last executing test programs: 4.242865447s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_COPY(r1, 0x8010aa01, 0x0) 3.882296602s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, 0xffffffffffffffff, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006180)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000001c00)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0) 3.818043883s ago: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61", 0x5f}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a3bb6b7fbf033", 0x96}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4adc887d8a4c55ae9e6d3bae49259a935b480ee610800f5c5b35943bdb14ae21509b259f5eaf5f3a71155845156bf64809dee25c0eadad25cac50b01aabdb713c8c9965a19e114c8bbc35054f68bf889f1a6ed430aff1952b2498efc46cbaebc815cb2ea2ff01000067d49ffb192dad5fcac955fee31e59228679db51d72e0ba6bd6fa2545df05482e63a", 0x9b}], 0x5}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000f00)="2ea5d94f90933978352c42a3dad24b4909f57c7dba08e38797ab936fc9c5158f38287dbf6242139b1abfd08aabc9d67efa71c608a29bc1636373ad0461338c453a5bae9e10b5713832e4a6b717d0ebe8c0ee1fd8ccfdd83c514ffa754463ff63126faf04b514e5a27aa54f59f9516e5cba1a7a587a56a944c41c7081bcfd9fc61a4f714f7d7284f39cb83ab2013358814c3043db5fb95583aafd0910c9fc00000000000000000099a821fe7b604fa870b9a8fd792630f0ac3d9042cb305b93b659bc2df4", 0xc4}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x298, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x1f0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd5, 0x3, "82bc53704ab4c13199ac5424884ba508fb42ac529181043c252e22b8b4da8b60b8b955b760d4c6f06634f5550e7e901177c406f802e08d30637d41f2d904604a7d2bb829412d5d4d381d5cfb5b044d4b81deb3b44ffced9979d600f9a8711fac05c4e408dcdf5c230f6f3912bfeffd69472de9b957655499e2990fba26a9e23b156b7768f093956642327438e23df5fee55e885b679c9bcc3d3ec0b35acf834612310622399e6746f5fe79c0cca88dd2d73b2083fb6abe37e4d19699583fb1b8046e2505bcde2526e12321f910a2005fea"}, @TIPC_NLA_NODE_ID={0x35, 0x3, "650b190f9349cee7a89f0baefa15e35e8fddc2480dc011adcb1ecc7a9fff5d0f64080a0c8998298870ab9e23426d10612f"}, @TIPC_NLA_NODE_ID={0x49, 0x3, "c0b77ef5f912e156682c17da2b24eea11baf91b71d57172c534eed7f96b0c2227d22396a9aec6dbe4d57fdbfccdfc771f6f80f8b9c5fe40fa86984988c035f6f787c6d91cc"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9c3db97f6ba02f46568e1b445699c3b27057ee488b0c13520e6acbc35e"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "2a73b8b4821f3e9256d41613bb521e6da4b1e138"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @broadcast}}, {0x14, 0x2, @in={0x2, 0x0, @private}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x298}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.660301537s ago: executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x2}) 3.582210769s ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb0000000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b", 0xdc, 0x4040004, 0x0, 0x0) 3.454864358s ago: executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 3.158404114s ago: executing program 2: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x40, &(0x7f00000000c0)={[{@noacl}, {@skip_balance}, {@compress}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@discard}, {@enospc_debug}, {@datasum}, {@noflushoncommit}, {@ssd_spread}, {@compress}]}, 0x1, 0x55a8, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) pwrite64(r0, &(0x7f0000000000)="98", 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) 2.870147618s ago: executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x800}, {@broadcast, 0x52b1}]}, @noop, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.295923346s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newchain={0x974, 0x64, 0x0, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0x944, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_SRC={0x8}, @TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_ACT={0x908, 0x6, [@m_vlan={0x11c, 0x0, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0xcd, 0x6, "4d54e7b6a1a50474820582defd1f6cf72746afbe28b488a2a2e85fd7f1362b46cca912c8c11441ab170269f50192cb95bd7a75403d3e764b0dbcbc7b93dbced7322a406904c7dc3c41cfed3b15f5db4810524fadc02b9162939b66a4cd3751485d52bf90f84a9368a1cf08d9c58138ec71cdeef5160fd6060d8d727c1656fc8681519bf57f0699a84882b3731c07f7bf2946ccd6bb85ea8d8d2b60ce0506e4bd186134608b2527759b7e52d158bb0b40bd8e0352cf620668e72c815abb29d8733ab5358f34c0cff27c"}, {0xc}, {0xc}}}, @m_skbmod={0xb0, 0x0, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x5d, 0x6, "6a27a65704a2bd6d4ac272d32deaa6dc7687937cb16fc69340a9150c6e56a9dce620b0953a9904babc6a4c1776bf75f17e835a2e19fbdd237076006993996f100a964e7ce568479e5fe24e54ad251a0a8cd8abb380d1209392"}, {0xc}, {0xc}}}, @m_nat={0x1d8, 0x0, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @dev}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @private, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @private}}]}, {0xbd, 0x6, "7d2838afc7a96e7b66bf8e8f7352fae194d6cf921880017131c4bbb2dbe2e97393d434d0e62326d98bbde04aaf1d64d86e674a47beba7e72878f8b4cb969fda908ffffad0e10e1dbee5c7cc46905883ca2b63ff27ee54dac231e71807514b9855114cfe6d019798eaaa5f9920639631415c16f2be812918181f7949164916c63b59260151a5b268478367408ca959e72818bcaac2432229a57764e74bae59333c9be6a46e36a07c3a75b65cdf21590cbcca0d5dde5d9a1437f"}, {0xc}, {0xc}}}, @m_ctinfo={0x48, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x518, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4e9, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0x974}}, 0x0) recvmsg(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000009700)=""/4096, 0x1000}], 0x1}, 0x0) 2.215173999s ago: executing program 3: syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, &(0x7f0000000340), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}], 0x1, 0x0, 0x0) r5 = dup(r0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.762879478s ago: executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0xd0, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0xd0}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.737231772s ago: executing program 1: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 1.659459504s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_COPY(r1, 0x8010aa01, 0x0) 1.647149576s ago: executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x2}) 1.580580066s ago: executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00'}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r3, 0x0, 0x0, 0x2400001) fallocate(r3, 0x3, 0x0, 0xffffffff) 1.439096568s ago: executing program 4: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, 0x0) fchdir(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5309, 0x0) 584.27377ms ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newchain={0x908, 0x64, 0x0, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0x8d8, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_SRC={0x8}, @TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_ACT={0x89c, 0x6, [@m_vlan={0x114, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0xcd, 0x6, "4d54e7b6a1a50474820582defd1f6cf72746afbe28b488a2a2e85fd7f1362b46cca912c8c11441ab170269f50192cb95bd7a75403d3e764b0dbcbc7b93dbced7322a406904c7dc3c41cfed3b15f5db4810524fadc02b9162939b66a4cd3751485d52bf90f84a9368a1cf08d9c58138ec71cdeef5160fd6060d8d727c1656fc8681519bf57f0699a84882b3731c07f7bf2946ccd6bb85ea8d8d2b60ce0506e4bd186134608b2527759b7e52d158bb0b40bd8e0352cf620668e72c815abb29d8733ab5358f34c0cff27c"}, {0xc}, {0xc}}}, @m_skbmod={0xbc, 0x0, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x69, 0x6, "6a27a65704a2bd6d4ac272d32deaa6dc7687937cb16fc69340a9150c6e56a9dce620b0953a9904babc6a4c1776bf75f17e835a2e19fbdd237076006993996f100a964e7ce568479e5fe24e54ad251a0a8cd8abb380d12093922f42711efd4c23e976683b4e"}, {0xc}, {0xc}}}, @m_nat={0x1d8, 0x0, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @dev}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @private, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @private}}]}, {0xbd, 0x6, "7d2838afc7a96e7b66bf8e8f7352fae194d6cf921880017131c4bbb2dbe2e97393d434d0e62326d98bbde04aaf1d64d86e674a47beba7e72878f8b4cb969fda908ffffad0e10e1dbee5c7cc46905883ca2b63ff27ee54dac231e71807514b9855114cfe6d019798eaaa5f9920639631415c16f2be812918181f7949164916c63b59260151a5b268478367408ca959e72818bcaac2432229a57764e74bae59333c9be6a46e36a07c3a75b65cdf21590cbcca0d5dde5d9a1437f"}, {0xc}, {0xc}}}, @m_ctinfo={0x48, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x4a8, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x479, 