last executing test programs: 15.688318416s ago: executing program 3 (id=1327): io_uring_setup(0x1e0b, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554", 0x1e) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14}}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x100000530) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003940)=""/9, 0x9}, {&(0x7f0000000980)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x0, 0x0) 14.554218132s ago: executing program 1 (id=1331): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xf, 0x2a4, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0xa, 0x300) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000740), 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040004000000000008000000", @ANYRES32=0xee01, @ANYBLOB="100003000000000020"], 0x2c, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x7, &(0x7f00000001c0)='dirsync\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x1c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0x44, 0x4, 0x440, 0xffffffff, 0xd0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@private2, @mcast2, [], [], 'hsr0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 12.959155077s ago: executing program 4 (id=1335): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x103e01, 0x0) syz_usb_disconnect(r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f0000000380)={0xa8, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8080}, 0x2800a044) close_range(r3, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3fc00, 0x0, 0xf0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) 12.388094125s ago: executing program 0 (id=1336): openat$audio(0xffffffffffffff9c, &(0x7f00000004c0), 0x40081, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x3800000000, 0x2001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x12141, 0x0) munmap(&(0x7f0000a49000/0x3000)=nil, 0x3000) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f00000003c0)='iso9660\x00', 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02f64703090000000000000000000000021a0100000000000000000b0000000005000500000000000a00000000000000fe80000000000000000000"], 0x48}, 0x1, 0x7}, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x3e9303) mkdir(0x0, 0x0) llistxattr(&(0x7f0000000580)='./bus\x00', 0x0, 0x2) 11.404768828s ago: executing program 0 (id=1337): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() inotify_init() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mkdir(0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) write$tun(r1, 0x0, 0x46) 11.362132601s ago: executing program 1 (id=1338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x300, 0x2}) accept4(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x4, "f3c492ea016503000000c708bde439d9edffdd00000000e4a6d85b005900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000200)={"fe0d1acce4a37ef94acd000200", r5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r6 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9", 0x3b, 0x0, 0x0, 0x0) kcmp(r6, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="330200007d00000005f2000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f"], 0x233) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c001fc91923a50930b05443b0edea295aebb2daf93425069bf0f76cf776b105a5fe"]) close_range(r2, 0xffffffffffffffff, 0x0) 10.31533597s ago: executing program 0 (id=1339): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x6, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000050000000c00018008000100", @ANYRES32=r5, @ANYBLOB="08000500000000000500020001000000050006"], 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000050000000c00018008000100", @ANYRES32=r8], 0x38}}, 0x0) 9.921561843s ago: executing program 3 (id=1340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = userfaultfd(0x80001) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000073f52f3bd79b06f2ff0000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) read(r6, &(0x7f0000000480)=""/134, 0x86) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000005c0)) r7 = userfaultfd(0x80001) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$TCFLSH(r10, 0x400455c8, 0x8) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 9.910728214s ago: executing program 1 (id=1341): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 9.385328638s ago: executing program 0 (id=1342): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tkill(r3, 0x2e) r4 = syz_open_dev$evdev(0x0, 0x28, 0x8000) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000000c0)={0x56, 0x9, 0x2, {0xfbff}, {0x6, 0x1000}, @ramp={0x9, 0x0, {0x6e1, 0x4d, 0x2, 0x4}}}) ptrace$peeksig(0x4209, r3, &(0x7f0000000340)={0x4000000000, 0x1, 0x2}, &(0x7f0000000480)=[{}, {}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup3(r1, 0xffffffffffffffff, 0x0) recvmmsg$unix(r5, &(0x7f0000001b40)=[{{&(0x7f0000001640), 0x6e, 0x0}}], 0x1, 0x2100, &(0x7f0000001bc0)={0x0, 0x3938700}) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 8.378731573s ago: executing program 3 (id=1343): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x782, &(0x7f0000000f40)="$eJzs3c9rXNUeAPDvnfxs2veSBw/eq6uAoIHSiamxVRCsuBDBQkHXtmEyDTWTTMlMShMCtojgRlBxIeima3/UnVt/bHXj3+BCWqqmxYoLidz50U47M+mkzcwo+Xzgzpxz75059zvnnnPPzL3MDWDPmkwfMhEHI+LdJGK8Nj+JiKFKajDieHW9W5sbuXRKYmvrlV+Syjo3Nzdy0fCa1P5a5v8R8c1bEYcyzeWW1tYX5wqF/EotP11eOjddWls/fHZpbiG/kF8+OjM7e+TYU8eO7l6sv32/fuDaey8+/vnxP97835V3vk3ieByoLWuMY7dMxmTtMxlKP8K7vLDbhfVZ0u8N4IGkTXOg2srjYIzHwDY1+VxPtwwA6JY3ImILANhjEsd/ANhj6r8D3NzcyNWn/v4i0VvXn4+I0Wr89fOb1SWD1XN2P4xWzoOO3Uwq50jqkoiY2IXyJyPi4y9f+zSdokvnIQFauXgpIk5PTDb3/0nTNQs79UQH60zek9f/Qe98lY5/nm41/svU2v9o5fHe8c9Ii7b7IO7f/jNX78oO7UKhDdLx37MN17bdaoi/ZmKglvtXZcw3lJw5W8infdu/I2IqhkbS/Mw2ZUzd+PNGu2WN479f33/9k7T89PnOGpmrgyN3v2Z+rjz3MDE3un4p4pHBVvEnt+s/aTP+PdlhGS898/ZH7Zal8afx1qfm+Ltr63LEYy3r/851UMm21ydOV3aH6fpO0cIXP3441q78xvpPp7T8+neBXkjrf2z7+CeSxus1Szsv47vL41+3W3b/+Fvv/8PJq5X0cG3ehblyeWUmYjh5uXn+kTuvrefr66fxTz3auv1vt/+n3dDpDuMfvPbzZw8ef3el8c/vqP53nrhya3GgXfmd1f9sJTVVm9Pc/w02vW+nG/iwnx8AAAAAAAAAAAAAAAAAAAAAAAAAdCITEQciyWRvpzOZbLZ6D+//xlimUCyVD50pri7PR+Ve2RMxlKn/1eV4w/+hztT+D7+eP3JP/smI+E9EfDCyr5LP5oqF+X4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1+9vc/z/100i/tw4A6JrRfm8AANBzjv8AsPe0Of4Pt569r6vbAgD0hu//ALD3OP4DwN7j+A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECXnTxxIp22ft/cyKX5+fNrq4vF84fn86XF7NJqLpsrrpzLLhSLC4V8NldcavtGF6tPhWLx3Gwsr16YLudL5enS2vqppeLqcvnU2aW5hfyp/FDPIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzpXW1hfnCoX8ioSExD8sMRIR3SqisZfY178OCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBv7q8AAAD//w5sKkc=") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x803, 0x0, 0x0, 0x40000000}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 8.30257804s ago: executing program 4 (id=1344): r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x4008800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r6, r5) read$FUSE(r3, &(0x7f00000045c0)={0x2020}, 0x2020) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x8, 0x0, [{}, {}, {0x0, 0x20}], 0x0, 0x0, 0x8}}) r7 = io_uring_setup(0x5091, &(0x7f0000000040)={0x0, 0x2, 0x2}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$TCFLSH(r9, 0x5608, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) 8.30176331s ago: executing program 0 (id=1345): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) creat(0x0, 0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x17b, &(0x7f0000000300)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b704000005000000850000001c000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.961720023s ago: executing program 4 (id=1348): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xf, 0x2a4, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0xa, 0x300) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000740), 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040004000000000008000000", @ANYRES32=0xee01, @ANYBLOB="100003000000000020"], 0x2c, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x7, &(0x7f00000001c0)='dirsync\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x1c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0x44, 0x4, 0x440, 0xffffffff, 0xd0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@private2, @mcast2, [], [], 'hsr0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.894547292s ago: executing program 3 (id=1349): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r0, 0x0, 0x8000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x4002, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_lower}]}, 0x1, 0x227, &(0x7f0000001980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1000002, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) 5.308773062s ago: executing program 0 (id=1350): io_uring_setup(0x1e0b, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554", 0x1e) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14}}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x100000530) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003940)=""/9, 0x9}, {&(0x7f0000000980)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x0, 0x0) 5.189920132s ago: executing program 1 (id=1351): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x300, 0x2}) accept4(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x4, "f3c492ea016503000000c708bde439d9edffdd00000000e4a6d85b005900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000200)={"fe0d1acce4a37ef94acd000200", r5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r6 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9", 0x3b, 0x0, 0x0, 0x0) kcmp(r6, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="330200007d00000005f2000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f"], 0x233) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c001fc91923a50930b05443b0edea295aebb2daf93425069bf0f76cf776b105a5fe"]) close_range(r2, 0xffffffffffffffff, 0x0) 4.423571557s ago: executing program 2 (id=1352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 4.350800683s ago: executing program 2 (id=1353): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000900)='./bus\x00', 0x0) r1 = socket(0x2, 0x3, 0x100000001) r2 = open(0x0, 0x40c5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000ffffffff181100", @ANYRES32, @ANYBLOB="0000001d0d8b16a6c583fc0014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000db4dfc95000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4, 0x4}, [@ldst={0x3, 0x0, 0x0, 0x1c10a1}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x90) sendmsg$netlink(r7, &(0x7f0000007900)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1402000019000100000000000000000002020080140001"], 0x214}], 0x1}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@mcast2}}, 0xe8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) 3.7911525s ago: executing program 1 (id=1354): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x103e01, 0x0) syz_usb_disconnect(r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f0000000380)={0xa8, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8080}, 0x2800a044) close_range(r3, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3fc00, 0x0, 0xf0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) 3.273435364s ago: executing program 2 (id=1355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = userfaultfd(0x80001) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000073f52f3bd79b06f2ff0000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) read(r6, &(0x7f0000000480)=""/134, 0x86) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000005c0)) r7 = userfaultfd(0x80001) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$TCFLSH(r10, 0x400455c8, 0x8) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 3.079744471s ago: executing program 4 (id=1356): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[], 0xffdd) 2.312936795s ago: executing program 2 (id=1357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x0) recvmmsg(r3, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.061058826s ago: executing program 4 (id=1358): r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x4008800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r6, r5) read$FUSE(r3, &(0x7f00000045c0)={0x2020}, 0x2020) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x8, 0x0, [{}, {}, {0x0, 0x20}], 0x0, 0x0, 0x8}}) r7 = io_uring_setup(0x5091, &(0x7f0000000040)={0x0, 0x2, 0x2}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$TCFLSH(r9, 0x5608, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) 1.327571508s ago: executing program 2 (id=1359): clock_gettime(0x1, &(0x7f00000004c0)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000580)={{r0, r1/1000+60000}, {0x0, 0x2710}}, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(0xffffffffffffffff) r2 = inotify_init1(0x800) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r3 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1.081006959s ago: executing program 3 (id=1360): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/45, 0x2d, 0x20, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r4, 0x0, 0x0) 763.708076ms ago: executing program 4 (id=1361): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 83.648813ms ago: executing program 2 (id=1362): openat$audio(0xffffffffffffff9c, &(0x7f00000004c0), 0x40081, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x3800000000, 0x2001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x12141, 0x0) munmap(&(0x7f0000a49000/0x3000)=nil, 0x3000) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f00000003c0)='iso9660\x00', 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02f64703090000000000000000000000021a0100000000000000000b0000000005000500000000000a00000000000000fe80000000000000000000"], 0x48}, 0x1, 0x7}, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x3e9303) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) llistxattr(0x0, 0x0, 0x0) 7.33654ms ago: executing program 1 (id=1363): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x782, &(0x7f0000000f40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x803, 0x0, 0x0, 0x40000000}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 3 (id=1364): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) inotify_init1(0x800) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x400) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$eJzs3E1rY9UfB/CTdjqdp//8i7hwNxcGoYVJmPRh0F3VGXzADsWHhStNkzRkJsktTZrWrly4FBe+Djei4Mql+BIEXbsTF4o7Qck9pzIdFdRmkqn9fOD2e+/JzS+/E0rLuQk3AGfWQvbzj6VwNVwMIcyGEK6EUOyX0lZYj/FUCOFaCGHmga2Uxn8fOB9CuBRCuDoqHmuW0kMf3RheX/vhlZ+++Hr+3OVPPv92erMGpu3pEEJ3J+7vd2PmrZj30nht2C6yuzpMGR/o3k/Hecz95lZRYb92dF6tyJVWPD/f2euPcrtTq4+y1d4uxnd68QX7w9ZRneIJ92q7xXGjuVVku58X2TqMfR0cxr9th/1BrNNI9d4tyofB4CjjePOgGeczf7/Iem+QxmPdvNE8GOUwZXq5UM87jaKPrZO804+3V9u9vYNs2Nztt/NetlapPlOp3ipXd/NGc9BcLde6jVur2WKrMzqtPGjWuuutPG91mpV63l3KFlv1erlazRZvN7fatV5WrVZWKjfLa0tp70b24t03s04jWxzl8+3e3qDd6Wfb+W4Wn7GULVdWnl3Krlez1zc2s83X7tzZ2Hzj7dtv3X1u4+UX0kl/aCtbXL65vFyu3iwvV5dO7/xH/+v/0fzfT02Pcf5wIqVpNwBw+lj/A5P28VcxT/P6P/yb9f+O9f/DrP/P9vzhRKz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrO/mPn2p2FmIx5fT+P/S0BPpuBRCmAkh/PonZsP5YzVnU525vzh/7qEeviyFosLoNebTdimEsJ62X/7/qN8FAAAA+O/67L1rH8bVevyxMO2GmKR40WbmyjtjqlcKIcwtfD+GKiFdbApPnryraPT7fS4cjKlacQHrwpiKxUtu58ZV7W+ZPRYXHohSjJmJtgMAAEzE8ZXAZFchAAAATNIH026A6Sg+aU3fxU9f4J+PkT4QvHjsCAAAADiFStNuAAAAAHjkivX/43P/v2+Kfff/AwAAgPGK9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNnfvJSR2K4gB8Wuh7vD9GYpy7FWewDFdgHDo0LMBNsATcghtgDThzCQYMbYnWYKLhto3k+5K23Bvy45QwOfeSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmp2Ixfbi7uD80Z705TJq7AQAAAPZZFYtp+WJcjf/V8yf11Fk9ziIij4h9vfsgfjUyB3VO8cn7iw81PEaUCdvP+F0ffyPisj5eTtv+FgAAAOB4LWfzSdWtV6dx3wXRpWrRJv9/lSgvi4hi/JwoLd+ezhOFlb/vYdwmSisXsEaJwqolt2GqtC8ZNC6jd5esuuSdlgMAAHSi2Ql024UAAADQpZu+C6AfWey2Mnd7weU/7982BP80RgAAAMAPlPVdAAAAANC6sv/3/D8AAAA4btXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTqlhMl7P5pDF5/f2c9eYw6e4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQUNjkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf3dnZ2urYoySQ0QUPOjFptva2qsHJXjwTxBCuq3RrT/aHGwpQi7eJOdeRI8ighJv/R96bqGXeuthDxU89VCZ2ZnkdS24WjqzST4fePO+Mwzzvm8SQr7zZhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDa+L29OCs2C5O4Wx27df/aetHfnuoLN7bvLBetiDtNJr0PPHgYr6b7naX2cgEAAODwyOr6PiLu5jurRd9dKOv/vD6nqPl/eH4S1/X8dN1f93XtX7Tff7v38u5AC5Nxioue3xgNT/wzld7Tm+V8e+Ffz+iVd7589pKVP5Duh1svjfPyfna+u3nz/X4ZHmkiWwDg/zhe91VQ/z9U9IM2EwPg0OglhXdd/2cL7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IT+Vjxbx52IWO7txYXb96+tl/3U/o3tO8t1O3P9+nZ6zeISeUSc3xgNTzQ1kX3g8pWrn62NRsNLzQevRUR7o1fBxzOcE9FmhoInDbrV7/q85LM/gpb/MAEAcODkVSvq+rv5zmpxrLMY8fDHR+v/N5M40vp/qk/r/3ufnLmVjpXW/4PGZjj/VjYvfrly+crVtzcurl0YXhh+/s7JwbuDU2dPnz67Uj4rWfHEBAAAgCfTr1pa/3cXI8ZT6//HkjhmrP+/+n7wTTpWpv5/rL1Fv7YzAQAAONxefP2vPzuPOd7p9+Prtc3NS4PJdnf/5GTbQqr/2ZGqpfV/tth2VgAAAEATxludR9b/zyVxzLj+/9xPr/ySXjOLiKPV+v/x9S9G55qbTksezHRWEx8nfupTBQAAYK4drVq6/p+X7/93d1956EbEW29M4uprAGeq/7MPvv05HSt9//9Uc1OcS92lyf0o+6WI3lLbGQEAAHCQPVO1otj/I99Z/fTXYx/1vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//+xhkJ5") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_remount}]}, 0xfe, 0x492, &(0x7f0000000f00)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x60000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) close_range(r1, r1, 0x2) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3={0x3000000, [{}, {0x0, 0x2000000}]}, 0x18, 0x0) lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) kernel console output (not intermixed with test programs): ready [ 421.107641][ T7942] 9pnet: Insufficient options for proto=fd [ 422.490716][ T7964] loop0: detected capacity change from 0 to 256 [ 422.569679][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.585439][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.614992][ T7823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.787694][ T3650] device hsr_slave_0 left promiscuous mode [ 422.809602][ T7970] xt_SECMARK: invalid mode: 0 [ 422.831136][ T3650] device hsr_slave_1 left promiscuous mode [ 422.889291][ T3650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.104674][ T7944] loop1: detected capacity change from 0 to 40427 [ 423.121824][ T3650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.136991][ T3650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.145559][ T3650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.154131][ T3650] device bridge_slave_1 left promiscuous mode [ 423.160474][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.170051][ T3650] device bridge_slave_0 left promiscuous mode [ 423.176407][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.264449][ T7975] 9pnet_virtio: no channels available for device syz [ 423.379897][ T7944] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 423.792020][ T7944] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 423.863066][ T7974] loop3: detected capacity change from 0 to 1024 [ 423.870724][ T7944] F2FS-fs (loop1): invalid crc value [ 423.878988][ T7944] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 423.904820][ T3650] device veth1_macvtap left promiscuous mode [ 423.913754][ T3650] device veth0_macvtap left promiscuous mode [ 423.919936][ T7974] EXT4-fs (loop3): Ignoring removed orlov option [ 423.941414][ T7974] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 423.981244][ T3650] device veth1_vlan left promiscuous mode [ 423.987608][ T3650] device veth0_vlan left promiscuous mode [ 424.095303][ T7974] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 424.527943][ T7988] 9pnet: Insufficient options for proto=fd [ 424.682631][ T7992] 9pnet_virtio: no channels available for device syz [ 425.033682][ T3650] team0 (unregistering): Port device team_slave_1 removed [ 425.080549][ T7994] 9pnet: Insufficient options for proto=fd [ 425.129943][ T3650] team0 (unregistering): Port device team_slave_0 removed [ 425.782456][ T3650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.896802][ T3650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.967309][ T25] kauditd_printk_skb: 88 callbacks suppressed [ 425.967323][ T25] audit: type=1326 audit(1729142522.396:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 426.281480][ T25] audit: type=1326 audit(1729142522.416:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 426.874057][ T25] audit: type=1326 audit(1729142522.416:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 426.936017][ T3650] bond0 (unregistering): Released all slaves [ 426.968393][ T25] audit: type=1326 audit(1729142522.416:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 427.004326][ T25] audit: type=1326 audit(1729142522.416:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 427.068397][ T25] audit: type=1326 audit(1729142522.416:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 427.116011][ T25] audit: type=1326 audit(1729142522.416:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 427.125079][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 427.138495][ T25] audit: type=1326 audit(1729142522.416:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 427.386949][ T25] audit: type=1326 audit(1729142522.416:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 427.821716][ T25] audit: type=1326 audit(1729142522.416:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 427.957257][ T8021] loop1: detected capacity change from 0 to 256 [ 428.319446][ T8023] 9pnet_virtio: no channels available for device syz [ 428.415175][ T8029] xt_SECMARK: invalid mode: 0 [ 428.473116][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.508308][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 428.616035][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 428.633933][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 428.682902][ T7823] device veth0_vlan entered promiscuous mode [ 428.718579][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.738179][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 428.887515][ T7823] device veth1_vlan entered promiscuous mode [ 429.016754][ T7823] device veth0_macvtap entered promiscuous mode [ 429.075598][ T7823] device veth1_macvtap entered promiscuous mode [ 429.099734][ T8031] 9pnet: Insufficient options for proto=fd [ 429.197908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 429.233668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 429.252639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 429.282136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.303503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 429.352716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 429.424722][ T8037] 9pnet: Insufficient options for proto=fd [ 429.533655][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.610859][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.757472][ T8047] 9pnet: Insufficient options for proto=fd [ 430.656642][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.668488][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.681417][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.403758][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.434170][ T8054] loop2: detected capacity change from 0 to 512 [ 431.440585][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.465543][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.486162][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.500044][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.512335][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.522282][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.532848][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.555184][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.582302][ T8055] loop3: detected capacity change from 0 to 1024 [ 431.595415][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.651846][ T8054] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 431.663592][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.675655][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.687584][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.694849][ T8055] EXT4-fs (loop3): Ignoring removed orlov option [ 431.694883][ T8055] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 431.702895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.719062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.884504][ T25] kauditd_printk_skb: 34 callbacks suppressed [ 431.884518][ T25] audit: type=1326 audit(1729142528.316:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 431.917879][ T8054] EXT4-fs (loop2): 1 truncate cleaned up [ 431.926942][ T8055] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 431.943319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 431.956088][ T8054] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 431.971637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.018718][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 432.034350][ T8065] ip6t_rpfilter: unknown options [ 432.296012][ T25] audit: type=1326 audit(1729142528.316:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 432.435049][ T25] audit: type=1326 audit(1729142528.376:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 432.508634][ T7823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.587161][ T25] audit: type=1326 audit(1729142528.386:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 432.721929][ T25] audit: type=1326 audit(1729142528.386:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 434.153983][ T7823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.170749][ T25] audit: type=1326 audit(1729142528.386:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 434.200874][ T25] audit: type=1326 audit(1729142528.386:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 434.345477][ T7823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.371233][ T25] audit: type=1326 audit(1729142528.386:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 434.392923][ T7823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.393695][ T25] audit: type=1326 audit(1729142528.386:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 434.438717][ T25] audit: type=1326 audit(1729142528.386:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 434.917248][ T8080] 9pnet_virtio: no channels available for device syz [ 435.136266][ T8079] loop2: detected capacity change from 0 to 256 [ 435.722677][ T8085] 9pnet_virtio: no channels available for device syz [ 435.803628][ T3826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.817303][ T8087] xt_SECMARK: invalid mode: 0 [ 435.860395][ T3826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.974146][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.998071][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 436.193252][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.279590][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 436.367242][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 436.632562][ T8097] 9pnet: Insufficient options for proto=fd [ 438.389315][ T8082] loop3: detected capacity change from 0 to 32768 [ 438.433187][ T8104] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 438.509584][ T8082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.946 (8082) [ 438.608260][ T8082] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 438.640925][ T8082] BTRFS info (device loop3): using free space tree [ 438.801178][ T8082] BTRFS info (device loop3): has skinny extents [ 438.938498][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 438.953654][ T8123] ip6t_rpfilter: unknown options [ 439.650304][ T8129] loop1: detected capacity change from 0 to 256 [ 439.756987][ T8082] BTRFS error (device loop3): open_ctree failed [ 439.851282][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.857635][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.056262][ T8132] xt_SECMARK: invalid mode: 0 [ 441.169243][ T8140] 9pnet: Insufficient options for proto=fd [ 441.664875][ T25] kauditd_printk_skb: 41 callbacks suppressed [ 441.664890][ T25] audit: type=1326 audit(1729142538.086:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 442.346776][ T25] audit: type=1326 audit(1729142538.096:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 442.516318][ T25] audit: type=1326 audit(1729142538.096:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 442.571004][ T25] audit: type=1326 audit(1729142538.096:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 442.909929][ T8156] 9pnet_virtio: no channels available for device syz [ 443.451882][ T8158] 9pnet: Insufficient options for proto=fd [ 443.611748][ T8154] loop2: detected capacity change from 0 to 256 [ 443.656502][ T25] audit: type=1326 audit(1729142538.096:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 443.679227][ T25] audit: type=1326 audit(1729142538.096:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 443.746708][ T25] audit: type=1326 audit(1729142538.096:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 443.800428][ T25] audit: type=1326 audit(1729142538.096:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 443.880873][ T25] audit: type=1326 audit(1729142538.096:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 443.984291][ T25] audit: type=1326 audit(1729142538.096:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 444.076460][ T8160] loop4: detected capacity change from 0 to 256 [ 444.162660][ T8164] loop1: detected capacity change from 0 to 512 [ 444.215769][ T8154] xt_SECMARK: invalid mode: 0 [ 444.245759][ T8164] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 444.360666][ T8164] EXT4-fs error (device loop1): __ext4_iget:4872: inode #11: block 1: comm syz.1.963: invalid block [ 444.379334][ T8164] EXT4-fs (loop1): Remounting filesystem read-only [ 444.387326][ T8164] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.963: couldn't read orphan inode 11 (err -117) [ 444.407178][ T8164] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 444.434711][ T3619] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 445.366940][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 445.376498][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 445.404614][ T8172] 9pnet: Insufficient options for proto=fd [ 445.521048][ T3619] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 445.531678][ T3619] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 445.543125][ T3619] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.556395][ T3619] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 445.565555][ T3619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.614500][ T3619] usb 4-1: invalid MIDI out EP 0 [ 445.736326][ T3977] udevd[3977]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.760662][ T3619] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 445.817545][ T3619] usb 4-1: USB disconnect, device number 9 [ 445.850145][ T8179] loop1: detected capacity change from 0 to 32768 [ 445.947459][ T8179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.965 (8179) [ 446.028324][ T8162] xt_time: unknown flags 0x4 [ 446.127393][ T8179] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 446.161346][ T8179] BTRFS info (device loop1): using free space tree [ 446.167940][ T8179] BTRFS info (device loop1): has skinny extents [ 446.897738][ T8179] BTRFS info (device loop1): enabling ssd optimizations [ 447.129297][ T3619] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 448.089301][ T8226] loop2: detected capacity change from 0 to 1024 [ 448.166546][ T8229] 9pnet_virtio: no channels available for device syz [ 448.766304][ T8226] EXT4-fs (loop2): Ignoring removed orlov option [ 448.800919][ T8226] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 448.822897][ T8231] loop4: detected capacity change from 0 to 512 [ 448.896547][ T8231] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 448.904751][ T8226] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 449.008842][ T8231] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 1: comm syz.4.975: invalid block [ 449.101699][ T8231] EXT4-fs (loop4): Remounting filesystem read-only [ 449.140749][ T8231] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.975: couldn't read orphan inode 11 (err -117) [ 449.262736][ T8231] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 449.308910][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 449.318528][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 450.124872][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 450.140937][ T8251] 9pnet_virtio: no channels available for device syz [ 451.488592][ T8254] 9pnet_virtio: no channels available for device syz [ 451.834375][ T8266] 9pnet_virtio: no channels available for device syz [ 451.957537][ T8273] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 452.382214][ T8281] 9pnet_virtio: no channels available for device syz [ 453.078473][ T25] kauditd_printk_skb: 31 callbacks suppressed [ 453.078487][ T25] audit: type=1326 audit(1729142549.506:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 453.862944][ T25] audit: type=1326 audit(1729142549.536:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 454.113882][ T25] audit: type=1326 audit(1729142549.536:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 454.146438][ T25] audit: type=1326 audit(1729142549.536:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 454.215888][ T25] audit: type=1326 audit(1729142549.536:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 454.352951][ T25] audit: type=1326 audit(1729142549.536:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 454.437458][ T8295] 9pnet: Insufficient options for proto=fd [ 454.486635][ T25] audit: type=1326 audit(1729142549.536:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 454.663298][ T8300] loop2: detected capacity change from 0 to 256 [ 454.679005][ T25] audit: type=1326 audit(1729142549.546:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 454.718102][ T25] audit: type=1326 audit(1729142549.546:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 454.816498][ T25] audit: type=1326 audit(1729142549.546:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3aafeff9 code=0x7ffc0000 [ 455.213854][ T8300] xt_SECMARK: invalid mode: 0 [ 455.499535][ T8310] 9pnet_virtio: no channels available for device syz [ 455.687892][ T8313] loop1: detected capacity change from 0 to 16 [ 455.738246][ T8313] erofs: (device loop1): mounted with root inode @ nid 36. [ 455.777560][ T8313] attempt to access beyond end of device [ 455.777560][ T8313] loop1: rw=0, want=32, limit=16 [ 455.845087][ T8315] loop2: detected capacity change from 0 to 512 [ 455.947549][ T8315] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 455.998435][ T8317] loop1: detected capacity change from 0 to 256 [ 456.025204][ T8315] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 1: comm syz.2.996: invalid block [ 456.044035][ T8315] EXT4-fs (loop2): Remounting filesystem read-only [ 456.064270][ T8315] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.996: couldn't read orphan inode 11 (err -117) [ 456.108028][ T8315] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 459.960331][ T8344] 9pnet: Insufficient options for proto=fd [ 460.029699][ T8346] loop2: detected capacity change from 0 to 512 [ 460.087889][ T8346] EXT4-fs (loop2): Mount option "nodelalloc" incompatible with ext2 [ 460.219068][ T8337] loop3: detected capacity change from 0 to 40427 [ 460.336060][ T8337] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 460.375194][ T8337] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 460.419091][ T8337] F2FS-fs (loop3): invalid crc value [ 460.480304][ T8349] loop0: detected capacity change from 0 to 256 [ 460.495118][ T8337] F2FS-fs (loop3): Found nat_bits in checkpoint [ 461.200688][ T8349] xt_SECMARK: invalid mode: 0 [ 461.255482][ T8337] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 461.276824][ T8361] 9pnet_virtio: no channels available for device syz [ 461.285282][ T8337] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 461.376976][ T25] kauditd_printk_skb: 39 callbacks suppressed [ 461.376991][ T25] audit: type=1804 audit(1729142557.806:1520): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1001" name="/newroot/30/bus/bus" dev="loop3" ino=455 res=1 errno=0 [ 461.380035][ T8364] 9pnet_virtio: no channels available for device syz [ 461.389872][ T25] audit: type=1804 audit(1729142557.806:1521): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1001" name="/newroot/30/bus/bus" dev="loop3" ino=455 res=1 errno=0 [ 461.442882][ T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 461.468010][ T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 461.800429][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 461.810058][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 461.999171][ T8377] 9pnet: Insufficient options for proto=fd [ 462.615992][ T3619] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 462.828775][ T8383] bridge0: port 3(erspan0) entered blocking state [ 462.836148][ T8383] bridge0: port 3(erspan0) entered disabled state [ 462.843676][ T8383] device erspan0 entered promiscuous mode [ 462.849787][ T8383] bridge0: port 3(erspan0) entered blocking state [ 462.856268][ T8383] bridge0: port 3(erspan0) entered forwarding state [ 463.031218][ T3619] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 463.058176][ T3619] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 463.116935][ T3619] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.168867][ T3619] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 463.195978][ T3619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.274005][ T3619] usb 1-1: invalid MIDI out EP 0 [ 463.353893][ T8387] loop3: detected capacity change from 0 to 512 [ 463.373574][ T3977] udevd[3977]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.378007][ T3619] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 463.489521][ T8387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 463.525222][ T8387] EXT4-fs (loop3): 1 truncate cleaned up [ 463.526867][ T4284] usb 1-1: USB disconnect, device number 11 [ 463.531060][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 463.780624][ T8366] xt_time: unknown flags 0x4 [ 465.421543][ T4284] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 465.681919][ T8402] loop2: detected capacity change from 0 to 512 [ 465.721187][ T4284] usb 1-1: Using ep0 maxpacket: 16 [ 465.841590][ T4284] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 465.857606][ T8404] loop3: detected capacity change from 0 to 256 [ 465.864175][ T4284] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 465.875066][ T4284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.893505][ T4284] usb 1-1: config 0 descriptor?? [ 465.894658][ T8402] EXT4-fs (loop2): Mount option "nodelalloc" incompatible with ext2 [ 465.925975][ T8404] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 465.947217][ T8404] xt_SECMARK: invalid mode: 0 [ 465.960202][ T4284] usb 1-1: can't set config #0, error -71 [ 466.002760][ T4284] usb 1-1: USB disconnect, device number 12 [ 466.359066][ T8410] loop0: detected capacity change from 0 to 256 [ 466.423256][ T8412] 9pnet_virtio: no channels available for device syz [ 466.547670][ T8415] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 466.645706][ T8410] xt_SECMARK: invalid mode: 0 [ 466.911188][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 466.921080][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 467.369592][ T8428] 9pnet_virtio: no channels available for device syz [ 468.126325][ T8434] loop1: detected capacity change from 0 to 512 [ 468.279088][ T8434] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 468.624765][ T8434] EXT4-fs (loop1): 1 truncate cleaned up [ 468.673801][ T8434] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 469.063589][ T8444] loop0: detected capacity change from 0 to 512 [ 469.074411][ T8419] loop2: detected capacity change from 0 to 40427 [ 469.102539][ T8425] 9pnet_virtio: no channels available for device syz [ 469.111136][ T1075] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 469.350127][ T8419] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 469.363671][ T8444] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 469.381263][ T8419] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 469.423874][ T8444] EXT4-fs error (device loop0): __ext4_iget:4872: inode #11: block 1: comm syz.0.1031: invalid block [ 469.478209][ T8419] F2FS-fs (loop2): invalid crc value [ 469.539610][ T8444] EXT4-fs (loop0): Remounting filesystem read-only [ 469.546560][ T1075] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 469.571382][ T1075] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 469.591533][ T8444] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1031: couldn't read orphan inode 11 (err -117) [ 469.611767][ T8444] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 469.615845][ T8419] F2FS-fs (loop2): Found nat_bits in checkpoint [ 469.665764][ T1075] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.680873][ T1075] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 469.705353][ T1075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.796996][ T1075] usb 5-1: invalid MIDI out EP 0 [ 469.866704][ T8456] 9pnet_virtio: no channels available for device syz [ 469.928138][ T3977] udevd[3977]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.949448][ T1075] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 470.018341][ T1075] usb 5-1: USB disconnect, device number 13 [ 470.051653][ T8462] loop0: detected capacity change from 0 to 512 [ 470.149499][ T8462] EXT4-fs (loop0): Mount option "nodelalloc" incompatible with ext2 [ 470.202280][ T8438] xt_time: unknown flags 0x4 [ 470.381633][ T8466] loop2: detected capacity change from 0 to 256 [ 470.406992][ T8466] xt_SECMARK: invalid mode: 0 [ 470.777340][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 470.788356][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 471.120939][ T1075] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 471.709593][ T1075] usb 5-1: device not accepting address 14, error -71 [ 472.552436][ T8493] loop0: detected capacity change from 0 to 512 [ 472.687227][ T8475] loop3: detected capacity change from 0 to 40427 [ 472.734939][ T8493] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 472.774590][ T8475] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 472.801024][ T8475] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 472.956407][ T8475] F2FS-fs (loop3): invalid crc value [ 473.226303][ T8493] EXT4-fs (loop0): 1 truncate cleaned up [ 473.297501][ T8493] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 473.514379][ T8475] F2FS-fs (loop3): Found nat_bits in checkpoint [ 474.266045][ T8515] loop0: detected capacity change from 0 to 256 [ 474.303044][ T8517] loop4: detected capacity change from 0 to 16 [ 474.489063][ T8517] erofs: (device loop4): mounted with root inode @ nid 36. [ 474.499482][ T8517] attempt to access beyond end of device [ 474.499482][ T8517] loop4: rw=0, want=32, limit=16 [ 474.634919][ T8524] xt_SECMARK: invalid mode: 0 [ 474.837624][ T8508] loop2: detected capacity change from 0 to 40427 [ 474.861728][ T8528] loop3: detected capacity change from 0 to 256 [ 474.938074][ T8529] 9pnet: Insufficient options for proto=fd [ 475.313354][ T8508] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 475.858031][ T8508] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 475.923682][ T8508] F2FS-fs (loop2): invalid crc value [ 475.982499][ T8508] F2FS-fs (loop2): Found nat_bits in checkpoint [ 476.102241][ T8508] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 476.109892][ T8508] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 476.134064][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 476.185391][ T8541] ip6t_rpfilter: unknown options [ 477.311017][ T8550] 9pnet: Insufficient options for proto=fd [ 478.086410][ T8561] loop4: detected capacity change from 0 to 512 [ 478.418664][ T8561] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 478.756061][ T8561] EXT4-fs (loop4): 1 truncate cleaned up [ 478.802499][ T8561] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 479.295487][ T8575] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 479.652086][ T8579] 9pnet: Insufficient options for proto=fd [ 480.315649][ T25] audit: type=1326 audit(1729142576.746:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 480.551745][ T25] audit: type=1326 audit(1729142576.836:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 480.613398][ T25] audit: type=1326 audit(1729142576.836:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 480.721008][ T25] audit: type=1326 audit(1729142576.836:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 480.847285][ T25] audit: type=1326 audit(1729142576.836:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 480.976512][ T25] audit: type=1326 audit(1729142576.836:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 481.070997][ T25] audit: type=1326 audit(1729142576.836:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 481.102374][ T25] audit: type=1326 audit(1729142576.836:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 481.432644][ T25] audit: type=1326 audit(1729142576.836:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 481.558312][ T25] audit: type=1326 audit(1729142576.836:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 481.699860][ T8597] loop0: detected capacity change from 0 to 256 [ 482.112382][ T8605] 9pnet: Insufficient options for proto=fd [ 482.208024][ T8593] loop2: detected capacity change from 0 to 40427 [ 482.285600][ T8593] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 482.318917][ T8593] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 482.329126][ T8607] xt_SECMARK: invalid mode: 0 [ 482.540086][ T8593] F2FS-fs (loop2): invalid crc value [ 482.576533][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'. [ 