last executing test programs: 18.88965554s ago: executing program 4 (id=3783): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x40, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x69) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 17.763495824s ago: executing program 4 (id=3787): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) pwritev2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x5405, 0x2, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0xf4) recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000180)=@nfc={0x27, 0x0}, 0x80, &(0x7f00000000c0)}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES64=r2], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000718110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 17.46050957s ago: executing program 4 (id=3788): socket$inet6(0xa, 0xa, 0xc) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, 0x0, 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='sched_switch\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8b21, &(0x7f0000000040)) listen(r3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r3, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 12.986709016s ago: executing program 4 (id=3806): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x20, 0xe, 0xc5, {0xc5, 0xc, "7c3aba102b7986d1a1c79071b4899a652c4e2743c844086790a231fac4d8cbdc4b7b0adf692d9f10038176cff813577a326beab6da91192aa24bbae5bac2f448198198122ea002fbbe65ba5c32ee26a4409481eaff7cb7a306ab254c11c88857a50f563b1dd820bd0b4c34d017ee7e577821a4404a03bca505b538c00090f9a08dd877a9d40e3f7a859d7cb3d9cd5b369932da8807482b5fe12d25bbdc0cd3e2086ce8be543532e4d758533b73f5ab00a7fb56e0ebc0d8f824eed67519603c6fdef9f2"}}, &(0x7f0000000400)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "1e61be50e4a348dc5e4e301284adc2518f2846d324d6cfadb6befc948a124b67e7046b8641b58a4d6bf82cfc853653adada34c42e4ac9812"}}, &(0x7f0000000480)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x3, 0x0, "45482093", "96117ec3"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x0, 0x4, 0x3, 0x9, 0x7f, 0x373c}}}, &(0x7f0000000b40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xc, "f182f97821614465692f916a"}, 0x0, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x400, 0x80}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x8}, 0x0, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x0, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x7b74}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x17}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2}}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.681632899s ago: executing program 0 (id=3818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$eJzs3E1rY9UfB/CTPs7Tf/5FXLibC4PQwiQ0fRh0V3UGH7BD8WHhStMkDZlJckuTprUrFy7Fhe9EFFy59DW4cO1OXCjuhJHccypTH0Bp2tjp5wO333tPTn73nEtpOfeGBODSWsh++akUboarIYTpEMKNEIr9UtoKGzGeCyHcCiFMPbGVUvvvDXMhhGshhJuj4rFmKb302Z3h7fUf3/j562/nZ65//tV3k5s1MGnPhxC6u3H/oBszb8V8mNprw3aR3bVhyvhC91E6zmMeNLeLCge14361IldbsX++u98f5U6nVh9lq71TtO/24gn7w9ZxneIND2t7xXGjuV1ku58X2TqK4zo8in/bjvqDWKeR6n1YlA+DwXHG9uZhM85n91GR9d4gtce6eaN5OMphynS6UM87jWIc26e50v9tb7Z7+4fZsLnXb+e9bL1SfaFSvVuu7uWN5qC5Vq51G3fXssVWZ9StPGjWuhutPG91mpV63l3KFlv1erlazRbvNbfbtV5WrVZWK8vl9aW0dyd79cG7WaeRLY7y5XZvf9Du9LOdfC+L71jKViqrLy5lt6vZ25tb2dZb9+9vbr3z/r33Hry0+forqdOfhpUtriyvrJSry+WV6tLFnf/of/2/mv/HadBjnD+cSmnSAwC4eKz/gUm46Ov/YP0/Ftb/l3b+j5PTXUAuN+t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBL6/vZL14rdhbi8fXU/r/U9Ew6LoUQpkIIj//CdJg7UXM61Zn9m/6zfxjDN6VQVBidYz5t10IIG2n79f9nfRUAAADg6fXlR7c+jav1+GNh0gPiPMWbNlM3PhhTvVIIYXbhhzFUCelmU3j29KOKRr/fM+FwTNWKG1hXxlQs3nKbGVe1f2T6RFx5Ikoxpo57zp3ruAAAgLN0ciVwvqsQAAAAztMnkx4Ak1E8aU2fxU+P+eZjpAeCV08cAQAAABdQadIDAAAAAM5csf73/X8AAADwdIvf/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAbO3eTkzoUBQD4tND3eD9GYpy7FWewDJfg0KFhKywBt+AGWAPOXIIBQ3tRMRhM+hfJ9yXt5TbN4ZTQwTm3KQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG16KhbTh/urUd046009zVwNAAAAcMiqWEzLD+Nq/i8dP0uHLtI8i4g8Ig7V7oP4tRdzkOIUX5xffMrhMaKMsP2O32n7GxHXaXs5b/tXAAAAgNO1nM0nVbVe7cZ9J0SXqqZN/v+moXhZRBTj54ai5dvd5bdO3RzvD23/38O4q59WqWxg1X5kZqdsuQ2binbcIN3ub8Pow5BVQ95dOgAAQFf2K4EOqxAAAAA6dtt3AvQji91S5m4tuHzy/n1B8M/eDAAAAPiBsr4TAAAAAFpX1v/e/wcAAACnrXr/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1aFYvpcjaf1I2z3tTTzNUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvLI/7ygMw2AQBjeJ8uqELuD739Is2K1bNzMg+Pi3EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAlcfx8jzj1ZjJNnqdSd49rySfTo1vp8avc+OfZKy7fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwsz8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXP/vnFTcQDAv2efr7SACAFlCEJUYoCFptfS0pUBFDHwJyBF6bUErvxoM9CqQsrChjJ3QTAihAQKW/+Hzq3UpWwdMhSJiQFkn528HpU4WtW+Np+P9Py+thy/73OiKF8/5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo7L67H+flZmESZ/Wxm/eurpf9ram+dH379nLZyrjXZtJPhlfTnd5Sd4kAAABwcORNfR8xiGJntQyyhar+L5pzypr/++cncVPPT9f9Td/U/mX77de7L+8NtDAZp7zouY3x6Pi/U+k/xmnOtRf+84x+deerZy959Q3JPth6abeo7mfv2xs33htU4aE2sgUAHsaxpq+D5u+hsh92mRgAB0Y/Kbzv1PV/vtBtTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtGGzFs03ci4jl/n5cunXv6nrVT+1f37693LTT165tp9csL1FExLmN8eh4WxN5Aly6fOXTtfF4dLH94LWI6G70OvhohnMiusxQ8KhBVv+sz/ZVRyOi+5y7Dzr+xQQAwFOnqFtZ198pdlbLY73FiL9/uL/+fyOJI63/p/q0/r/78emb6Vhp/T9sbYbzb2Xzwhcrly5feWvjwtr50fnRZ2+fGL4zPHnm1KkzK9WzkhVPTAAAAHg0g7ql9X+2GLE7tf5/JIljxvr/y++GX6dj5er/B9pf9Os6EwAAgIPtxaN//tF7wPHeYBBfrW1uXhxOtnv7JybbDlL93w7VLa3/88WuswIAAADasLvVu2/9/2wSx4zr/8/9+MrP6TXziDhcr/8fW/98fLa96XTkr5nOauPfiR/7VAEAAJhrh+uWrv8X1fv/2d4rD1lEvPn6JK4/BnCm+j9//5uf0rHS9/9PtjfFuZQtTe5H1S9F9Je6zggAAICn2TN1K4v934ud1U9+OfLhwPv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG37JwAA//9VakSc") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x100001) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839}, 0x24}}, 0x0) 6.483786324s ago: executing program 1 (id=3825): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 6.477912005s ago: executing program 2 (id=3826): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000075c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0300000000000000000000163000006a050000010000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000013c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x180, 0x180, 0xffffffff, 0x0, 0x180, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x12, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @icmp_id=0x64}}}}, {{@ip={@rand_addr=0x4, @rand_addr=0x64010102, 0xff, 0xff, 'gre0\x00', 'bridge0\x00', {}, {}, 0x6c, 0x0, 0x4}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x10001, 0x2], 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @loopback, @icmp_id=0x66, @icmp_id=0x66}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, 0xffff00, 0xff, 'batadv_slave_1\x00', 'veth0_vlan\x00', {0xff}, {}, 0x11, 0x3, 0x55}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "208a", 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0xb6, @icmp_id=0x67}}}}, {{@ip={@multicast1, @multicast2, 0xff000000, 0xffffff00, 'vxcan1\x00', 'macvtap0\x00', {}, {}, 0x67, 0x1, 0x1}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x2, 0x1, 0x2}, {0xa6, 0x5}, {0x5, 0xfffffffffffffffa}, 0x8}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @port=0x4e20, @gre_key=0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) pipe2$9p(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setitimer(0x0, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, &(0x7f0000000340)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) lseek(r5, 0x13, 0x0) syz_read_part_table(0x5c5, &(0x7f0000000b80)="$eJzs2z9I22kYB/An1lBoB5dOndoOHY4uLR2boS1J2tJCSOtSbmihpRQzpVCIXKDQDppBMYM4uohcFv9MxgxOioKziIOH4OByhy6CiznufG+6P3h3elzh84EfD7/f+33fJ8+Q8Q2+aj3xU7fbzURE9+IfJ7p/sbu/lS88vla6X34RkYmBiPh+dbDvl5XMb7vTqTfS+3Z6n5q81Bk+eJRtbT0/vPlqudGT1j+l5/J0u/9MBuRczeRW+j5/qRZHarn3m8X67tDG+rPZ/Xy5/bTRnHuSffgm5VZT7U31Q9RiMAbidVSiEm+jekb9J1o7t4+vFlsL7+4dFTqjS3dSrvQv5zxt/4/Xx1426w9uzV8Zv1tbXCvvXTjJVf7k3wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/LTG6l7/OXanGklnu/WazvDm2sP5vdz5fbTxvNuSfZh29SbjXV3lQ/RC0GYyBeRyUy8Taqvzu55x/1n2jt3D6+WmwtvLt3VOiMLt1JudIZzHqa/h+vj71s1h/cmr8yfre2uFbeu3CSq1w8px8AAAAAAAAAAAAAAAAAAAAAEZEvPL5Wul9+EZGJb6M3vvnxu18v7nfTffdMyt1IdTt9n5q81Bk+eJRtbT0/vPlqufFD+v4pPZen2/3/+TD8bT8HAAD//69Xlno=") 6.339204517s ago: executing program 1 (id=3827): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 6.257892183s ago: executing program 1 (id=3829): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0x0, "881c7c75"}, @local=@item_4={0x3, 0x2, 0x0, "c0750696"}, @global=@item_012={0x1, 0x1, 0x4, "ce"}]}}, 0x0}, 0x0) 4.943011684s ago: executing program 0 (id=3831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x400, 0x22) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 4.779746778s ago: executing program 2 (id=3832): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000002c0)='>', 0x1}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3.969617746s ago: executing program 3 (id=3833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) 3.956928207s ago: executing program 3 (id=3834): read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0xe93fc6ea26f4008e, &(0x7f0000000380)={[], [{@dont_hash}, {@audit}, {@uid_eq}]}, 0x1, 0x549, &(0x7f0000002700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(r2, 0x0, 0x0) 3.80241862s ago: executing program 0 (id=3835): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000002c0)='>', 0x1}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3.105949489s ago: executing program 2 (id=3836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = creat(0x0, 0x0) close(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000300), 0xfdef, 0x0, 0x0, 0xfffffffffffffdfd) 3.067329832s ago: executing program 3 (id=3837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 2.825116262s ago: executing program 0 (id=3838): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x0, 0x77f, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) 2.138918191s ago: executing program 2 (id=3840): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16010000ff01000000000000efdf53df8d9c86ac", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000440)=0x40, 0x4) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000000)=0xffffff80, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f00000000c0)=0x4) write$ppp(r8, &(0x7f00000003c0)='\x00!', 0x100000) 2.076811905s ago: executing program 3 (id=3841): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0), 0x0, 0x800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x4f77}}}}]}, 0x4c}}, 0x0) 2.052240008s ago: executing program 1 (id=3842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfe, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 1.724134115s ago: executing program 0 (id=3843): timerfd_create(0x8, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0xe93fc6ea26f4008e, &(0x7f0000000380)={[], [{@dont_hash}, {@audit}, {@uid_eq}]}, 0x1, 0x549, &(0x7f0000002700)="$eJzs3c1vI2cZAPBnHHuz2Q0kQA8FqR+iRbsVNN50aRtxaBcJcasEKvclynqjaJ14FTtlE1UoK84ICSGouPXEBYk/AAn1xhUhVYILJwQIVMEWDj0AU81Humt3vGs3sS0lv5/0Zt6Z8fh5Xq/9ej7e9QRwZj0dEdciYi4inouIpXJ5rSxxWJTsce/fe3MjK0mk6ev/TCIpl2UPS8qSuVhudr6YVOruH9xab7dbu+V8s7d9u9ndP3h+a3t9s7XZ2rl6dfWltZfXXly7UrF1fYSW3e2by9r1yjf+9tMf/eKbr/zmK9/78/V/XP5+lu9iuf6oHSeteE0a2WvxkSz73UkEm4G5sj2NWScCAMBIsn38z0bEF/P9/6WYG2nfupBMNDMAAADgpKSvLsZ/k4gUAAAAOLVq+RjYpLZSjgVYjFptZaUYw/tYXKi1O93el2929nZuFGNll6NRu7nVbl05V4ypXY5Gks2v5vX78y98NJ/0jQH+ydJCvn5lo9O+MbvTHgAAAHCmXBw4/v/PUnH8/xB30zRNp5YgAAAAcDKWZ50AAAAAMHEfP/5/eyZ5AAAAAJPj+j8AAACcat967bWspEf3v77xxv7erc4bv41W99bK9t7GykZn9/bKZqez2U7nI7Yf9XztTuf2V2Nn706z1+r2mt39g+vbnb2d3vWtvltgAwAAAFP0mafe+WMSEYdfW8hL5lz2Z27IBsVYgdr0MgQmZawP8l8nlwcwfcO+5j+uPtE8gOnzqYazq1FMklnnAczOozqAoYN3fnfyuQAAAJNx6fPV1//r988NAKfUmAN55ieVBzB9o1//B04b1//h7GrYA4AzbWGExwxc/78/XGDk6/9pWkzP+SEQAACYkcW8JLWV8lrgYtQ+SAuxHI3k5la7dSUiPh0Rf1hqzGfzq/mWif80AAAAAAAAAAAAAAAAAAAAAAAAAAAjStMkUgAAAOBUi6j9PSlv6HVp6dnFwfMD55IPlvJpfneA1392Z73X213Nlv+rXB7Re6tc/sI4Zx7GvPM4AAAAMLL8OP2H5XR11tkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcNq8f+/NjaMyzbjvfT0ilqvi1+N8Pj0fjYi48O8k6kcbPRWRRMTcCcQ/vBsRj1fFT7K0YrnMoi9+RNQiYiHPYuLxn0jTtDL+xWNHh7Ptnaz/uVb1+avF0/m0+vNfL8txDfR/jXgg/lH/N1cRP+t5PjVijC+8+6tm9Zr5Yn29uv85ip8Mif9M1VPWI++vH/Td7xwcDMstfTviUuX3T9IXq9nbvt3s7h88v7W9vtnabO1cvbr60trLay+uXWne3Gq3yr+VMX78xK//Pyz+e3cjLgyJv9zf/vXB9j+bVQYbW+F/796597mi2hh4ijz+5Weq33+P98fve/2z98SXyu+BbP2lo/phUX/Qk7/8/ZMPa/+NIe1/1L//5Uc3Pffct3/wl7KajrgJADBB3f2DW+vtdmt3/MrCeFu9labpJ441ZiXbOxqy6k8/Lxo+jTRGqzw2LNVPWLk2jeRfHefB6fyx32ynqlKPYz9Pbfg7/IQqM+2WAACACbi/0z/rTAAAAAAAAAAAAAAAAAAAAODsmsYPng3GPJxNUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHurDAAAA//+/B9k8") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100776972656775617264000000040002800800"], 0x40}}, 0x0) 1.364842466s ago: executing program 4 (id=3839): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) unlink(&(0x7f0000000300)='./file0/file0\x00') 1.111912207s ago: executing program 2 (id=3844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) 1.053813052s ago: executing program 3 (id=3845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x400, 0x22) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 949.534841ms ago: executing program 2 (id=3846): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, 0x0, 0xc080) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOt7rW1aSpOmNOk6LYt28T8QQcEnn3wR/AOEZR78A2RgQF/EB1FRRGf0QVDnSpIbp5Mmbd1pm07z+cBpzrn35n7PuSEn98fpvQGMrRci4o2ImIiIlyOimE9P87TYLux3l7t/753ldkoiy976axJJPq23rnZ5MiKud98SUxHxtS9HfDM5HLe5u7exVKtVt/NypVXfqjR3926u15fWqmvVzfn5udcWXl94dWE2yz1WO0u9zE++9Pn3Pv2t3y3++ca329X63EeiEH3tOE3dphc626KnvY22zyLYCEzk7SmMuiIAAJxIex//gxHxic7+fzEmOntzfSZGUTMAAADgtGRfmI5/JxEZAAAAcGmlETEdSVrOxwJMR5peyc8NfDiupbVGs/Wp1cbO5kp7XkQpCunqeq06m48VLkUhaZfn8jG2vfIrfeX5iHgmIr5fvNopl5cbtZURn/sAAACAcXG97/j/H8W0kz/egP8TAAAAAC6u0tACAAAAcFk45AcAAIDLr//4/70R1QMAAAA4E1958812ynrPv155e3dno/H2zZVqc6Nc31kuLze2t8prjcZa55599ePWV2s0tj4Tmzu3Kq1qs1Vp7u4t1hs7m63F9UcegQ0AAACco2c+fvvXSUTsf/ZqJ0V+H0CAR/xh1BUATtPEqCsAjIy7eMP4Koy6AsDIJcfMN3gHAACefDMfPXz9v/f8f+cG4HIz1gcAxo/r/zC+CkYAwlhLI+ID3exTw5YZev3/lyeNkmURd4oHpzi/CAAA52u6k5K0nB8HTEealssRT0ekpSgkq+u16mx+fPCrYuGpdnmu887k2DHDAAAAAAAAAAAAAAAAAAAAAAAAAEBXliWRAQAAAJdaRPqnpHM3/4iZ4kvT/ecHriT/LMYf88KP3vrBraVWa3uuPf1vnWd5XYmI1g/z6a8MfXwYAAAAcNqS/aGzusfp+evcudYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDFw/947y710nnH/8sWIKA2KPxlTndepKETEtb8nMXngfUlETJxC/P13I+LZQfGTeJBlWSmvxaD4V884fqmzaQbHTyPi+inEh3F2u93/vDHo+5fGC53Xwd+/yTw9ruH9X5pHfrbTzw3qf54+tLb6wBjP3f1ZZWj8dyOemxzc//T632RI/BcPre1fWZYdjvGNr+/tDYuf/ThiZuDvT/JIrEqrvlVp7u7dXK8vrVXXqpvz83OvLby+8OrCbGV1vVbN/w6M8b2P/fzBUe2/NiD+b3/T7X+Pav9Lw1ba5z93b937UDdbGBT/xosDf3+nYkj8NP/t+2Seb8+f6eX3u/mDnv/pneePav/KkO1/3Od/44Ttf/mr3/39CRcFAM5Bc3dvY6lWq24fkZk6wTJPYuYXUxeiGv9nJvtO95O7KPV5v5n23urDKb1WXYCKHchk5xZrIi5Ik/+XGWm3BAAAnIGHO/2jrgkAAAAAAAAAAAAAAAAAAACMr/O4nVh/zP3RNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ej/DQAA///M/t/r") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1, 0x97ff}, 0x1c) openat$selinux_avc_cache_stats(0xffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000d00000000000000080009000d000000", 0x24) 894.084685ms ago: executing program 1 (id=3847): read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0xe93fc6ea26f4008e, &(0x7f0000000380)={[], [{@dont_hash}, {@audit}, {@uid_eq}]}, 0x1, 0x549, &(0x7f0000002700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(r2, 0x0, 0x0) 557.039123ms ago: executing program 0 (id=3848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000001340)=ANY=[@ANYBLOB="b00000000000", @ANYRES64, @ANYBLOB], 0xb0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 67.977245ms ago: executing program 4 (id=3849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000700850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 33.790007ms ago: executing program 3 (id=3850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 0s ago: executing program 1 (id=3851): timerfd_create(0x8, 0x80000) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0xe93fc6ea26f4008e, &(0x7f0000000380)={[], [{@dont_hash}, {@audit}, {@uid_eq}]}, 0x1, 0x549, &(0x7f0000002700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001f85236ccc4ce75fa61b6d6978d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) kernel console output (not intermixed with test programs): : 32 [ 957.633073][ T300] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 957.643643][ T300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 957.655367][ T300] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 957.665042][ T300] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 957.679069][ T300] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 957.695300][ T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.711396][ T300] usb 1-1: config 0 descriptor?? [ 957.999698][T15854] loop2: detected capacity change from 0 to 512 [ 958.058894][ T300] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 958.074793][ T300] usb 1-1: USB disconnect, device number 62 [ 958.081967][ T300] usblp0: removed [ 958.189044][ T45] device bridge_slave_1 left promiscuous mode [ 958.195379][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.203805][ T45] device bridge_slave_0 left promiscuous mode [ 958.210187][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.567393][ T45] device veth1_macvtap left promiscuous mode [ 958.575261][ T45] device veth0_vlan left promiscuous mode [ 960.210846][T15878] loop2: detected capacity change from 0 to 512 [ 960.219169][T15864] loop4: detected capacity change from 0 to 40427 [ 960.251968][T15886] loop1: detected capacity change from 0 to 512 [ 960.262161][T15864] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 960.268419][T15864] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 960.279660][T15864] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 960.338553][T15864] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 960.345532][T15864] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 960.730445][T15886] EXT4-fs (loop1): 1 orphan inode deleted [ 960.736226][T15886] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 960.756921][T15886] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 960.829285][T15898] attempt to access beyond end of device [ 960.829285][T15898] loop4: rw=2049, want=53256, limit=40427 [ 960.845697][T15898] attempt to access beyond end of device [ 960.845697][T15898] loop4: rw=2049, want=53320, limit=40427 [ 960.862218][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3563'. [ 961.009253][T15828] attempt to access beyond end of device [ 961.009253][T15828] loop4: rw=2049, want=45104, limit=40427 [ 961.133847][T15905] netlink: 'syz.0.3574': attribute type 27 has an invalid length. [ 961.183846][T15905] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.190896][T15905] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.201338][T15907] loop0: detected capacity change from 0 to 256 [ 961.480977][T15907] device veth0_vlan left promiscuous mode [ 961.486835][T15907] device veth0_vlan entered promiscuous mode [ 961.493532][T15907] device veth1_macvtap left promiscuous mode [ 961.501201][T15907] device veth1_macvtap entered promiscuous mode [ 961.508427][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 961.515796][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 961.523433][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 961.535829][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.542712][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.550925][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 961.559276][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 961.575106][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.582010][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.595199][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 961.603626][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 961.611949][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 961.623281][T15916] loop0: detected capacity change from 0 to 512 [ 961.630301][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 961.638641][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 961.647782][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 961.655796][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 961.664191][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 961.673119][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 961.682195][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 961.690560][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 961.699042][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 961.707613][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 961.716732][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 961.734311][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 961.742838][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 961.756097][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 961.770321][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 961.778946][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 961.787574][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 961.795482][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 961.803321][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 961.810722][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 961.818042][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 961.826049][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 961.834210][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 961.851857][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 962.136534][ T4887] Bluetooth: hci0: command 0x1003 tx timeout [ 962.143838][T15357] Bluetooth: hci0: sending frame failed (-49) [ 962.786848][T10652] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 963.015580][T15941] loop4: detected capacity change from 0 to 512 [ 963.027695][T10652] usb 2-1: Using ep0 maxpacket: 32 [ 963.038950][T15939] loop2: detected capacity change from 0 to 40427 [ 963.133401][T15939] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 963.139825][T15939] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 963.150858][T15939] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 963.172156][T15939] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 963.176571][T10652] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 963.181525][T15939] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 963.187856][T10652] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 963.203172][T10652] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 963.212031][T10652] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 963.225189][T10652] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 963.234790][T10652] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 963.247756][T10652] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 963.256784][T10652] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.265481][T10652] usb 2-1: config 0 descriptor?? [ 963.378379][T15949] attempt to access beyond end of device [ 963.378379][T15949] loop2: rw=2049, want=53256, limit=40427 [ 963.395500][T15949] attempt to access beyond end of device [ 963.395500][T15949] loop2: rw=2049, want=53320, limit=40427 [ 963.413148][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3583'. [ 963.570018][T15951] loop0: detected capacity change from 0 to 512 [ 963.629295][T15951] EXT4-fs (loop0): 1 orphan inode deleted [ 963.634863][T15951] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 963.655883][T15951] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038 (0x7fffffff) [ 963.657049][T10652] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 963.689529][T10652] usb 2-1: USB disconnect, device number 58 [ 963.697612][T10652] usblp0: removed [ 963.767986][T15671] attempt to access beyond end of device [ 963.767986][T15671] loop2: rw=2049, want=45104, limit=40427 [ 963.877385][T15960] loop4: detected capacity change from 0 to 512 [ 963.878395][T15958] netlink: 'syz.2.3586': attribute type 27 has an invalid length. [ 963.903346][T15958] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.910352][T15958] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.931899][T15961] loop2: detected capacity change from 0 to 256 [ 964.006978][T15958] device veth0_vlan left promiscuous mode [ 964.012727][T15958] device veth0_vlan entered promiscuous mode [ 964.019461][T15958] device veth1_macvtap left promiscuous mode [ 964.025730][T15958] device veth1_macvtap entered promiscuous mode [ 964.032256][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 964.061126][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 964.069373][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 964.081698][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.088593][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.109020][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 964.188016][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 964.229376][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.236242][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.240360][ T4887] Bluetooth: hci0: command 0x1001 tx timeout [ 964.249177][T15357] Bluetooth: hci0: sending frame failed (-49) [ 964.255200][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 964.263681][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 964.271986][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 964.280219][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 964.288302][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 964.296336][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 964.304492][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 964.313956][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 964.322096][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 964.330306][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 964.338506][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 964.346835][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 964.354932][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 964.363170][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 964.370984][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 964.379470][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 964.387298][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 964.395179][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 964.403804][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 964.412350][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 964.420462][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 964.428772][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 964.436268][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 964.444387][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 964.452463][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 964.460842][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 964.468405][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 964.476368][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3587'. [ 964.485383][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'. [ 964.504894][T15969] loop0: detected capacity change from 0 to 512 [ 964.578249][T15969] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 964.589196][T15969] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 965.109130][T15979] loop2: detected capacity change from 0 to 256 [ 965.127109][T15979] FAT-fs (loop2): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 965.407092][T15983] loop0: detected capacity change from 0 to 512 [ 965.999273][T15996] loop2: detected capacity change from 0 to 2048 [ 966.078429][T15996] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3595: bad orphan inode 8192 [ 966.089102][T15996] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 966.442729][T10652] Bluetooth: hci0: command 0x1009 tx timeout [ 966.538447][T16008] loop1: detected capacity change from 0 to 512 [ 966.884587][T16012] loop4: detected capacity change from 0 to 40427 [ 966.897687][T16014] loop2: detected capacity change from 0 to 512 [ 966.908594][T16012] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 966.914773][T16012] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 966.932442][T16012] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 966.945764][T16014] EXT4-fs (loop2): 1 orphan inode deleted [ 966.952075][T16014] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 966.960494][T16012] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 966.973015][T16014] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 966.980252][T16012] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 967.171176][T16023] attempt to access beyond end of device [ 967.171176][T16023] loop4: rw=2049, want=53256, limit=40427 [ 967.188455][T16023] attempt to access beyond end of device [ 967.188455][T16023] loop4: rw=2049, want=53320, limit=40427 [ 967.206190][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3598'. [ 967.332263][T16025] loop0: detected capacity change from 0 to 512 [ 967.704336][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3600'. [ 967.713124][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3600'. [ 967.726862][T15828] attempt to access beyond end of device [ 967.726862][T15828] loop4: rw=2049, want=45104, limit=40427 [ 968.027930][T16036] netlink: 'syz.4.3602': attribute type 27 has an invalid length. [ 968.044094][T16036] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.051404][T16036] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.080147][T16036] loop4: detected capacity change from 0 to 256 [ 968.145885][T16036] device veth0_vlan left promiscuous mode [ 968.151709][T16036] device veth0_vlan entered promiscuous mode [ 968.158238][T16036] device veth1_macvtap left promiscuous mode [ 968.164756][T16036] device veth1_macvtap entered promiscuous mode [ 968.180307][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 968.187712][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 968.195029][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 968.202005][ T419] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 968.203885][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.217076][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.225069][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 968.229269][T16038] loop0: detected capacity change from 0 to 512 [ 968.239858][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 968.248275][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.255114][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.262712][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 968.271003][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 968.287460][T16040] loop4: detected capacity change from 0 to 256 [ 968.293929][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 968.319419][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 968.327415][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 968.328753][T16038] EXT4-fs (loop0): 1 orphan inode deleted [ 968.335425][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 968.348667][T16038] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 968.369980][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 968.378536][T16040] FAT-fs (loop4): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 968.389037][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 968.397101][T16038] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 968.407421][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 968.436803][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 968.455060][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 968.473824][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 968.482168][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 968.484119][T16042] loop1: detected capacity change from 0 to 40427 [ 968.490700][ T419] usb 3-1: Using ep0 maxpacket: 32 [ 968.497336][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 968.509753][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 968.517753][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 968.525817][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 968.533996][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 968.542376][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 968.550593][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 968.562152][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 968.570033][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 968.577583][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 968.584996][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 968.593307][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 968.601727][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 968.609024][T16042] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 968.611849][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 968.623118][T16042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 968.633975][T16042] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 968.673025][T16042] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 968.680097][ T419] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 968.688669][ T419] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 968.697136][T16042] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 