0x6, "adf711eef01d7cd19e7207914eb033ced4afbed493d81e1ec1a1bef16948dbd035883f26d174f12881865c276d45c58dc10abbff52cad51409751f2de6cb148809a01493cead59924ad740352b8d9e4b0ad8c6afc0bd84a22ce4df215931a1858ea220467eaa1010919425956def0b972600724c1f6acd6cc6e7d2d3f474a6b71711a369bbf692a7caadec5c7c4ad9b6fafb36d7ec64ba625571669ea30421f42684e37a8209ce689b7bb2e870b410b4d4885b02274dfeac3392a6816ed8f5b0c50e44863c299dede73e87bb0c097201ca9f6422561236d192d664f21b5456138895702fea81d3b45eb25436d9cc766a707d6d1f80a9187e82a87456d5a96a90b7797b64bfaa2c267affda471bbded75d013943c65fd069e711f9b72ddd03f4598f1911d36b3f9e591304de01e4414eb8ac5ca5debf7997f00756678fcc03924ba749f6521d05f3c68c0a91858dca3182fc6a6407dbd6c82230f6ba365204cb66003765930683cc191b521f1649e9403c411d1504d7a9ae725f25fa2c55c748811b66817564d36b72b5603a826f4d6df66e19c48f12eb6479ccd3fe44233f2113f214cffa1ea996b775c8389932bb95a9113b704e4e6e0e8c5b0720135309ce70de6c525122f7cd7ee8becfa44b0e78eba3bf373f4348fafdb9f6d50d41b72021c57da1f0abf714dc27f1844bcd68427eac6e7ace5ef2a78f3b2549fc37ceb0374e2a41669c2a88b11116567e8f1a446a6a99c2a41cc71e11cab8c78f583eec4e0f46a9fb46e87b122bcd2da38df0c46b8e4c677e8fbdf953df2a47656d1fa12f80fc34ee61c7431cb3a0509f43be5c459e6a308e2ae7f353845994dccc3b8501041b5975dfa8f0af52ba1ba5499ef20661fd80a314f87fd634fa68b3a406eca8c0338a2c43fa31c6e811acde88bea3593ccb5bbe12b62402c4b83ea743b7ddf807b746bf64ac0001edd036b72e17efce905d00dbd258dc64f577dddba34b147fcb15936aff4f7717cea46dff040c7c2e88032e590df9c42bec05ee06eeb67ffa05da5af6a86db595dc7fbe99badd16dfd532fc683c421c7be281dbb48decbaaabce4169b6b357c6f3a69ac454d330c08bd0e5cc63676edc1eb892d43fdda16a54eb30d953deb95920a46698826785b9634517c0b2eb3f1a8786aeee2f8ef395db2814b1f9bcb03d4792287d42cd3c6b8f662e43f8fe9af6da4090dab25ecc9d3ed54a62b30fd5f935138db50aba388964a47d1b946498012a909d7e8b93de8712f73d0ebd2b34192eb030c4cf4e2bf88f576023995ebea491d4fa178e21b0a4a93231d68b4167ca00d664dbc61753ada627bbf12862cce4108a80688cbe98df005f5f0175fae71f7b7148e27b4f387559cd01a7b14adc1c64dc8d0c3c64c9d87950978832c696c899c26985d544cbcee03da696dd20ce78279dac3e1c8ebe118e4953d1b11d2f992342b1b1e701385cbe63d32550969b1c7766a7d0f5f0bb3ea651f5f7fbdf3f5d670ab2d784276c5ba6475f250ee28e95f88ef53ab4f56aa2113d65217f243902999fcb6bc5b3b6de5cc3d5faa02335a3ef9c31ecfa2ed0b04e347c9805a18aac0740a778cb57a47247dbff8c2e"}, {0xc}, {0xc}}}]}]}}]}, 0x908}}, 0x0) recvmsg(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000009700)=""/4096, 0x1000}], 0x1}, 0x0) 489.652354ms ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newchain={0x974, 0x64, 0x0, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0x944, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_SRC={0x8}, @TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_ACT={0x908, 0x6, [@m_vlan={0x11c, 0x0, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0xcd, 0x6, "4d54e7b6a1a50474820582defd1f6cf72746afbe28b488a2a2e85fd7f1362b46cca912c8c11441ab170269f50192cb95bd7a75403d3e764b0dbcbc7b93dbced7322a406904c7dc3c41cfed3b15f5db4810524fadc02b9162939b66a4cd3751485d52bf90f84a9368a1cf08d9c58138ec71cdeef5160fd6060d8d727c1656fc8681519bf57f0699a84882b3731c07f7bf2946ccd6bb85ea8d8d2b60ce0506e4bd186134608b2527759b7e52d158bb0b40bd8e0352cf620668e72c815abb29d8733ab5358f34c0cff27c"}, {0xc}, {0xc}}}, @m_skbmod={0xb0, 0x0, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x5d, 0x6, "6a27a65704a2bd6d4ac272d32deaa6dc7687937cb16fc69340a9150c6e56a9dce620b0953a9904babc6a4c1776bf75f17e835a2e19fbdd237076006993996f100a964e7ce568479e5fe24e54ad251a0a8cd8abb380d1209392"}, {0xc}, {0xc}}}, @m_nat={0x1d8, 0x0, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @dev}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @private, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @private}}]}, {0xbd, 0x6, "7d2838afc7a96e7b66bf8e8f7352fae194d6cf921880017131c4bbb2dbe2e97393d434d0e62326d98bbde04aaf1d64d86e674a47beba7e72878f8b4cb969fda908ffffad0e10e1dbee5c7cc46905883ca2b63ff27ee54dac231e71807514b9855114cfe6d019798eaaa5f9920639631415c16f2be812918181f7949164916c63b59260151a5b268478367408ca959e72818bcaac2432229a57764e74bae59333c9be6a46e36a07c3a75b65cdf21590cbcca0d5dde5d9a1437f"}, {0xc}, {0xc}}}, @m_ctinfo={0x48, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x518, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4e9, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0x974}}, 0x0) recvmsg(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000009700)=""/4096, 0x1000}], 0x1}, 0x0) 449.564481ms ago: executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r0) 445.956891ms ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newchain={0x35c, 0x64, 0x0, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0x32c, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_SRC={0x8}, @TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_ACT={0x2f0, 0x6, [@m_vlan={0x80, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x49, 0x6, "4d54e7b6a1a50474820582defd1f6cf72746afbe28b488a2a2e85fd7f1362b46cca912c8c11441ab170269f50192cb95bd7a75403d3e764b0dbcbc7b93dbced7322a406904"}, {0xc}, {0xc}}}, @m_skbmod={0x54, 0x0, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x1d0, 0x0, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @dev}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @private, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @private}}]}, {0xb5, 0x6, "7d2838afc7a96e7b66bf8e8f7352fae194d6cf921880017131c4bbb2dbe2e97393d434d0e62326d98bbde04aaf1d64d86e674a47beba7e72878f8b4cb969fda908ffffad0e10e1dbee5c7cc46905883ca2b63ff27ee54dac231e71807514b9855114cfe6d019798eaaa5f9920639631415c16f2be812918181f7949164916c63b59260151a5b268478367408ca959e72818bcaac2432229a57764e74bae59333c9be6a46e36a07c3a75b65cdf21590cbcc"}, {0xc}, {0xc}}}, @m_ctinfo={0x48, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x35c}}, 0x0) recvmsg(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000009700)=""/4096, 0x1000}], 0x1}, 0x0) 418.028355ms ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb0000000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b", 0xdc, 0x4040004, 0x0, 0x0) 409.023447ms ago: executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8", 0x8f}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a3bb6b7fbf033", 0x96}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4adc887d8a4c55ae9e6d3bae49259a935b480ee610800f5c5b35943bdb14ae21509b259f5eaf5f3a71155845156bf64809dee25c0eadad25cac50b01aabdb713c8c9965a19e114c8bbc35054f68bf889f1a6ed430aff1952b2498efc46cbaebc815cb2ea2ff01000067d49ffb192dad5fcac955fee31e59228679db51d72e0ba6bd6fa2545df05482e63a", 0x9b}], 0x5}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000f00)="2ea5d94f90933978352c42a3dad24b4909f57c7dba08e38797ab936fc9c5158f38287dbf6242139b1abfd08aabc9d67efa71c608a29bc1636373ad0461338c453a5bae9e10b5713832e4a6b717d0ebe8c0ee1fd8ccfdd83c514ffa754463ff63126faf04b514e5a27aa54f59f9516e5cba1a7a587a56a944c41c7081bcfd9fc61a4f714f7d7284f39cb83ab2013358814c3043db5fb95583aafd0910c9fc00000000000000000099a821fe7b604fa870b9a8fd792630f0ac3d9042cb305b93b659bc2df4", 0xc4}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x298, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x1f0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd5, 0x3, "82bc53704ab4c13199ac5424884ba508fb42ac529181043c252e22b8b4da8b60b8b955b760d4c6f06634f5550e7e901177c406f802e08d30637d41f2d904604a7d2bb829412d5d4d381d5cfb5b044d4b81deb3b44ffced9979d600f9a8711fac05c4e408dcdf5c230f6f3912bfeffd69472de9b957655499e2990fba26a9e23b156b7768f093956642327438e23df5fee55e885b679c9bcc3d3ec0b35acf834612310622399e6746f5fe79c0cca88dd2d73b2083fb6abe37e4d19699583fb1b8046e2505bcde2526e12321f910a2005fea"}, @TIPC_NLA_NODE_ID={0x35, 0x3, "650b190f9349cee7a89f0baefa15e35e8fddc2480dc011adcb1ecc7a9fff5d0f64080a0c8998298870ab9e23426d10612f"}, @TIPC_NLA_NODE_ID={0x49, 0x3, "c0b77ef5f912e156682c17da2b24eea11baf91b71d57172c534eed7f96b0c2227d22396a9aec6dbe4d57fdbfccdfc771f6f80f8b9c5fe40fa86984988c035f6f787c6d91cc"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9c3db97f6ba02f46568e1b445699c3b27057ee488b0c13520e6acbc35e"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "2a73b8b4821f3e9256d41613bb521e6da4b1e138"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @broadcast}}, {0x14, 0x2, @in={0x2, 0x0, @private}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x298}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 342.662917ms ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000006180)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000001c00)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0) 312.106002ms ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0xd0, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0xd0}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 288.268715ms ago: executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 