last executing test programs: 18.87280171s ago: executing program 2 (id=582): syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff000000000100081d8d"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 18.62494772s ago: executing program 2 (id=585): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect(0x0, 0x30d, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1809}}, {0x6b, &(0x7f00000001c0)=@string={0x6b, 0x3, "eefe194a3c0de3a3c1b27ca1e9e3b84d5ff020ca77ac24cc0c534559bd776162a86df7498253532d90547c95ca79935cdeffe51f2b388d2aa11ea026eefaa6e3a43c98a7d5067e9d98cf8e0e04fbd5e75975eab2bb3f248cb27dc01ba8920e51097570b4bc41819e2d"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x440a}}, {0x68, &(0x7f00000003c0)=ANY=[@ANYBLOB="680301a79b7c23defc6f2a9c5f0fa6b60b44d44b43296ad2887c46f88c6feff4e7c994d603e9b5c9ee39bee41a4682eb1aacd933ca232cfdad12edbe0fa5160035851c749b9e"]}]}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000000000000070000000f00000000000000d4f700001eb300000010080000000000040000000800000005000000080000000600000007000000ff0f00"/88]) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x161ac0, 0x0) epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)={0xc0002006}) syz_emit_ethernet(0x12, 0x0, 0x0) r3 = io_uring_setup(0x1f3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_io_uring_setup(0x31ed, &(0x7f0000000000)={0x0, 0x500b}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000002480), 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="0203100020fc80d53d103328", 0xc, 0xc004, &(0x7f0000000140)={0x11, 0x4305, r8, 0x1, 0x9, 0x6, @local}, 0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r10) 14.774463495s ago: executing program 2 (id=596): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1008c54, &(0x7f00000005c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c74696d655f6f66667365743d3078666666666666666666666666666661612c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c756e695f786c6174653d312c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c726f6469722c000000803d302c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303461382c726f6469722c73686f72746e616d653d6c6f7765722c00"], 0xf5, 0x305, &(0x7f00000006c0)="$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") 13.936810883s ago: executing program 2 (id=597): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup3(r5, r6, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=@setlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES16=r5, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000580)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r10, 0x0) ftruncate(r10, 0xc17a) 13.60731068s ago: executing program 3 (id=599): socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x5517, &(0x7f0000005840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xd2f0}) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c236bfe078ab28a00a2bc153dc7f71d839a831504b2aed60fdca209acd1395192d885fce57bb712f6b00c3e70e7b7ba8533786d8723cc906d891a3633b1591", 0x1d}, 0x60) r3 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x10}) syz_init_net_socket$ax25(0x3, 0x5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 12.804947206s ago: executing program 2 (id=600): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010101, 0xfffffffe}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@empty, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x10, &(0x7f0000000a40)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="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"], 0x0, 0x7d1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) 12.096829273s ago: executing program 4 (id=604): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$igmp(0x2, 0x3, 0x2) io_setup(0x0, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 11.88499148s ago: executing program 2 (id=605): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f00000002c0), 0x1, 0x4f9, &(0x7f00000003c0)="$eJzs3c9rJFkdAPBvVdK7mdmsnUWRdcDdxRnJrO50Jxt3N4isK4ieFlzXe4xJJ4R00iHdWSfNohm8CoKICp48eRH8AwSZP0GEAb2LDorojB48jFPS1dUzmUx3EsmPxs7nA2/qvXpV9f2+nnR1VVdRHcCF9UpEvBMRYxHxakSUi/lpURY6jb3ucvfvfbjUKUlk2ft/TyIp5vW21WmPR8Rz3VViIiK+/tWIbyVPx23uttcX6/XadtGutja2qs3d9o21jcXV2mptc25u9s35t+bfmJ/JCica55WIePvLd3/8g1985e3fvPbtPy789fp3Oml94ePdvCNi6UQBBuhu+zOv7U+/8xptn0WwIRgrxlM62PHecPIBAOBwnWP8qxHxqfz4vxxj+dEcAAAAMEqyL07GgyQiAwAAAEZWGhGTkaSV4l6AyUjTSqV7D+/H4nJabzRbn11p7Gwud/oipqKUrqzVazPFvcJTUUo67dm8/rj9+oH2XES8EBE/Kl/K25WlRn152F9+AAAAwAXx3MtPnv//q5zmdQAAAGDETA1sAAAAAKPCKT8AAACMPuf/AAAAMNK+9u67nZL1fsd7+YPdnfXGBzeWa831ysbOUmWpsb1VWW00VvNn9m0M2Mz3e5V6o7H1udjcuVlt1ZqtanO3vbDR2NlsLazlPwcOAAAADMELL9/+QxIRe5+/lJcongMI8IQ/DzsB4DSNDTsBYGjGh50AMDSlI5cY/x+WBf4fJUf0Z+UBHb89g2QAAIAzMf2Jp6//P1P0Od+H0eZeHwC4eFz/h4ur5A5AuPCudSfP9u99kGXZgBWPff1/4BYAAIBzMpmXJK0U1wInI00rlYjn858FKCUra/XaTER8JCJ+Xy4922nP5msmR94zDAAAAAAAAAAAAAAAAAAAAAAAAAB0ZVkSGQAAADDSItK/JPnT/COmy9cmo6j3PJP8uxx3i8bP3v/JzcVWa3u2M/8f5bw/Ilo/LebfGspXGAAAAMAB+Xn668V0dtjZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBq7t/7cKlXzjPu374UEVP94o/HRD6diFJEXP5nEuP71ksiYuwU4u/diogX98fPHkV4mGXZVJFFv/iXziR+b/xJ52WJA/EneuulpxAbLrrbnf3PO/3ef2m8kk/7v//Hi3JSg/d/6aP939iA/c/zx4xx5c6vqgPj34q4Mt5//9OLnwyIf/WY8b/5jXZ7UF/284jpvp8/yROxqq2NrWpzt31jbWNxtbZa25ybm31z/q35N+Znqitr9Vrxb98YP/zkrx8eNv7LA+JPHTH+a8cc/3/u3Lz30W611C/+9av9P39fHBA/LT77Pl3UO/3Tvfpet77fS7/83UuHjX95wPiP+v+/fszxv/re9/50zEUBgHPQ3G2vL9brte1DKhPHWEZF5SSV7Lvdv8eTbSe2x041sWzYL0tzt9076j7v6MPcKwEAAGfh8UH/sDMBAAAAAAAAAAAAAAAAAACAi+s8Hid2MObecIYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCo/wYAAP//Q9LiBw==") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 11.168918519s ago: executing program 4 (id=607): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open$dir(&(0x7f00000042c0)='./file1\x00', 0x4240, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) 11.013365602s ago: executing program 4 (id=608): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r4, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x17, 0x4}, &(0x7f0000000080)) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0x2020) unshare(0x40020000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0}, 0x90) 9.790266442s ago: executing program 3 (id=609): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x102) 9.340971038s ago: executing program 1 (id=610): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0xa, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1f, 0x0, 0x749c, 0x0, 0x808, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x43) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r5}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r7) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000040000000f000000180007800800020001"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.492922947s ago: executing program 1 (id=613): close(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baad8ff00000000b5090800000000007baaf0ff00000000bf8700000000000016070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) 7.612970829s ago: executing program 0 (id=616): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$igmp(0x2, 0x3, 0x2) io_setup(0x0, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 6.158120388s ago: executing program 0 (id=617): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x800008ec0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfffffe14) 5.715929354s ago: executing program 4 (id=618): socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x5517, &(0x7f0000005840)="$eJzs3M9rI+UbAPAn7XZ/f/dbxIO3HViEFjZh0x+L3qru4g/sUlY9eNI0SUN2k0xp0rT25MGjePA/EQVPHv0bPHj2Jh4Ub0IlM1PdqgtC08RtPx+YPPO+efPM84Zl4ZkpCeDcmk9+/bkUN+JKRMxGxPWI7LxUHJm1PLwQETcjYuaJo1TM/zFxMSKuRsSNUfI8Z6l46/Pbw1urP731yzffXbpw7Yuvv5/eroFpezEiutv5+V43j2krj4+K+dqwncXuyrCI+Rvdx8U4zeNeczPLsFc7WlfL4nIrX59u7/ZHcatTq49iq72VzW/38gv2h62jPNkHHtV2snGjuZnFdj/NYusgr2v/IP+/7aA/yPM0inwfZeljMDiK+Xxzv5nvZ/txFuu9QTGf500bzf1RHBaxuFzU004jq2PzJN/0f9vb7d7ufjJs7vTbaS9ZrVRfqlTvlqs7aaM5aK6Ua93G3ZVkodUZLSsPmrXuWitNW51mpZ52F5OFVr1erlaThXvNzXatl1SrleXKnfLqYnF2O3n9wXtJp5EsjOKr7d7uoN3pJ1vpTpJ/YjFZqiy/vJjcqibvrG8kGw/v31/feDfuvf/glfU3XysW/a2sZGHpztJSuXqnvFRdPIP7/+Ap+/+kKHqM+4cTKU27AIBnj/4fmIbT6/93HsbhYTZ/mv1/6P/HYlz97+Ek+t/z3v+fwv7hRPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1g9zX76Rnczn42vF/P+KqeeKcSkiZiLi8B/MxsVjOWeLPHNPWT/3lxq+LUWWYXSNS8VxNSLWiuO3/5/2twAAAABn11cf3/ws79bzl/lpF8Qk5TdtZq5/OKZ8pYiYm/9xTNlmRi/PjylZ9u/7QuyPKVt2A+vymJLlt9wujCvbvzJ7LFx+IpTyMDPRcgAAgIk43glMtgsBAABgkj6ddgFMRymOHmUePQvO/vL+zweCV46NAAAAgGdQadoFAAAAAKcu6//9/h8AAACcbfnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M7O3eSoDcNxAP0nIQX6oaKq+16FHRyjR+iyy4oD9BIcgV6hF+AMdNcjVFARZ9AwYkYzikNmRu9JYByFn21EFrYlAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCnP/Vm+evHl59dc/aHbvKMBgAAALhkV2+WzYdZqr9rr39oL31q60VElBFxae5exZuzzKrNqe+5v77Th98RTcKxjXH7ehsR8ypiHhH/Pvb9KwAAAMDrtV2tF2m2nt5mQ3eIjqZPuTkt2pTvv2ZqvIiIevY3U1p5zPucKaz5f4/ie6a0ZgFrkiksLbmNcqU9SvO4n1btJreKIhXlw9/PNnYAAOCKqrPiurMQAAAArunb0B1gGEXcbGWetgLHqWi396ZnNQAAAOAFKobuAAAAANC7Zv7/rM//C+f/AQAAQFfp/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKs3y+1qveiasz90k2c0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5f9dIqjgA4G9mdjbeqbhG2SIiChbaeLm9887rxEIJFv4JQsjtnfFWxTOFdxxCGjtJfY1oKSIosbv/4eoE0sQuxRYRLKxWZnYmmfwA118zm+znA2/ed4dh3vfNQsh33ksAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKw7cP4yQ7dMZxXJzb2n+wkvXbx/rMo42dhaxlcVRn0mfDi9UPUbe5RAAAAJgdSVnfhxB2082lrI87ef2fltdkNf+3T4/jsp4/XveXfVn7Z+2Xn/eePxioMx4nu+mt1UH/8slUWv/fLKfbM395RSt/8vm7lyT/QuL31p8bpvnzjL5+/Piddh7O1ZEtAPBPXCr7Iih/H8r6XpOJATAzWpXCu6z/k06zOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUYbgenizjKISw0DqMM9v7D1ZO6x9t7CyU7frDhxvVe2a3SEMIt1YH/cs1zmXafX7v/p3lwaB/t/7gpRBCU6O/VUz/zgcTXBzCfzh6KzT2wGc1iIsve1ryORtBgz+UAAA4l9KiZXX9brq5lJ2L5kMYfXe0/n+1EocJ6/+9D69vVceq1v+92mbYoLnJLltc+2M0Gt27//rqx8u3+7f7n7xxpfdm7+qNa9duLObvSha9MQEAAODfaRetWv/H8yfX/y9W4jBh/f/ZN70vq2Mls1b/T+hw0a/pTAAAAGbbsy///lt0yvmo3Q5fLK+t3e2Njwefr4yPDaT6t80VrVr/J/NNZwUAAADUYbgeHVn/v1mJw4Tr/099/8KP1XsmIYQLxfr/pZVPBzfrm85Uq+PPiZueIwAAAM26ULTq+n+a7/+PD7Y8xCGE114Zx8W/AZyo/k/e/eqH6ljV/f9X65viVIq74+eR990QWt2mMwIAAOA8e6JoWbH/a7q59NFPF99v2/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULc/AwAA//8JBUHY") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xd2f0}) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c236bfe078ab28a00a2bc153dc7f71d839a831504b2aed60fdca209acd1395192d885fce57bb712f6b00c3e70e7b7ba8533786d8723cc906d891a3633b1591", 0x1d}, 0x60) r3 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x10}) syz_init_net_socket$ax25(0x3, 0x5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5.50870232s ago: executing program 3 (id=619): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3b1, &(0x7f00000020c0)={@multicast, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x37b, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00\b'}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23a5026e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xa, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafa40845f90b6dfc87c6905bbc94d33e4575c853105f543e8e8a8a73b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fd020000000000006ae88c001a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbfeb532188b196e213408c"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65e81ed"}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x62, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x4c, 0x48, 0x100, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r5, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c4850}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) 5.244268112s ago: executing program 0 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r6, 0x905, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}}, 0x0) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x80000000, 0x4}) r8 = socket(0x10, 0x400000000080803, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0xbb5f}}) 5.005044302s ago: executing program 1 (id=621): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) 3.836301367s ago: executing program 4 (id=622): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000400), &(0x7f00000004c0)=r5}, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00008ac000/0x4000)=nil, 0x4000}, 0x4}) process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) 3.616578485s ago: executing program 3 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f00000001c0), &(0x7f0000000280)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x12, 0x0, &(0x7f0000000180)="63eced1525d29c8ab7eecf4a15fbdf638e46", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800, 0x0) 3.614736825s ago: executing program 0 (id=624): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) 3.541668591s ago: executing program 0 (id=625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080), 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baad8ff00000000b5090800000000007baaf0ff00000000bf8700000000000016070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8943, 0x0) 3.377033654s ago: executing program 3 (id=626): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ustat(0x0, 0x0) 1.96105404s ago: executing program 3 (id=627): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x35, 0x8e, 0x8, 0x46d, 0x900, 0x669e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0x22, 0xf}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.864800208s ago: executing program 0 (id=628): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c410cf8a00000000000109022d0001000000000904060002030000000921000000012205000905810300000000"], 0x0) r1 = socket(0x10, 0x800, 0x5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_open_dev$usbfs(&(0x7f0000000140), 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{0x0}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x2b, 0x5, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, 0x0, 0x0) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) read$alg(r4, &(0x7f0000000d80)=""/4103, 0x1007) r5 = socket(0x0, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x0) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.825100301s ago: executing program 1 (id=629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'veth1_to_batadv\x00', &(0x7f0000000280)=@ethtool_sset_info={0x37, 0x441f, 0x7, [0xdfd, 0xffffffff, 0x1, 0xfff]}}) 773.095057ms ago: executing program 1 (id=630): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, {0x9}, {}, {}, {0x591b}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}) 285.851187ms ago: executing program 4 (id=631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 0s ago: executing program 1 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000580)=[@efer={0x2, 0x800}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.799495][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.817393][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.849898][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.860779][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.872755][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.894533][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.914331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.934481][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.958982][ T4109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.981783][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 98.014983][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 98.020686][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.060664][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.078778][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.097933][ T4153] loop0: detected capacity change from 0 to 256 [ 98.121106][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.273083][ T4153] loop0: detected capacity change from 0 to 512 [ 98.360527][ T4153] EXT4-fs (loop0): Unrecognized mount option "obj_type=" or missing value [ 98.452065][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.465247][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.511096][ T4109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.584843][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.605071][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.645589][ T3631] Bluetooth: hci0: command 0x041b tx timeout [ 98.658934][ T4109] device veth0_vlan entered promiscuous mode [ 98.716812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.736913][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.785153][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.797012][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.831976][ T4109] device veth1_vlan entered promiscuous mode [ 98.860857][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.881605][ T4165] loop4: detected capacity change from 0 to 8192 [ 98.898751][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.081393][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.120619][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.252377][ T4109] device veth0_macvtap entered promiscuous mode [ 99.542532][ T4109] device veth1_macvtap entered promiscuous mode [ 99.909829][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.917934][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.984093][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.004967][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.026056][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.047424][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.096579][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.135502][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.145402][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.169166][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.178979][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.245379][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.260329][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.289161][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.308445][ T4109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.456003][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.480139][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.490586][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.539172][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.559128][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.589126][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.598951][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.639086][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.669109][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.690840][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 100.701371][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.739109][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.754238][ T4184] loop0: detected capacity change from 0 to 8192 [ 100.769123][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.779029][ T4109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.819654][ T4109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.850537][ T4109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.861042][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.879953][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.891285][ T4109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.910110][ T4109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.918826][ T4109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.949195][ T4109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.784219][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 101.817354][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 101.979459][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.987556][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.018532][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 102.032149][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.052486][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.091920][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.128397][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.779370][ T3631] Bluetooth: hci0: command 0x0419 tx timeout [ 102.856228][ T4200] loop4: detected capacity change from 0 to 40427 [ 103.023884][ T4200] F2FS-fs (loop4): invalid crc value [ 103.083984][ T388] device hsr_slave_0 left promiscuous mode [ 103.086868][ T4229] loop3: detected capacity change from 0 to 128 [ 103.119236][ T4200] F2FS-fs (loop4): Found nat_bits in checkpoint [ 103.136277][ T388] device hsr_slave_1 left promiscuous mode [ 103.146181][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.177811][ T388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.229772][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.245259][ T388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.268755][ T4200] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 103.290620][ T4229] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.325516][ T4200] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 103.335234][ T388] device bridge_slave_1 left promiscuous mode [ 103.389194][ T4229] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 103.437640][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.454352][ T388] device bridge_slave_0 left promiscuous mode [ 103.464245][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.587538][ T4241] F2FS-fs (loop4): switch extent_cache option is not allowed [ 103.819485][ T388] device hsr_slave_0 left promiscuous mode [ 103.948123][ T388] device hsr_slave_1 left promiscuous mode [ 103.969374][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.024586][ T388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.040142][ T3815] attempt to access beyond end of device [ 104.040142][ T3815] loop4: rw=2049, want=45104, limit=40427 [ 104.099772][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.107204][ T388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.135970][ T388] device bridge_slave_1 left promiscuous mode [ 104.160246][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.211834][ T388] device bridge_slave_0 left promiscuous mode [ 104.218047][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.290677][ T388] device veth1_macvtap left promiscuous mode [ 104.296731][ T388] device veth0_macvtap left promiscuous mode [ 104.329273][ T388] device veth1_vlan left promiscuous mode [ 104.335413][ T388] device veth0_vlan left promiscuous mode [ 104.371085][ T4246] loop3: detected capacity change from 0 to 8192 [ 104.380362][ T388] device veth1_macvtap left promiscuous mode [ 104.386571][ T388] device veth0_macvtap left promiscuous mode [ 104.419611][ T388] device veth1_vlan left promiscuous mode [ 104.425425][ T388] device veth0_vlan left promiscuous mode [ 105.625956][ T4244] loop0: detected capacity change from 0 to 40427 [ 105.661772][ T25] kauditd_printk_skb: 9 callbacks suppressed [ 105.661786][ T25] audit: type=1326 audit(1724021701.107:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4257 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 105.713170][ T25] audit: type=1326 audit(1724021701.107:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4257 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 105.747541][ T25] audit: type=1326 audit(1724021701.107:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4257 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 105.779412][ T25] audit: type=1326 audit(1724021701.107:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4257 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 105.805033][ T25] audit: type=1326 audit(1724021701.107:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4257 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 105.844882][ T4244] F2FS-fs (loop0): invalid crc value [ 105.856406][ T25] audit: type=1326 audit(1724021701.217:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4260 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 105.890060][ T388] team0 (unregistering): Port device team_slave_1 removed [ 105.898347][ T4244] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.918789][ T388] team0 (unregistering): Port device team_slave_0 removed [ 105.928886][ T25] audit: type=1326 audit(1724021701.227:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4260 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 105.959818][ T25] audit: type=1326 audit(1724021701.227:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4260 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 105.987130][ T388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.996808][ T4244] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 106.006911][ T4244] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 106.015746][ T388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.025982][ T25] audit: type=1326 audit(1724021701.467:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4268 comm="syz.4.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 106.058863][ T25] audit: type=1326 audit(1724021701.487:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4268 comm="syz.4.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 106.123083][ T4272] loop4: detected capacity change from 0 to 1024 [ 106.205725][ T388] bond0 (unregistering): Released all slaves [ 106.269270][ T4272] EXT4-fs (loop4): Ignoring removed orlov option [ 106.353873][ T4276] F2FS-fs (loop0): switch extent_cache option is not allowed [ 106.531906][ T4272] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 106.549803][ T4272] System zones: 0-1, 3-12 [ 106.560854][ T4272] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,barrier=0x0000000000000001,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,sysvgroups,grpjquota=,debug,,errors=continue. Quota mode: none. [ 106.677840][ T4272] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 106.767623][ T3803] attempt to access beyond end of device [ 106.767623][ T3803] loop0: rw=2049, want=45104, limit=40427 [ 106.818477][ T388] team0 (unregistering): Port device team_slave_1 removed [ 106.855774][ T388] team0 (unregistering): Port device team_slave_0 removed [ 106.875506][ T388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.891784][ T388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.048599][ T388] bond0 (unregistering): Released all slaves [ 107.827577][ T4293] loop1: detected capacity change from 0 to 512 [ 107.868778][ T4295] xt_NFQUEUE: number of total queues is 0 [ 108.229280][ T4293] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 108.273471][ T4293] ext4 filesystem being mounted at /13/bus supports timestamps until 2038 (0x7fffffff) [ 108.661338][ T4316] loop0: detected capacity change from 0 to 2048 [ 108.734532][ T4316] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 108.810777][ T4316] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 108.864906][ T4316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.872531][ T4316] IPv6: NLM_F_CREATE should be set when creating new route [ 108.879824][ T4316] IPv6: NLM_F_CREATE should be set when creating new route [ 109.339523][ T4310] loop3: detected capacity change from 0 to 40427 [ 109.427385][ T4327] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.136: bg 0: block 234: padding at end of block bitmap is not set [ 109.447964][ T4310] F2FS-fs (loop3): invalid crc value [ 109.547111][ T4327] EXT4-fs (loop0): Remounting filesystem read-only [ 109.646633][ T4310] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.237510][ T4310] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 110.366382][ T4310] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.684894][ T4357] F2FS-fs (loop3): switch extent_cache option is not allowed [ 110.801652][ T25] kauditd_printk_skb: 32 callbacks suppressed [ 110.801686][ T25] audit: type=1326 audit(1724021706.237:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 111.027169][ T25] audit: type=1326 audit(1724021706.307:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 111.124307][ T3808] attempt to access beyond end of device [ 111.124307][ T3808] loop3: rw=2049, want=45104, limit=40427 [ 111.125763][ T25] audit: type=1326 audit(1724021706.307:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 111.169580][ T25] audit: type=1326 audit(1724021706.307:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 111.241336][ T25] audit: type=1326 audit(1724021706.307:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4355 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 111.248414][ T4344] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 111.372972][ T4344] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 111.395690][ T25] audit: type=1326 audit(1724021706.837:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 111.490730][ T25] audit: type=1326 audit(1724021706.887:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 111.615041][ T25] audit: type=1326 audit(1724021706.887:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 111.739316][ T25] audit: type=1326 audit(1724021706.887:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 111.824791][ T25] audit: type=1326 audit(1724021706.887:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x7ffc0000 [ 111.921827][ T4377] loop1: detected capacity change from 0 to 764 [ 112.904096][ T4385] loop0: detected capacity change from 0 to 2048 [ 112.927596][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.986963][ T4385] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 113.035757][ T4385] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 113.062054][ T4385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.176934][ T4394] loop2: detected capacity change from 0 to 4096 [ 113.330150][ T4394] ntfs: volume version 3.1. [ 113.406047][ T4404] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.160: bg 0: block 234: padding at end of block bitmap is not set [ 113.439927][ T4404] EXT4-fs (loop0): Remounting filesystem read-only [ 113.729977][ T4413] loop2: detected capacity change from 0 to 128 [ 115.016702][ T4401] loop4: detected capacity change from 0 to 40427 [ 115.070994][ T4401] F2FS-fs (loop4): invalid crc value [ 115.108168][ T4403] loop1: detected capacity change from 0 to 32768 [ 115.136712][ T4401] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.242113][ T4403] XFS (loop1): Mounting V5 Filesystem [ 115.270763][ T4448] loop3: detected capacity change from 0 to 764 [ 115.290768][ T4401] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 115.299077][ T4451] netlink: 68 bytes leftover after parsing attributes in process `syz.0.181'. [ 115.334853][ T4401] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 115.454651][ T4448] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 115.555093][ T4403] XFS (loop1): Ending clean mount [ 115.626566][ T4462] F2FS-fs (loop4): switch extent_cache option is not allowed [ 116.220925][ T3815] attempt to access beyond end of device [ 116.220925][ T3815] loop4: rw=2049, want=45104, limit=40427 [ 116.252171][ T4472] loop0: detected capacity change from 0 to 2048 [ 116.296403][ T3809] XFS (loop1): Unmounting Filesystem [ 116.336009][ T25] kauditd_printk_skb: 41 callbacks suppressed [ 116.336042][ T25] audit: type=1326 audit(1724021711.777:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411bcdfe79 code=0x7ffc0000 [ 116.458808][ T4472] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.498100][ T4472] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.526613][ T25] audit: type=1326 audit(1724021711.817:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411bcdfe79 code=0x7ffc0000 [ 116.569955][ T4472] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 116.623752][ T25] audit: type=1326 audit(1724021711.867:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f411bcdfe79 code=0x7ffc0000 [ 116.656967][ T4472] EXT4-fs (loop0): This should not happen!! Data will be lost [ 116.656967][ T4472] [ 116.739318][ T4472] EXT4-fs (loop0): Total free blocks count 0 [ 116.743973][ T25] audit: type=1326 audit(1724021711.867:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411bcdfe79 code=0x7ffc0000 [ 116.749528][ T4472] EXT4-fs (loop0): Free/Dirty block details [ 116.846487][ T25] audit: type=1326 audit(1724021711.867:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411bcdfe79 code=0x7ffc0000 [ 116.890865][ T4472] EXT4-fs (loop0): free_blocks=2415919104 [ 116.904343][ T4472] EXT4-fs (loop0): dirty_blocks=16 [ 116.919528][ T4472] EXT4-fs (loop0): Block reservation details [ 116.963499][ T4472] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 117.164643][ T4492] loop1: detected capacity change from 0 to 128 [ 117.260121][ T4492] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 117.764022][ T4516] input: syz0 as /devices/virtual/input/input5 [ 118.398448][ T4499] loop2: detected capacity change from 0 to 40427 [ 118.762443][ T4499] F2FS-fs (loop2): invalid crc value [ 119.008490][ T4499] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.223467][ T4499] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 119.238329][ T4499] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.265415][ T4538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'. [ 119.270513][ T4532] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 119.544944][ T4552] F2FS-fs (loop2): switch extent_cache option is not allowed [ 119.995488][ T4109] attempt to access beyond end of device [ 119.995488][ T4109] loop2: rw=2049, want=45104, limit=40427 [ 120.047173][ T4557] overlayfs: unrecognized mount option "/" or missing value [ 120.063360][ T4559] input: syz1 as /devices/virtual/input/input6 [ 120.136188][ T4542] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 122.269279][ T3612] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.369023][ T4387] Bluetooth: hci3: Frame reassembly failed (-84) [ 122.409158][ T3581] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.419266][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.539179][ T3612] usb 5-1: Using ep0 maxpacket: 8 [ 122.659181][ T3612] usb 5-1: config 0 has no interfaces? [ 122.665308][ T3612] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 122.674522][ T3612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.684508][ T3612] usb 5-1: config 0 descriptor?? [ 122.769241][ T3581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.780282][ T3581] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 122.789452][ T3581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.799673][ T3581] usb 1-1: config 0 descriptor?? [ 122.819657][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.829949][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.919209][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.928388][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.940680][ T4576] udc-core: couldn't find an available UDC or it's busy [ 122.947636][ T4576] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.955705][ T7] usb 3-1: SerialNumber: syz [ 122.971253][ T3571] usb 5-1: USB disconnect, device number 2 [ 123.046252][ T4578] mmap: syz.0.219 (4578) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 123.120099][ T3581] ath6kl: Failed to submit usb control message: -71 [ 123.126891][ T3581] ath6kl: unable to send the bmi data to the device: -71 [ 123.134473][ T3581] ath6kl: Unable to send get target info: -71 [ 123.143167][ T3581] ath6kl: Failed to init ath6kl core: -71 [ 123.166028][ T3581] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 123.178202][ T4592] loop1: detected capacity change from 0 to 40427 [ 123.191056][ T3581] usb 1-1: USB disconnect, device number 3 [ 123.246739][ T4592] F2FS-fs (loop1): invalid crc value [ 123.315608][ T4592] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.350981][ T4592] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 123.358178][ T4592] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.912763][ T4600] F2FS-fs (loop1): switch extent_cache option is not allowed [ 124.627645][ T3579] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 125.070876][ T3809] attempt to access beyond end of device [ 125.070876][ T3809] loop1: rw=2049, want=45104, limit=40427 [ 126.059197][ T4627] input: syz1 as /devices/virtual/input/input7 [ 126.380460][ T3973] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 126.406903][ T3973] Bluetooth: hci6: Injecting HCI hardware error event [ 126.421929][ T4638] input: syz0 as /devices/virtual/input/input8 [ 126.469383][ T3579] Bluetooth: hci6: hardware error 0x00 [ 126.568011][ T7] usb 3-1: 0:2 : does not exist [ 126.586318][ T7] usb 3-1: unit 5 not found! [ 126.645654][ T7] usb 3-1: USB disconnect, device number 2 [ 126.797526][ T4644] fuse: Bad value for 'user_id' [ 126.976783][ T3613] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.739220][ T3613] usb 5-1: device descriptor read/64, error -71 [ 127.859142][ T3612] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 128.009186][ T3613] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.210761][ T3613] usb 5-1: device descriptor read/64, error -71 [ 128.223273][ T4650] loop0: detected capacity change from 0 to 40427 [ 128.232665][ T3612] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.251301][ T3612] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.342400][ T3613] usb usb5-port1: attempt power cycle [ 128.356743][ T4650] F2FS-fs (loop0): invalid crc value [ 128.373665][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 128.387151][ T4650] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.418384][ T4650] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 128.426222][ T4650] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.439511][ T3612] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.452998][ T3612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.461560][ T3612] usb 4-1: Product: syz [ 128.465837][ T3612] usb 4-1: Manufacturer: syz [ 128.473937][ T3612] usb 4-1: SerialNumber: syz [ 128.484212][ T3612] usb 4-1: config 0 descriptor?? [ 128.533077][ T3612] usb 4-1: selecting invalid altsetting 0 [ 128.619243][ T26] Bluetooth: hci1: command 0x0409 tx timeout [ 128.692870][ T4662] F2FS-fs (loop0): switch extent_cache option is not allowed [ 128.877698][ T3973] usb 4-1: USB disconnect, device number 2 [ 128.944825][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.979858][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.006828][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 129.109137][ T7] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 129.169162][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.199139][ T3613] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.249669][ T4641] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 129.992855][ T3803] attempt to access beyond end of device [ 129.992855][ T3803] loop0: rw=2049, want=45104, limit=40427 [ 130.029167][ T3613] usb 5-1: device descriptor read/8, error -71 [ 131.519691][ T7] usb 3-1: can't set config #1, error -71 [ 131.532063][ T3805] udevd[3805]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.648045][ T7] usb 3-1: USB disconnect, device number 3 [ 132.702657][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.711455][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.100045][ T25] audit: type=1326 audit(1724021729.554:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4718 comm="syz.4.259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88d982be79 code=0x0 [ 133.121691][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.184432][ T4723] netlink: 36 bytes leftover after parsing attributes in process `syz.4.259'. [ 133.268015][ T25] audit: type=1326 audit(1724021729.714:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.0.263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x0 [ 133.472259][ T4701] loop2: detected capacity change from 0 to 40427 [ 133.509370][ T3613] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.575420][ T4701] F2FS-fs (loop2): invalid crc value [ 133.586305][ T4701] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.634362][ T4701] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 133.648226][ T4701] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.870418][ T4746] F2FS-fs (loop2): switch extent_cache option is not allowed [ 134.297810][ T4109] attempt to access beyond end of device [ 134.297810][ T4109] loop2: rw=2049, want=45104, limit=40427 [ 134.489319][ T3613] usb 5-1: New USB device found, idVendor=0408, idProduct=4030, bcdDevice=fa.f1 [ 134.503238][ T3613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.512744][ T3613] usb 5-1: Product: syz [ 134.516983][ T3613] usb 5-1: Manufacturer: syz [ 134.524993][ T3613] usb 5-1: SerialNumber: syz [ 134.551499][ T3613] usb 5-1: config 0 descriptor?? [ 134.593311][ T3613] usb 5-1: Found UVC 0.00 device syz (0408:4030) [ 134.605565][ T3613] usb 5-1: No valid video chain found. [ 136.421280][ T3613] usb 5-1: USB disconnect, device number 7 [ 136.989944][ T4780] loop0: detected capacity change from 0 to 40427 [ 137.073621][ T4780] F2FS-fs (loop0): invalid crc value [ 137.086763][ T4780] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.146406][ T4780] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 137.158100][ T4780] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.403658][ T4791] fuse: Bad value for 'user_id' [ 137.427846][ T4792] F2FS-fs (loop0): switch extent_cache option is not allowed [ 137.915590][ T3803] attempt to access beyond end of device [ 137.915590][ T3803] loop0: rw=2049, want=45104, limit=40427 [ 139.200633][ T4809] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 139.840089][ T3613] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.937234][ T154] Bluetooth: hci3: Frame reassembly failed (-84) [ 139.950449][ T154] Bluetooth: hci3: Frame reassembly failed (-84) [ 140.101375][ T4829] overlayfs: overlapping lowerdir path [ 140.397065][ T3613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 140.409129][ T3613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 140.420825][ T3613] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.434446][ T3613] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.447586][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.488051][ T3613] usb 3-1: config 0 descriptor?? [ 140.509357][ T4817] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.627823][ T4838] netlink: 'syz.1.297': attribute type 1 has an invalid length. [ 140.726193][ T25] audit: type=1326 audit(1724021737.174:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 140.791567][ T25] audit: type=1326 audit(1724021737.194:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 140.821277][ T25] audit: type=1326 audit(1724021737.204:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 140.844381][ T25] audit: type=1326 audit(1724021737.204:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 140.877853][ T25] audit: type=1326 audit(1724021737.204:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 140.877885][ T25] audit: type=1326 audit(1724021737.204:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 140.877910][ T25] audit: type=1326 audit(1724021737.204:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 140.877934][ T25] audit: type=1326 audit(1724021737.204:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 140.877960][ T25] audit: type=1326 audit(1724021737.204:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 140.877981][ T25] audit: type=1326 audit(1724021737.204:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc648c6de79 code=0x7ffc0000 [ 140.940494][ T4842] chnl_net:caif_netlink_parms(): no params data found [ 140.983605][ T4849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.298'. [ 141.000994][ T3613] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 141.077445][ T3613] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 141.129971][ T3613] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 141.188174][ T4851] netlink: 'syz.1.299': attribute type 2 has an invalid length. [ 141.241395][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.254819][ T4851] block nbd1: shutting down sockets [ 141.268190][ T4842] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.285274][ T4842] device bridge_slave_0 entered promiscuous mode [ 141.302957][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.313595][ T4842] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.333103][ T4842] device bridge_slave_1 entered promiscuous mode [ 141.483317][ T4842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.500643][ T4842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.553749][ T4842] team0: Port device team_slave_0 added [ 141.574575][ T4842] team0: Port device team_slave_1 added [ 141.611987][ T4863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.302'. [ 141.633733][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.646193][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.712230][ T4865] loop0: detected capacity change from 0 to 256 [ 141.718073][ T4842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.738129][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.745528][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.777620][ T4842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.861921][ T4842] device hsr_slave_0 entered promiscuous mode [ 141.884020][ T4842] device hsr_slave_1 entered promiscuous mode [ 141.894079][ T4842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.910351][ T4842] Cannot create hsr debugfs directory [ 141.969268][ T3616] Bluetooth: hci3: command 0xfc11 tx timeout [ 141.975393][ T3579] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 141.978147][ T4865] loop0: detected capacity change from 0 to 512 [ 142.069185][ T4865] EXT4-fs (loop0): Unrecognized mount option "obj_type=" or missing value [ 142.135717][ T4842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.275325][ T4842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.375293][ T4842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.420301][ T4875] netlink: 60 bytes leftover after parsing attributes in process `syz.0.306'. [ 142.465079][ T4875] netlink: 60 bytes leftover after parsing attributes in process `syz.0.306'. [ 142.517858][ T4842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.760894][ T4842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 142.769993][ T3612] Bluetooth: hci4: command 0x0409 tx timeout [ 142.803127][ T4842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 142.815366][ T4842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 142.846435][ T4842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.184153][ T4842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.195327][ T3613] usb 3-1: USB disconnect, device number 4 [ 143.234026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.244467][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.261714][ T4842] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.341561][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.353928][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.369991][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.377165][ T3972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.404227][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.416766][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.432463][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.446489][ T3972] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.453787][ T3972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.506951][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.540176][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.630436][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.642664][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.656080][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.665414][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.674739][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.689831][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.702109][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.721005][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.737040][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.760787][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.131712][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.146085][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.177400][ T4842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.293872][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.308149][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.360380][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.380189][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.399194][ T3973] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.412989][ T4842] device veth0_vlan entered promiscuous mode [ 144.430728][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.441144][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.461123][ T4842] device veth1_vlan entered promiscuous mode [ 144.555276][ T4842] device veth0_macvtap entered promiscuous mode [ 144.590902][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.606206][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.646242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.677056][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.700209][ T4842] device veth1_macvtap entered promiscuous mode [ 144.717965][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.729400][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.756849][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.799398][ T3973] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 144.807794][ T3973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.817648][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.831035][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.850340][ T3613] Bluetooth: hci4: command 0x041b tx timeout [ 144.858553][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.879086][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.899085][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.908904][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.937604][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.949252][ T3973] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 144.958305][ T3973] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 144.977665][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.988616][ T3973] usb 5-1: Manufacturer: syz [ 144.996234][ T3973] usb 5-1: config 0 descriptor?? [ 145.001281][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.015758][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.029660][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.038944][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.050589][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.064995][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.077189][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.098683][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.113501][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.126631][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.136577][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.147151][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.169206][ T3973] rc_core: IR keymap rc-hauppauge not found [ 145.175127][ T3973] Registered IR keymap rc-empty [ 145.180121][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.193100][ T3973] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 145.209084][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.230275][ T3973] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 145.242931][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.265959][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.279877][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.291331][ T4842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.310508][ T4842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.319412][ T4842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.328119][ T4842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.341162][ T3631] usb 5-1: USB disconnect, device number 8 [ 145.450030][ T4700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.478284][ T4700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.489827][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.502479][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.522300][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.533615][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.929242][ T3612] Bluetooth: hci4: command 0x040f tx timeout [ 147.351970][ T4960] netlink: 'syz.2.331': attribute type 2 has an invalid length. [ 147.484615][ T4960] block nbd2: shutting down sockets [ 147.673990][ T4965] loop0: detected capacity change from 0 to 256 [ 147.822272][ T4965] FAT-fs (loop0): Directory bread(block 64) failed [ 147.851918][ T4965] FAT-fs (loop0): Directory bread(block 65) failed [ 147.884972][ T4965] FAT-fs (loop0): Directory bread(block 66) failed [ 147.914237][ T4965] FAT-fs (loop0): Directory bread(block 67) failed [ 147.945775][ T4965] FAT-fs (loop0): Directory bread(block 68) failed [ 147.965506][ T4965] FAT-fs (loop0): Directory bread(block 69) failed [ 147.999972][ T4965] FAT-fs (loop0): Directory bread(block 70) failed [ 148.006568][ T4965] FAT-fs (loop0): Directory bread(block 71) failed [ 148.059237][ T4965] FAT-fs (loop0): Directory bread(block 72) failed [ 148.069268][ T4965] FAT-fs (loop0): Directory bread(block 73) failed [ 148.242003][ T4967] loop2: detected capacity change from 0 to 1024 [ 148.274561][ T3677] attempt to access beyond end of device [ 148.274561][ T3677] loop0: rw=1, want=1352, limit=256 [ 149.009312][ T3613] Bluetooth: hci4: command 0x0419 tx timeout [ 149.480016][ T25] kauditd_printk_skb: 28 callbacks suppressed [ 149.480032][ T25] audit: type=1326 audit(1724021745.934:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.2.338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f411bcdfe79 code=0x0 [ 150.077787][ T4989] ipt_REJECT: ECHOREPLY no longer supported. [ 150.366614][ T4989] loop4: detected capacity change from 0 to 8192 [ 150.542638][ T4989] netlink: 212 bytes leftover after parsing attributes in process `syz.4.337'. [ 151.521947][ T4996] loop4: detected capacity change from 0 to 512 [ 151.573622][ T4996] EXT4-fs (loop4): orphan cleanup on readonly fs [ 151.587320][ T4996] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 151.612015][ T4996] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 151.629227][ T4996] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.343: Failed to acquire dquot type 0 [ 151.642241][ T4996] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 151.657194][ T4996] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 151.669699][ T4996] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.343: Failed to acquire dquot type 0 [ 151.709292][ T4996] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.343: bg 0: block 64: padding at end of block bitmap is not set [ 151.755937][ T4996] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 151.766426][ T4996] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 151.777852][ T4996] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 151.788019][ T4996] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.343: Failed to acquire dquot type 0 [ 152.017096][ T4996] EXT4-fs (loop4): 1 orphan inode deleted [ 152.044309][ T5000] loop3: detected capacity change from 0 to 40427 [ 152.069902][ T4996] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.180804][ T5000] F2FS-fs (loop3): invalid crc value [ 152.351590][ T5000] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.048326][ T5000] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 153.144184][ T5000] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 153.353642][ T5032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 153.483701][ T5032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 153.945696][ T4842] attempt to access beyond end of device [ 153.945696][ T4842] loop3: rw=2049, want=45104, limit=40427 [ 154.340000][ T3972] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.619205][ T3620] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 155.041197][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 155.049812][ T3620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.067775][ T3620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.081934][ T3612] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.091907][ T3620] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 155.101688][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.127456][ T3620] usb 2-1: config 0 descriptor?? [ 155.256522][ T3972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.269582][ T3972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.279400][ T3972] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 155.288436][ T3972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.298055][ T3972] usb 5-1: config 0 descriptor?? [ 155.462782][ T3612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.483865][ T3612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.494215][ T3612] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 155.509904][ T3612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.525738][ T3612] usb 4-1: config 0 descriptor?? [ 155.539316][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.559653][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.569903][ T7] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 155.580139][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.599559][ T7] usb 3-1: config 0 descriptor?? [ 155.631232][ T3620] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 155.649157][ T3620] samsung 0003:0419:0600.0003: unknown main item tag 0x0 [ 155.656533][ T3620] samsung 0003:0419:0600.0003: item fetching failed at offset 2/5 [ 155.679453][ T3620] samsung 0003:0419:0600.0003: parse failed [ 155.685392][ T3620] samsung: probe of 0003:0419:0600.0003 failed with error -22 [ 155.842968][ T3973] usb 2-1: USB disconnect, device number 2 [ 155.931921][ T3972] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0004/input/input11 [ 156.013833][ T3612] samsung 0003:0419:0600.0005: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 156.035149][ T3972] sony 0003:054C:03D5.0004: input,hidraw1: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 156.063776][ T7] samsung 0003:0419:0600.0006: hidraw2: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 156.096148][ T3972] usb 5-1: USB disconnect, device number 9 [ 156.240814][ T3612] usb 4-1: USB disconnect, device number 3 [ 156.278300][ T3620] usb 3-1: USB disconnect, device number 5 [ 156.625099][ T3973] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.651657][ T5080] loop1: detected capacity change from 0 to 2048 [ 157.692170][ T5083] loop3: detected capacity change from 0 to 128 [ 157.759198][ T3973] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 157.777416][ T3973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.839313][ T5080] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.989418][ T3973] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 158.005957][ T3973] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 158.081462][ T3973] usb 1-1: Manufacturer: syz [ 158.113837][ T3973] usb 1-1: config 0 descriptor?? [ 158.257637][ T3973] rc_core: IR keymap rc-hauppauge not found [ 158.263902][ T3973] Registered IR keymap rc-empty [ 158.274786][ T3973] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 158.310280][ T9] Bluetooth: hci3: Frame reassembly failed (-84) [ 158.336689][ T3973] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 158.731484][ T5094] overlayfs: overlapping lowerdir path [ 158.766971][ T7] usb 1-1: USB disconnect, device number 4 [ 158.950491][ T1432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.067166][ T1432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.184164][ T1432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.252284][ T1432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.651373][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 160.612086][ T3579] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 160.720230][ T5132] program syz.0.