968.697176][ T419] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 968.719231][ T419] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 968.729034][ T419] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 968.738669][ T419] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 968.805578][ T419] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 968.814764][ T419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.826466][ T419] usb 3-1: config 0 descriptor?? [ 968.947793][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3606'. [ 969.154759][ T419] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 969.224023][T15624] attempt to access beyond end of device [ 969.224023][T15624] loop1: rw=2049, want=45104, limit=40427 [ 969.233971][ T419] usb 3-1: USB disconnect, device number 68 [ 969.247981][T16062] loop0: detected capacity change from 0 to 512 [ 969.264160][T16059] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.271150][T16059] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.278678][T16059] device bridge_slave_0 entered promiscuous mode [ 969.285685][T16059] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.292583][T16059] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.318186][ T419] usblp0: removed [ 969.320256][T16059] device bridge_slave_1 entered promiscuous mode [ 969.669539][T16059] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.676417][T16059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.683544][T16059] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.690416][T16059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.775272][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.782936][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.793137][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 969.801961][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 969.820752][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 969.828942][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.835884][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.843692][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 969.852442][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.859324][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.894923][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 969.899410][T16077] loop2: detected capacity change from 0 to 512 [ 969.913000][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 969.978138][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 969.989523][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 969.997450][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 970.004709][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 970.013536][T16059] device veth0_vlan entered promiscuous mode [ 970.028190][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 970.038426][T16059] device veth1_macvtap entered promiscuous mode [ 970.054483][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 970.068280][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 970.132042][T16082] loop0: detected capacity change from 0 to 512 [ 970.282601][T16080] loop4: detected capacity change from 0 to 40427 [ 970.406102][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'. [ 970.414978][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'. [ 970.442573][T16080] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 970.526303][T16080] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 970.551644][T16080] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 970.580342][T16094] netlink: 'syz.1.3616': attribute type 27 has an invalid length. [ 970.585456][T16080] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 970.594896][T16080] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 970.618963][T16094] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.626084][T16094] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.642871][T16097] loop1: detected capacity change from 0 to 256 [ 970.715359][T16094] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.722245][T16094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.782502][T16099] attempt to access beyond end of device [ 970.782502][T16099] loop4: rw=2049, want=53256, limit=40427 [ 970.800628][T16099] attempt to access beyond end of device [ 970.800628][T16099] loop4: rw=2049, want=53320, limit=40427 [ 970.934959][T16094] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.941874][T16094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.954540][T16094] device veth0_vlan left promiscuous mode [ 970.961666][T16094] device veth0_vlan entered promiscuous mode [ 970.969466][T16094] device veth1_macvtap left promiscuous mode [ 970.987668][T16094] device veth1_macvtap entered promiscuous mode [ 970.996033][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 971.010695][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 971.019149][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 971.027561][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 971.035974][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 971.044518][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 971.053002][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 971.069071][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 971.077945][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 971.091810][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 971.100232][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 971.108536][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 971.218911][T16108] loop1: detected capacity change from 0 to 256 [ 971.226320][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 971.302507][T16108] FAT-fs (loop1): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 971.327689][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 971.338375][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 971.346765][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 971.354922][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 971.362962][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 971.371023][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 971.379067][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3613'. [ 971.396668][ T517] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 971.432460][T15828] attempt to access beyond end of device [ 971.432460][T15828] loop4: rw=2049, want=45104, limit=40427 [ 971.647224][ T45] device bridge_slave_1 left promiscuous mode [ 971.653218][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.660884][ T45] device bridge_slave_0 left promiscuous mode [ 971.666594][ T517] usb 3-1: Using ep0 maxpacket: 32 [ 971.667398][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.679554][ T45] device veth1_macvtap left promiscuous mode [ 971.685401][ T45] device veth0_vlan left promiscuous mode [ 971.806554][ T9835] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 971.806642][ T517] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 971.822211][ T517] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 971.830717][ T517] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 971.839526][ T517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 971.849370][ T517] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 971.858921][ T517] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 971.871704][ T517] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 971.880756][ T517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.889780][ T517] usb 3-1: config 0 descriptor?? [ 972.049273][T16119] loop1: detected capacity change from 0 to 512 [ 972.056669][ T9835] usb 5-1: Using ep0 maxpacket: 32 [ 972.147312][ T517] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 972.177199][ T9835] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 972.388711][ T9835] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 972.421978][ T9835] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 972.484283][ T9835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 972.527025][ T9835] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 972.571100][ T9835] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 972.584269][ T9835] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 972.593377][ T9835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.602219][ T9835] usb 5-1: config 0 descriptor?? [ 972.703595][ T517] usb 3-1: USB disconnect, device number 69 [ 972.716521][ C0] usblp0: nonzero read bulk status received: -108 [ 972.937881][ T9835] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 972.950647][T16133] loop3: detected capacity change from 0 to 2048 [ 972.958036][ T9835] usb 5-1: USB disconnect, device number 59 [ 972.977338][ T9835] usblp0: removed [ 973.058086][T16133] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3627: bad orphan inode 8192 [ 973.068449][T16133] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 973.256588][ T9835] Bluetooth: hci0: command 0x1003 tx timeout [ 973.262745][T15357] Bluetooth: hci0: sending frame failed (-49) [ 973.634522][T16142] loop4: detected capacity change from 0 to 512 [ 973.846144][T16145] netlink: 'syz.1.3630': attribute type 27 has an invalid length. [ 973.867182][T16147] loop3: detected capacity change from 0 to 512 [ 973.881601][T16145] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.888718][T16145] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.899875][T16149] loop1: detected capacity change from 0 to 256 [ 973.965124][T16127] usblp0: removed [ 974.311299][T16145] device veth0_vlan left promiscuous mode [ 974.317187][T16145] device veth0_vlan entered promiscuous mode [ 974.324037][T16145] device veth1_macvtap left promiscuous mode [ 974.330718][T16145] device veth1_macvtap entered promiscuous mode [ 974.337311][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3629'. [ 974.346113][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3629'. [ 974.357252][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 974.374251][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 974.387840][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 974.395996][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.402869][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.416536][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 974.425811][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 974.435705][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.442661][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.451662][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 974.476942][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 974.520204][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 974.528399][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 974.536890][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 974.548340][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 974.556033][T16160] loop4: detected capacity change from 0 to 256 [ 974.556303][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 974.570242][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 974.572848][T16160] FAT-fs (loop4): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 974.578448][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 974.596021][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 974.604816][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 974.615734][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 974.626472][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 974.636917][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 974.648784][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 974.660973][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 974.674041][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 974.684618][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 974.695355][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 974.782160][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 974.790141][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 974.798017][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 974.805339][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.4094: link becomes ready [ 974.817132][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 974.862386][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 974.879842][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 974.893265][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 974.901039][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 975.337375][ T419] Bluetooth: hci0: command 0x1001 tx timeout [ 975.342490][T16175] loop1: detected capacity change from 0 to 512 [ 975.343294][T15357] Bluetooth: hci0: sending frame failed (-49) [ 975.763500][T16185] loop2: detected capacity change from 0 to 2048 [ 975.848180][T16185] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3640: bad orphan inode 8192 [ 975.858518][T16185] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 975.946576][ T517] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 976.281151][T16198] loop4: detected capacity change from 0 to 512 [ 976.616896][ T517] usb 4-1: Using ep0 maxpacket: 32 [ 976.766594][ T517] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 976.774787][ T517] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 976.783794][ T517] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 976.792725][ T517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 976.802237][ T517] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 976.811687][ T517] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 976.824456][ T517] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 976.833306][ T517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.841664][ T517] usb 4-1: config 0 descriptor?? [ 977.023941][T16204] netlink: 'syz.2.3644': attribute type 27 has an invalid length. [ 977.039771][T16204] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.046788][T16204] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.075223][T16204] loop2: detected capacity change from 0 to 256 [ 977.152830][T16206] loop4: detected capacity change from 0 to 512 [ 977.167815][ T517] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 977.179406][ T517] usb 4-1: USB disconnect, device number 44 [ 977.185955][ T517] usblp0: removed [ 977.195146][T16204] device veth0_vlan left promiscuous mode [ 977.201243][T16204] device veth0_vlan entered promiscuous mode [ 977.207920][T16204] device veth1_macvtap left promiscuous mode [ 977.214296][T16204] device veth1_macvtap entered promiscuous mode [ 977.222297][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 977.246931][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 977.254397][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 977.262872][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.269761][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.280676][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 977.289244][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 977.297245][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.304076][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.311304][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 977.319421][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 977.327289][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 977.335165][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 977.344393][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 977.369096][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 977.377760][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 977.386427][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 977.403830][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 977.412743][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 977.420604][ T300] Bluetooth: hci0: command 0x1009 tx timeout [ 977.452656][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 977.462108][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 977.472338][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 977.482187][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 977.490285][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 977.498504][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 977.506379][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 977.514921][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 977.523357][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 977.532320][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 977.540444][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 977.548648][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 