235.801853ms ago: executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x2}) 221.012255ms ago: executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x800}, {@broadcast, 0x52b1}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 180.740841ms ago: executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00'}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r3, 0x0, 0x0, 0x2400001) fallocate(r3, 0x3, 0x3, 0x0) 59.79613ms ago: executing program 3: write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x28, 0x5593, &(0x7f000000cf80)="$eJzs3EtvG1UUAOAzefRNGyEW7DpShZRIdVSnD8GKAq14iFYVjwUrcGLXcmt7oth1Q1ddsEQs+CcIJFYs+Q0sYAk7xALEDqnIcyfQ9AF9uI7afJ80PjPH12fuHVmRzkzkAHathfzP37M4HPsjYjYiDmVR7mfVFnEz4mwa+2JEHI2Imdu2rMr/k9gTEQci4vC4eKqZVW99eXx07PRv7/zx3Q975w5+9e2PO7pwYEe9FBG99bR/vZdi0U7xSpVvjDpl7J0aVXF9W41ekfLXW6tlheuNrXGNMp5sp/HF+rXBOF7uNtbGsd25XObX++mEg1F7q874A/mVxkZ53GytlrEzKMrYvpHOu3kj/W27MRimOs2q3qdl+RgOt2LKtzZbaT3rV8u41h9W+VS3aLY2x3FUxep0sVZ0m+U8Vh/xIj8F3u30r23mo9bGoFP089PL9ZeX62dq9Y2i2Rq2TtUaveaZU/liuzseVhu2Gr2z7aJod1vLa0VvKV9sr63V6vV88VxrtdPo5/X68snlE7XTS9Xe8fzNix/m3Wa+OI6vd/rXhp3uIL9cbOTpE0v5yvLJV5byY/X8/QuX8kvvnT9/4dIHH5/76OJrF95+oxp017TyxZUTKyu1+onaSn1pF63/s2rSD7H+7N7pn396vMsGyX2+YADc3139f9zZ/4f+H5i4x+n/e1er4//t/2MuHr7/jwfp/2OS/f+4pdq1/f+tI2nvAfrfmR3of+dD//8E1w+P5dH6/z0TnwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFP3y/zXb5U7C+n4YJV/rko9Xx1nETETEbfuYTb2bKs5W9WZv8/4+Tvm8H0WZYXxOfZW24GIOFttfx150lcBAAAAnl3f3Dz6RerW08vCTk+IaUo3bWYOfTKhellEzC/8OqFqM+OXFyZUrPx+z8XmhKqVN7D2TahYuuU2N6lqD2R2W9h3W8hSmJnqdAAAgKnY3glMtwsBAABgmj7/z3dfndo8mLIsth5lbj0LLv/z/t8Hgvu3vQcAAAA8hbKdngAAAADwxJX9v9//AwAAgGdb+v0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBvdu4nN20gigPws8HQvyqquu9VuoNj9Ahddlk4QC/BEegVegHOQKQscoQIIuwJkhOQIjHGCfo+yXZmHP08A2zeWBoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJNtZr9+/P977k529158swGAAAAOGZTrWb1H5Om/TH1f05dX1O7iIgyIo7V7oMYtTIHKac68f/VkzH8j6gT9v3jdHyIiB/puP/S9acAAAAA12u9WE6bar05pSWA235HxYU0izblp5+Z8oqIqCZ3mdLK/elbprD69z2M35nS6gWsd5nCmiW34fF7o1wPaRu0Lo8zmddfYt0qu3kuAADQp3YlcKIKAQAA4Ar86nsAXMLz0r44nA7vGcfNJb0QfN9qAQAAAG9Q0fcAAAAAgM7V9f9r2v+vsP8fAAAAZNfs/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECXNtVqtl4sp6fuz1+Ys92dJ9+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH9ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt3/etqooAODHfrbbFBAhoEgEUJE6wEJTt7R0RQgUMfARkKLUKQGXQpuBVhElCxvK3AXBiBASKGz5Dp0bqUvZOmQIEhND0PuXPjumrQp9TprfT7q+x8+v7557bVU5vs8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWtd+PVZhEn6cNkHpfHbm+vLKT95lCf2li7M5O2NG7UnPcB8Fr1yfHp8SUCAADA4ZGU9X1E3G2vz6V9czKr/9vlOWnN/8NzeVzW88N1/+b2ytHipZmy/v/9t3sv7Q40mWTjpBddXOr3Tu1NpfWEprjvPf/QM1rZymffvSTZG9L8cPXFrXa2no3vbt16v5OFR+rIFgB4HCfLvgjKv4fSvjvOxAA4NFqVwrus/5PJ8eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIet1XimjBsRMdO6H6c2t1cWRvXfrN2Z2SjauZs316rXTC/RjojFpX7vVI1z2b/K1bz+2Xy/37ty9VrdwfGIGPHSjcEjZZrD/zwpjv/rEJ2IGDhy4uURaXz8CKkOXWdPUHw8o941nEjn99CTG0OLOXzOezu5cXwA6gqaxfvzJIaYqP19HwzKz97/f+Ua/ysCAOBQaBctLfHuttfn0mONqYidHwfr/zcqcQzU/Ts38iP5841K/X/vk3O3q2NV6/9uTfM7CGaXL30xe/Xa9beWLs1f7F3sff726e473TPnz549P5t9VzK7GE3fmAAAAPAfdIpWrf+bU3v3/49V4njA/n++JZzX/19+3/26Olai/h/p/qbfuDMBAAA4jDq70Quv//VnY8QZjU4nvppfXr7SzR93n5/OH2tN9zEdKVq1/k+mxp0VAAAAUIet1cbA/v+FShwP2P+v3v//7E+v/FK9ZhIRExGXI6J3cuFy/0J909nX6vihcjZQZ9wzBQAAYFwmilbd/29n9/83d295aEbEmyci/i5+wx+PWP8nH3z7c3Ws6v3/Z2qd5f7TnM7XI+unI1rT484IAACAp9nRoqXF/h/t9blPfz32Ucf9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+ycAAP//vNkl+w==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr$security_evm(r1, &(0x7f00000000c0), &(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0xae, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf502, 0x5) 0s ago: executing program 2: syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, &(0x7f0000000340), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {0x0}], 0x2, 0x0, 0x0) r5 = dup(r0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ T5390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.711317][ T3584] Bluetooth: hci1: command tx timeout [ 189.732121][ T5390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.909957][ T5390] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 189.940802][ T5390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.971172][ T5390] usb 2-1: config 0 descriptor?? [ 190.007799][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.014981][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.023168][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.032315][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.056050][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.067950][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.076603][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.087530][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.096387][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.104987][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.117632][ T6223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.135480][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.151390][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.160067][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.168944][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.498166][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.507450][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.554173][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.562014][ T5390] usbhid 2-1:0.0: can't add hid device: -71 [ 190.568003][ T5390] usbhid: probe of 2-1:0.0 failed with error -71 [ 190.575525][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.601452][ T5390] usb 2-1: USB disconnect, device number 4 [ 190.610849][ T6210] device veth0_vlan entered promiscuous mode [ 190.636269][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.644272][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.663571][ T6210] device veth1_vlan entered promiscuous mode [ 190.686149][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.704372][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.728468][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.746583][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.761073][ T3584] Bluetooth: hci5: command tx timeout [ 190.776872][ T6223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.803685][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.812502][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.840698][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.849868][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.879670][ T6210] device veth0_macvtap entered promiscuous mode [ 190.911804][ T6210] device veth1_macvtap entered promiscuous mode [ 190.936336][ T6223] device veth0_vlan entered promiscuous mode [ 190.966859][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.982935][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.005440][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.024566][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.048236][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.088022][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.116855][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.154877][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.181166][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.193578][ T6360] loop1: detected capacity change from 0 to 2048 [ 191.201176][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.212657][ T6360] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 191.224186][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.237495][ T6360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.247050][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.272993][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.283806][ T6223] device veth1_vlan entered promiscuous mode [ 191.306546][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.388352][ T6366] loop3: detected capacity change from 0 to 256 [ 191.484427][ T6366] exFAT-fs (loop3): bogus data start sector [ 191.490450][ T6366] exFAT-fs (loop3): failed to read boot sector [ 191.496731][ T6366] exFAT-fs (loop3): failed to recognize exfat type [ 