] end_report+0x73/0x170 [ 376.813544][ T5835] ? l2cap_sock_ready_cb+0xe3/0x180 [ 376.813581][ T5835] kasan_report+0x128/0x150 [ 376.813615][ T5835] ? l2cap_sock_ready_cb+0xe3/0x180 [ 376.813649][ T5835] l2cap_sock_ready_cb+0xe3/0x180 [ 376.813681][ T5835] l2cap_le_start+0x25b/0x1960 [ 376.813711][ T5835] ? __pfx_l2cap_le_start+0x10/0x10 [ 376.813737][ T5835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.813774][ T5835] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.813802][ T5835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 376.813832][ T5835] ? mutex_lock_nested+0x152/0x1d0 [ 376.813854][ T5835] ? l2cap_connect_cfm+0x894/0x1560 [ 376.813882][ T5835] l2cap_connect_cfm+0x8d5/0x1560 [ 376.813913][ T5835] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 376.813943][ T5835] ? hci_connect_cfm+0x2c/0x140 [ 376.813962][ T5835] ? mutex_lock_nested+0x168/0x1d0 [ 376.813984][ T5835] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 376.814012][ T5835] hci_connect_cfm+0x95/0x140 [ 376.814035][ T5835] le_conn_complete_evt+0x1134/0x16b0 [ 376.814065][ T5835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 376.814089][ T5835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.814118][ T5835] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.814148][ T5835] ? skb_pull_data+0xfb/0x200 [ 376.814173][ T5835] hci_le_conn_complete_evt+0x187/0x470 [ 376.814200][ T5835] hci_event_packet+0x659/0xef0 [ 376.814233][ T5835] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 376.814256][ T5835] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 376.814295][ T5835] ? __pfx_hci_event_packet+0x10/0x10 [ 376.814330][ T5835] ? rt_spin_unlock+0x14f/0x200 [ 376.814359][ T5835] ? hci_send_to_monitor+0xe2/0x590 [ 376.814387][ T5835] hci_rx_work+0x3ee/0x1040 [ 376.814424][ T5835] ? process_one_work+0x8b7/0x1710 [ 376.814446][ T5835] process_one_work+0x9a3/0x1710 [ 376.814486][ T5835] ? __pfx_process_one_work+0x10/0x10 [ 376.814508][ T5835] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.814543][ T5835] worker_thread+0xba8/0x11e0 [ 376.814571][ T5835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.814603][ T5835] ? __kthread_parkme+0x7a/0x1f0 [ 376.814629][ T5835] ? __kthread_parkme+0x19c/0x1f0 [ 376.814657][ T5835] kthread+0x388/0x470 [ 376.814686][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 376.814708][ T5835] ? __pfx_kthread+0x10/0x10 [ 376.814739][ T5835] ret_from_fork+0x514/0xb70 [ 376.814765][ T5835] ? __pfx_ret_from_fork+0x10/0x10 [ 376.814790][ T5835] ? __switch_to+0xc79/0x1410 [ 376.814825][ T5835] ? __pfx_kthread+0x10/0x10 [ 376.814854][ T5835] ret_from_fork_asm+0x1a/0x30 [ 376.814896][ T5835] [ 376.815075][ T5835] Kernel Offset: disabled