977.555912][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 977.563319][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 977.571265][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 977.579546][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 977.587059][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 977.594646][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3645'. [ 977.603449][T16208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3645'. [ 978.014202][T16219] loop4: detected capacity change from 0 to 256 [ 978.022562][T16219] FAT-fs (loop4): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 978.536595][ T419] Bluetooth: hci1: command 0x1003 tx timeout [ 978.542820][ T47] Bluetooth: hci1: sending frame failed (-49) [ 978.757830][T16228] loop3: detected capacity change from 0 to 2048 [ 978.798567][T16228] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3651: bad orphan inode 8192 [ 978.808860][T16228] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 979.187826][T16240] loop3: detected capacity change from 0 to 512 [ 980.071498][T16243] loop2: detected capacity change from 0 to 2048 [ 980.109612][T16243] Alternate GPT is invalid, using primary GPT. [ 980.115929][T16243] loop2: p1 p2 p3 [ 980.626855][ T4093] Bluetooth: hci1: command 0x1001 tx timeout [ 980.632863][ T47] Bluetooth: hci1: sending frame failed (-49) [ 980.706772][ T9835] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 980.966548][ T9835] usb 3-1: Using ep0 maxpacket: 32 [ 981.006693][T16260] loop4: detected capacity change from 0 to 512 [ 981.054475][T16261] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.061350][T16261] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.068908][T16261] device bridge_slave_0 entered promiscuous mode [ 981.075727][T16261] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.082623][T16261] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.089828][T16261] device bridge_slave_1 entered promiscuous mode [ 981.153198][ T9835] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 981.157190][T16261] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.166242][ T9835] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 981.168257][T16261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.183762][T16261] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.185287][ T9835] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 981.190561][T16261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.199685][ T9835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 981.216629][ T9835] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 981.226109][ T9835] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 981.255434][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.262719][ T9835] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 981.302649][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.310930][ T9835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.361475][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 981.401296][ T9835] usb 3-1: config 0 descriptor?? [ 981.437516][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 981.446773][T16269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3659'. [ 981.455530][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3659'. [ 981.478028][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 981.485998][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.492853][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.500060][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 981.508476][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.515399][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.522646][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 981.530494][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 981.547354][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 981.560979][T16261] device veth0_vlan entered promiscuous mode [ 981.567343][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 981.575501][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 981.584448][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 981.600301][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 981.608823][T16261] device veth1_macvtap entered promiscuous mode [ 981.620817][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 981.638762][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 981.788186][ T9835] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 981.800704][ T9835] usb 3-1: USB disconnect, device number 70 [ 981.807281][ T9835] usblp0: removed [ 982.309105][T16283] loop3: detected capacity change from 0 to 256 [ 982.379065][T16283] FAT-fs (loop3): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 982.597113][ T353] device bridge_slave_1 left promiscuous mode [ 982.603299][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.611281][ T353] device bridge_slave_0 left promiscuous mode [ 982.618488][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.626816][ T353] device veth1_macvtap left promiscuous mode [ 982.633042][ T353] device veth0_vlan left promiscuous mode [ 982.696769][ T300] Bluetooth: hci1: command 0x1009 tx timeout [ 982.743107][T16289] loop4: detected capacity change from 0 to 2048 [ 982.848482][T16289] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.3664: bad orphan inode 8192 [ 982.859658][T16289] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 983.330114][T16299] syz.3.3665[16299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 983.330506][T16299] syz.3.3665[16299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 983.510602][T16301] loop2: detected capacity change from 0 to 512 [ 983.537386][T16303] loop0: detected capacity change from 0 to 512 [ 983.598705][T16303] EXT4-fs (loop0): 1 orphan inode deleted [ 983.604359][T16303] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 983.625764][T16303] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 984.004767][T16312] netlink: 'syz.0.3669': attribute type 27 has an invalid length. [ 984.143185][T16312] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.150239][T16312] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.278480][T16317] loop0: detected capacity change from 0 to 256 [ 984.365932][ T8] Bluetooth: hci2: Frame reassembly failed (-84) [ 984.398170][T16312] device veth0_vlan left promiscuous mode [ 984.404071][T16312] device veth0_vlan entered promiscuous mode [ 984.411725][T16312] device veth1_macvtap left promiscuous mode [ 984.418517][T16312] device veth1_macvtap entered promiscuous mode [ 984.425988][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 984.434351][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 984.445202][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 984.453384][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.460231][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.467470][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 984.475577][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 984.483608][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.490457][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.497886][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 984.506132][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 984.514372][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 984.522425][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 984.530414][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 984.539065][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 984.547022][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 984.556069][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 984.569711][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 984.577945][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 984.586240][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 984.597914][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 984.621882][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 984.630450][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 984.638673][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 984.647450][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 984.655423][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 984.663853][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 984.672213][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 984.680414][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 984.688248][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 984.695925][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 984.703500][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 984.710787][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 984.719975][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 984.729612][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 984.738334][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 985.467773][T16333] loop0: detected capacity change from 0 to 512 [ 986.091962][T16338] loop2: detected capacity change from 0 to 256 [ 986.146855][ T9835] Bluetooth: hci0: command 0x1003 tx timeout [ 986.152866][T15564] Bluetooth: hci0: sending frame failed (-49) [ 986.176733][T16338] FAT-fs (loop2): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 986.376545][ T300] Bluetooth: hci2: command 0x1003 tx timeout [ 986.382476][T15564] Bluetooth: hci2: sending frame failed (-49) [ 986.397993][T16344] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.404856][T16344] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.412222][T16344] device bridge_slave_0 entered promiscuous mode [ 986.419056][T16344] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.426012][T16344] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.433257][T16344] device bridge_slave_1 entered promiscuous mode [ 986.474907][T16344] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.481883][T16344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.488985][T16344] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.495745][T16344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.515546][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.522847][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.530675][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 986.538178][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 986.548205][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 986.556208][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.563056][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.572029][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 986.580371][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.587376][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.600637][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 986.609958][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 986.624376][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 986.626839][ T517] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 986.643245][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 986.651282][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 986.658998][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 986.667286][T16344] device veth0_vlan entered promiscuous mode [ 986.678270][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 986.688017][T16344] device veth1_macvtap entered promiscuous mode [ 986.698495][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 986.709069][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 986.746989][T16351] loop1: detected capacity change from 0 to 2048 [ 986.828150][T16351] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.3678: bad orphan inode 8192 [ 986.838429][T16351] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 986.943029][ T517] usb 1-1: Using ep0 maxpacket: 32 [ 987.087861][T16356] loop2: detected capacity change from 0 to 512 [ 987.188376][T16356] EXT4-fs (loop2): 1 orphan inode deleted [ 987.193956][T16356] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 987.214855][T16356] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 987.276617][ T517] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 987.284806][ T517] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 987.293520][ T517] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 987.304292][ T517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 987.313844][ T517] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 987.323287][ T517] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 987.336020][ T517] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 987.355257][T16366] loop2: detected capacity change from 0 to 256 [ 987.361450][ T517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.370101][ T517] usb 1-1: config 0 descriptor?? [ 987.648931][ T6818] device bridge_slave_1 left promiscuous mode [ 987.655061][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.662162][T16369] loop1: detected capacity change from 0 to 512 [ 987.668563][ T6818] device bridge_slave_0 left promiscuous mode [ 987.674591][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.682193][ T6818] device veth1_macvtap left promiscuous mode [ 987.688049][ T6818] device veth0_vlan left promiscuous mode [ 987.707362][ T517] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 987.721932][ T517] usb 1-1: USB disconnect, device number 63 [ 987.730246][ T517] usblp0: removed [ 988.216703][ T419] Bluetooth: hci0: command 0x1001 tx timeout [ 988.222606][T15357] Bluetooth: hci0: sending frame failed (-49) [ 988.457069][ T419] Bluetooth: hci2: command 0x1001 tx timeout [ 988.463050][T15357] Bluetooth: hci2: sending frame failed (-49) [ 989.410539][T16381] loop1: detected capacity change from 0 to 2048 [ 989.448125][T16381] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.3685: bad orphan inode 8192 [ 989.458437][T16381] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 990.296761][ T517] Bluetooth: hci0: command 0x1009 tx timeout [ 990.536664][ T9835] Bluetooth: hci2: command 0x1009 tx timeout [ 990.727494][T16401] loop2: detected capacity change from 0 to 256 [ 990.796772][T16401] FAT-fs (loop2): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 991.189408][T16404] loop0: detected capacity change from 0 to 40427 [ 991.266959][T16404] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 991.273161][T16404] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 991.283428][T16404] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 991.304012][T16404] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 991.310926][T16404] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 991.461483][T16411] attempt to access beyond end of device [ 991.461483][T16411] loop0: rw=2049, want=53256, limit=40427 [ 991.477610][T16411] attempt to access beyond end of device [ 991.477610][T16411] loop0: rw=2049, want=53320, limit=40427 [ 991.493994][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3690'. [ 991.950966][T16261] attempt to access beyond end of device [ 991.950966][T16261] loop0: rw=2049, want=45104, limit=40427 [ 992.050801][T16416] loop0: detected capacity change from 0 to 2048 [ 992.128282][T16416] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3692: bad orphan inode 8192 [ 992.138905][T16416] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 992.536919][ T9835] Bluetooth: hci1: command 0x1003 tx timeout [ 992.543129][T15564] Bluetooth: hci1: sending frame failed (-49) [ 992.710551][ T6818] Bluetooth: hci3: Frame reassembly failed (-84) [ 993.236549][ T517] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 993.476589][ T517] usb 1-1: Using ep0 maxpacket: 32 [ 993.596602][ T517] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 993.604936][ T517] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 993.613397][ T517] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 993.622140][ T517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 993.631695][ T517] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 993.641136][ T517] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 993.653910][ T517] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 993.662834][ T517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.671388][ T517] usb 1-1: config 0 descriptor?? [ 994.008097][ T517] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 994.019607][ T517] usb 1-1: USB disconnect, device number 64 [ 994.025893][ T517] usblp0: removed [ 994.616507][ T9835] Bluetooth: hci1: command 0x1001 tx timeout [ 994.622370][ T779] Bluetooth: hci1: sending frame failed (-49) [ 