192.169985][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.178361][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.186490][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.195510][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.239960][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.250487][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.260404][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.271357][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.281972][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.292585][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.302451][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.314095][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.351173][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.402378][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.434023][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.458547][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.488196][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.509220][ T6223] device veth0_macvtap entered promiscuous mode [ 192.537394][ T6210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.572166][ T6210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.596354][ T6210] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.630259][ T6210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.677225][ T6223] device veth1_macvtap entered promiscuous mode [ 192.754829][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.816401][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.864929][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.901000][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.910845][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.930967][ T26] audit: type=1326 audit(1717480652.937:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9414c7cf69 code=0x0 [ 192.958310][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.994449][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.024430][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.054032][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.095167][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.122380][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.166001][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.179349][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.216756][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.286337][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.323656][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.337131][ T6373] loop3: detected capacity change from 0 to 40427 [ 193.354434][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.355116][ T6373] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 193.381386][ T6373] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 193.403284][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.409652][ T6373] F2FS-fs (loop3): invalid crc value [ 193.426450][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.438478][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.441897][ T6373] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 3 [ 193.460203][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.461107][ T6373] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 193.484171][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.495415][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.506762][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.518273][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.530813][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.539841][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.558045][ T4051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.594404][ T4051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.611969][ T6223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.620692][ T6223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.639404][ T6223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.649579][ T6223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.670324][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.696485][ T4740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.743906][ T4740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.811236][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.862067][ T4740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.877295][ T4740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.996503][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.034003][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.040326][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.178626][ T3632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.234387][ T3632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.290990][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.613739][ T6405] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 194.978902][ T6411] loop0: detected capacity change from 0 to 2048 [ 195.010988][ T153] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 195.071710][ T6411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 195.119458][ T6411] EXT4-fs (loop0): unmounting filesystem. [ 195.261061][ T153] usb 2-1: Using ep0 maxpacket: 16 [ 195.381240][ T153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.403476][ T153] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.437858][ T153] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.468986][ T153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.497999][ T153] usb 2-1: config 0 descriptor?? [ 195.638213][ T26] audit: type=1326 audit(1717480655.647:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9414c7cf69 code=0x0 [ 195.779697][ T6433] ptrace attach of "/root/syz-executor.4 exec"[6210] was attempted by "/root/syz-executor.4 exec"[6433] [ 195.865526][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.198973][ T26] audit: type=1800 audit(1717480656.207:641): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1950 res=0 errno=0 [ 196.277869][ T26] audit: type=1804 audit(1717480656.287:642): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2423650652/syzkaller.kbM5XT/39/file0" dev="sda1" ino=1950 res=1 errno=0 [ 196.564773][ T26] audit: type=1326 audit(1717480656.577:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8887cf69 code=0x7ffc0000 [ 196.621283][ T26] audit: type=1326 audit(1717480656.577:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e8887cf69 code=0x7ffc0000 [ 196.691098][ T26] audit: type=1326 audit(1717480656.577:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8887cf69 code=0x7ffc0000 [ 196.772438][ T26] audit: type=1326 audit(1717480656.587:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e8887cf69 code=0x7ffc0000 [ 196.841461][ T26] audit: type=1326 audit(1717480656.627:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8887cf69 code=0x7ffc0000 [ 196.892297][ T26] audit: type=1326 audit(1717480656.647:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e8887a6e7 code=0x7ffc0000 [ 197.443020][ T6465] ptrace attach of "/root/syz-executor.3 exec"[5785] was attempted by "/root/syz-executor.3 exec"[6465] [ 197.533291][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.721071][ T153] usbhid 2-1:0.0: can't add hid device: -71 [ 197.727154][ T153] usbhid: probe of 2-1:0.0 failed with error -71 [ 197.744965][ T153] usb 2-1: USB disconnect, device number 5 [ 197.854103][ T6476] loop3: detected capacity change from 0 to 256 [ 197.864548][ T6476] FAT-fs (loop3): bread failed, FSINFO block (sector = 253) [ 197.993373][ T6477] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 200.229305][ T26] kauditd_printk_skb: 240 callbacks suppressed [ 200.229322][ T26] audit: type=1326 audit(1717480660.237:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9414c7cf69 code=0x0 [ 200.418260][ T6517] usb usb5: usbfs: process 6517 (syz-executor.1) did not claim interface 0 before use [ 200.463222][ T6517] device batadv0 entered promiscuous mode [ 202.979178][ T26] audit: type=1326 audit(1717480662.987:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9414c7cf69 code=0x7ffc0000 [ 203.026186][ T6547] loop3: detected capacity change from 0 to 2048 [ 203.074884][ T6547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.093573][ T6547] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 203.149765][ T5785] EXT4-fs (loop3): unmounting filesystem. [ 203.169702][ T6558] loop1: detected capacity change from 0 to 1024 [ 203.182666][ T6558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 203.185179][ T26] audit: type=1326 audit(1717480662.997:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f9414c7cf69 code=0x7ffc0000 [ 203.227080][ T26] audit: type=1326 audit(1717480662.997:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9414c7cf69 code=0x7ffc0000 [ 203.283642][ T26] audit: type=1326 audit(1717480662.997:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9414c7cf69 code=0x7ffc0000 [ 203.306592][ T6567] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 203.345801][ T6571] loop2: detected capacity change