482.587497][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'. [ 482.610311][ T8593] F2FS-fs (loop2): Found nat_bits in checkpoint [ 482.757581][ T8593] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 482.767435][ T8593] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 482.835173][ T3677] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 482.848360][ T3677] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 483.182570][ T8621] loop3: detected capacity change from 0 to 512 [ 483.269917][ T8621] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 483.312763][ T8621] EXT4-fs (loop3): 1 truncate cleaned up [ 483.318563][ T8621] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 485.801717][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 485.811637][ T8642] ip6t_rpfilter: unknown options [ 485.959827][ T25] kauditd_printk_skb: 16 callbacks suppressed [ 485.959842][ T25] audit: type=1326 audit(1729142582.386:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 485.993938][ T8648] loop1: detected capacity change from 0 to 16 [ 486.013005][ T25] audit: type=1326 audit(1729142582.386:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 486.160965][ T25] audit: type=1326 audit(1729142582.446:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 486.202055][ T25] audit: type=1326 audit(1729142582.446:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 486.225524][ T25] audit: type=1326 audit(1729142582.446:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 486.248477][ T25] audit: type=1326 audit(1729142582.466:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 486.777372][ T25] audit: type=1326 audit(1729142582.466:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 486.894616][ T25] audit: type=1326 audit(1729142582.466:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 486.917532][ T8648] erofs: (device loop1): mounted with root inode @ nid 36. [ 486.982267][ T25] audit: type=1326 audit(1729142582.466:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 487.067598][ T8658] attempt to access beyond end of device [ 487.067598][ T8658] loop1: rw=0, want=32, limit=16 [ 487.095710][ T25] audit: type=1326 audit(1729142582.476:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 487.543607][ T8644] loop4: detected capacity change from 0 to 32768 [ 487.661362][ T8644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1081 (8644) [ 487.926496][ T8644] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 487.980937][ T8644] BTRFS info (device loop4): using free space tree [ 487.988967][ T8644] BTRFS info (device loop4): has skinny extents [ 488.307950][ T8644] BTRFS info (device loop4): enabling ssd optimizations [ 488.469074][ T8656] loop0: detected capacity change from 0 to 40427 [ 488.631092][ T8656] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 488.638850][ T8656] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 488.715395][ T8656] F2FS-fs (loop0): invalid crc value [ 488.776158][ T8656] F2FS-fs (loop0): Found nat_bits in checkpoint [ 488.932487][ T8656] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 488.949310][ T8656] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 489.220315][ T3650] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 489.328765][ T3650] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 489.499737][ T8704] 9pnet_virtio: no channels available for device syz [ 490.737150][ T8711] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 490.996671][ T8709] 9pnet: Insufficient options for proto=fd [ 491.469681][ T8722] 9pnet: Insufficient options for proto=fd [ 491.546190][ T8723] 9pnet: Insufficient options for proto=fd [ 492.792786][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 492.809547][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 493.039178][ T8736] loop1: detected capacity change from 0 to 512 [ 493.097329][ T8736] EXT4-fs (loop1): Mount option "nodelalloc" incompatible with ext2 [ 494.851189][ T8749] 9pnet_virtio: no channels available for device syz [ 495.297355][ T8738] loop0: detected capacity change from 0 to 32768 [ 495.697658][ T8738] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1099 (8738) [ 495.851231][ T8761] 9pnet: Insufficient options for proto=fd [ 496.264153][ T8738] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 496.301224][ T8738] BTRFS info (device loop0): using free space tree [ 496.307757][ T8738] BTRFS info (device loop0): has skinny extents [ 496.568727][ T8786] 9pnet: Insufficient options for proto=fd [ 497.308504][ T8738] BTRFS error (device loop0): open_ctree failed [ 497.517042][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 497.526869][ T8794] ip6t_rpfilter: unknown options [ 497.732735][ T8797] 9pnet: Insufficient options for proto=fd [ 498.282718][ T8800] loop1: detected capacity change from 0 to 256 [ 500.268934][ T8813] loop3: detected capacity change from 0 to 256 [ 500.571081][ T8815] 9pnet_virtio: no channels available for device syz [ 501.237363][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.243701][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.450425][ T8824] xt_SECMARK: invalid mode: 0 [ 501.751204][ T8826] 9pnet: Insufficient options for proto=fd [ 502.492350][ T25] kauditd_printk_skb: 38 callbacks suppressed [ 502.492364][ T25] audit: type=1326 audit(1729142598.926:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 502.524461][ T8834] loop1: detected capacity change from 0 to 256 [ 502.577712][ T25] audit: type=1326 audit(1729142598.956:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 502.656817][ T25] audit: type=1326 audit(1729142598.956:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 502.778339][ T25] audit: type=1326 audit(1729142598.956:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 503.350526][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 503.356903][ T25] audit: type=1326 audit(1729142598.956:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 503.437361][ T25] audit: type=1326 audit(1729142598.956:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 503.520256][ T25] audit: type=1326 audit(1729142598.956:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 503.636136][ T25] audit: type=1326 audit(1729142598.956:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 504.010763][ T25] audit: type=1326 audit(1729142598.956:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 504.135297][ T25] audit: type=1326 audit(1729142598.956:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 504.887113][ T8833] loop0: detected capacity change from 0 to 32768 [ 505.416022][ T8833] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1120 (8833) [ 505.746063][ T8833] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 505.831022][ T8833] BTRFS info (device loop0): using free space tree [ 505.837565][ T8833] BTRFS info (device loop0): has skinny extents [ 506.002978][ T8873] 9pnet: Insufficient options for proto=fd [ 506.155649][ T8860] loop2: detected capacity change from 0 to 1024 [ 506.251185][ T8833] BTRFS error (device loop0): open_ctree failed [ 506.266738][ T8860] EXT4-fs (loop2): Ignoring removed orlov option [ 506.274759][ T8860] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 506.296600][ T8860] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 506.392759][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 508.678417][ T8902] 9pnet: Insufficient options for proto=fd [ 509.727080][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 509.741644][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 510.004511][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 510.014398][ T8917] ip6t_rpfilter: unknown options [ 510.741292][ T2116] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 511.202089][ T2116] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 511.270290][ T2116] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.291107][ T2116] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 511.310554][ T2116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.475369][ T2116] usb 2-1: invalid MIDI out EP 0 [ 511.594356][ T2116] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 511.596381][ T3977] udevd[3977]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.678784][ T2116] usb 2-1: USB disconnect, device number 14 [ 511.739881][ T8909] loop0: detected capacity change from 0 to 40427 [ 511.775143][ T8909] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 511.795558][ T8909] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 511.830654][ T8924] loop3: detected capacity change from 0 to 32768 [ 511.868168][ T8909] F2FS-fs (loop0): Found nat_bits in checkpoint [ 511.888467][ T8924] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1140 (8924) [ 511.918879][ T8918] xt_time: unknown flags 0x4 [ 511.956641][ T8924] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 511.981156][ T8924] BTRFS info (device loop3): using free space tree [ 511.997921][ T8924] BTRFS info (device loop3): has skinny extents [ 512.028928][ T8909] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 512.039001][ T8909] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 512.125500][ T8930] loop4: detected capacity change from 0 to 1024 [ 512.209926][ T8930] EXT4-fs (loop4): Ignoring removed orlov option [ 512.221077][ T8930] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 512.251017][ T4402] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 512.294662][ T8924] BTRFS info (device loop3): enabling ssd optimizations [ 512.350550][ T8930] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 512.610951][ T4402] usb 2-1: Using ep0 maxpacket: 16 [ 512.626207][ T8964] 9pnet: Insufficient options for proto=fd [ 512.751210][ T4402] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 512.784294][ T4402] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 512.798697][ T4402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.852097][ T4402] usb 2-1: config 0 descriptor?? [ 512.917362][ T4402] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 512.981146][ T3011] bcm5974 2-1:0.0: could not read from device [ 513.005228][ T4402] usb 2-1: USB disconnect, device number 15 [ 513.011694][ T3011] bcm5974 2-1:0.0: could not read from device [ 514.188551][ T8982] 9pnet: Insufficient options for proto=fd [ 515.301515][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 515.316275][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 517.295794][ T9003] bridge0: port 3(erspan0) entered blocking state [ 517.316305][ T9003] bridge0: port 3(erspan0) entered disabled state [ 517.373805][ T9003] device erspan0 entered promiscuous mode [ 517.426583][ T9005] loop4: detected capacity change from 0 to 512 [ 517.463716][ T9003] bridge0: port 3(erspan0) entered blocking state [ 517.470206][ T9003] bridge0: port 3(erspan0) entered forwarding state [ 517.531125][ T9005] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 517.587241][ T9005] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 1: comm syz.4.1155: invalid block [ 517.607012][ T9005] EXT4-fs (loop4): Remounting filesystem read-only [ 517.620955][ T9005] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1155: couldn't read orphan inode 11 (err -117) [ 517.637484][ T9005] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 518.297179][ T9016] loop0: detected capacity change from 0 to 2048 [ 519.514449][ T4402] Bluetooth: hci1: command 0x0406 tx timeout [ 519.635957][ T25] kauditd_printk_skb: 33 callbacks suppressed [ 519.635971][ T25] audit: type=1326 audit(1729142616.066:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 519.682211][ T9016] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 519.779911][ T25] audit: type=1326 audit(1729142616.096:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 519.878963][ T25] audit: type=1326 audit(1729142616.106:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 519.903731][ T25] audit: type=1326 audit(1729142616.106:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 519.933348][ T25] audit: type=1326 audit(1729142616.106:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 519.997777][ T25] audit: type=1326 audit(1729142616.106:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 520.134261][ T25] audit: type=1326 audit(1729142616.106:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 520.160038][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 520.171814][ T9023] ip6t_rpfilter: unknown options [ 520.220578][ T9007] loop1: detected capacity change from 0 to 32768 [ 520.237477][ T25] audit: type=1326 audit(1729142616.106:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 520.381534][ T9007] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1156 (9007) [ 520.406831][ T25] audit: type=1326 audit(1729142616.106:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 520.430078][ T25] audit: type=1326 audit(1729142616.106:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd2a81ff9 code=0x7ffc0000 [ 520.476589][ T9007] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 520.505432][ T9032] 9pnet: Insufficient options for proto=fd [ 520.508148][ T9007] BTRFS info (device loop1): using free space tree [ 520.538871][ T9007] BTRFS info (device loop1): has skinny extents [ 520.628266][ T9007] BTRFS error (device loop1): open_ctree failed [ 521.297699][ T9026] loop4: detected capacity change from 0 to 40427 [ 521.329542][ T9026] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 521.346134][ T9026] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 521.396564][ T9031] loop2: detected capacity change from 0 to 40427 [ 521.405020][ T9026] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 521.445103][ T9031] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 521.490152][ T9058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.497604][ T9031] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 521.507266][ T9031] F2FS-fs (loop2): invalid crc value [ 521.532132][ T9031] F2FS-fs (loop2): Found nat_bits in checkpoint [ 521.558357][ T9026] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 521.573625][ T9026] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 521.644503][ T9031] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 521.664624][ T9031] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 522.061203][ T9069] overlayfs: failed to resolve './file1': -2 [ 522.093777][ T9069] attempt to access beyond end of device [ 522.093777][ T9069] loop4: rw=34817, want=77840, limit=40427 [ 522.149254][ T9071] loop1: detected capacity change from 0 to 256 [ 522.627478][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1169'. [ 522.822149][ T9077] tipc: Started in network mode [ 523.451423][ T9077] tipc: Node identity @emory.en, cluster identity 8 [ 523.593580][ T9084] 9pnet: Insufficient options for proto=fd [ 523.601423][ T9085] loop3: detected capacity change from 0 to 512 [ 523.808192][ T9085] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 523.835107][ T9085] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038 (0x7fffffff) [ 526.224218][ T9091] loop0: detected capacity change from 0 to 32768 [ 526.339833][ T9091] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1173 (9091) [ 526.454574][ T9091] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 526.472143][ T9091] BTRFS info (device