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.745146][ T5128] loop2: detected capacity change from 0 to 512 [ 160.825800][ T5128] EXT4-fs (loop2): Unrecognized mount option "rootcontext=unconfined_u" or missing value [ 160.870008][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.877098][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.928628][ T5099] device bridge_slave_0 entered promiscuous mode [ 160.973746][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.003980][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.045405][ T5099] device bridge_slave_1 entered promiscuous mode [ 161.106075][ T25] audit: type=1326 audit(1724021757.554:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.2.376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f411bcdfe79 code=0x0 [ 161.259133][ T3631] Bluetooth: hci6: command 0x0409 tx timeout [ 161.291676][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.310662][ T5150] Invalid ELF section header overflow [ 161.328313][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.488041][ T5161] program syz.0.386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.528338][ T5099] team0: Port device team_slave_0 added [ 161.568921][ T5099] team0: Port device team_slave_1 added [ 161.606453][ T5146] loop4: detected capacity change from 0 to 512 [ 161.687518][ T5146] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 161.783934][ T5146] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.512111][ T5146] EXT4-fs (loop4): 1 orphan inode deleted [ 162.558343][ T5146] EXT4-fs (loop4): 1 truncate cleaned up [ 162.589214][ T5146] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,data_err=ignore,inode_readahead_blks=0x0000000000000020,resuid=0x0000000000000000,block_validity,. Quota mode: none. [ 162.674475][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.730201][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.778033][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.812077][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.826385][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.923581][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.066346][ T5203] program syz.0.397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.087513][ T5099] device hsr_slave_0 entered promiscuous mode [ 163.099717][ T5099] device hsr_slave_1 entered promiscuous mode [ 163.107339][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.117173][ T5099] Cannot create hsr debugfs directory [ 163.191540][ T5209] Invalid option length (0) for dns_resolver key [ 163.329191][ T3616] Bluetooth: hci6: command 0x041b tx timeout [ 163.480265][ T1432] device hsr_slave_0 left promiscuous mode [ 163.501183][ T1432] device hsr_slave_1 left promiscuous mode [ 163.507622][ T1432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.515153][ T1432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.560897][ T1432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.568417][ T1432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.269756][ T1432] device bridge_slave_1 left promiscuous mode [ 164.276097][ T1432] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.330066][ T5229] program syz.4.404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.366243][ T1432] device bridge_slave_0 left promiscuous mode [ 164.378115][ T1432] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.416682][ T1432] device veth1_macvtap left promiscuous mode [ 164.460290][ T1432] device veth0_macvtap left promiscuous mode [ 164.467154][ T1432] device veth1_vlan left promiscuous mode [ 164.481809][ T1432] device veth0_vlan left promiscuous mode [ 164.762040][ T5241] loop4: detected capacity change from 0 to 512 [ 164.873612][ T5245] ipt_REJECT: ECHOREPLY no longer supported. [ 165.159960][ T5245] loop3: detected capacity change from 0 to 8192 [ 165.589169][ T3613] Bluetooth: hci6: command 0x040f tx timeout [ 165.614513][ T5241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.629607][ T1432] team0 (unregistering): Port device team_slave_1 removed [ 165.661546][ T5241] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038 (0x7fffffff) [ 165.673084][ T5244] netlink: 212 bytes leftover after parsing attributes in process `syz.3.405'. [ 165.747832][ T1432] team0 (unregistering): Port device team_slave_0 removed [ 165.832806][ T1432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.867991][ T1432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.931161][ T5251] loop4: detected capacity change from 0 to 256 [ 165.985481][ T1432] bond0 (unregistering): Released all slaves [ 166.006665][ T5251] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.028805][ T25] audit: type=1800 audit(1724021762.474:158): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.408" name="file1" dev="loop4" ino=1048643 res=0 errno=0 [ 166.077550][ T5249] netlink: 'syz.3.407': attribute type 3 has an invalid length. [ 166.167982][ T5256] program syz.0.412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.421455][ T5293] program syz.4.426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.649424][ T3613] Bluetooth: hci6: command 0x0419 tx timeout [ 167.872317][ T5099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.990417][ T5099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 168.052676][ T5099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.118523][ T5099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.154874][ T3973] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 168.239346][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.266658][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.275403][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.309701][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.346851][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.370183][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.383822][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.390949][ T3972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.449644][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.458466][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.480048][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.526870][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.534014][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.555809][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.569275][ T3973] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 168.581021][ T3973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.602269][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.638212][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.648704][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.664304][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.676059][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.690372][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.705993][ T3973] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 168.720315][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.728320][ T3973] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 168.744008][ T3973] usb 4-1: Manufacturer: syz [ 168.747750][ T5099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.771989][ T3973] usb 4-1: config 0 descriptor?? [ 168.806135][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.833743][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.845630][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.889399][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.969163][ T3973] rc_core: IR keymap rc-hauppauge not found [ 168.975240][ T3973] Registered IR keymap rc-empty [ 168.992701][ T3973] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 169.028169][ T3973] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 169.091194][ T3973] usb 4-1: USB disconnect, device number 4 [ 169.118598][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.127829][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.145370][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.216488][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.226319][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.267466][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.286942][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.303725][ T5099] device veth0_vlan entered promiscuous mode [ 169.319016][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.327015][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.352519][ T5099] device veth1_vlan entered promiscuous mode [ 169.405427][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.420539][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.448793][ T5099] device veth0_macvtap entered promiscuous mode [ 169.474165][ T5099] device veth1_macvtap entered promiscuous mode [ 169.498102][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.517590][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.531762][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.553425][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.621165][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.641890][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.659994][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.686033][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.714080][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.765306][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.787463][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.809028][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.818566][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.826849][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.836560][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.861429][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.893487][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.924446][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.978220][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.990737][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.008645][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.025395][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.043282][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.055870][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.070076][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.093488][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.128754][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.148246][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.178282][ T5099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.341176][ T5099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.356960][ T5099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.365853][ T5099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.849642][ T388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.858753][ T388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.918048][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.968454][ T4700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.984607][ T4700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.005275][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.573072][ T5445] Zero length message leads to an empty skb [ 173.524664][ T5470] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 174.429258][ T3616] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 174.669204][ T3616] usb 2-1: Using ep0 maxpacket: 32 [ 174.789405][ T3616] usb 2-1: config 0 has no interfaces? [ 174.795042][ T3616] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 174.814880][ T5508] input: syz0 as /devices/virtual/input/input14 [ 174.852239][ T3616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.872188][ T5508] tmpfs: Unknown parameter 'usrquota' [ 174.896492][ T3616] usb 2-1: config 0 descriptor?? [ 175.365851][ T5500] loop4: detected capacity change from 0 to 40427 [ 175.429008][ T5500] F2FS-fs (loop4): invalid crc value [ 175.532587][ T5500] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.708486][ T5500] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 175.755426][ T5500] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 175.979782][ T5524] F2FS-fs (loop4): switch extent_cache option is not allowed [ 176.147482][ T3815] attempt to access beyond end of device [ 176.147482][ T3815] loop4: rw=2049, want=45104, limit=40427 [ 176.614634][ T5535] netlink: 176 bytes leftover after parsing attributes in process `syz.3.479'. [ 177.042211][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 177.065286][ T3972] usb 2-1: USB disconnect, device number 3 [ 177.344794][ T5564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.489'. [ 178.509698][ T5556] loop2: detected capacity change from 0 to 40427 [ 178.631020][ T5556] F2FS-fs (loop2): invalid crc value [ 178.678994][ T5556] F2FS-fs (loop2): Found nat_bits in checkpoint [ 178.780573][ T5556] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 178.845871][ T5556] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 179.024410][ T5589] F2FS-fs (loop2): switch extent_cache option is not allowed [ 179.235561][ T4109] attempt to access beyond end of device [ 179.235561][ T4109] loop2: rw=2049, want=45104, limit=40427 [ 179.427715][ T5591] syz.4.495 uses obsolete (PF_INET,SOCK_PACKET) [ 181.640397][ T25] audit: type=1326 audit(3871505428.092:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.2.511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f411bcdfe79 code=0x0 [ 181.726881][ T5664] loop4: detected capacity change from 0 to 512 [ 181.834542][ T5670] loop3: detected capacity change from 0 to 1024 [ 181.866973][ T5664] EXT4-fs (loop4): 1 truncate cleaned up [ 181.878875][ T5664] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 181.948570][ T5664] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.513: Invalid block bitmap block 1869049708 in block_group 0 [ 182.003435][ T5670] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,stripe=0x0000000000000002,noblock_validity,errors=remount-ro,noblock_validity,bsddf,sysvgroups,nojournal_checksum,nodelalloc,quota,. Quota mode: writeback. [ 182.033634][ T5664] EXT4-fs (loop4): Remounting filesystem read-only [ 182.040442][ T5664] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 182.093554][ T5664] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.513: invalid indirect mapped block 234881024 (level 0) [ 182.127748][ T5664] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.513: bit already cleared for inode 13 [ 182.201468][ T5632] loop0: detected capacity change from 0 to 40427 [ 182.211617][ T3815] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 182.301684][ T5632] F2FS-fs (loop0): invalid crc value [ 182.329788][ T3815] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 182.356738][ T5683] loop3: detected capacity change from 0 to 8 [ 182.400304][ T5632] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.439767][ T3815] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 182.553093][ T5632] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 182.644181][ T5632] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 182.886241][ T4386] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.897449][ T5701] F2FS-fs (loop0): switch extent_cache option is not allowed [ 182.972284][ T4386] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.100981][ T3803] attempt to access beyond end of device [ 183.100981][ T3803] loop0: rw=2049, want=45104, limit=40427 [ 183.131525][ T4386] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.206985][ T4386] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.416913][ T5706] chnl_net:caif_netlink_parms(): no params data found [ 183.586995][ T3612] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 183.642469][ T5706] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.676872][ T5706] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.734187][ T5706] device bridge_slave_0 entered promiscuous mode [ 183.765612][ T5706] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.793440][ T5706] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.831358][ T5706] device bridge_slave_1 entered promiscuous mode [ 183.839172][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 183.969485][ T3612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.990618][ T3612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.019112][ T3612] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 184.021939][ T5706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.047579][ T3612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.074342][ T5706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.099191][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 184.117727][ T3612] usb 3-1: config 0 descriptor?? [ 184.146177][ T5749] device vlan2 entered promiscuous mode [ 184.153856][ T5749] team0: Device vlan2 is already an upper device of the team interface [ 184.206158][ T5706] team0: Port device team_slave_0 added [ 184.219449][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.235557][ T5706] team0: Port device team_slave_1 added [ 184.241506][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 184.275703][ T26] usb 2-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 184.290655][ T26] usb 2-1: config 1 interface 0 has no altsetting 0 [ 184.309169][ T26] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 184.349454][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.390914][ T5714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'. [ 184.410899][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.411306][ T26] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 184.417867][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.484014][ T5706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.497076][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.504283][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.533235][ T5706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.675024][ T5706] device hsr_slave_0 entered promiscuous mode [ 184.702395][ T5706] device hsr_slave_1 entered promiscuous mode [ 184.722501][ T5706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.739235][ T3612] usbhid 3-1:0.0: can't add hid device: -71 [ 184.748166][ T5706] Cannot create hsr debugfs directory [ 184.755801][ T3612] usbhid: probe of 3-1:0.0 failed with error -71 [ 184.806730][ T3612] usb 3-1: USB disconnect, device number 6 [ 184.997663][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 185.127859][ T5752] loop3: detected capacity change from 0 to 40427 [ 185.184717][ T3972] Bluetooth: hci2: command 0x0409 tx timeout [ 185.193300][ T5752] F2FS-fs (loop3): invalid crc value [ 185.244291][ T5752] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.345540][ T5752] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 185.354865][ T4386] device hsr_slave_0 left promiscuous mode [ 185.382439][ T4386] device hsr_slave_1 left promiscuous mode [ 185.382780][ T5752] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 185.400931][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.422220][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.589819][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.597334][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.609236][ T4386] device bridge_slave_1 left promiscuous mode [ 185.615447][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.627677][ T4386] device bridge_slave_0 left promiscuous mode [ 185.683020][ T5811] F2FS-fs (loop3): switch extent_cache option is not allowed [ 185.716876][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.765836][ T4386] device veth1_macvtap left promiscuous mode [ 185.807413][ T4386] device veth0_macvtap left promiscuous mode [ 185.829687][ T4386] device veth1_vlan left promiscuous mode [ 185.849939][ T4386] device veth0_vlan left promiscuous mode [ 186.032249][ T4842] attempt to access beyond end of device [ 186.032249][ T4842] loop3: rw=2049, want=45104, limit=40427 [ 186.400236][ T4386] team0 (unregistering): Port device team_slave_1 removed [ 186.445966][ T4386] team0 (unregistering): Port device team_slave_0 removed [ 186.478238][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.514499][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.578085][ T5820] MPTCP: kernel_bind error, err=-99 [ 186.639523][ T26] usb 2-1: USB disconnect, device number 4 [ 186.731418][ T4386] bond0 (unregistering): Released all slaves [ 186.741192][ T5826] binder: 5825:5826 ioctl c0306201 0 returned -14 [ 186.749152][ T3571] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 186.756564][ T5826] binder: 5825:5826 ioctl c0306201 0 returned -14 [ 186.873340][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 186.913822][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 187.006188][ T5835] loop2: detected capacity change from 0 to 7 [ 187.012494][ T3571] usb 1-1: Using ep0 maxpacket: 8 [ 187.064555][ T5706] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.066792][ T5835] Dev loop2: unable to read RDB block 7 [ 187.084794][ T5835] loop2: unable to read partition table [ 187.085351][ T5706] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.092657][ T5835] loop2: partition table beyond EOD, truncated [ 187.111866][ T5835] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 187.112504][ T5706] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.146165][ T5706] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.171343][ T3571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.213089][ T3571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.229207][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 187.242438][ T3571] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 187.255416][ T3612] Bluetooth: hci2: command 0x041b tx timeout [ 187.286181][ T3571] usb 1-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 187.295732][ T3972] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 187.304458][ T3571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.325563][ T3571] usb 1-1: config 0 descriptor?? [ 187.389592][ T5706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.422187][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.431074][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.442301][ T5706] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.465395][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.480304][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.491213][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.498285][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.528264][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.536944][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.546358][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.556082][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.563205][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.574184][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.587738][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.597790][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.609488][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.609575][ T3973] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 187.628507][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.636668][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.667707][ T5706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.685022][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.700448][ T3972] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 187.706653][ T5706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.727519][ T26] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 187.729098][ T3972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.737180][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.768351][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.771561][ T3972] usb 4-1: config 0 descriptor?? [ 187.794395][ T26] usb 2-1: config 0 descriptor?? [ 187.810311][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.829352][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.843841][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.856700][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.886074][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.929310][ T3973] usb 3-1: Using ep0 maxpacket: 8 [ 187.936020][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.960383][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.066564][ T5826] fuse: Unknown parameter 'grou00000000000000000000' [ 188.093473][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.109339][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.132817][ T5706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.239364][ T3973] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 188.248479][ T3973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.279091][ T3973] usb 3-1: Product: syz [ 188.283328][ T3973] usb 3-1: Manufacturer: syz [ 188.288413][ T3973] usb 3-1: SerialNumber: syz [ 188.310826][ T3973] usb 3-1: config 0 descriptor?? [ 188.321909][ T26] glorious 0003:258A:0036.0007: unknown main item tag 0x0 [ 188.345644][ T26] glorious 0003:258A:0036.0007: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.1-1/input0 [ 188.360981][ T3973] gspca_main: spca500-2.14.0 probing 046d:0900 [ 188.425082][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.440300][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.462280][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.476445][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.487060][ T5706] device veth0_vlan entered promiscuous mode [ 188.514135][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.534803][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.555453][ T5706] device veth1_vlan entered promiscuous mode [ 188.562949][ T3613] usb 2-1: USB disconnect, device number 5 [ 188.569285][ T3571] usbhid 1-1:0.0: can't add hid device: -71 [ 188.575267][ T3571] usbhid: probe of 1-1:0.0 failed with error -71 [ 188.626493][ T3571] usb 1-1: USB disconnect, device number 5 [ 188.656346][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.670000][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.682614][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.706404][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.747230][ T5706] device veth0_macvtap entered promiscuous mode [ 188.779361][ T3972] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 188.780651][ T5706] device veth1_macvtap entered promiscuous mode [ 188.808259][ T3972] asix: probe of 4-1:0.0 failed with error -71 [ 188.828124][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.853272][ T3972] usb 4-1: USB disconnect, device number 5 [ 188.868135][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.904846][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.926030][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.949674][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.970458][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.990797][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.019083][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.047654][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.092053][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.109371][ T3973] gspca_spca500: reg write: error -71 [ 189.123917][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.139316][ T3973] gspca_spca500: reg write: error -71 [ 189.143180][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.159816][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.162909][ T3973] gspca_spca500: reg write: error -71 [ 189.190230][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.198867][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.209414][ T3973] gspca_spca500: reg write: error -71 [ 189.230912][ T3973] gspca_spca500: reg write: error -71 [ 189.251034][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.254072][ T3973] gspca_spca500: reg write: error -71 [ 189.271774][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.309272][ T3973] gspca_spca500: reg write: error -71 [ 189.329222][ T3581] Bluetooth: hci2: command 0x040f tx timeout [ 189.339435][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.345027][ T3973] gspca_spca500: reg write: error -71 [ 189.370824][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.389383][ T3973] gspca_spca500: reg write: error -71 [ 189.409494][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.414987][ T3973] gspca_spca500: reg write: error -71 [ 189.445476][ T3973] gspca_spca500: reg write: error -71 [ 189.449148][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.471258][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.475226][ T3973] gspca_spca500: reg write: error -71 [ 189.500969][ T5893] loop0: detected capacity change from 0 to 40427 [ 189.509169][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.522461][ T3973] usb 3-1: USB disconnect, device number 7 [ 189.559116][ T5706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.605788][ T5706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.638519][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.660856][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.685105][ T5893] F2FS-fs (loop0): invalid crc value [ 189.702200][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.702643][ T5913] loop2: detected capacity change from 0 to 7 [ 189.720482][ T5706] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.739985][ T5706] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.748922][ T5706] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.766849][ T5893] F2FS-fs (loop0): Found nat_bits in checkpoint [ 189.772904][ T3026] Dev loop2: unable to read RDB block 7 [ 189.778859][ T3026] loop2: unable to read partition table [ 189.779372][ T5706] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.786017][ T3026] loop2: partition table beyond EOD, truncated [ 189.846357][ T5893] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 189.853648][ T5913] Dev loop2: unable to read RDB block 7 [ 189.883501][ T5913] loop2: unable to read partition table [ 189.898454][ T5913] loop2: partition table beyond EOD, truncated [ 189.908500][ T5893] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 189.908999][ T4109] Dev loop2: unable to read RDB block 7 [ 189.926080][ T3677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.938977][ T5913] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 189.975891][ T3677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.983573][ T4109] loop2: unable to read partition table [ 190.025947][ T4109] loop2: partition table beyond EOD, truncated [ 190.038739][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.184061][ T5925] F2FS-fs (loop0): switch extent_cache option is not allowed [ 190.210880][ T4574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.399166][ T4574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.419411][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.457962][ T3803] attempt to access beyond end of device [ 190.457962][ T3803] loop0: rw=2049, want=45104, limit=40427 [ 190.549252][ T3581] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.602800][ T25] audit: type=1326 audit(3871505437.052:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f411bcd6e27 code=0x7ffc0000 [ 190.743094][ T25] audit: type=1326 audit(3871505437.172:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f411bc7b7e9 code=0x7ffc0000 [ 190.819245][ T3581] usb 4-1: Using ep0 maxpacket: 16 [ 190.891989][ T25] audit: type=1326 audit(3871505437.172:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411bcdfe79 code=0x7ffc0000 [ 191.036154][ T5941] netlink: 116 bytes leftover after parsing attributes in process `syz.1.568'. [ 191.059344][ T25] audit: type=1326 audit(3871505437.172:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411bcdfe79 code=0x7ffc0000 [ 191.119425][ T3581] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 191.134800][ T3581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.148035][ T25] audit: type=1326 audit(3871505437.192:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f411bcd6e27 code=0x7ffc0000 [ 191.182381][ T3581] usb 4-1: Product: syz [ 191.192944][ T3581] usb 4-1: Manufacturer: syz [ 191.212066][ T3581] usb 4-1: SerialNumber: syz [ 191.250587][ T3581] r8152-cfgselector 4-1: config 0 descriptor?? [ 191.262584][ T25] audit: type=1326 audit(3871505437.192:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f411bc7b7e9 code=0x7ffc0000 [ 191.333974][ T5944] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 191.356150][ T5944] netlink: 76 bytes leftover after parsing attributes in process `syz.1.569'. [ 191.388470][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 191.407802][ T25] audit: type=1326 audit(3871505437.192:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f411bcd6e27 code=0x7ffc0000 [ 191.410944][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 191.439475][ T25] audit: type=1326 audit(3871505437.192:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f411bc7b7e9 code=0x7ffc0000 [ 191.465892][ T5948] syz.0.562 sent an empty control message without MSG_MORE. [ 191.527502][ T25] audit: type=1326 audit(3871505437.192:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f411bcd6e27 code=0x7ffc0000 [ 191.628330][ T25] audit: type=1326 audit(3871505437.192:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f411bc7b7e9 code=0x7ffc0000 [ 191.659944][ T5952] loop2: detected capacity change from 0 to 7 [ 191.685662][ T3026] Dev loop2: unable to read RDB block 7 [ 191.693362][ T3026] loop2: AHDI p1 p3 p4 [ 191.702623][ T3026] loop2: partition table partially beyond EOD, truncated [ 191.722004][ T3026] loop2: p1 start 2048 is beyond EOD, truncated [ 191.751483][ T5922] udc-core: couldn't find an available UDC or it's busy [ 191.769352][ T5922] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.794089][ T3026] loop2: p3 size 16779293 extends beyond EOD, truncated [ 191.809579][ T3581] r8152-cfgselector 4-1: Unknown version 0x0000 [ 191.819512][ T3581] r8152-cfgselector 4-1: bad CDC descriptors [ 191.853058][ T3581] r8152-cfgselector 4-1: Unknown version 0x0000 [ 191.859719][ T5952] Dev loop2: unable to read RDB block 7 [ 191.865745][ T5952] loop2: AHDI p1 p3 p4 [ 191.874316][ T3581] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 191.887742][ T5952] loop2: partition table partially beyond EOD, truncated [ 191.910008][ T5952] loop2: p1 start 2048 is beyond EOD, truncated [ 191.927325][ T5952] loop2: p3 size 16779293 extends beyond EOD, truncated [ 192.082952][ T5060] udevd[5060]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 192.168362][ T5060] udevd[5060]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 192.431233][ T5954] loop1: detected capacity change from 0 to 40427 [ 192.516420][ T5954] F2FS-fs (loop1): invalid crc value [ 192.585413][ T5954] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.668798][ T5954] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 192.718486][ T5954] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 192.974185][ T5977] F2FS-fs (loop1): switch extent_cache option is not allowed [ 193.174457][ T5099] attempt to access beyond end of device [ 193.174457][ T5099] loop1: rw=2049, want=45104, limit=40427 [ 193.549204][ T3620] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 193.615277][ T5987] loop2: detected capacity change from 0 to 7 [ 193.641878][ T5987] Dev loop2: unable to read RDB block 7 [ 193.665272][ T5987] loop2: unable to read partition table [ 193.672631][ T5987] loop2: partition table beyond EOD, truncated [ 193.682350][ T5987] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 193.809305][ T3620] usb 4-1: Using ep0 maxpacket: 32 [ 193.929438][ T3620] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 193.950130][ T3620] usb 4-1: config 0 has no interface number 0 [ 193.956240][ T3620] usb 4-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 194.000002][ T3620] usb 4-1: config 0 interface 219 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 194.024258][ T3620] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 194.041804][ T3620] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.134847][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.141189][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.149111][ T3972] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.219281][ T3620] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 194.246431][ T3620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.264093][ T3620] usb 4-1: Product: syz [ 194.271733][ T3620] usb 4-1: Manufacturer: syz [ 194.276353][ T3620] usb 4-1: SerialNumber: syz [ 194.311545][ T3620] usb 4-1: config 0 descriptor?? [ 194.339545][ T5979] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 194.354002][ T5979] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 194.429156][ T3972] usb 3-1: Using ep0 maxpacket: 16 [ 194.549347][ T3571] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 194.591071][ T3972] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.599362][ T6005] loop0: detected capacity change from 0 to 40427 [ 194.619742][ T3620] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) driver version 1.00 [ 194.648661][ T3620] usb 4-1: USB disconnect, device number 7 [ 194.697211][ T6005] F2FS-fs (loop0): invalid crc value [ 194.719404][ T6005] F2FS-fs (loop0): Found nat_bits in checkpoint [ 194.722077][ T3972] usb 3-1: config 8 has an invalid interface number: 249 but max is 0 [ 194.751189][ T3972] usb 3-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 194.767618][ T3972] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 194.769573][ T6005] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 194.779142][ T3972] usb 3-1: config 8 has no interface number 0 [ 194.797993][ T3972] usb 3-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 194.815697][ T3972] usb 3-1: config 8 interface 249 altsetting 4 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 194.827296][ T3972] usb 3-1: config 8 interface 249 altsetting 4 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 194.827341][ T6005] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 194.838378][ T3972] usb 3-1: config 8 interface 249 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 194.838402][ T3972] usb 3-1: config 8 interface 249 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 194.878410][ T3972] usb 3-1: config 8 interface 249 has no altsetting 0 [ 194.959474][ T3571] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.978634][ T3571] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.010085][ T3571] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.036252][ T6005] F2FS-fs (loop0): switch extent_cache option is not allowed [ 195.041193][ T3571] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.058666][ T3972] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 195.078722][ T3972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.099135][ T3972] usb 3-1: Product: 䐊 [ 195.103327][ T3972] usb 3-1: Manufacturer: ﻮ䨙഼ꏣ닁ꅼ䶸쨠걷찤匌奅瞽扡涨䧷厂ⵓ咐镼秊岓￞ῥ㠫⪍ạ⚠﫮㲤Ꞙە鵾쾘ຎffl留닪㾻谤網ᯀ銨儎甉둰䆼麁 [ 195.148466][ T3972] usb 3-1: SerialNumber: ꜁粛濼鰪ཟ뚦䐋䯔⥃퉪粈澌짧횔즵㧮䘚갚㏙⏊ﴬክ뻭ꔏ蔵琜麛 [ 195.194645][ T3803] attempt to access beyond end of device [ 195.194645][ T3803] loop0: rw=2049, want=45104, limit=40427 [ 195.249832][ T3571] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.261171][ T3571] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.284219][ T3571] usb 5-1: Product: syz [ 195.298740][ T3571] usb 5-1: Manufacturer: syz [ 195.366797][ T3571] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 195.609798][ T3973] usb 5-1: USB disconnect, device number 10 [ 195.859315][ T3972] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 195.970945][ T3972] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 196.019246][ T3972] dib0700: firmware download failed at 7 with -71 [ 196.625616][ T3972] usb 3-1: USB disconnect, device number 8 [ 197.573669][ T6038] loop0: detected capacity change from 0 to 2048 [ 197.705003][ T6042] loop2: detected capacity change from 0 to 128 [ 197.859032][ T6025] loop1: detected capacity change from 0 to 40427 [ 198.171267][ T6025] F2FS-fs (loop1): invalid crc value [ 198.400636][ T6025] F2FS-fs (loop1): Found nat_bits in checkpoint [ 198.484602][ T6048] loop2: detected capacity change from 0 to 128 [ 198.582140][ T6048] vfat filesystem being mounted at /103/file0 supports timestamps until 2107 (0x10391447e) [ 198.619858][ T6025] F2FS-fs (loop1): Start checkpoint disabled! [ 198.719278][ T6025] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 199.588798][ T4109] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000074f) [ 199.597669][ T4109] FAT-fs (loop2): Filesystem has been set read-only [ 199.605864][ T4109] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000074f) [ 199.908896][ T25] kauditd_printk_skb: 63 callbacks suppressed [ 199.908938][ T25] audit: type=1326 audit(3871505446.352:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5758ae79 code=0x7ffc0000 [ 199.941698][ T25] audit: type=1326 audit(3871505446.352:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5758ae79 code=0x7ffc0000 [ 199.989167][ T25] audit: type=1326 audit(3871505446.352:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7f5758ae79 code=0x7ffc0000 [ 200.037114][ T25] audit: type=1326 audit(3871505446.352:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5758ae79 code=0x7ffc0000 [ 200.063520][ T25] audit: type=1326 audit(3871505446.352:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5758ae79 code=0x7ffc0000 [ 200.086910][ T25] audit: type=1326 audit(3871505446.352:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f7f5758ae79 code=0x7ffc0000 [ 200.134596][ T25] audit: type=1326 audit(3871505446.352:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5758ae79 code=0x7ffc0000 [ 200.188387][ T25] audit: type=1326 audit(3871505446.352:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5758ae79 code=0x7ffc0000 [ 200.435734][ T6063] loop1: detected capacity change from 0 to 2048 [ 201.160401][ T6063] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.250628][ T6059] loop3: detected capacity change from 0 to 40427 [ 201.349200][ T3971] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 201.379573][ T25] audit: type=1326 audit(3871505447.812:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5758ae79 code=0x7ffc0000 [ 201.460380][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 201.467960][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 201.475803][ T25] audit: type=1326 audit(3871505447.812:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5758ae79 code=0x7ffc0000 [ 201.536683][ T6059] F2FS-fs (loop3): invalid crc value [ 201.618420][ T6059] F2FS-fs (loop3): Found nat_bits in checkpoint [ 201.659999][ T6057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.716434][ T6057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.142566][ T6059] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 202.379578][ T6059] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 202.402193][ T3971] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.425645][ T3971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.449100][ T3971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.458388][ T3971] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.476294][ T6057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.557763][ T6059] F2FS-fs (loop3): switch extent_cache option is not allowed [ 202.625317][ T6057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.648747][ T4842] attempt to access beyond end of device [ 202.648747][ T4842] loop3: rw=2049, want=45104, limit=40427 [ 202.660362][ T3971] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.675896][ T3971] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.699341][ T3971] usb 1-1: Product: syz [ 202.703525][ T3971] usb 1-1: Manufacturer: syz [ 202.780372][ T3971] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 202.868853][ T6087] chnl_net:caif_netlink_parms(): no params data found [ 203.027742][ T3973] usb 1-1: USB disconnect, device number 6 [ 203.320619][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.335931][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.349336][ T6087] device bridge_slave_0 entered promiscuous mode [ 203.350203][ T6107] loop3: detected capacity change from 0 to 512 [ 203.730054][ T3620] Bluetooth: hci0: command 0x0409 tx timeout [ 203.806789][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 203.816099][ T6108] tipc: Started in network mode [ 203.821096][ T6108] tipc: Node identity 1, cluster identity 4711 [ 203.827240][ T6108] tipc: Node number set to 1 [ 203.839270][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.846551][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.868671][ T6087] device bridge_slave_1 entered promiscuous mode [ 203.931582][ T6107] EXT4-fs (loop3): Test dummy encryption mode enabled [ 203.944664][ T6128] syz.1.613[6128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.944754][ T6128] syz.1.613[6128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.978051][ T6107] EXT4-fs error (device loop3): __ext4_iget:4861: inode #11: block 1: comm syz.3.609: invalid block [ 203.986348][ T6087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.010849][ T6107] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.609: couldn't read orphan inode 11 (err -117) [ 204.033498][ T6107] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 204.102367][ T6087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.373760][ T6087] team0: Port device team_slave_0 added [ 204.403948][ T6087] team0: Port device team_slave_1 added [ 204.499264][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.520384][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.526844][ T6138] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 204.576374][ T6149] loop0: detected capacity change from 0 to 2048 [ 204.604237][ T6087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.624764][ T6143] overlayfs: statfs failed on './file0' [ 204.647986][ T6149] loop0: p1 p2 p3 [ 