from 0 to 512 [ 203.357074][ T5850] EXT4-fs (loop1): unmounting filesystem. [ 203.376069][ T6571] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 203.387689][ T6571] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 203.413262][ T6571] EXT4-fs (loop2): 1 truncate cleaned up [ 203.418930][ T6571] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 203.446782][ T6571] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 203.491973][ T6223] EXT4-fs (loop2): unmounting filesystem. [ 203.497786][ T26] audit: type=1326 audit(1717480663.507:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feca0e7cf69 code=0x0 [ 203.575614][ T6579] tipc: Started in network mode [ 203.580760][ T6579] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 203.602258][ T6579] tipc: Enabled bearer , priority 10 [ 203.834073][ T6589] tipc: Started in network mode [ 203.845024][ T6589] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 203.856766][ T6589] tipc: Enabled bearer , priority 0 [ 203.864076][ T6590] loop2: detected capacity change from 0 to 2048 [ 203.895910][ T6590] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 203.968725][ T6590] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.070297][ T6223] EXT4-fs (loop2): unmounting filesystem. [ 204.209158][ T6600] loop3: detected capacity change from 0 to 512 [ 204.221186][ T6600] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.238370][ T6600] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 204.257302][ T6600] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: missing EA_INODE flag [ 204.270525][ T6600] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 204.292731][ T6600] EXT4-fs (loop3): 1 orphan inode deleted [ 204.298495][ T6600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.476975][ T5785] EXT4-fs (loop3): unmounting filesystem. [ 204.532426][ T6612] tipc: Enabled bearer , priority 10 [ 204.733067][ T4428] tipc: Node number set to 4269801488 [ 204.931916][ T26] audit: type=1326 audit(1717480664.917:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9414c7cf69 code=0x0 [ 205.083854][ T6648] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 205.111069][ T6650] loop2: detected capacity change from 0 to 512 [ 205.131067][ T6650] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 205.139325][ T6650] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 205.157233][ T6650] EXT4-fs (loop2): 1 truncate cleaned up [ 205.163657][ T6650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 205.338165][ T6650] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 205.389733][ T6223] EXT4-fs (loop2): unmounting filesystem. [ 205.531011][ T4428] tipc: Node number set to 10136234 [ 205.601237][ T6655] tipc: Started in network mode [ 205.610137][ T6655] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 205.627090][ T6655] tipc: Enabled bearer , priority 10 [ 205.773983][ T6664] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 205.791050][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.863114][ T26] audit: type=1800 audit(1717480665.877:896): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 206.142864][ T6685] loop2: detected capacity change from 0 to 512 [ 206.153706][ T6687] loop1: detected capacity change from 0 to 256 [ 206.160833][ T6687] exfat: Deprecated parameter 'utf8' [ 206.168407][ T6687] exfat: Deprecated parameter 'utf8' [ 206.176885][ T6687] exfat: Deprecated parameter 'utf8' [ 206.200447][ T6685] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 206.234334][ T6687] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 206.252202][ T6685] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 206.286817][ T6685] EXT4-fs (loop2): 1 truncate cleaned up [ 206.304027][ T6685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 206.367173][ T26] audit: type=1326 audit(1717480666.377:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9414c7cf69 code=0x0 [ 206.378219][ T6685] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 206.445953][ T6223] EXT4-fs (loop2): unmounting filesystem. [ 206.612455][ T6715] loop2: detected capacity change from 0 to 128 [ 206.698726][ T26] audit: type=1800 audit(1717480666.707:898): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 206.741145][ T153] tipc: Node number set to 4269801488 [ 206.856147][ T6730] __vm_enough_memory: pid: 6730, comm: syz-executor.2, no enough memory for the allocation [ 206.951032][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 206.992780][ T6733] loop2: detected capacity change from 0 to 256 [ 207.000101][ T6733] exfat: Deprecated parameter 'utf8' [ 207.005552][ T6733] exfat: Deprecated parameter 'utf8' [ 207.011481][ T6733] exfat: Deprecated parameter 'utf8' [ 207.027624][ T6733] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 207.115037][ T6734] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 207.371513][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.386934][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.397093][ T22] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 207.406573][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.413092][ T6748] loop3: detected capacity change from 0 to 512 [ 207.416676][ T22] usb 2-1: config 0 descriptor?? [ 207.485315][ T6748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 207.495257][ T6748] ext4 filesystem being mounted at /root/syzkaller-testdir1712912381/syzkaller.sOvwsb/76/file0 supports timestamps until 2038 (0x7fffffff) [ 207.527323][ T6748] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz-executor.3: corrupted inode contents [ 207.567997][ T6748] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz-executor.3: mark_inode_dirty error [ 207.581311][ T6748] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz-executor.3: corrupted inode contents [ 207.600399][ T6748] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 207.630547][ T6748] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #18: comm syz-executor.3: directory missing '.' [ 207.680774][ T5785] EXT4-fs (loop3): unmounting filesystem. [ 207.749726][ T6754] loop3: detected capacity change from 0 to 128 [ 207.941230][ T22] usbhid 2-1:0.0: can't add hid device: -71 [ 207.947488][ T22] usbhid: probe of 2-1:0.0 failed with error -71 [ 207.995754][ T22] usb 2-1: USB disconnect, device number 6 [ 208.071814][ T26] audit: type=1800 audit(1717480668.077:899): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 208.097900][ T6763] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.114387][ T26] audit: type=1800 audit(1717480668.127:900): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 208.189944][ T26] audit: type=1804 audit(1717480668.147:901): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1680834997/syzkaller.1KGNCK/47/bus" dev="sda1" ino=1966 res=1 errno=0 [ 208.385008][ T6781] loop3: detected capacity change from 0 to 128 [ 208.562085][ T26] audit: type=1800 audit(1717480668.567:902): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 208.601550][ T6790] __vm_enough_memory: pid: 6790, comm: syz-executor.1, no enough memory for the allocation [ 208.719602][ T6799] loop2: detected capacity change from 0 to 256 [ 208.768404][ T6799] exfat: Deprecated parameter 'utf8' [ 208.794098][ T6799] exfat: Deprecated parameter 'utf8' [ 208.812865][ T6799] exfat: Deprecated parameter 'utf8' [ 208.861719][ T6799] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 208.937613][ T6812] loop1: detected capacity change from 0 to 256 [ 209.015091][ T6816] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 209.083475][ T6818] loop2: detected capacity change from 0 to 128 [ 209.321032][ T5390] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 209.445488][ T6832] __vm_enough_memory: pid: 6832, comm: syz-executor.1, no enough memory for the allocation [ 209.659858][ T6850] loop2: detected capacity change from 0 to 256 [ 209.679002][ T6850] exfat: Deprecated parameter 'utf8' [ 209.685742][ T6850] exfat: Deprecated parameter 'utf8' [ 209.700232][ T6850] exfat: Deprecated parameter 'utf8' [ 209.710026][ T6852] loop0: detected capacity change from 0 to 128 [ 209.716744][ T5390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.717846][ T6850] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 209.731599][ T5390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.780655][ T5390] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 209.801191][ T5390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.820029][ T5390] usb 4-1: config 0 descriptor?? [ 210.571983][ T5390] usbhid 4-1:0.0: can't add hid device: -71 [ 210.583935][ T5390] usbhid: probe of 4-1:0.0 failed with error -71 [ 