994.693098][T16436] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.700006][T16436] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.707520][T16436] device bridge_slave_0 entered promiscuous mode [ 994.718192][T16436] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.725029][T16436] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.732334][T16436] device bridge_slave_1 entered promiscuous mode [ 994.746636][T16437] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.753515][T16437] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.760759][T16437] device bridge_slave_0 entered promiscuous mode [ 994.770194][T16437] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.777090][T16437] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.784205][T16437] device bridge_slave_1 entered promiscuous mode [ 994.786541][ T9835] Bluetooth: hci3: command 0x1003 tx timeout [ 994.796248][ T779] Bluetooth: hci3: sending frame failed (-49) [ 994.871613][T16436] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.878497][T16436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.885560][T16436] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.892371][T16436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.900615][T16437] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.907469][T16437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.914531][T16437] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.921351][T16437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.953710][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 994.961312][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.969050][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.976187][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.983899][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.995157][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 995.006270][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 995.014345][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.021199][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.028572][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 995.036725][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.043565][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.051418][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 995.059478][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.066313][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.074723][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 995.082729][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.089570][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.106672][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 995.116314][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 995.125906][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 995.142960][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 995.151241][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 995.163624][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 995.171571][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 995.179131][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 995.188466][T16437] device veth0_vlan entered promiscuous mode [ 995.200561][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.212189][T16437] device veth1_macvtap entered promiscuous mode [ 995.220578][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 995.233574][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.243939][ T6818] device bridge_slave_1 left promiscuous mode [ 995.250064][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.257811][ T6818] device bridge_slave_0 left promiscuous mode [ 995.263748][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.271622][ T6818] device veth1_macvtap left promiscuous mode [ 995.277692][ T6818] device veth0_vlan left promiscuous mode [ 995.339823][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 995.349119][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 995.356382][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 995.363704][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 995.374312][T16436] device veth0_vlan entered promiscuous mode [ 995.390867][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.400760][T16436] device veth1_macvtap entered promiscuous mode [ 995.416044][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.424863][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 995.455102][T16448] loop3: detected capacity change from 0 to 512 [ 995.722367][T16448] EXT4-fs (loop3): 1 orphan inode deleted [ 995.728433][T16448] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 995.749610][T16448] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 996.021520][T16457] loop0: detected capacity change from 0 to 2048 [ 996.128472][T16457] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3697: bad orphan inode 8192 [ 996.139331][T16457] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 996.227325][ T6818] device bridge_slave_1 left promiscuous mode [ 996.233303][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.241753][ T6818] device bridge_slave_0 left promiscuous mode [ 996.248550][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.789203][ T420] Bluetooth: hci1: command 0x1009 tx timeout [ 996.806456][T16463] loop4: detected capacity change from 0 to 512 [ 996.813500][ T6818] device veth1_macvtap left promiscuous mode [ 996.819745][ T6818] device veth0_vlan left promiscuous mode [ 996.848868][T16463] EXT4-fs (loop4): 1 orphan inode deleted [ 996.854515][T16463] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 996.856612][ T20] Bluetooth: hci3: command 0x1001 tx timeout [ 996.882501][T16463] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 996.916573][ T779] Bluetooth: hci3: sending frame failed (-49) [ 997.296730][ T517] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 997.576551][ T517] usb 1-1: Using ep0 maxpacket: 32 [ 997.706607][ T517] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 997.714892][ T517] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 997.723494][ T517] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 997.732700][ T517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 997.742766][ T517] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 997.752251][ T517] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 997.765112][ T517] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 997.774699][ T517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.783997][ T517] usb 1-1: config 0 descriptor?? [ 997.810408][T16480] loop3: detected capacity change from 0 to 512 [ 998.197163][ T517] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 998.433673][ T9835] usb 1-1: USB disconnect, device number 65 [ 998.446524][ C1] usblp0: nonzero read bulk status received: -108 [ 998.561621][T16487] loop4: detected capacity change from 0 to 512 [ 998.640421][T16470] usblp0: removed [ 999.172100][ T517] Bluetooth: hci3: command 0x1009 tx timeout [ 1000.226135][ T9835] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1000.541077][T16513] loop0: detected capacity change from 0 to 512 [ 1000.594383][T16514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.601369][T16514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.608846][T16514] device bridge_slave_0 entered promiscuous mode [ 1000.615767][T16514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.622794][T16514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.631401][T16514] device bridge_slave_1 entered promiscuous mode [ 1000.640032][T16513] EXT4-fs (loop0): 1 orphan inode deleted [ 1000.645600][T16513] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 1000.666708][ T9835] usb 5-1: Using ep0 maxpacket: 32 [ 1000.670276][T16513] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 1000.736356][T16514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.743259][T16514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.750347][T16514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.757111][T16514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.776966][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.784179][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.791769][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1000.799156][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1000.810224][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1000.818591][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.825440][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.833008][ T9835] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1000.841298][ T9835] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1000.850008][ T9835] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1000.859210][ T9835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1000.868752][ T9835] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1000.878195][ T9835] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1000.878589][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1000.890965][ T9835] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1000.899410][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.907654][ T9835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.914439][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.925663][ T9835] usb 5-1: config 0 descriptor?? [ 1000.929707][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1000.945170][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1000.966331][T16514] device veth0_vlan entered promiscuous mode [ 1000.982903][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1000.991321][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1000.999742][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1001.007300][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1001.014562][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1001.024193][T16514] device veth1_macvtap entered promiscuous mode [ 1001.035581][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1001.050792][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1001.088180][T16524] loop3: detected capacity change from 0 to 128 [ 1001.238959][ T9835] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1001.259052][ T9835] usb 5-1: USB disconnect, device number 60 [ 1001.267337][ T9835] usblp0: removed [ 1001.560610][T16534] loop0: detected capacity change from 0 to 40427 [ 1001.627310][ T6818] device bridge_slave_1 left promiscuous mode [ 1001.633354][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.640735][ T6818] device bridge_slave_0 left promiscuous mode [ 1001.646787][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.649384][T16534] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1001.660619][T16534] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1001.668835][ T6818] device veth1_macvtap left promiscuous mode [ 1001.671092][T16534] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1001.674692][ T6818] device veth0_vlan left promiscuous mode [ 1001.702721][T16534] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1001.709672][T16534] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1001.878107][T16541] attempt to access beyond end of device [ 1001.878107][T16541] loop0: rw=2049, want=53256, limit=40427 [ 1001.895208][T16541] attempt to access beyond end of device [ 1001.895208][T16541] loop0: rw=2049, want=53320, limit=40427 [ 1001.913045][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3717'. [ 1002.045913][T16543] loop1: detected capacity change from 0 to 512 [ 1002.316928][T16261] attempt to access beyond end of device [ 1002.316928][T16261] loop0: rw=2049, want=45104, limit=40427 [ 1002.467061][ T420] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1002.580994][T16554] loop0: detected capacity change from 0 to 2048 [ 1002.608792][T16555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.615629][T16555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.623276][T16555] device bridge_slave_0 entered promiscuous mode [ 1002.664002][T16554] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3720: bad orphan inode 8192 [ 1002.688466][T16555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.695578][T16555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.707878][T16555] device bridge_slave_1 entered promiscuous mode [ 1002.757150][T16554] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1002.895587][ T420] usb 5-1: Using ep0 maxpacket: 32 [ 1002.926426][T16563] loop1: detected capacity change from 0 to 256 [ 1002.959219][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1002.966416][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1002.980721][T16563] FAT-fs (loop1): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 1003.015302][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1003.052633][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1003.063154][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.070107][ T456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.080617][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1003.090201][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1003.125622][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.132504][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.140051][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1003.164214][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1003.206571][ T420] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1003.216825][ T420] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1003.228694][ T420] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1003.228705][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1003.232841][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1003.237807][ T420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1003.249793][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1003.263149][ T420] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1003.272956][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1003.280948][ T420] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1003.300710][ T420] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1003.309634][ T420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.318755][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1003.326982][ T420] usb 5-1: config 0 descriptor?? [ 1003.375991][T16555] device veth0_vlan entered promiscuous mode [ 1003.410894][T16575] loop3: detected capacity change from 0 to 512 [ 1003.421625][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1003.431713][T16555] device veth1_macvtap entered promiscuous mode [ 1003.459237][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1003.469355][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1003.478935][T16575] EXT4-fs (loop3): 1 orphan inode deleted [ 1003.484548][T16575] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 1003.508649][T16575] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 1003.837172][ T420] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1003.980120][ T9835] usb 5-1: USB disconnect, device number 61 [ 1003.996522][ C1] usblp0: nonzero read bulk status received: -108 [ 1004.027104][ T353] device bridge_slave_1 left promiscuous mode [ 1004.033138][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.040524][ T353] device bridge_slave_0 left promiscuous mode [ 1004.046691][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.054268][ T353] device veth1_macvtap left promiscuous mode [ 1004.060469][ T353] device veth0_vlan left promiscuous mode [ 1004.137209][ T420] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1004.146651][T10797] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1004.186988][T16544] usblp0: removed [ 1004.277810][T16590] loop0: detected capacity change from 0 to 512 [ 1004.386531][T10797] usb 3-1: Using ep0 maxpacket: 32 [ 1004.426816][T16592] loop3: detected capacity change from 0 to 40427 [ 1004.459130][T16592] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 1004.465422][T16592] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1004.494975][T16592] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1004.633720][T16592] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1004.640773][T16592] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1004.706649][T10797] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1004.717485][ T420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.728520][T10797] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1004.737300][ T420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.746985][T10797] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1004.755993][ T420] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1004.765290][T10797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1004.774972][ T420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.836170][T16604] attempt to access beyond end of device [ 1004.836170][T16604] loop3: rw=2049, want=53256, limit=40427 [ 1004.853249][T16604] attempt to access beyond end of device [ 1004.853249][T16604] loop3: rw=2049, want=53320, limit=40427 [ 1004.893461][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3731'. [ 1005.206955][T10797] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1005.217262][T16436] attempt to access beyond end of device [ 1005.217262][T16436] loop3: rw=2049, want=45104, limit=40427 [ 1005.217781][ T420] usb 2-1: config 0 descriptor?? [ 1005.233559][T16607] loop0: detected capacity change from 0 to 512 [ 1005.237066][T10797] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1005.252811][T10797] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1005.272749][T10797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.281371][T10797] usb 3-1: config 0 descriptor?? [ 1005.628374][T10797] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1005.662543][T10797] usb 3-1: USB disconnect, device number 71 [ 1005.671755][T10797] usblp0: removed [ 1005.962841][ T420] lg-g15 0003:046D:C222.003F: unknown main item tag 0x0 [ 1005.971689][ T420] lg-g15 0003:046D:C222.003F: item fetching failed at offset 10/11 [ 1005.979672][ T420] lg-g15: probe of 0003:046D:C222.003F failed with error -22 [ 1006.079936][ T420] usb 2-1: USB disconnect, device number 59 [ 1006.085942][T16627] loop0: detected capacity change from 0 to 256 [ 1006.167036][T16627] FAT-fs (loop0): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 1006.562368][T16636] loop3: detected capacity change from 0 to 2048 [ 1006.628345][T16636] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3742: bad orphan inode 8192 [ 1006.638652][T16636] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1006.906562][ T419] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1007.115559][T16647] loop0: detected capacity change from 0 to 512 [ 1007.306515][ T419] usb 2-1: Using ep0 maxpacket: 32 [ 1007.467144][ T419] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1007.555263][ T419] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1007.582997][ T419] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1007.648343][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1007.658430][ T419] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1007.671300][ T419] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1007.684358][ T419] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1007.748647][ T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.757794][ T419] usb 2-1: config 0 descriptor?? [ 1008.340970][ T419] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1008.408904][T16667] loop4: detected capacity change from 0 to 512 [ 1008.846201][ T4093] usb 2-1: USB disconnect, device number 60 [ 1008.856514][ C1] usblp0: nonzero read bulk status received: -108 [ 1009.140068][T16637] usblp0: removed [ 1009.146694][ T4887] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1009.414491][T16686] loop0: detected capacity change from 0 to 256 [ 1009.426143][T16686] FAT-fs (loop0): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 1009.546545][ T4887] usb 3-1: Using ep0 maxpacket: 32 [ 1009.686588][ T4887] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1009.694819][ T4887] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1009.703232][ T4887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1009.712025][ T4887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1009.721703][ T4887] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1009.731243][ T4887] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1009.744142][ T4887] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1009.758264][ T4887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.775569][ T4887] usb 3-1: config 0 descriptor?? [ 1009.804987][ T456] Bluetooth: hci0: Frame reassembly failed (-84) [ 1009.805135][T16693] loop1: detected capacity change from 0 to 2048 [ 1009.908213][T16693] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.3756: bad orphan inode 8192 [ 1009.918770][T16693] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1010.417456][ T4887] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1010.433746][ T4887] usb 3-1: USB disconnect, device number 72 [ 1010.449320][T16701] loop0: detected capacity change from 0 to 2048 [ 1010.456366][ T4887] usblp0: removed [ 1010.507875][T16701] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3757: bad orphan inode 8192 [ 1010.518392][T16701] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1011.144314][T16719] loop2: detected capacity change from 0 to 256 [ 1011.177133][T16719] exfat: Deprecated parameter 'utf8' [ 1011.185049][T16719] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1011.580481][T16725] netlink: 'syz.4.3763': attribute type 27 has an invalid length. [ 1011.615800][T16725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.622744][T16725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.633771][T16726] loop4: detected capacity change from 0 to 256 [ 1011.746643][T16728] netlink: 'syz.4.3764': attribute type 27 has an invalid length. [ 1011.769604][T16728] device veth0_vlan left promiscuous mode [ 1011.775302][T16728] device veth0_vlan entered promiscuous mode [ 1011.782104][T16728] device veth1_macvtap left promiscuous mode [ 1011.788474][T16728] device veth1_macvtap entered promiscuous mode [ 1011.795167][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1011.816734][ T419] Bluetooth: hci0: command 0x1003 tx timeout [ 1011.822684][T15357] Bluetooth: hci0: sending frame failed (-49) [ 1011.834615][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1011.842309][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1011.850381][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.857237][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.866889][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1011.875528][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1011.883772][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.890631][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.902311][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1011.910688][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1011.918926][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1011.927140][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1011.935073][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1011.943830][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1011.953263][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1011.953912][T16734] loop0: detected capacity change from 0 to 256 [ 1011.961372][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1011.975052][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1011.983248][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1012.002437][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1012.010879][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1012.019297][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1012.028512][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1012.036452][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1012.044561][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1012.052638][T16734] FAT-fs (loop0): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 1012.063655][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1012.071995][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1012.080697][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1012.089092][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1012.097133][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1012.104856][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1012.112669][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1012.120154][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1012.128372][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1012.136375][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1012.143761][ T4887] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1012.161440][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1012.375770][T16739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.382729][T16739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.390260][T16739] device bridge_slave_0 entered promiscuous mode [ 1012.399019][T16739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.405904][T16739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.412837][ T4887] usb 2-1: Using ep0 maxpacket: 32 [ 1012.413347][T16739] device bridge_slave_1 entered promiscuous mode [ 1012.459961][T16739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.466825][T16739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.473884][T16739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.480705][T16739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.502195][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1012.509581][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.517072][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.526042][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1012.534164][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.536571][ T4887] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1012.541040][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.556805][ T4887] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1012.565380][ T4887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1012.575855][ T4887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1012.585723][ T4887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1012.595200][ T4887] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1012.608053][ T4887] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1012.617035][ T4887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.625374][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1012.628812][ T4887] usb 2-1: config 0 descriptor?? [ 1012.634134][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.644944][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.652414][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1012.660533][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1012.676407][T16739] device veth0_vlan entered promiscuous mode [ 1012.685847][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1012.694114][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1012.701898][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1012.713745][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1012.740689][T16739] device veth1_macvtap entered promiscuous mode [ 1012.748561][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1012.757596][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1012.762780][T16745] loop4: detected capacity change from 0 to 2048 [ 1012.765624][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1012.788758][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1012.797104][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1012.805283][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1012.814303][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1012.846026][T16749] loop2: detected capacity change from 0 to 2048 [ 1012.879179][T16745] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.3771: bad orphan inode 8192 [ 1012.887988][T16749] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3770: bad orphan inode 8192 [ 1012.889597][T16745] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1012.904049][ T4887] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1012.917698][T16749] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1012.940056][ T456] device bridge_slave_1 left promiscuous mode [ 1012.946098][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.953865][ T456] device bridge_slave_0 left promiscuous mode [ 1012.960231][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.968455][ T456] device veth1_macvtap left promiscuous mode [ 1012.974369][ T456] device veth0_vlan left promiscuous mode [ 1013.696612][ T419] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1013.897076][ T4093] Bluetooth: hci0: command 0x1001 tx timeout [ 1013.902950][T15357] Bluetooth: hci0: sending frame failed (-49) [ 1013.904067][T16764] loop4: detected capacity change from 0 to 128 [ 1013.951571][T10797] usb 2-1: USB disconnect, device number 61 [ 1013.966524][ C0] usblp0: nonzero read bulk status received: -108 [ 1013.976501][ T419] usb 1-1: Using ep0 maxpacket: 32 [ 1014.096557][ T419] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1014.104734][ T419] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1014.113453][ T419] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1014.122265][ T419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1014.131782][ T419] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1014.141331][ T419] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1014.154120][ T419] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1014.163345][ T419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.166527][ T4887] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1014.171877][ T419] usb 1-1: config 0 descriptor?? [ 1014.213660][T16767] netlink: 'syz.4.3775': attribute type 27 has an invalid length. [ 1014.229387][T16767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.236295][T16767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.265106][T16767] loop4: detected capacity change from 0 to 256 [ 1014.529946][ T419] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1014.616787][ T419] usb 1-1: USB disconnect, device number 66 [ 1014.638501][ T419] usblp0: removed [ 1014.766583][ T4887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.776601][ T4887] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.787617][ T4887] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.797318][ T4887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1014.803726][ T4887] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1014.812580][ T4887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.820989][ T4887] usb 3-1: config 0 descriptor?? [ 1015.179356][T16729] usblp0: removed [ 1015.297516][ T4887] zeroplus 0003:0C12:0005.0040: item fetching failed at offset 1/5 [ 1015.306125][ T4887] zeroplus 0003:0C12:0005.0040: parse failed [ 1015.312338][ T4887] zeroplus: probe of 0003:0C12:0005.0040 failed with error -22 [ 1015.506813][ T420] usb 3-1: USB disconnect, device number 73 [ 1015.943183][T16783] loop0: detected capacity change from 0 to 40427 [ 1015.976618][ T300] Bluetooth: hci0: command 0x1009 tx timeout [ 1016.028163][T16785] loop2: detected capacity change from 0 to 512 [ 1016.036266][T16783] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1016.046577][T16783] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1016.059147][T16783] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1016.078670][T16790] loop1: detected capacity change from 0 to 256 [ 1016.087587][T16790] FAT-fs (loop1): Unrecognized mount option "sh`´ÖqÔÝ¿š¹)ñ¨.