loop0): using free space tree [ 526.565698][ T9091] BTRFS info (device loop0): has skinny extents [ 526.618447][ T7823] attempt to access beyond end of device [ 526.618447][ T7823] loop4: rw=524288, want=45072, limit=40427 [ 526.689905][ T7823] attempt to access beyond end of device [ 526.689905][ T7823] loop4: rw=0, want=45072, limit=40427 [ 526.851350][ T475] attempt to access beyond end of device [ 526.851350][ T475] loop4: rw=2049, want=45128, limit=40427 [ 526.863089][ T9091] BTRFS error (device loop0): open_ctree failed [ 527.230383][ T9132] loop2: detected capacity change from 0 to 256 [ 527.259088][ T475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.399118][ T475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.539018][ T475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.635050][ T9141] loop1: detected capacity change from 0 to 2048 [ 527.706771][ T475] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.767390][ T9141] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 529.713812][ T25] kauditd_printk_skb: 41 callbacks suppressed [ 529.713826][ T25] audit: type=1326 audit(1729142626.146:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.1.1184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e80a38ff9 code=0x0 [ 529.862330][ T9162] loop2: detected capacity change from 0 to 512 [ 530.067963][ T9162] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 530.121050][ T9162] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff) [ 530.267896][ T25] audit: type=1326 audit(1729142626.696:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 530.300250][ T9154] chnl_net:caif_netlink_parms(): no params data found [ 530.323570][ T25] audit: type=1326 audit(1729142626.746:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 530.346558][ T25] audit: type=1326 audit(1729142626.746:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 530.461087][ T25] audit: type=1326 audit(1729142626.746:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 530.461127][ T25] audit: type=1326 audit(1729142626.746:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 530.461161][ T25] audit: type=1326 audit(1729142626.746:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 530.461193][ T25] audit: type=1326 audit(1729142626.746:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 530.461227][ T25] audit: type=1326 audit(1729142626.746:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 530.461260][ T25] audit: type=1326 audit(1729142626.746:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9617df7ff9 code=0x7ffc0000 [ 531.034758][ T9188] loop3: detected capacity change from 0 to 256 [ 531.201072][ T3618] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 531.218055][ T9154] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.234955][ T9154] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.249029][ T9154] device bridge_slave_0 entered promiscuous mode [ 531.354267][ T4406] Bluetooth: hci2: command 0x0409 tx timeout [ 531.412838][ T9154] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.421100][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.501072][ T3618] usb 2-1: Using ep0 maxpacket: 32 [ 531.504722][ T9154] device bridge_slave_1 entered promiscuous mode [ 531.546808][ T9204] xt_SECMARK: invalid mode: 0 [ 531.661699][ T9154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.694653][ T9154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.797344][ T9154] team0: Port device team_slave_0 added [ 531.811260][ T3618] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 531.828633][ T3618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.830204][ T9154] team0: Port device team_slave_1 added [ 531.849741][ T3618] usb 2-1: Product: syz [ 531.878019][ T3618] usb 2-1: Manufacturer: syz [ 531.893937][ T3618] usb 2-1: SerialNumber: syz [ 531.929187][ T3618] usb 2-1: config 0 descriptor?? [ 532.023714][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.030773][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.103231][ T9154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.136321][ T475] device hsr_slave_0 left promiscuous mode [ 532.161658][ T475] device hsr_slave_1 left promiscuous mode [ 532.174557][ T475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.191914][ T475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.199865][ T475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.220948][ T475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.229176][ T475] device bridge_slave_1 left promiscuous mode [ 532.251142][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.259953][ T475] device bridge_slave_0 left promiscuous mode [ 532.271112][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.293875][ T475] device veth1_macvtap left promiscuous mode [ 532.299935][ T475] device veth0_macvtap left promiscuous mode [ 532.321294][ T475] device veth1_vlan left promiscuous mode [ 532.327481][ T475] device veth0_vlan left promiscuous mode [ 532.662410][ T3618] (unnamed net_device) (uninitialized): Assigned a random MAC address: aa:87:6f:3a:fd:31 [ 532.784586][ T475] team0 (unregistering): Port device team_slave_1 removed [ 532.808511][ T475] team0 (unregistering): Port device team_slave_0 removed [ 532.831428][ T475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.857967][ T475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.113541][ T475] bond0 (unregistering): Released all slaves [ 533.264912][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.394557][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.444181][ T2116] Bluetooth: hci2: command 0x041b tx timeout [ 533.856226][ T9154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.003025][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 534.020667][ T9231] ip6t_rpfilter: unknown options [ 534.046264][ T3618] rtl8150 2-1:0.0: eth5: rtl8150 is detected [ 534.053835][ T3618] usb 2-1: USB disconnect, device number 16 [ 534.176845][ T9236] loop3: detected capacity change from 0 to 16 [ 534.226336][ T9154] device hsr_slave_0 entered promiscuous mode [ 534.248104][ T9154] device hsr_slave_1 entered promiscuous mode [ 534.269482][ T9154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.286273][ T9236] erofs: (device loop3): mounted with root inode @ nid 36. [ 534.290603][ T9154] Cannot create hsr debugfs directory [ 534.412539][ T9245] attempt to access beyond end of device [ 534.412539][ T9245] loop3: rw=0, want=32, limit=16 [ 535.052957][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 535.104631][ T9256] 9pnet_virtio: no channels available for device syz [ 535.484855][ T9154] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 535.519616][ T9154] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 535.556555][ T9154] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 535.561081][ T3618] Bluetooth: hci2: command 0x040f tx timeout [ 535.613488][ T9154] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 535.894016][ T9154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.933762][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 535.967345][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 536.000001][ T9154] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.033283][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 536.054587][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 536.091625][ T3675] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.098739][ T3675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.207590][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 536.242327][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 536.274134][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 536.303316][ T3675] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.310464][ T3675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.362299][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 536.383432][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 536.425520][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 536.467077][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 536.505444][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 536.553296][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 536.574472][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 536.588222][ T9281] loop0: detected capacity change from 0 to 512 [ 536.598645][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 536.625207][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 536.649528][ T9154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.670261][ T9281] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 536.711701][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 536.732938][ T9281] EXT4-fs (loop0): 1 truncate cleaned up [ 536.758067][ T9281] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 536.790904][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 536.802933][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 537.107056][ T9294] loop3: detected capacity change from 0 to 128 [ 537.558603][ T9294] EXT4-fs (loop3): Ignoring removed orlov option [ 537.591797][ T9294] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 537.641989][ T4402] Bluetooth: hci2: command 0x0419 tx timeout [ 537.746695][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 537.819349][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 537.884069][ T9154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.136791][ T9309] loop3: detected capacity change from 0 to 256 [ 538.758939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 538.796981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 538.923437][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 538.961587][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 538.977434][ T25] kauditd_printk_skb: 29 callbacks suppressed [ 538.977450][ T25] audit: type=1326 audit(1729142635.406:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.1.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 539.068385][ T25] audit: type=1326 audit(1729142635.406:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.1.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 539.184413][ T9154] device veth0_vlan entered promiscuous mode [ 539.199293][ T25] audit: type=1326 audit(1729142635.446:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.1.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 539.477791][ T9339] loop2: detected capacity change from 0 to 16 [ 539.525219][ T25] audit: type=1326 audit(1729142635.446:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.1.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 539.611293][ T9339] erofs: (device loop2): mounted with root inode @ nid 36. [ 539.636733][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 539.645357][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 539.756162][ T9154] device veth1_vlan entered promiscuous mode [ 539.811133][ T25] audit: type=1326 audit(1729142635.446:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.1.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 539.840503][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 539.853203][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.892019][ T9346] attempt to access beyond end of device [ 539.892019][ T9346] loop2: rw=0, want=32, limit=16 [ 539.915433][ T9154] device veth0_macvtap entered promiscuous mode [ 539.925705][ T25] audit: type=1326 audit(1729142635.446:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.1.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 540.278179][ T9154] device veth1_macvtap entered promiscuous mode [ 540.459254][ T25] audit: type=1326 audit(1729142635.446:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.1.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 540.535612][ T25] audit: type=1326 audit(1729142635.446:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.1.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 540.573733][ T25] audit: type=1326 audit(1729142635.446:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.1.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 540.597533][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.606994][ T25] audit: type=1326 audit(1729142635.446:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.1.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80a38ff9 code=0x7ffc0000 [ 540.669624][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.722477][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.760972][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.794443][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.836789][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.877740][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.930512][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 540.949087][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 540.985169][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 541.015399][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 541.078145][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.123778][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.160872][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.193416][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.218445][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.251464][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.300057][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.323468][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.349059][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.366591][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 541.375909][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 541.414107][ T9154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.436897][ T9154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.466923][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 541.480747][ T9154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.510955][ T9154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.537828][ T9369] 9pnet_virtio: no channels available for device syz [ 541.721014][ T2116] Bluetooth: hci3: command 0x0409 tx timeout [ 541.807996][ T9372] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 541.847702][ T3687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.863664][ T9340] chnl_net:caif_netlink_parms(): no params data found [ 541.891877][ T3687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.940356][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 541.968579][ T3675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.977257][ T3675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.078682][ T9378] loop2: detected capacity change from 0 to 256 [ 542.088343][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 542.163933][ T475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.409233][ T9382] loop4: detected capacity change from 0 to 512 [ 542.432912][ T9340] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.537830][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.688357][ T9340] device bridge_slave_0 entered promiscuous mode [ 542.742865][ T475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.761989][ T9382] EXT4-fs (loop4): Test dummy encryption mode enabled [ 542.932125][ T9340] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.951087][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.960076][ T9382] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 1: comm syz.4.1183: invalid block [ 542.975341][ T9340] device bridge_slave_1 entered promiscuous mode [ 543.041222][ T9382] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1183: couldn't read orphan inode 11 (err -117) [ 543.061179][ T9382] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 543.063894][ T475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.253803][ T9375] loop3: detected capacity change from 0 to 40427 [ 543.287171][ T9375] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 543.318234][ T9375] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 543.340296][ T9375] F2FS-fs (loop3): invalid crc value [ 543.384918][ T9375] F2FS-fs (loop3): Found nat_bits in checkpoint [ 543.410099][ T9340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.451773][ T475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.504871][ T9340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.550259][ T9375] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 543.573270][ T9375] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 543.592212][ T9340] team0: Port device team_slave_0 added [ 543.632040][ T9340] team0: Port device team_slave_1 added [ 543.735759][ T9375] attempt to access beyond end of device [ 543.735759][ T9375] loop3: rw=2049, want=45104, limit=40427 [ 543.772459][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.798731][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.827255][ T4402] Bluetooth: hci3: command 0x041b tx timeout [ 543.992405][ T9340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.158060][ T9397] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 544.159012][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.196859][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.229743][ T25] kauditd_printk_skb: 36 callbacks suppressed [ 544.229756][ T25] audit: type=1326 audit(1729142640.656:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 544.306177][ T25] audit: type=1326 audit(1729142640.656:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 544.318808][ T9340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.379164][ T25] audit: type=1326 audit(1729142640.666:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 544.501175][ T25] audit: type=1326 audit(1729142640.666:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 544.542144][ T9391] loop1: detected capacity change from 0 to 40427 [ 544.578230][ T9391] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 544.596645][ T25] audit: type=1326 audit(1729142640.666:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 544.629345][ T475] tipc: Left network mode [ 544.630415][ T9391] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 544.647849][ T9340] device hsr_slave_0 entered promiscuous mode [ 544.679833][ T9391] F2FS-fs (loop1): invalid crc value [ 544.693584][ T9340] device hsr_slave_1 entered promiscuous mode [ 544.702900][ T25] audit: type=1326 audit(1729142640.666:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 544.715925][ T9340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.742146][ T9391] F2FS-fs (loop1): Found nat_bits in checkpoint [ 544.786567][ T9340] Cannot create hsr debugfs directory [ 544.793674][ T25] audit: type=1326 audit(1729142640.666:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 545.053124][ T25] audit: type=1326 audit(1729142640.666:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 545.076244][ T25] audit: type=1326 audit(1729142640.666:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 545.112054][ T9391] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 545.120978][ T25] audit: type=1326 audit(1729142640.666:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b4efff9 code=0x7ffc0000 [ 545.139128][ T9391] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 545.431062][ T4276] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 545.526132][ T475] bridge0: port 3(erspan0) entered disabled state [ 545.566402][ T475] device erspan0 left promiscuous mode [ 545.587534][ T475] bridge0: port 3(erspan0) entered disabled state [ 545.804480][ T4276] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.820060][ T4276] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 545.870107][ T4276] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.886779][ T9340] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 545.893890][ T4402] Bluetooth: hci3: command 0x040f tx timeout [ 546.075996][ T4276] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.088732][ T9340] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 546.105710][ T4276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.748667][ T4276] usb 3-1: Product: syz [ 546.754203][ T4276] usb 3-1: Manufacturer: syz [ 546.758815][ T4276] usb 3-1: SerialNumber: syz [ 546.859167][ T9340] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 546.886372][ T4276] cdc_ncm 3-1:1.0: skipping garbage [ 546.891962][ T4276] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 546.898759][ T4276] cdc_ncm 3-1:1.0: bind() failure [ 546.946149][ T9340] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 547.189376][ T9340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.252875][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.265922][ T9434] loop1: detected capacity change from 0 to 40427 [ 547.291585][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.316640][ T9340] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.357631][ T9434] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 547.366285][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 547.374068][ T9434] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 547.381625][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 547.446635][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.453779][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.470058][ T9434] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 547.498910][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.558456][ T475] device hsr_slave_0 left promiscuous mode [ 547.584317][ T475] device hsr_slave_1 left promiscuous mode [ 547.603836][ T475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.632775][ T475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.675387][ T9434] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 547.683970][ T475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.697208][ T475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.709657][ T9434] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 547.729138][ T475] device bridge_slave_1 left promiscuous mode [ 547.779332][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.805884][ T475] device bridge_slave_0 left promiscuous mode [ 547.821239][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.851396][ T475] device veth1_macvtap left promiscuous mode [ 547.857449][ T475] device veth0_macvtap left promiscuous mode [ 547.884066][ T475] device veth1_vlan left promiscuous mode [ 547.900283][ T475] device veth0_vlan left promiscuous mode [ 547.964928][ T3618] Bluetooth: hci3: command 0x0419 tx timeout [ 548.702880][ T3577] attempt to access beyond end of device [ 548.702880][ T3577] loop1: rw=2049, want=45104, limit=40427 [ 548.748078][ T4400] usb 3-1: USB disconnect, device number 18 [ 549.930779][ T475] team0 (unregistering): Port device team_slave_1 removed [ 549.949124][ T475] team0 (unregistering): Port device team_slave_0 removed [ 549.989378][ T475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.074161][ T475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.188023][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 550.238479][ T9483] ip6t_rpfilter: unknown options [ 550.765690][ T3670] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 550.832341][ T3670] Bluetooth: hci5: Frame reassembly failed (-84) [ 550.980102][ T475] bond0 (unregistering): Released all slaves [ 551.053215][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.073560][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.103735][ T3826] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.110874][ T3826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.149372][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.196727][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.253785][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.284138][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.301924][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 551.312580][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 551.331956][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.342573][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.377385][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 551.389862][ T9477] loop3: detected capacity change from 0 to 40427 [ 551.403969][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.422102][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.463195][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 551.476533][ T9477] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 551.507835][ T9477] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 551.565095][ T9477] F2FS-fs (loop3): invalid crc value [ 551.603069][ T9477] F2FS-fs (loop3): Found nat_bits in checkpoint [ 551.708798][ T9477] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 551.717076][ T9477] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 551.775259][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.797690][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.821136][ T2116] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 551.844443][ T9340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.952687][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 551.971751][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 552.012381][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 552.027438][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 552.058275][ T9340] device veth0_vlan entered promiscuous mode [ 552.066261][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 552.081977][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 552.120849][ T9340] device veth1_vlan entered promiscuous mode [ 552.170180][ T9340] device veth0_macvtap entered promiscuous mode [ 552.196187][ T9340] device veth1_macvtap entered promiscuous mode [ 552.257380][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.277398][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.287444][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.299157][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.309028][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.319912][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.331427][ T9340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.341089][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 552.367393][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 552.390762][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 552.401229][ T2116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.412634][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 552.420899][ T2116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.437084][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 552.440882][ T2116] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 552.458168][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 552.484512][ T2116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.496528][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.526452][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.538555][ T2116] usb 3-1: config 0 descriptor?? [ 552.565585][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.590313][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.618563][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.647933][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.675518][ T9340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.705925][ T9340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.739853][ T9340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.761373][ T4406] Bluetooth: hci5: command 0x1003 tx timeout [ 552.763891][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 552.767524][ T3583] Bluetooth: hci5: sending frame failed (-49) [ 552.783594][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 552.796495][ T9340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.824513][ T9340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.883664][ T9340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.933188][ T9340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.841065][ T4400] Bluetooth: hci5: command 0x1001 tx timeout [ 554.854208][ T3583] Bluetooth: hci5: sending frame failed (-49) [ 555.662338][ T9527] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 555.702357][ T3824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.710638][ T3824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.807519][ T3748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.833895][ T3748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.883346][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 555.911006][ T2116] usbhid 3-1:0.0: can't add hid device: -71 [ 555.915962][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 555.921209][ T2116] usbhid: probe of 3-1:0.0 failed with error -71 [ 555.942878][ T2116] usb 3-1: USB disconnect, device number 19 [ 556.912476][ T2116] Bluetooth: hci5: command 0x1009 tx timeout [ 557.017773][ T9540] loop4: detected capacity change from 0 to 512 [ 557.099870][ T9540] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 557.193353][ T9540] EXT4-fs (loop4): 1 truncate cleaned up [ 557.211060][ T9540] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 558.383875][ T9538] loop0: detected capacity change from 0 to 40427 [ 558.592057][ T9538] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 558.636898][ T9538] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 559.223966][ T9538] F2FS-fs (loop0): Found nat_bits in checkpoint [ 559.258604][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 559.342290][ T9558] ip6t_rpfilter: unknown options [ 559.400654][ T9538] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 559.413434][ T9538] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 559.730877][ T9568] netlink: 'syz.0.1241': attribute type 4 has an invalid length. [ 560.320703][ T9570] 9pnet: Insufficient options for proto=fd [ 560.643692][ T9569] netlink: 'syz.0.1241': attribute type 4 has an invalid length. [ 562.133958][ T9583] loop0: detected capacity change from 0 to 128 [ 562.147221][ T9585] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 562.188392][ T475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.269129][ T475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.329617][ T9583] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 562.346703][ T9583] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 562.510312][ T9583] EXT4-fs warning (device loop0): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 562.541632][ T9564] chnl_net:caif_netlink_parms(): no params data found [ 562.570549][ T475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.591193][ T4406] Bluetooth: hci6: command 0x0409 tx timeout [ 562.654345][ T9593] 9pnet: Insufficient options for proto=fd [ 562.674434][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.689217][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.515601][ T475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.777486][ T9604] 9pnet: Insufficient options for proto=fd [ 563.901049][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.918484][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.943507][ T9564] device bridge_slave_0 entered promiscuous mode [ 563.968091][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.991073][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.022409][ T9564] device bridge_slave_1 entered promiscuous mode [ 564.219357][ T9564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.254486][ T9564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.681276][ T4402] Bluetooth: hci6: command 0x041b tx timeout [ 565.617932][ T9630] binder: 9621:9630 ioctl c0306201 0 returned -14 [ 566.589304][ T9637] loop2: detected capacity change from 0 to 16 [ 566.628960][ T9564] team0: Port device team_slave_0 added [ 566.680171][ T9564] team0: Port device team_slave_1 added [ 566.799040][ T9637] erofs: (device loop2): mounted with root inode @ nid 36. [ 566.967627][ T9641] loop3: detected capacity change from 0 to 512 [ 566.986014][ T2116] Bluetooth: hci6: command 0x040f tx timeout [ 567.103763][ T9649] attempt to access beyond end of device [ 567.103763][ T9649] loop2: rw=0, want=32, limit=16 [ 567.133887][ T9641] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 567.172756][ T9641] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038 (0x7fffffff) [ 567.420345][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.432845][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.521083][ T9564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.567742][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.581507][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.738520][ T9564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.900433][ T9564] device hsr_slave_0 entered promiscuous mode [ 567.919534][ T9564] device hsr_slave_1 entered promiscuous mode [ 568.985557][ T9661] loop4: detected capacity change from 0 to 256 [ 569.256434][ T475] bridge0: port 3(erspan0) entered disabled state [ 569.294232][ T475] device erspan0 left promiscuous mode [ 569.323427][ T475] bridge0: port 3(erspan0) entered disabled state [ 569.401024][ T4402] Bluetooth: hci6: command 0x0419 tx timeout [ 570.084406][ T9684] 9pnet: Insufficient options for proto=fd [ 570.092378][ T9683] xt_SECMARK: invalid mode: 0 [ 570.162084][ T9564] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 570.199288][ T9564] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 570.238351][ T475] device hsr_slave_0 left promiscuous mode [ 570.254698][ T475] device hsr_slave_1 left promiscuous mode [ 570.272292][ T475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.278047][ T9664] loop0: detected capacity change from 0 to 40427 [ 570.307982][ T475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.319950][ T475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.336118][ T9664] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 570.347465][ T9664] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 570.357309][ T475] device bridge_slave_1 left promiscuous mode [ 570.369456][ T9664] F2FS-fs (loop0): Unrecognized mount option "ac®gMNb3gz>ÜÓ—tive_logs=4" or missing value [ 570.375171][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.419970][ T475] device bridge_slave_0 left promiscuous mode [ 570.442008][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.464566][ T475] device veth1_macvtap left promiscuous mode [ 570.470722][ T475] device veth0_macvtap left promiscuous mode [ 570.513060][ T475] device veth1_vlan left promiscuous mode [ 570.521904][ T475] device veth0_vlan left promiscuous mode [ 570.612846][ T9669] loop3: detected capacity change from 0 to 40427 [ 570.682977][ T9669] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 570.770444][ T9669] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 570.795951][ T9669] F2FS-fs (loop3): invalid crc value [ 570.888848][ T9664] loop0: detected capacity change from 0 to 512 [ 570.972801][ T9669] F2FS-fs (loop3): Found nat_bits in checkpoint [ 570.979396][ T9664] EXT4-fs (loop0): Ignoring removed orlov option [ 571.013370][ T9664] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 571.453849][ T9669] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 571.474715][ T9669] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 571.968763][ T475] team0 (unregistering): Port device team_slave_1 removed [ 572.052046][ T475] team0 (unregistering): Port device team_slave_0 removed [ 572.565650][ T475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.758652][ T475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.988537][ T475] bond0 (unregistering): Released all slaves [ 573.070944][ T9564] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 573.112284][ T9564] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 573.501554][ T9564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.582544][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.589610][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 573.615341][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 573.653796][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 573.677993][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 573.726880][ T3670] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.734027][ T3670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.806769][ T9706] loop4: detected capacity change from 0 to 32768 [ 573.813887][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 573.830358][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 573.860150][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 573.890251][ T3670] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.897395][ T3670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.918217][ T9706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1270 (9706) [ 573.939165][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 573.987687][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 574.008256][ T9706] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 574.040673][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 574.040976][ T9706] BTRFS info (device loop4): using free space tree [ 574.069298][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 574.100315][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 574.120861][ T9706] BTRFS info (device loop4): has skinny extents [ 574.172897][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 574.182286][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 574.215026][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 574.291728][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 574.334482][ T9564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.418307][ T9564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 574.438374][ T9748] loop3: detected capacity change from 0 to 512 [ 574.481352][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 574.494230][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 574.548981][ T9706] BTRFS info (device loop4): enabling ssd optimizations [ 574.653177][ T9748] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 574.749970][ T9748] EXT4-fs (loop3): 1 truncate cleaned up [ 574.772376][ T9748] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,bsdgroups,sysvgroups,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 574.839048][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 574.864178][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 574.918980][ T9564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.050791][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 575.090339][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 575.252073][ T9776] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 575.821120][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 575.829379][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 575.889307][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 575.934648][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 575.974535][ T9564] device veth0_vlan entered promiscuous mode [ 576.000538][ T9564] device veth1_vlan entered promiscuous mode [ 576.164385][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 576.184422][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 576.230417][ T9564] device veth0_macvtap entered promiscuous mode [ 576.276842][ T9564] device veth1_macvtap entered promiscuous mode [ 576.374742][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.470670][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.542270][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.576253][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.586321][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.596897][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.622055][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.823194][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.881120][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.977717][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.038706][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.048781][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.064785][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.076301][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.086867][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.096763][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.120741][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.145416][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.166168][ T9564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.192869][ T9564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.212021][ T9564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.278511][ T9564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.317304][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 577.336855][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 577.434980][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 577.457680][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 578.363110][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 578.371899][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 579.041306][ T9820] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 579.099288][ T3670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.170594][ T3670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.221916][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.235227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 579.253482][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.278261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 579.489352][ T9835] loop1: detected capacity change from 0 to 1024 [ 579.707420][ T9835] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 580.171120][ T4406] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 580.451124][ T4406] usb 2-1: Using ep0 maxpacket: 32 [ 580.611640][ T4406] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.713314][ T4406] usb 2-1: config 0 has no interfaces? [ 580.885895][ T4406] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 580.908994][ T9853] loop0: detected capacity change from 0 to 256 [ 580.913639][ T4406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.925583][ T4406] usb 2-1: config 0 descriptor?? [ 581.015850][ T9855] bridge0: port 3(erspan0) entered blocking state [ 581.022552][ T9855] bridge0: port 3(erspan0) entered disabled state [ 581.029927][ T9855] device erspan0 entered promiscuous mode [ 581.036105][ T9855] bridge0: port 3(erspan0) entered blocking state [ 581.042571][ T9855] bridge0: port 3(erspan0) entered forwarding state [ 581.094777][ T9829] loop2: detected capacity change from 0 to 32768 [ 581.451717][ T9829] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1284 (9829) [ 581.655673][ T9829] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 581.711232][ T9829] BTRFS info (device loop2): using free space tree [ 581.717913][ T9829] BTRFS info (device loop2): has skinny extents [ 582.118275][ T9829] BTRFS info (device loop2): enabling ssd optimizations [ 582.317283][ T9885] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 583.157656][ T4406] usb 2-1: USB disconnect, device number 17 [ 583.599282][ T9900] 9pnet: Insufficient options for proto=fd [ 583.830130][ T9899] loop1: detected capacity change from 0 to 256 [ 583.998034][ T9899] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 584.034364][ T9904] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 585.691000][ T3615] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 585.951061][ T3615] usb 2-1: Using ep0 maxpacket: 16 [ 586.187796][ T3615] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.199075][ T3615] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 586.212954][ T3615] usb 2-1: config 0 interface 0 has no altsetting 0 [ 586.221150][ T3615] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 586.230690][ T3615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.251751][ T9929] 9pnet: Insufficient options for proto=fd [ 586.268006][ T3615] usb 2-1: config 0 descriptor?? [ 586.326460][ T3615] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 587.755395][ T9944] loop2: detected capacity change from 0 to 512 [ 587.785102][ T26] usb 2-1: USB disconnect, device number 18 [ 587.841039][ T9944] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 587.899792][ T9944] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 1: comm syz.2.1302: invalid block [ 587.930151][ T9944] EXT4-fs (loop2): Remounting filesystem read-only [ 587.957255][ T9944] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1302: couldn't read orphan inode 11 (err -117) [ 588.030198][ T9944] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 590.401681][ T9967] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 590.514214][ T9970] xt_SECMARK: invalid mode: 0 [ 592.129665][ T9984] 9pnet: Insufficient options for proto=fd [ 593.400911][ T4268] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 595.221817][ T4268] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 595.233374][ T4268] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 595.250324][ T4268] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 595.259467][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.276133][T10013] loop2: detected capacity change from 0 to 512 [ 595.314030][ T4268] usb 1-1: invalid MIDI out EP 0 [ 595.360421][ T4268] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 595.445908][T10013] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 595.547334][T10013] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 1: comm syz.2.1320: invalid block [ 595.569334][ T3648] udevd[3648]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.620162][T10013] EXT4-fs (loop2): Remounting filesystem read-only [ 595.672516][T10013] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1320: couldn't