210.823865][ T5390] usb 4-1: USB disconnect, device number 13 [ 210.979849][ T6873] loop0: detected capacity change from 0 to 128 [ 211.077730][ T6881] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 211.260666][ T6883] loop0: detected capacity change from 0 to 128 [ 213.220532][ T26] audit: type=1804 audit(1717480673.227:903): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1478003287/syzkaller.9gEjt6/46/bus" dev="sda1" ino=1965 res=1 errno=0 [ 213.362062][ T6904] loop0: detected capacity change from 0 to 32768 [ 213.404332][ T6904] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (6904) [ 213.924277][ T26] audit: type=1800 audit(1717480673.937:904): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 214.026000][ T26] audit: type=1800 audit(1717480673.967:905): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 214.842149][ T6947] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 215.234745][ T6949] __vm_enough_memory: pid: 6949, comm: syz-executor.3, no enough memory for the allocation [ 216.972972][ T6989] loop1: detected capacity change from 0 to 512 [ 217.017181][ T6989] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 217.026987][ T6989] ext4 filesystem being mounted at /root/syzkaller-testdir2423650652/syzkaller.kbM5XT/73/file0 supports timestamps until 2038 (0x7fffffff) [ 217.093191][ T6989] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz-executor.1: corrupted inode contents [ 217.110304][ T6989] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #2: comm syz-executor.1: mark_inode_dirty error [ 217.125238][ T6989] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz-executor.1: corrupted inode contents [ 217.147461][ T6989] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 217.203345][ T6989] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #18: comm syz-executor.1: directory missing '.' [ 217.392396][ T5850] EXT4-fs (loop1): unmounting filesystem. [ 218.467549][ T6970] loop3: detected capacity change from 0 to 32768 [ 218.518205][ T6970] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor.3 (6970) [ 219.292622][ T153] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 219.681816][ T153] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.703690][ T153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.739911][ T153] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 219.782298][ T153] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 220.031386][ T153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.067126][ T153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 220.108505][ T153] usb 2-1: SerialNumber: syz [ 220.172023][ T153] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 221.057374][ T7033] loop2: detected capacity change from 0 to 40427 [ 221.093482][ T7033] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 221.132846][ T7033] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 221.206439][ T7033] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.392770][ T7033] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 221.423375][ T7033] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 222.070397][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.108824][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.171418][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.194794][ C1] Illegal XDP return value 1603896156 on prog (id 238) dev bridge0, expect packet loss! [ 222.208762][ T7065] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 222.554410][ T153] usb 2-1: USB disconnect, device number 7 [ 223.325633][ T7077] overlayfs: failed to resolve './file0': -2 [ 223.672962][ T7086] tipc: Started in network mode [ 223.701268][ T7086] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 223.729271][ T7086] tipc: Enabled bearer , priority 10 [ 224.430794][ T7082] loop3: detected capacity change from 0 to 32768 [ 224.457590][ T7082] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor.3 (7082) [ 224.733461][ T4426] tipc: Node number set to 4269801488 [ 226.276796][ T7139] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.287395][ T7139] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.447835][ T7143] loop0: detected capacity change from 0 to 512 [ 226.478126][ T7143] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.538557][ T7143] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.0: inline data xattr refers to an external xattr inode [ 226.609636][ T7143] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 226.636609][ T7143] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 226.724666][ T7132] loop1: detected capacity change from 0 to 32768 [ 226.736037][ T7132] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (7132) [ 226.815323][ T6085] EXT4-fs (loop0): unmounting filesystem. [ 226.826013][ T7126] loop2: detected capacity change from 0 to 40427 [ 226.842541][ T7126] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 226.865217][ T7126] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 226.886776][ T7126] F2FS-fs (loop2): invalid crc value [ 226.921815][ T7126] F2FS-fs (loop2): Found nat_bits in checkpoint [ 226.978229][ T7126] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 227.002526][ T7126] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 227.454078][ T7174] loop0: detected capacity change from 0 to 7 [ 227.500575][ T7174] Dev loop0: unable to read RDB block 7 [ 227.523460][ T7174] loop0: unable to read partition table [ 227.555784][ T7174] loop0: partition table beyond EOD, truncated [ 227.577005][ T7174] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 227.577005][ T7174] ) failed (rc=-5) [ 227.743431][ T7181] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.765401][ T7181] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.046039][ T7196] loop2: detected capacity change from 0 to 512 [ 228.056633][ T7161] loop3: detected capacity change from 0 to 32768 [ 228.082239][ T7161] XFS (loop3): Mounting V5 Filesystem [ 228.154732][ T7161] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 228.192560][ T7161] XFS (loop3): Starting recovery (logdev: internal) [ 228.204709][ T7196] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.234842][ T7196] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode [ 228.270825][ T7161] XFS (loop3): Ending recovery (logdev: internal) [ 228.298447][ T7196] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 228.339291][ T7196] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.380394][ T5785] XFS (loop3): Unmounting Filesystem [ 228.471409][ T6223] EXT4-fs (loop2): unmounting filesystem. [ 228.595588][ T7186] loop1: detected capacity change from 0 to 32768 [ 228.620102][ T7186] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (7186) [ 231.141006][ T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 231.347025][ T7267] loop0: detected capacity change from 0 to 128 [ 233.121139][ T22] usb 3-1: device descriptor read/all, error -71 [ 233.470345][ T7306] loop2: detected capacity change from 0 to 1764 [ 233.905532][ T7276] loop1: detected capacity change from 0 to 32768 [ 233.934226][ T7276] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (7276) [ 234.712348][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.794860][ T7368] loop3: detected capacity change from 0 to 32768 [ 235.816377][ T7368] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor.3 (7368) [ 235.833020][ T7394] loop0: detected capacity change from 0 to 128 [ 235.909285][ T7397] loop1: detected capacity change from 0 to 256 [ 236.309003][ T7403] tipc: Started in network mode [ 236.317526][ T7403] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 236.334061][ T7403] tipc: Enabled bearer , priority 10 [ 236.677269][ T26] audit: type=1800 audit(1717480696.687:906): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=1048662 res=0 errno=0 [ 236.728993][ T26] audit: type=1804 audit(1717480696.687:907): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1680834997/syzkaller.1KGNCK/103/file0/file0" dev="loop0" ino=1048662 res=1 errno=0 [ 236.988030][ T7424] loop2: detected capacity change from 0 to 512 [ 237.006610][ T7424] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.060853][ T7424] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode [ 237.140353][ T7424] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 237.144598][ T7407] loop3: detected capacity change from 0 to 32768 [ 237.160857][ T7407] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7407) [ 237.184036][ T7407] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.201059][ T7407] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 237.209794][ T7407] BTRFS info (device loop3): using free space tree [ 237.211254][ T7424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 237.319548][ T7407] BTRFS info (device loop3): enabling ssd optimizations [ 237.415692][ T6223] EXT4-fs (loop2): unmounting filesystem. [ 237.451191][ T5390] tipc: Node number set to 4269801488 [ 237.517601][ T5785] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.912972][ T7421] loop1: detected capacity change from 0 to 40427 [ 237.938736][ T7421] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 237.956186][ T26] audit: type=1326 audit(1717480697.967:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e8887cf69 code=0x0 [ 237.995372][ T7421] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 238.037102][ T7421] F2FS-fs (loop1): Found nat_bits in checkpoint [ 238.171514][ T7421] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 238.178586][ T7421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 238.276281][ T3292] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 238.641368][ T3292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.661436][ T3292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.679314][ T3292] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 238.712309][ T3292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.742129][ T3292] usb 3-1: config 0 descriptor?? [ 238.883289][ T7481] tipc: Enabling of bearer rejected, already enabled [ 239.243604][ T3292] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 239.267952][ T3292] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 239.320227][ T3292] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 239.432177][ T7473] loop0: detected capacity change from 0 to 32768 [ 239.459914][ T7473] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (7473) [ 239.512520][ T5390] usb 3-1: USB disconnect, device number 14 [ 239.520942][ C1] hid-thrustmaster 0003:044F:B65D.0009: URB to get model id failed with error -2 [ 240.265869][ T7514] tipc: Enabling of bearer rejected, already enabled [ 240.854686][ T7541] tipc: Enabling of bearer rejected, already enabled [ 241.358232][ T7525] loop2: detected capacity change from 0 to 32768 [ 241.386484][ T7525] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (7525) [ 241.460143][ T7524] loop3: detected capacity change from 0 to 40427 [ 241.493757][ T7524] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 241.514525][ T7524] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 241.574191][ T7534] loop0: detected capacity change from 0 to 32768 [ 241.582023][ T7524] F2FS-fs (loop3): Found nat_bits in checkpoint [ 241.591308][ T7534] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7534) [ 241.640440][ T7534] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.666593][ T7534] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 241.687263][ T26] audit: type=1326 audit(1717480701.697:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65f307cf69 code=0x0 [ 241.711157][ T7534] BTRFS info (device loop0): using free space tree [ 241.729235][ T7524] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 241.749547][ T7524] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 241.879731][ T7534] BTRFS info (device loop0): enabling ssd optimizations [ 241.953715][ T7590] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 241.970815][ T6085] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.113277][ T7592] tipc: Enabling of bearer rejected, already enabled [ 243.228050][ T7627] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 243.246730][ T7619] loop0: detected capacity change from 0 to 32768 [ 243.272599][ T7619] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (7619) [ 243.355536][ T7629] tipc: Enabling of bearer rejected, already enabled [ 243.607622][ T7621] loop1: detected capacity change from 0 to 32768 [ 243.654088][ T7621] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7621) [ 243.693374][ T7621] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.721731][ T7621] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 243.750463][ T7621] BTRFS info (device loop1): using free space tree [ 243.770302][ T26] audit: type=1326 audit(1717480703.777:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65f307cf69 code=0x0 [ 244.029897][ T7621] BTRFS info (device loop1): enabling ssd optimizations [ 244.207603][ T5850] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.807439][ T7676] tipc: Enabling of bearer rejected, already enabled [ 245.006202][ T7638] loop2: detected capacity change from 0 to 40427 [ 245.037880][ T7638] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 245.071003][ T7638] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 245.118201][ T7638] F2FS-fs (loop2): invalid crc value [ 245.125957][ T7682] loop3: detected capacity change from 0 to 4096 [ 245.142532][ T7638] F2FS-fs (loop2): Found nat_bits in checkpoint [ 245.143940][ T7682] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 245.211872][ T7682] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 245.242071][ T7638] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 245.249345][ T7638] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 245.290982][ T7682] loop3: detected capacity change from 4096 to 0 [ 245.298643][ C0] I/O error, dev loop3, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.308087][ T7682] ntfs3: loop3: failed to read volume at offset 0x45000 [ 245.360694][ C1] I/O error, dev loop3, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.390924][ T5785] ntfs3: loop3: failed to read volume at offset 0x45000 [ 245.398115][ C1] I/O error, dev loop3, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.412015][ T5785] ntfs3: loop3: failed to read volume at offset 0x45000 [ 245.483333][ C1] I/O error, dev loop3, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.492713][ T3927] ntfs3: loop3: failed to read volume at offset 0x45000 [ 245.502098][ C0] I/O error, dev loop3, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.516205][ T4051] loop: Write error at byte offset 9223372036855820287, length 4096. [ 245.551256][ C1] I/O error, dev loop3, sector 2040 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 245.560956][ C1] Buffer I/O error on dev loop3, logical block 255, lost sync page write [ 245.601784][ C1] I/O error, dev loop3, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.928366][ T4051] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.006402][ T7689] loop1: detected capacity change from 0 to 32768 [ 246.015624][ T7689] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7689) [ 246.048703][ T4051] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.080012][ T7689] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.095420][ T7689] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 246.129557][ T7689] BTRFS info (device loop1): using free space tree [ 246.151702][ T4051] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.269620][ T4051] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.426665][ T7689] BTRFS info (device loop1): enabling ssd optimizations [ 246.524862][ T5850] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.575158][ T7735] loop0: detected capacity change from 0 to 4096 [ 246.610781][ T4051] tipc: Disabling bearer [ 246.648725][ T4051] tipc: Left network mode [ 246.721235][ T7735] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 246.839138][ T7735] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 246.931161][ T7735] loop0: detected capacity change from 4096 to 0 [ 247.006943][ C0] I/O error, dev loop0, sector 560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.018121][ T7735] ntfs3: loop0: failed to read volume at offset 0x46000 [ 247.046557][ T3579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.057935][ T3578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.066012][ T3579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.091455][ T3579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.109719][ T3579] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.117485][ T3579] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.123230][ C1] I/O error, dev loop0, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.136085][ T6085] ntfs3: loop0: failed to read volume at offset 0x45000 [ 247.263030][ C1] I/O error, dev loop0, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.950981][ T6085] ntfs3: loop0: failed to read volume at offset 0x45000 [ 248.053784][ T36] ntfs3: loop0: failed to read volume at offset 0x45000 [ 248.067189][ T36] loop: Write error at byte offset 9223372036855820287, length 4096. [ 248.101039][ C1] Buffer I/O error on dev loop0, logical block 