ò~ortname=win95" or missing value [ 1016.090632][T16783] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1016.104835][T16783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1016.715248][T16261] attempt to access beyond end of device [ 1016.715248][T16261] loop0: rw=2049, want=45104, limit=40427 [ 1016.792352][T16803] loop0: detected capacity change from 0 to 2048 [ 1016.890358][T16803] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3784: bad orphan inode 8192 [ 1016.891842][T16806] loop2: detected capacity change from 0 to 512 [ 1016.900896][T16803] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1016.960618][T16810] loop1: detected capacity change from 0 to 512 [ 1017.292935][T16810] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1017.357294][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3785'. [ 1017.422007][T16818] loop4: detected capacity change from 0 to 256 [ 1017.428538][T16810] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 1017.606024][T16818] device veth0_vlan left promiscuous mode [ 1017.611927][T16818] device veth0_vlan entered promiscuous mode [ 1017.618808][T16818] device veth1_macvtap left promiscuous mode [ 1017.628441][T16818] device veth1_macvtap entered promiscuous mode [ 1017.673794][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1017.681521][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1017.689056][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1017.697580][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.704430][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.712374][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1017.720639][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1017.975834][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.982732][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.007814][T16827] loop2: detected capacity change from 0 to 2048 [ 1018.014228][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1018.023662][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1018.031806][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1018.040428][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1018.048460][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1018.056438][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1018.065463][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1018.079923][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1018.087740][T16827] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1018.088024][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1018.117039][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1018.130756][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1018.145540][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1018.160393][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1018.163584][ T300] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1018.183358][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1018.191909][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1018.200047][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1018.208141][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1018.216078][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1018.224639][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1018.233047][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1018.241178][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1018.249356][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1018.257126][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1018.264522][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1018.272950][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1018.288065][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1018.306877][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1018.361141][T16831] loop1: detected capacity change from 0 to 40427 [ 1018.406514][ T300] usb 5-1: Using ep0 maxpacket: 32 [ 1018.417397][T16831] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1018.423647][T16831] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1018.471338][T16831] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1018.565207][T16831] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1018.572174][T16831] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1018.576591][ T300] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1018.590618][ T300] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1018.599108][ T300] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1018.639463][ T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1018.649098][ T300] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1018.658631][ T300] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1018.671555][ T300] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1018.680424][ T300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.688786][ T300] usb 5-1: config 0 descriptor?? [ 1018.763397][T16840] attempt to access beyond end of device [ 1018.763397][T16840] loop1: rw=2049, want=53256, limit=40427 [ 1018.779214][T16840] attempt to access beyond end of device [ 1018.779214][T16840] loop1: rw=2049, want=53320, limit=40427 [ 1018.794737][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3791'. [ 1018.929086][T16739] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1018.948751][T16514] attempt to access beyond end of device [ 1018.948751][T16514] loop1: rw=2049, want=45104, limit=40427 [ 1018.968770][ T300] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1019.052610][T16848] loop2: detected capacity change from 0 to 512 [ 1020.091116][T16860] loop1: detected capacity change from 0 to 2048 [ 1020.400205][ T419] usb 5-1: USB disconnect, device number 62 [ 1020.406496][ C1] usblp0: nonzero read bulk status received: -71 [ 1020.464602][T16860] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.3797: bad orphan inode 8192 [ 1020.491233][T16860] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1020.508298][T16863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.526675][T16863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.541263][T16863] device bridge_slave_0 entered promiscuous mode [ 1020.552623][T16873] loop0: detected capacity change from 0 to 2048 [ 1020.582181][T16863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.597397][T16863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.613939][T16863] device bridge_slave_1 entered promiscuous mode [ 1020.621442][T16873] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3799: bad orphan inode 8192 [ 1020.837844][T16873] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1020.968445][T16880] loop2: detected capacity change from 0 to 512 [ 1021.030944][T16863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.037824][T16863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.044885][T16863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.051792][T16863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.465503][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.473328][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.494925][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1021.538389][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1021.709231][T16890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3800'. [ 1021.721142][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1021.729822][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1021.738330][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.745200][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.753306][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1021.761601][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1021.770201][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.777078][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.796501][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1021.804494][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1021.833039][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1021.843918][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1021.854573][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1021.863080][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1021.896661][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1021.904886][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1021.913918][T16863] device veth0_vlan entered promiscuous mode [ 1021.927724][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1021.941198][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1021.960238][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1021.974998][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1021.992234][T16863] device veth1_macvtap entered promiscuous mode [ 1022.002227][ T353] device bridge_slave_1 left promiscuous mode [ 1022.008490][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.037608][T16819] usblp0: removed [ 1022.041387][ T353] device bridge_slave_0 left promiscuous mode [ 1022.056075][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.074280][ T353] device veth1_macvtap left promiscuous mode [ 1022.087047][ T353] device veth0_vlan left promiscuous mode [ 1022.106564][T10652] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1022.269612][T16899] loop1: detected capacity change from 0 to 40427 [ 1022.282050][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1022.291453][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 1022.300396][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1022.315975][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1022.322500][T16899] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1022.330823][T16899] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1022.354473][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1022.367100][T10652] usb 3-1: Using ep0 maxpacket: 32 [ 1022.376364][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1022.387033][T16899] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1022.402974][T16909] loop3: detected capacity change from 0 to 512 [ 1022.426837][T16899] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1022.437204][T16899] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1022.486591][T10652] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1022.497966][T10652] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1022.516229][T10652] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1022.539222][T10652] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1022.554425][T10652] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1022.629539][T16912] attempt to access beyond end of device [ 1022.629539][T16912] loop1: rw=2049, want=53256, limit=40427 [ 1022.667630][T16912] attempt to access beyond end of device [ 1022.667630][T16912] loop1: rw=2049, want=53320, limit=40427 [ 1022.712746][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3805'. [ 1022.846056][T10652] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1022.859396][T10652] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1022.868339][T10652] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.889168][T10652] usb 3-1: config 0 descriptor?? [ 1022.894454][T16514] attempt to access beyond end of device [ 1022.894454][T16514] loop1: rw=2049, want=45104, limit=40427 [ 1023.157251][T10652] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1023.237831][T10797] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1023.266590][ T4887] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1023.666000][ T9835] usb 3-1: USB disconnect, device number 74 [ 1023.676546][ C1] usblp0: nonzero read bulk status received: -108 [ 1023.846644][T10797] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1023.857357][ T4887] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1023.868046][T10797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1023.878798][ T4887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1023.889555][T10797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.899459][ T4887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.909065][ T4887] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1023.921892][T10797] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1023.934755][ T4887] usb 2-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 1023.943638][T10797] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 1023.952492][ T4887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.960385][T10797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.970069][T10797] usb 1-1: config 0 descriptor?? [ 1023.975049][ T4887] usb 2-1: config 0 descriptor?? [ 1024.111296][T16928] loop3: detected capacity change from 0 to 2048 [ 1024.167995][T16928] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3811: bad orphan inode 8192 [ 1024.178356][T16928] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1024.450358][T10652] Bluetooth: hci0: command 0x1003 tx timeout [ 1024.456227][T15357] Bluetooth: hci0: sending frame failed (-49) [ 1024.463162][ T4887] thrustmaster 0003:044F:B324.0041: unknown main item tag 0x1 [ 1024.471215][T10797] thrustmaster 0003:044F:B324.0042: unknown main item tag 0x1 [ 1024.478594][ T4887] thrustmaster 0003:044F:B324.0041: item fetching failed at offset 5/7 [ 1024.486676][T10797] thrustmaster 0003:044F:B324.0042: item fetching failed at offset 5/7 [ 1024.494766][ T4887] thrustmaster 0003:044F:B324.0041: parse failed [ 1024.501090][T10797] thrustmaster 0003:044F:B324.0042: parse failed [ 1024.507272][ T4887] thrustmaster: probe of 0003:044F:B324.0041 failed with error -22 [ 1024.514978][T10797] thrustmaster: probe of 0003:044F:B324.0042 failed with error -22 [ 1024.667096][ T9835] usb 1-1: USB disconnect, device number 67 [ 1024.667637][ T4887] usb 2-1: USB disconnect, device number 62 [ 1024.913083][T16923] usblp0: removed [ 1025.031717][T16937] loop2: detected capacity change from 0 to 512 [ 1025.049761][T16939] loop3: detected capacity change from 0 to 512 [ 1025.201949][T16942] loop1: detected capacity change from 0 to 512 [ 1026.540924][ T300] Bluetooth: hci0: command 0x1001 tx timeout [ 1026.603991][T15357] Bluetooth: hci0: sending frame failed (-49) [ 1027.514677][T16967] loop2: detected capacity change from 0 to 2048 [ 1027.570238][T16971] loop3: detected capacity change from 0 to 2048 [ 1027.628422][T16971] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3823: bad orphan inode 8192 [ 1027.643089][T16967] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3822: bad orphan inode 8192 [ 1027.645109][T16955] loop0: detected capacity change from 0 to 40427 [ 1027.653628][T16967] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1027.659906][T16971] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1028.375427][T16955] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1028.633505][ T4093] Bluetooth: hci0: command 0x1009 tx timeout [ 1028.672920][T16955] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1028.686699][ T30] audit: type=1400 audit(1729013245.279:597): avc: denied { create } for pid=16987 comm="syz.1.3825" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1028.787158][ T30] audit: type=1400 audit(1729013245.349:598): avc: denied { mounton } for pid=16987 comm="syz.1.3825" path="/19/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1028.810258][ T30] audit: type=1400 audit(1729013245.359:599): avc: denied { unlink } for pid=16514 comm="syz-executor" name="file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1028.835092][T16955] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1028.878127][T16955] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1028.885072][T16955] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1029.337106][T17004] attempt to access beyond end of device [ 1029.337106][T17004] loop0: rw=2049, want=53256, limit=40427 [ 1029.546821][T17004] attempt to access beyond end of device [ 1029.546821][T17004] loop0: rw=2049, want=53320, limit=40427 [ 1029.561275][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3818'. [ 1029.964741][T17006] loop2: detected capacity change from 0 to 2048 [ 1030.061314][T17006] Alternate GPT is invalid, using primary GPT. [ 1030.067754][T17006] loop2: p1 p2 p3 [ 1030.153272][T17009] loop3: detected capacity change from 0 to 512 [ 1030.161963][T16261] attempt to access beyond end of device [ 1030.161963][T16261] loop0: rw=2049, want=45104, limit=40427 [ 1030.167930][ T101] Alternate GPT is invalid, using primary GPT. [ 1030.179167][ T101] loop2: p1 p2 p3 [ 1030.216605][T10797] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1031.150187][ T339] udevd[339]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1031.155375][T17022] loop3: detected capacity change from 0 to 512 [ 1031.163636][ T314] udevd[314]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1031.168859][ T329] udevd[329]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1031.379404][T10797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.401588][T10797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.411325][T10797] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1031.423113][ T329] udevd[329]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1031.423391][ T2199] udevd[2199]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1031.433969][ T339] udevd[339]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1031.442161][T10797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.460424][T10797] usb 2-1: config 0 descriptor?? [ 1032.005124][T10797] lg-g15 0003:046D:C222.0043: unknown main item tag 0x0 [ 1032.014588][T10797] lg-g15 0003:046D:C222.0043: item fetching failed at offset 10/11 [ 1032.022977][T10797] lg-g15: probe of 0003:046D:C222.0043 failed with error -22 [ 1032.449224][T17041] loop0: detected capacity change from 0 to 2048 [ 1032.479041][ T4887] usb 2-1: USB disconnect, device number 63 [ 1032.505942][T17041] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3838: bad orphan inode 8192 [ 1032.521363][T17041] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1032.608951][T17046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.615885][T17046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.623363][T17046] device