read orphan inode 11 (err -117) [ 596.038856][T10013] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 596.237151][ T4268] usb 1-1: USB disconnect, device number 13 [ 596.590921][ T4268] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 597.688506][T10028] loop4: detected capacity change from 0 to 32768 [ 597.831891][T10040] 9pnet: Insufficient options for proto=fd [ 597.924738][T10028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1323 (10028) [ 598.441194][T10028] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 598.457879][T10045] loop0: detected capacity change from 0 to 256 [ 598.470951][T10028] BTRFS info (device loop4): using free space tree [ 598.486229][T10028] BTRFS info (device loop4): has skinny extents [ 599.701768][T10077] loop1: detected capacity change from 0 to 256 [ 600.901216][T10028] BTRFS error (device loop4): open_ctree failed [ 601.960898][T10077] xt_SECMARK: invalid mode: 0 [ 603.202169][ T7096] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 603.724163][T10111] 9pnet: Insufficient options for proto=fd [ 604.281519][ T7096] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 604.420257][ T7096] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.845085][ T7096] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 605.006174][ T7096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.101569][ T7096] usb 5-1: invalid MIDI out EP 0 [ 605.872351][ T7096] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 605.926703][T10128] loop3: detected capacity change from 0 to 2048 [ 606.052740][ T7096] usb 5-1: USB disconnect, device number 16 [ 606.392480][T10128] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 606.776143][ T25] kauditd_printk_skb: 55 callbacks suppressed [ 606.776158][ T25] audit: type=1800 audit(1729142703.206:1840): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1343" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 607.114481][ T3977] udevd[3977]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.214070][T10153] loop4: detected capacity change from 0 to 256 [ 607.764305][T10132] loop0: detected capacity change from 0 to 32768 [ 607.825529][T10132] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1345 (10132) [ 607.883355][T10132] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 607.924154][T10132] BTRFS info (device loop0): using free space tree [ 607.930695][T10132] BTRFS info (device loop0): has skinny extents [ 608.252637][ T7400] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 608.397844][T10132] BTRFS info (device loop0): enabling ssd optimizations [ 608.814816][T10181] loop3: detected capacity change from 0 to 256 [ 609.305019][T10186] 9pnet: Insufficient options for proto=fd [ 611.186731][ T4402] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 611.713051][ T4402] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 611.769368][ T4402] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.986889][ T4402] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 611.997350][ T4402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.137968][ T4402] usb 2-1: invalid MIDI out EP 0 [ 612.804775][ T4402] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 612.830550][T10024] udevd[10024]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.880054][ T4402] usb 2-1: USB disconnect, device number 19 [ 613.431202][ T4402] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 613.721258][ T4402] usb 2-1: Using ep0 maxpacket: 16 [ 614.101006][ T4402] usb 2-1: unable to read config index 0 descriptor/all [ 614.108238][ T4402] usb 2-1: can't read configurations, error -71 [ 614.157366][ C1] ------------[ cut here ]------------ [ 614.163443][ C1] WARNING: CPU: 1 PID: 21 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 614.172648][ C1] Modules linked in: [ 614.176559][ C1] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 5.15.167-syzkaller #0 [ 614.184679][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 614.194776][ C1] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 614.201358][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 614.207527][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 eb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 614.218636][T10229] loop1: detected capacity change from 0 to 2048 [ 614.227177][ C1] RSP: 0018:ffffc90000dd00e8 EFLAGS: 00010246 [ 614.227220][ C1] RAX: ffffffff81aa939c RBX: 0000000000000000 RCX: ffff888017e69dc0 [ 614.227234][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 614.227244][ C1] RBP: dffffc0000000000 R08: ffffffff81aa92ad R09: fffffbfff20e2419 [ 614.227257][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffa3000000 [ 614.227269][ C1] R13: 0000000000000008 R14: ffffffffa3000000 R15: ffffc90000dd0148 [ 614.279583][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 614.288580][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.295202][ C1] CR2: 0000001b3201fffc CR3: 00000000798e6000 CR4: 00000000003506e0 [ 614.303237][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 614.311247][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 614.319234][ C1] Call Trace: [ 614.322569][ C1] [ 614.325421][ C1] ? __warn+0x15b/0x300 [ 614.329593][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 614.335178][ C1] ? report_bug+0x1b7/0x2e0 [ 614.339703][ C1] ? handle_bug+0x3d/0x70 [ 614.344070][ C1] ? exc_invalid_op+0x16/0x40 [ 614.348758][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 614.353829][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 614.359297][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 614.364890][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 614.370449][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 614.376043][ C1] bpf_probe_read_user+0x26/0x70 [ 614.381023][ C1] bpf_prog_b01026b2908340f4+0x3d/0x3f0 [ 614.386582][ C1] bpf_trace_run2+0x19e/0x340 [ 614.391301][ C1] ? bpf_trace_run1+0x2f0/0x2f0 [ 614.396165][ C1] ? skb_release_data+0x73a/0x8a0 [ 614.401233][ C1] ? skb_release_data+0x73a/0x8a0 [ 614.406269][ C1] __bpf_trace_kfree+0x6e/0x90 [ 614.411117][ C1] ? skb_release_data+0x73a/0x8a0 [ 614.416156][ C1] kfree+0x22f/0x270 [ 614.420069][ C1] ? ip6_route_input+0x8cc/0xd90 [ 614.425052][ C1] skb_release_data+0x73a/0x8a0 [ 614.429921][ C1] ? rcu_is_watching+0x11/0xa0 [ 614.434727][ C1] kfree_skb_reason+0xb3/0x170 [ 614.439508][ C1] ip6_mc_input+0x97a/0xb80 [ 614.444062][ C1] ? ip6_input_finish+0x130/0x130 [ 614.449112][ C1] ip6_sublist_rcv+0xf80/0x12d0 [ 614.454008][ C1] ? rcu_lock_release+0x5/0x20 [ 614.458797][ C1] ? ipv6_list_rcv+0x470/0x470 [ 614.463603][ C1] ? refcount_add+0x70/0x70 [ 614.468135][ C1] ipv6_list_rcv+0x424/0x470 [ 614.472776][ C1] ? NF_HOOK+0x410/0x410 [ 614.477038][ C1] ? NF_HOOK+0x410/0x410 [ 614.481315][ C1] __netif_receive_skb_list_core+0x6b1/0x890 [ 614.487321][ C1] ? __netif_receive_skb+0x530/0x530 [ 614.492659][ C1] netif_receive_skb_list_internal+0x9ed/0xdf0 [ 614.498823][ C1] ? rcu_lock_release+0x9/0x20 [ 614.503636][ C1] ? netif_receive_skb_list+0x440/0x440 [ 614.509289][ C1] ? dev_gro_receive+0x18b4/0x2240 [ 614.514443][ C1] napi_complete_done+0x352/0x820 [ 614.519486][ C1] ? __napi_schedule_irqoff+0x240/0x240 [ 614.525067][ C1] ? local_bh_enable+0x5/0x20 [ 614.529759][ C1] ? rcu_is_watching+0x11/0xa0 [ 614.534567][ C1] ? wg_prev_queue_dequeue+0x140/0x210 [ 614.540044][ C1] wg_packet_rx_poll+0x20a8/0x2130 [ 614.545195][ C1] ? print_irqtrace_events+0x210/0x210 [ 614.550687][ C1] ? wg_packet_handshake_receive_worker+0xe00/0xe00 [ 614.557322][ C1] ? _raw_spin_unlock_irq+0x25/0x40 [ 614.562575][ C1] ? mark_lock+0x98/0x340 [ 614.566928][ C1] ? print_irqtrace_events+0x210/0x210 [ 614.572428][ C1] ? __irq_exit_rcu+0x157/0x240 [ 614.577295][ C1] __napi_poll+0xc7/0x440 [ 614.581668][ C1] net_rx_action+0x617/0xda0 [ 614.586290][ C1] ? net_tx_action+0x8e0/0x8e0 [ 614.591096][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 614.597105][ C1] handle_softirqs+0x3a7/0x930 [ 614.602013][ C1] ? do_softirq+0x162/0x240 [ 614.606530][ C1] ? do_softirq+0x240/0x240 [ 614.611079][ C1] do_softirq+0x162/0x240 [ 614.615417][ C1] [ 614.618358][ C1] [ 614.621322][ C1] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 614.626712][ C1] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 614.632728][ C1] ? __local_bh_enable_ip+0x102/0x1f0 [ 614.638114][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 614.643447][ C1] __local_bh_enable_ip+0x1b1/0x1f0 [ 614.648659][ C1] ? wg_packet_decrypt_worker+0xd49/0xde0 [ 614.654420][ C1] ? _local_bh_enable+0xa0/0xa0 [ 614.659289][ C1] ? wg_packet_decrypt_worker+0x91f/0xde0 [ 614.665070][ C1] wg_packet_decrypt_worker+0xd49/0xde0 [ 614.670651][ C1] ? wg_packet_rx_poll+0x2130/0x2130 [ 614.676055][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 614.682077][ C1] ? print_irqtrace_events+0x210/0x210 [ 614.687544][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 614.693483][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 614.698700][ C1] process_one_work+0x8a1/0x10c0 [ 614.703692][ C1] ? worker_detach_from_pool+0x260/0x260 [ 614.709358][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 614.714957][ C1] ? kthread_data+0x4e/0xc0 [ 614.719472][ C1] ? wq_worker_running+0x97/0x170 [ 614.724542][ C1] worker_thread+0xaca/0x1280 [ 614.729258][ C1] kthread+0x3f6/0x4f0 [ 614.733371][ C1] ? rcu_lock_release+0x20/0x20 [ 614.738234][ C1] ? kthread_blkcg+0xd0/0xd0 [ 614.742899][ C1] ret_from_fork+0x1f/0x30 [ 614.747349][ C1] [ 614.750385][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 614.757663][ C1] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 5.15.167-syzkaller #0 [ 614.765727][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 614.775791][ C1] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 614.782313][ C1] Call Trace: [ 614.785593][ C1] [ 614.788443][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 614.793135][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 614.798779][ C1] ? panic+0x860/0x860 [ 614.802864][ C1] ? copy_from_user_nofault+0xc0/0x1c0 [ 614.808352][ C1] ? copy_from_user_nofault+0xc0/0x1c0 [ 614.813820][ C1] panic+0x318/0x860 [ 614.817728][ C1] ? __warn+0x16a/0x300 [ 614.821891][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 614.827116][ C1] ? ret_from_fork+0x1f/0x30 [ 614.831717][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 614.837270][ C1] __warn+0x2b2/0x300 [ 614.841275][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 614.846838][ C1] report_bug+0x1b7/0x2e0 [ 614.851183][ C1] handle_bug+0x3d/0x70 [ 614.855349][ C1] exc_invalid_op+0x16/0x40 [ 614.859868][ C1] asm_exc_invalid_op+0x16/0x20 [ 614.864729][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 614.870911][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 eb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 614.890520][ C1] RSP: 0018:ffffc90000dd00e8 EFLAGS: 00010246 [ 614.896599][ C1] RAX: ffffffff81aa939c RBX: 0000000000000000 RCX: ffff888017e69dc0 [ 614.904579][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 614.912573][ C1] RBP: dffffc0000000000 R08: ffffffff81aa92ad R09: fffffbfff20e2419 [ 614.920554][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffa3000000 [ 614.928529][ C1] R13: 0000000000000008 R14: ffffffffa3000000 R15: ffffc90000dd0148 [ 614.936516][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 614.941988][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 614.947550][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 614.953107][ C1] bpf_probe_read_user+0x26/0x70 [ 614.958059][ C1] bpf_prog_b01026b2908340f4+0x3d/0x3f0 [ 614.963616][ C1] bpf_trace_run2+0x19e/0x340 [ 614.968312][ C1] ? bpf_trace_run1+0x2f0/0x2f0 [ 614.973173][ C1] ? skb_release_data+0x73a/0x8a0 [ 614.978210][ C1] ? skb_release_data+0x73a/0x8a0 [ 614.983245][ C1] __bpf_trace_kfree+0x6e/0x90 [ 614.988026][ C1] ? skb_release_data+0x73a/0x8a0 [ 614.993057][ C1] kfree+0x22f/0x270 [ 614.996962][ C1] ? ip6_route_input+0x8cc/0xd90 [ 615.001914][ C1] skb_release_data+0x73a/0x8a0 [ 615.006773][ C1] ? rcu_is_watching+0x11/0xa0 [ 615.011548][ C1] kfree_skb_reason+0xb3/0x170 [ 615.016323][ C1] ip6_mc_input+0x97a/0xb80 [ 615.020835][ C1] ? ip6_input_finish+0x130/0x130 [ 615.025868][ C1] ip6_sublist_rcv+0xf80/0x12d0 [ 615.030727][ C1] ? rcu_lock_release+0x5/0x20 [ 615.035512][ C1] ? ipv6_list_rcv+0x470/0x470 [ 615.040290][ C1] ? refcount_add+0x70/0x70 [ 615.044814][ C1] ipv6_list_rcv+0x424/0x470 [ 615.049419][ C1] ? NF_HOOK+0x410/0x410 [ 615.053680][ C1] ? NF_HOOK+0x410/0x410 [ 615.057927][ C1] __netif_receive_skb_list_core+0x6b1/0x890 [ 615.063934][ C1] ? __netif_receive_skb+0x530/0x530 [ 615.069247][ C1] netif_receive_skb_list_internal+0x9ed/0xdf0 [ 615.075418][ C1] ? rcu_lock_release+0x9/0x20 [ 615.080193][ C1] ? netif_receive_skb_list+0x440/0x440 [ 615.085753][ C1] ? dev_gro_receive+0x18b4/0x2240 [ 615.090878][ C1] napi_complete_done+0x352/0x820 [ 615.095912][ C1] ? __napi_schedule_irqoff+0x240/0x240 [ 615.101462][ C1] ? local_bh_enable+0x5/0x20 [ 615.106146][ C1] ? rcu_is_watching+0x11/0xa0 [ 615.110918][ C1] ? wg_prev_queue_dequeue+0x140/0x210 [ 615.116390][ C1] wg_packet_rx_poll+0x20a8/0x2130 [ 615.121504][ C1] ? print_irqtrace_events+0x210/0x210 [ 615.126988][ C1] ? wg_packet_handshake_receive_worker+0xe00/0xe00 [ 615.133586][ C1] ? _raw_spin_unlock_irq+0x25/0x40 [ 615.138789][ C1] ? mark_lock+0x98/0x340 [ 615.143142][ C1] ? print_irqtrace_events+0x210/0x210 [ 615.148864][ C1] ? __irq_exit_rcu+0x157/0x240 [ 615.153727][ C1] __napi_poll+0xc7/0x440 [ 615.158069][ C1] net_rx_action+0x617/0xda0 [ 615.162680][ C1] ? net_tx_action+0x8e0/0x8e0 [ 615.167450][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 615.173455][ C1] handle_softirqs+0x3a7/0x930 [ 615.178236][ C1] ? do_softirq+0x162/0x240 [ 615.182753][ C1] ? do_softirq+0x240/0x240 [ 615.187275][ C1] do_softirq+0x162/0x240 [ 615.191606][ C1] [ 615.194538][ C1] [ 615.197470][ C1] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 615.202864][ C1] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 615.208850][ C1] ? __local_bh_enable_ip+0x102/0x1f0 [ 615.214222][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 615.219526][ C1] __local_bh_enable_ip+0x1b1/0x1f0 [ 615.224726][ C1] ? wg_packet_decrypt_worker+0xd49/0xde0 [ 615.230451][ C1] ? _local_bh_enable+0xa0/0xa0 [ 615.235307][ C1] ? wg_packet_decrypt_worker+0x91f/0xde0 [ 615.241040][ C1] wg_packet_decrypt_worker+0xd49/0xde0 [ 615.246610][ C1] ? wg_packet_rx_poll+0x2130/0x2130 [ 615.251977][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 615.257975][ C1] ? print_irqtrace_events+0x210/0x210 [ 615.263441][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 615.269345][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 615.274563][ C1] process_one_work+0x8a1/0x10c0 [ 615.279531][ C1] ? worker_detach_from_pool+0x260/0x260 [ 615.285185][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 615.290740][ C1] ? kthread_data+0x4e/0xc0 [ 615.295257][ C1] ? wq_worker_running+0x97/0x170 [ 615.300293][ C1] worker_thread+0xaca/0x1280 [ 615.305003][ C1] kthread+0x3f6/0x4f0 [ 615.309080][ C1] ? rcu_lock_release+0x20/0x20 [ 615.313939][ C1] ? kthread_blkcg+0xd0/0xd0 [ 615.318535][ C1] ret_from_fork+0x1f/0x30 [ 615.322973][ C1] [ 615.326204][ C1] Kernel Offset: disabled [ 615.330552][ C1] Rebooting in 86400 seconds..