204.721485][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.738686][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.815284][ T6087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.861557][ T5061] udevd[5061]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 204.876696][ T3805] udevd[3805]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 206.192094][ T3581] Bluetooth: hci0: command 0x041b tx timeout [ 206.261770][ T5060] udevd[5060]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 206.355155][ T6087] device hsr_slave_0 entered promiscuous mode [ 206.375674][ T6087] device hsr_slave_1 entered promiscuous mode [ 206.409819][ T6087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.447871][ T6087] Cannot create hsr debugfs directory [ 206.994138][ T6057] device hsr_slave_0 left promiscuous mode [ 207.007933][ T6057] device hsr_slave_1 left promiscuous mode [ 207.029992][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.048994][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.066932][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.090203][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.114651][ T6057] device bridge_slave_1 left promiscuous mode [ 207.133182][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.157163][ T6057] device bridge_slave_0 left promiscuous mode [ 207.216893][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.372351][ T6057] device veth1_macvtap left promiscuous mode [ 207.379574][ T6057] device veth0_macvtap left promiscuous mode [ 207.402313][ T6057] device veth1_vlan left promiscuous mode [ 207.427896][ T6057] device veth0_vlan left promiscuous mode [ 208.072073][ T6192] loop1: detected capacity change from 0 to 2048 [ 208.121137][ T6192] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.133112][ T6172] loop4: detected capacity change from 0 to 40427 [ 208.151291][ T6192] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 208.176905][ T6172] F2FS-fs (loop4): invalid crc value [ 208.209273][ T3616] Bluetooth: hci0: command 0x040f tx timeout [ 208.212795][ T6172] F2FS-fs (loop4): Found nat_bits in checkpoint [ 208.288005][ T6172] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 208.330107][ T6172] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 208.331258][ T6057] team0 (unregistering): Port device team_slave_1 removed [ 208.369005][ T6057] team0 (unregistering): Port device team_slave_0 removed [ 208.391178][ T6057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.418342][ T6057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.526636][ T6172] F2FS-fs (loop4): switch extent_cache option is not allowed [ 208.558715][ T6057] bond0 (unregistering): Released all slaves [ 208.600692][ T5706] attempt to access beyond end of device [ 208.600692][ T5706] loop4: rw=2049, want=45104, limit=40427 [ 208.690441][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.713789][ T6193] bridge0: port 3(erspan0) entered blocking state [ 208.720796][ T6193] bridge0: port 3(erspan0) entered disabled state [ 208.728185][ T6193] device erspan0 entered promiscuous mode [ 208.734359][ T6193] bridge0: port 3(erspan0) entered blocking state [ 208.740840][ T6193] bridge0: port 3(erspan0) entered forwarding state [ 208.943700][ T6208] syz.0.625[6208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.943786][ T6208] syz.0.625[6208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.575628][ T3581] Bluetooth: hci0: command 0x0419 tx timeout [ 210.651160][ T6087] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.720269][ T6087] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.877473][ T6087] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.895670][ T6233] loop4: detected capacity change from 0 to 1024 [ 210.909459][ T3631] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 210.916273][ T6087] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.939301][ T3581] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 211.189399][ T3581] usb 1-1: Using ep0 maxpacket: 16 [ 211.221706][ T6233] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 211.353616][ T6233] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 211.362259][ T3581] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 211.406778][ T3581] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.485002][ T6233] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.537264][ T3581] usb 1-1: config 0 has no interface number 0 [ 211.579205][ T3581] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.661859][ T3581] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.697750][ T3581] usb 1-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.706160][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.720889][ T3581] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 211.720919][ T3581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.731589][ T6233] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,. Quota mode: writeback. [ 211.740135][ T3581] usb 1-1: config 0 descriptor?? [ 211.897207][ T3631] usb 4-1: Using ep0 maxpacket: 8 [ 211.908281][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.908826][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.915707][ T6087] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.923881][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.924419][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.924749][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.924823][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.925473][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.951016][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.951810][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.952176][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.952206][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.975924][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.622'. [ 211.979008][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.994192][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.998205][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.998996][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.999654][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.004819][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.005463][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.020266][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.020747][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.024545][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.025007][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.028431][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.279820][ T3631] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 212.279850][ T3631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.279869][ T3631] usb 4-1: Product: syz [ 212.279883][ T3631] usb 4-1: Manufacturer: syz [ 212.279897][ T3631] usb 4-1: SerialNumber: syz [ 212.286314][ T3631] usb 4-1: config 0 descriptor?? [ 212.287350][ T3581] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 212.287378][ T3581] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 212.287399][ T3581] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 212.287419][ T3581] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 212.287440][ T3581] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 212.296019][ T3581] hid-u2fzero 0003:10C4:8ACF.0008: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input6 [ 212.297344][ T3581] hid-u2fzero 0003:10C4:8ACF.0008: U2F Zero LED initialised [ 212.297931][ T3581] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 212.297950][ T3581] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 212.297967][ T3581] CPU: 1 PID: 3581 Comm: kworker/1:3 Not tainted 5.15.164-syzkaller #0 [ 212.297985][ T3581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 212.297996][ T3581] Workqueue: usb_hub_wq hub_event [ 212.298025][ T3581] RIP: 0010:u2fzero_rng_read+0x21a/0x700 [ 212.298046][ T3581] Code: df 41 80 7c 05 00 00 74 08 4c 89 f7 e8 8f 72 fa f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 e8 72 fa f9 48 8d 54 24 60 48 89 13 [ 212.298060][ T3581] RSP: 0018:ffffc90002ee6760 EFLAGS: 00010202 [ 212.298075][ T3581] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 212.298087][ T3581] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888062939e69 [ 212.298099][ T3581] RBP: ffffc90002ee68f0 R08: dffffc0000000000 R09: ffff888062939e2e [ 212.298111][ T3581] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888076cdb388 [ 212.298124][ T3581] R13: 1ffff1100ed9b606 R14: ffff888076cdb030 R15: 1ffff1100ed9b605 [ 212.298134][ T3581] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 212.298146][ T3581] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.298158][ T3581] CR2: 0000000020003000 CR3: 000000007d2df000 CR4: 00000000003506e0 [ 212.298173][ T3581] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.298184][ T3581] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.298194][ T3581] Call Trace: [ 212.298199][ T3581] [ 212.298206][ T3581] ? __die_body+0x5e/0xa0 [ 212.298225][ T3581] ? die_addr+0x95/0xc0 [ 212.298241][ T3581] ? exc_general_protection+0x327/0x4f0 [ 212.298268][ T3581] ? asm_exc_general_protection+0x22/0x30 [ 212.298289][ T3581] ? u2fzero_rng_read+0x21a/0x700 [ 212.298307][ T3581] ? u2fzero_brightness_set+0x280/0x280 [ 212.298331][ T3581] ? _raw_spin_unlock+0x40/0x40 [ 212.298347][ T3581] ? u2fzero_brightness_set+0x280/0x280 [ 212.298362][ T3581] add_early_randomness+0x78/0x140 [ 212.298377][ T3581] hwrng_register+0x430/0x4c0 [ 212.298395][ T3581] devm_hwrng_register+0x43/0xb0 [ 212.298413][ T3581] u2fzero_probe+0x266/0x2e0 [ 212.298428][ T3581] ? hid_map_usage_clear+0x180/0x180 [ 212.298445][ T3581] hid_device_probe+0x2a6/0x3a0 [ 212.298462][ T3581] ? hid_uevent+0x310/0x310 [ 212.298479][ T3581] really_probe+0x24e/0xb60 [ 212.298508][ T3581] __driver_probe_device+0x1a2/0x3d0 [ 212.298528][ T3581] driver_probe_device+0x50/0x420 [ 212.298546][ T3581] __device_attach_driver+0x2b9/0x500 [ 212.298564][ T3581] ? deferred_probe_work_func+0x230/0x230 [ 212.298581][ T3581] bus_for_each_drv+0x183/0x200 [ 212.298597][ T3581] ? subsys_find_device_by_id+0x310/0x310 [ 212.298616][ T3581] __device_attach+0x359/0x570 [ 212.298630][ T3581] ? device_attach+0x20/0x20 [ 212.298644][ T3581] ? kobject_uevent_env+0x36a/0x8d0 [ 212.298658][ T3581] bus_probe_device+0xba/0x1e0 [ 212.298670][ T3581] ? device_add+0xab9/0xfd0 [ 212.298684][ T3581] device_add+0xb48/0xfd0 [ 212.298699][ T3581] hid_add_device+0x3a5/0x510 [ 212.298714][ T3581] usbhid_probe+0xb32/0xec0 [ 212.298734][ T3581] usb_probe_interface+0x5c0/0xaf0 [ 212.298755][ T3581] ? usb_register_driver+0x3d0/0x3d0 [ 212.298773][ T3581] really_probe+0x24e/0xb60 [ 212.298790][ T3581] __driver_probe_device+0x1a2/0x3d0 [ 212.298808][ T3581] driver_probe_device+0x50/0x420 [ 212.298825][ T3581] __device_attach_driver+0x2b9/0x500 [ 212.298841][ T3581] ? deferred_probe_work_func+0x230/0x230 [ 212.298856][ T3581] bus_for_each_drv+0x183/0x200 [ 212.298872][ T3581] ? subsys_find_device_by_id+0x310/0x310 [ 212.298887][ T3581] ? lockdep_hardirqs_on+0x94/0x130 [ 212.298905][ T3581] __device_attach+0x359/0x570 [ 212.298921][ T3581] ? kobject_uevent_env+0x36a/0x8d0 [ 212.298938][ T3581] ? device_attach+0x20/0x20 [ 212.298954][ T3581] ? kobject_uevent_env+0x36a/0x8d0 [ 212.298972][ T3581] bus_probe_device+0xba/0x1e0 [ 212.298986][ T3581] ? device_add+0xab9/0xfd0 [ 212.299004][ T3581] device_add+0xb48/0xfd0 [ 212.299025][ T3581] usb_set_configuration+0x19dd/0x2020 [ 212.299053][ T3581] usb_generic_driver_probe+0x84/0x140 [ 212.299071][ T3581] usb_probe_device+0x130/0x260 [ 212.299087][ T3581] ? usb_register_device_driver+0x240/0x240 [ 212.299104][ T3581] really_probe+0x24e/0xb60 [ 212.299122][ T3581] __driver_probe_device+0x1a2/0x3d0 [ 212.299140][ T3581] driver_probe_device+0x50/0x420 [ 212.299154][ T3581] __device_attach_driver+0x2b9/0x500 [ 212.299171][ T3581] ? deferred_probe_work_func+0x230/0x230 [ 212.299188][ T3581] bus_for_each_drv+0x183/0x200 [ 212.299204][ T3581] ? subsys_find_device_by_id+0x310/0x310 [ 212.299217][ T3581] ? lockdep_hardirqs_on+0x94/0x130 [ 212.299234][ T3581] __device_attach+0x359/0x570 [ 212.299248][ T3581] ? kobject_uevent_env+0x36a/0x8d0 [ 212.299263][ T3581] ? device_attach+0x20/0x20 [ 212.299278][ T3581] ? kobject_uevent_env+0x36a/0x8d0 [ 212.299295][ T3581] bus_probe_device+0xba/0x1e0 [ 212.299309][ T3581] ? device_add+0xab9/0xfd0 [ 212.299324][ T3581] device_add+0xb48/0xfd0 [ 212.299339][ T3581] usb_new_device+0xc17/0x18e0 [ 212.299357][ T3581] ? usb_disconnect+0x8c0/0x8c0 [ 212.299372][ T3581] ? preempt_schedule_thunk+0x16/0x18 [ 212.299393][ T3581] hub_event+0x2cdf/0x54c0 [ 212.299424][ T3581] ? led_work+0x700/0x700 [ 212.299439][ T3581] ? read_lock_is_recursive+0x10/0x10 [ 212.299455][ T3581] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 212.299473][ T3581] ? down_read_killable_nested+0x300/0x350 [ 212.299494][ T3581] ? do_raw_spin_unlock+0x137/0x8b0 [ 212.299521][ T3581] process_one_work+0x8a1/0x10c0 [ 212.299547][ T3581] ? worker_detach_from_pool+0x260/0x260 [ 212.299566][ T3581] ? _raw_spin_lock_irqsave+0x120/0x120 [ 212.299582][ T3581] ? kthread_data+0x4e/0xc0 [ 212.299598][ T3581] ? wq_worker_running+0x97/0x170 [ 212.299615][ T3581] worker_thread+0xaca/0x1280 [ 212.299639][ T3581] kthread+0x3f6/0x4f0 [ 212.299653][ T3581] ? rcu_lock_release+0x20/0x20 [ 212.299669][ T3581] ? kthread_blkcg+0xd0/0xd0 [ 212.299685][ T3581] ret_from_fork+0x1f/0x30 [ 212.299707][ T3581] [ 212.299712][ T3581] Modules linked in: [ 212.303191][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.303285][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.311366][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.316076][ T3581] ---[ end trace 3fc10fccdc733c39 ]--- [ 212.338648][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.391556][ T3581] RIP: 0010:u2fzero_rng_read+0x21a/0x700 [ 212.400153][ T3631] gspca_main: spca500-2.14.0 probing 046d:0900 [ 212.428839][ T3581] Code: df 41 80 7c 05 00 00 74 08 4c 89 f7 e8 8f 72 fa f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 e8 72 fa f9 48 8d 54 24 60 48 89 13 [ 213.278652][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.286797][ T3581] RSP: 0018:ffffc90002ee6760 EFLAGS: 00010202 [ 213.286823][ T3581] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 213.286835][ T3581] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888062939e69 [ 213.286847][ T3581] RBP: ffffc90002ee68f0 R08: dffffc0000000000 R09: ffff888062939e2e [ 213.286859][ T3581] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888076cdb388 [ 213.286872][ T3581] R13: 1ffff1100ed9b606 R14: ffff888076cdb030 R15: 1ffff1100ed9b605 [ 213.286885][ T3581] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 213.286899][ T3581] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.286912][ T3581] CR2: 00007f7f559c4f98 CR3: 000000007ad19000 CR4: 00000000003526e0 [ 213.286928][ T3581] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.286938][ T3581] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.286962][ T3581] Kernel panic - not syncing: Fatal exception [ 213.287334][ T3581] Kernel Offset: disabled [ 213.382647][ T3581] Rebooting in 86400 seconds..