bridge_slave_0 entered promiscuous mode [ 1032.630602][T17046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.637647][T17046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.645023][T17046] device bridge_slave_1 entered promiscuous mode [ 1032.936117][T17046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.943013][T17046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.950118][T17046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.956884][T17046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.011376][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1033.020636][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.031734][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.033961][T17056] loop3: detected capacity change from 0 to 512 [ 1033.062575][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1033.071226][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.078104][ T456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.330099][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1033.338710][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.345586][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.353649][T17056] EXT4-fs (loop3): 1 orphan inode deleted [ 1033.359301][T17056] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 1033.380518][T17056] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 1033.396148][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1033.407671][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1033.429636][T17046] device veth0_vlan entered promiscuous mode [ 1033.442823][T17046] device veth1_macvtap entered promiscuous mode [ 1033.462532][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1033.471844][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1033.480525][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1033.488373][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1033.495557][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1033.503164][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1033.523301][T17066] loop0: detected capacity change from 0 to 512 [ 1033.535861][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1033.759516][T17070] loop4: detected capacity change from 0 to 2048 [ 1033.790474][T17070] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1033.847327][ T6818] device bridge_slave_1 left promiscuous mode [ 1033.968504][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.980532][ T6818] device bridge_slave_0 left promiscuous mode [ 1034.081049][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.143559][ T6818] device veth1_macvtap left promiscuous mode [ 1034.149432][ T6818] device veth0_vlan left promiscuous mode [ 1034.201582][T17078] loop2: detected capacity change from 0 to 512 [ 1034.237367][T17082] loop1: detected capacity change from 0 to 512 [ 1034.265442][T17078] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.3846: corrupted inode contents [ 1034.280458][T17078] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #3: comm syz.2.3846: mark_inode_dirty error [ 1034.295618][T17078] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #3: comm syz.2.3846: corrupted inode contents [ 1034.338003][T17078] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.3846: mark_inode_dirty error [ 1034.583944][T17078] Quota error (device loop2): write_blk: dquota write failed [ 1034.601528][T17078] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1034.621687][T17078] EXT4-fs error (device loop2): ext4_acquire_dquot:6187: comm syz.2.3846: Failed to acquire dquot type 0 [ 1034.640661][T17078] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.3846: corrupted inode contents [ 1034.659808][T17078] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #16: comm syz.2.3846: mark_inode_dirty error [ 1034.676743][T17078] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.3846: corrupted inode contents [ 1034.757201][T17078] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.3846: mark_inode_dirty error [ 1034.800122][T17078] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.3846: corrupted inode contents [ 1034.854639][T17078] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1034.904051][T17078] EXT4-fs error (device loop2): ext4_do_update_inode:5205: inode #16: comm syz.2.3846: corrupted inode contents [ 1034.927329][T17078] EXT4-fs error (device loop2): ext4_truncate:4303: inode #16: comm syz.2.3846: mark_inode_dirty error [ 1034.938524][T17078] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1034.948282][T17078] EXT4-fs (loop2): 1 truncate cleaned up [ 1034.953862][T17078] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1034.965375][T17078] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038 (0x7fffffff) [ 1035.036707][T17046] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1035.113653][T17098] loop1: detected capacity change from 0 to 512 [ 1035.352786][ T4887] ================================================================== [ 1035.360678][ T4887] BUG: KASAN: use-after-free in kernfs_get+0x5c/0x90 [ 1035.367184][ T4887] Write of size 4 at addr ffff88812f522e10 by task kworker/0:7/4887 [ 1035.375079][ T4887] [ 1035.377253][ T4887] CPU: 0 PID: 4887 Comm: kworker/0:7 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 1035.387059][ T4887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1035.396957][ T4887] Workqueue: events flush_stashed_error_work [ 1035.402778][ T4887] Call Trace: [ 1035.405906][ T4887] [ 1035.408669][ T4887] dump_stack_lvl+0x151/0x1c0 [ 1035.413275][ T4887] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1035.418739][ T4887] ? panic+0x760/0x760 [ 1035.422645][ T4887] print_address_description+0x87/0x3b0 [ 1035.428115][ T4887] kasan_report+0x179/0x1c0 [ 1035.432538][ T4887] ? kernfs_get+0x5c/0x90 [ 1035.436713][ T4887] ? kernfs_get+0x5c/0x90 [ 1035.440875][ T4887] kasan_check_range+0x293/0x2a0 [ 1035.445647][ T4887] __kasan_check_write+0x14/0x20 [ 1035.450426][ T4887] kernfs_get+0x5c/0x90 [ 1035.454416][ T4887] sysfs_notify+0x9a/0xd0 [ 1035.458576][ T4887] ext4_notify_error_sysfs+0x25/0x30 [ 1035.463791][ T4887] flush_stashed_error_work+0x302/0x320 [ 1035.469172][ T4887] ? strscpy+0x9c/0x260 [ 1035.473163][ T4887] process_one_work+0x6bb/0xc10 [ 1035.477852][ T4887] worker_thread+0xad5/0x12a0 [ 1035.482452][ T4887] kthread+0x421/0x510 [ 1035.486355][ T4887] ? worker_clr_flags+0x180/0x180 [ 1035.491215][ T4887] ? kthread_blkcg+0xd0/0xd0 [ 1035.495642][ T4887] ret_from_fork+0x1f/0x30 [ 1035.499897][ T4887] [ 1035.502759][ T4887] [ 1035.504929][ T4887] Allocated by task 17070: [ 1035.509183][ T4887] __kasan_slab_alloc+0xb1/0xe0 [ 1035.514001][ T4887] slab_post_alloc_hook+0x53/0x2c0 [ 1035.518947][ T4887] kmem_cache_alloc+0xf5/0x200 [ 1035.523555][ T4887] __kernfs_new_node+0xdb/0x700 [ 1035.528240][ T4887] kernfs_new_node+0x130/0x230 [ 1035.532832][ T4887] kernfs_create_dir_ns+0x44/0x130 [ 1035.537871][ T4887] sysfs_create_dir_ns+0x185/0x390 [ 1035.542818][ T4887] kobject_add_internal+0x763/0xd90 [ 1035.547852][ T4887] kobject_init_and_add+0x120/0x190 [ 1035.552887][ T4887] ext4_register_sysfs+0xbf/0x2c0 [ 1035.557748][ T4887] ext4_fill_super+0x8a31/0x96e0 [ 1035.562519][ T4887] mount_bdev+0x282/0x3b0 [ 1035.566688][ T4887] ext4_mount+0x34/0x40 [ 1035.570678][ T4887] legacy_get_tree+0xf1/0x190 [ 1035.575192][ T4887] vfs_get_tree+0x88/0x290 [ 1035.579446][ T4887] do_new_mount+0x2ba/0xb30 [ 1035.583793][ T4887] path_mount+0x671/0x1070 [ 1035.588038][ T4887] __se_sys_mount+0x2c4/0x3b0 [ 1035.592552][ T4887] __x64_sys_mount+0xbf/0xd0 [ 1035.596986][ T4887] x64_sys_call+0x49d/0x9a0 [ 1035.601322][ T4887] do_syscall_64+0x3b/0xb0 [ 1035.605572][ T4887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1035.611299][ T4887] [ 1035.613470][ T4887] Freed by task 17046: [ 1035.617380][ T4887] kasan_set_track+0x4b/0x70 [ 1035.621801][ T4887] kasan_set_free_info+0x23/0x40 [ 1035.626582][ T4887] ____kasan_slab_free+0x126/0x160 [ 1035.631614][ T4887] __kasan_slab_free+0x11/0x20 [ 1035.636209][ T4887] slab_free_freelist_hook+0xbd/0x190 [ 1035.641415][ T4887] kmem_cache_free+0x116/0x2e0 [ 1035.646018][ T4887] kernfs_put+0x392/0x520 [ 1035.650184][ T4887] __kobject_del+0x10f/0x300 [ 1035.654616][ T4887] kobject_del+0x45/0x60 [ 1035.658690][ T4887] ext4_unregister_sysfs+0x91/0xa0 [ 1035.663636][ T4887] ext4_put_super+0x80/0xd20 [ 1035.668062][ T4887] generic_shutdown_super+0x157/0x2e0 [ 1035.673270][ T4887] kill_block_super+0x7e/0xe0 [ 1035.677787][ T4887] deactivate_locked_super+0xad/0x110 [ 1035.682993][ T4887] deactivate_super+0xbe/0xf0 [ 1035.687507][ T4887] cleanup_mnt+0x45c/0x510 [ 1035.691760][ T4887] __cleanup_mnt+0x19/0x20 [ 1035.696009][ T4887] task_work_run+0x129/0x190 [ 1035.700436][ T4887] exit_to_user_mode_loop+0xc4/0xe0 [ 1035.705595][ T4887] exit_to_user_mode_prepare+0x5a/0xa0 [ 1035.710881][ T4887] syscall_exit_to_user_mode+0x26/0x160 [ 1035.716268][ T4887] do_syscall_64+0x47/0xb0 [ 1035.720519][ T4887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1035.726331][ T4887] [ 1035.728500][ T4887] The buggy address belongs to the object at ffff88812f522e10 [ 1035.728500][ T4887] which belongs to the cache kernfs_node_cache of size 136 [ 1035.743018][ T4887] The buggy address is located 0 bytes inside of [ 1035.743018][ T4887] 136-byte region [ffff88812f522e10, ffff88812f522e98) [ 1035.756036][ T4887] The buggy address belongs to the page: [ 1035.761518][ T4887] page:ffffea0004bd4880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12f522 [ 1035.771665][ T4887] flags: 0x4000000000000200(slab|zone=1) [ 1035.777139][ T4887] raw: 4000000000000200 ffffea00045ae240 0000000500000005 ffff8881001cde00 [ 1035.785558][ T4887] raw: 0000000000000000 0000000000140014 00000001ffffffff 0000000000000000 [ 1035.793967][ T4887] page dumped because: kasan: bad access detected [ 1035.800226][ T4887] page_owner tracks the page as allocated [ 1035.805771][ T4887] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 15624, ts 943685718956, free_ts 936160464234 [ 1035.821830][ T4887] post_alloc_hook+0x1a3/0x1b0 [ 1035.826426][ T4887] prep_new_page+0x1b/0x110 [ 1035.830856][ T4887] get_page_from_freelist+0x3550/0x35d0 [ 1035.836232][ T4887] __alloc_pages+0x27e/0x8f0 [ 1035.840675][ T4887] new_slab+0x9a/0x4e0 [ 1035.844652][ T4887] ___slab_alloc+0x39e/0x830 [ 1035.849079][ T4887] __slab_alloc+0x4a/0x90 [ 1035.853246][ T4887] kmem_cache_alloc+0x134/0x200 [ 1035.857932][ T4887] __kernfs_new_node+0xdb/0x700 [ 1035.862619][ T4887] kernfs_new_node+0x130/0x230 [ 1035.867219][ T4887] __kernfs_create_file+0x4a/0x270 [ 1035.872166][ T4887] sysfs_add_file_mode_ns+0x273/0x320 [ 1035.877374][ T4887] internal_create_group+0x573/0xf00 [ 1035.882496][ T4887] sysfs_create_groups+0x5b/0x130 [ 1035.887356][ T4887] device_add_attrs+0x8b/0x490 [ 1035.892042][ T4887] device_add+0x5f7/0xf10 [ 1035.896211][ T4887] page last free stack trace: [ 1035.900725][ T4887] free_unref_page_prepare+0x7c8/0x7d0 [ 1035.906015][ T4887] free_unref_page+0xe8/0x750 [ 1035.910531][ T4887] __free_pages+0x61/0xf0 [ 1035.914698][ T4887] __vunmap+0x7bc/0x8f0 [ 1035.918690][ T4887] vfree+0x7f/0xb0 [ 1035.922248][ T4887] __do_replace+0xa13/0xc90 [ 1035.926587][ T4887] do_arpt_set_ctl+0x1088/0x15c0 [ 1035.931363][ T4887] nf_setsockopt+0x274/0x2a0 [ 1035.935786][ T4887] ip_setsockopt+0x2ae7/0x4730 [ 1035.940387][ T4887] udp_setsockopt+0x8f/0xa0 [ 1035.944728][ T4887] sock_common_setsockopt+0xa2/0xc0 [ 1035.950109][ T4887] __sys_setsockopt+0x4dc/0x840 [ 1035.954794][ T4887] __x64_sys_setsockopt+0xbf/0xd0 [ 1035.959658][ T4887] x64_sys_call+0x1a2/0x9a0 [ 1035.963996][ T4887] do_syscall_64+0x3b/0xb0 [ 1035.968250][ T4887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1035.973977][ T4887] [ 1035.976151][ T4887] Memory state around the buggy address: [ 1035.981626][ T4887] ffff88812f522d00: fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb [ 1035.989516][ T4887] ffff88812f522d80: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 1035.997414][ T4887] >ffff88812f522e00: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1036.005316][ T4887] ^ [ 1036.009739][ T4887] ffff88812f522e80: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb [ 1036.017638][ T4887] ffff88812f522f00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1036.025563][ T4887] ================================================================== [ 1036.033431][ T4887] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1036.343920][ T4887] general protection fault, probably for non-canonical address 0xf3c3fc294000085c: 0000 [#1] PREEMPT SMP KASAN [ 1036.355595][ T4887] KASAN: maybe wild-memory-access in range [0x9e20014a000042e0-0x9e20014a000042e7] [ 1036.364661][ T4887] CPU: 0 PID: 4887 Comm: kworker/0:7 Tainted: G B 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 1036.375945][ T4887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1036.385840][ T4887] Workqueue: events flush_stashed_error_work [ 1036.391743][ T4887] RIP: 0010:kernfs_find_and_get_ns+0x52/0x110 [ 1036.397838][ T4887] Code: 08 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 05 e8 74 29 d5 ff 49 8b 5d 08 48 85 db 49 0f 44 dd 48 83 c3 50 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 4f 29 d5 ff 4c 8b 33 49 83 c6 68 [ 1036.417275][ T4887] RSP: 0018:ffffc900007cfc58 EFLAGS: 00010a07 [ 1036.423173][ T4887] RAX: 13c400294000085c RBX: 9e20014a000042e6 RCX: ffffffff81dd7fec [ 1036.430984][ T4887] RDX: 0000000000000000 RSI: 0000000000000292 RDI: ffff88812f522e18 [ 1036.438797][ T4887] RBP: ffffc900007cfc80 R08: ffffffff8141997b R09: 0000000000000003 [ 1036.446695][ T4887] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: ffffffff858f1260 [ 1036.454521][ T4887] R13: ffff88812f522e10 R14: dffffc0000000000 R15: 0000000000000000 [ 1036.462317][ T4887] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1036.471085][ T4887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1036.477509][ T4887] CR2: 00007f2b3ebd1b58 CR3: 000000010f38b000 CR4: 00000000003506b0 [ 1036.485321][ T4887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1036.493130][ T4887] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1036.500941][ T4887] Call Trace: [ 1036.504063][ T4887] [ 1036.506844][ T4887] ? __die_body+0x62/0xb0 [ 1036.511020][ T4887] ? die_addr+0x9f/0xd0 [ 1036.515003][ T4887] ? exc_general_protection+0x311/0x4b0 [ 1036.520391][ T4887] ? asm_exc_general_protection+0x27/0x30 [ 1036.525938][ T4887] ? check_panic_on_warn+0x5b/0xb0 [ 1036.530882][ T4887] ? kernfs_find_and_get_ns+0x3c/0x110 [ 1036.536192][ T4887] ? kernfs_find_and_get_ns+0x52/0x110 [ 1036.541513][ T4887] ? kernfs_find_and_get_ns+0x3c/0x110 [ 1036.546770][ T4887] sysfs_notify+0x73/0xd0 [ 1036.550937][ T4887] ext4_notify_error_sysfs+0x25/0x30 [ 1036.556055][ T4887] flush_stashed_error_work+0x302/0x320 [ 1036.561438][ T4887] ? strscpy+0x9c/0x260 [ 1036.565633][ T4887] process_one_work+0x6bb/0xc10 [ 1036.570289][ T4887] worker_thread+0xad5/0x12a0 [ 1036.574808][ T4887] kthread+0x421/0x510 [ 1036.578706][ T4887] ? worker_clr_flags+0x180/0x180 [ 1036.583568][ T4887] ? kthread_blkcg+0xd0/0xd0 [ 1036.587996][ T4887] ret_from_fork+0x1f/0x30 [ 1036.592249][ T4887] [ 1036.595110][ T4887] Modules linked in: [ 1036.600043][ T4887] ---[ end trace 77ccb5d825a64ebe ]--- [ 1036.605310][ T4887] RIP: 0010:kernfs_find_and_get_ns+0x52/0x110 [ 1036.611239][ T4887] Code: 08 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 05 e8 74 29 d5 ff 49 8b 5d 08 48 85 db 49 0f 44 dd 48 83 c3 50 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 4f 29 d5 ff 4c 8b 33 49 83 c6 68 [ 1036.633322][ T4887] RSP: 0018:ffffc900007cfc58 EFLAGS: 00010a07 [ 1036.639454][ T4887] RAX: 13c400294000085c RBX: 9e20014a000042e6 RCX: ffffffff81dd7fec [ 1036.647593][ T4887] RDX: 0000000000000000 RSI: 0000000000000292 RDI: ffff88812f522e18 [ 1036.655379][ T4887] RBP: ffffc900007cfc80 R08: ffffffff8141997b R09: 0000000000000003 [ 1036.679666][ T4887] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: ffffffff858f1260 [ 1036.688721][ T4887] R13: ffff88812f522e10 R14: dffffc0000000000 R15: 0000000000000000 [ 1036.699833][ T4887] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1036.708646][ T4887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1036.715025][ T4887] CR2: 00007f2b3ebd1b58 CR3: 000000010c10e000 CR4: 00000000003506b0 [ 1036.722938][ T4887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1036.730701][ T4887] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1036.738553][ T4887] Kernel panic - not syncing: Fatal exception [ 1036.744560][ T4887] Kernel Offset: disabled [ 1036.748718][ T4887] Rebooting in 86400 seconds..