255, lost sync page write [ 248.160789][ T7738] loop2: detected capacity change from 0 to 40427 [ 248.192167][ T7738] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 248.207297][ T7738] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 248.252164][ T7738] F2FS-fs (loop2): invalid crc value [ 248.306395][ T7738] F2FS-fs (loop2): Found nat_bits in checkpoint [ 248.325817][ T7763] tipc: Enabling of bearer rejected, already enabled [ 248.451589][ T7738] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 248.490867][ T7738] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 248.606964][ T4051] device hsr_slave_0 left promiscuous mode [ 248.625424][ T4051] device hsr_slave_1 left promiscuous mode [ 248.646643][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.722044][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.740055][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.755793][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.789598][ T4051] device bridge_slave_1 left promiscuous mode [ 248.799699][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.816248][ T4051] device bridge_slave_0 left promiscuous mode [ 248.827344][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.878886][ T4051] device veth1_macvtap left promiscuous mode [ 248.885107][ T4051] device veth0_macvtap left promiscuous mode [ 248.903141][ T4051] device veth1_vlan left promiscuous mode [ 248.908966][ T4051] device veth0_vlan left promiscuous mode [ 249.046232][ T26] audit: type=1326 audit(1717480709.057:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feca0e7cf69 code=0x0 [ 249.087206][ T3578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.103210][ T3578] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.111269][ T3578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.119325][ T3578] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.128550][ T3578] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 249.151150][ T3578] Bluetooth: hci3: command tx timeout [ 249.201258][ T3579] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.827828][ T4051] team0 (unregistering): Port device team_slave_1 removed [ 250.023241][ T4051] team0 (unregistering): Port device team_slave_0 removed [ 250.058396][ T4051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.080841][ T4051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.211458][ T4051] bond0 (unregistering): Released all slaves [ 250.279738][ T7745] chnl_net:caif_netlink_parms(): no params data found [ 250.298117][ T7801] tipc: Enabling of bearer rejected, already enabled [ 250.658231][ T7745] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.701070][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.727640][ T7745] device bridge_slave_0 entered promiscuous mode [ 250.775155][ T7745] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.793110][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.838386][ T7745] device bridge_slave_1 entered promiscuous mode [ 250.963418][ T7807] loop1: detected capacity change from 0 to 40427 [ 250.974098][ T7807] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 250.981973][ T7807] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 251.003315][ T7807] F2FS-fs (loop1): invalid crc value [ 251.003648][ T7745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.048476][ T7807] F2FS-fs (loop1): Found nat_bits in checkpoint [ 251.057137][ T7745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.115599][ T7790] chnl_net:caif_netlink_parms(): no params data found [ 251.165641][ T7745] team0: Port device team_slave_0 added [ 251.200275][ T7807] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 251.212794][ T7745] team0: Port device team_slave_1 added [ 251.221810][ T7807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 251.241091][ T3579] Bluetooth: hci2: command tx timeout [ 251.247204][ T3579] Bluetooth: hci3: command tx timeout [ 251.368229][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.381613][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.455520][ T7745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.691543][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.698524][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.724887][ T7745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.732802][ T26] audit: type=1326 audit(1717480712.747:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feca0e7cf69 code=0x0 [ 252.775546][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.787954][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.805188][ T7790] device bridge_slave_0 entered promiscuous mode [ 252.825081][ T7745] device hsr_slave_0 entered promiscuous mode [ 252.843379][ T7745] device hsr_slave_1 entered promiscuous mode [ 252.869619][ T7745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.887967][ T7745] Cannot create hsr debugfs directory [ 252.901180][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.909116][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.918722][ T7790] device bridge_slave_1 entered promiscuous mode [ 253.175549][ T7790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.189771][ T7859] loop2: detected capacity change from 0 to 4096 [ 253.216920][ T7790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.224811][ T7859] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 253.294406][ T7859] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 253.311198][ T3579] Bluetooth: hci3: command tx timeout [ 253.316650][ T3579] Bluetooth: hci2: command tx timeout [ 253.319346][ T7790] team0: Port device team_slave_0 added [ 253.369743][ T7790] team0: Port device team_slave_1 added [ 253.401368][ T7859] loop2: detected capacity change from 4096 to 0 [ 253.415997][ C0] blk_print_req_error: 4 callbacks suppressed [ 253.416012][ C0] I/O error, dev loop2, sector 560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.440171][ T7859] ntfs3: loop2: failed to read volume at offset 0x46000 [ 253.482993][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.489954][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.540753][ T7790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.562128][ C0] I/O error, dev loop2, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.571902][ T6223] ntfs3: loop2: failed to read volume at offset 0x45000 [ 253.579888][ C1] I/O error, dev loop2, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.589254][ T6223] ntfs3: loop2: failed to read volume at offset 0x45000 [ 253.633031][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.640000][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.673225][ T7790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.700071][ C1] I/O error, dev loop2, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.709474][ T46] ntfs3: loop2: failed to read volume at offset 0x45000 [ 253.721497][ C0] I/O error, dev loop2, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.731048][ T46] loop: Write error at byte offset 9223372036855820287, length 4096. [ 253.739152][ C0] I/O error, dev loop2, sector 2040 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 253.748836][ C0] Buffer I/O error on dev loop2, logical block 255, lost sync page write [ 253.781048][ C0] I/O error, dev loop2, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.685625][ T7790] device hsr_slave_0 entered promiscuous mode [ 254.713148][ T7790] device hsr_slave_1 entered promiscuous mode [ 254.746644][ T7790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.756806][ T7790] Cannot create hsr debugfs directory [ 255.141174][ T7745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.162789][ T7745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.227305][ T7790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.277666][ T7745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.318063][ T7745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.353913][ T7790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.391150][ T3579] Bluetooth: hci2: command tx timeout [ 255.396574][ T3579] Bluetooth: hci3: command tx timeout [ 255.481198][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.487513][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.762539][ T3584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.773562][ T3584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.783913][ T3584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.799261][ T3584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.811455][ T3584] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 255.821030][ T3584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.824223][ T7872] loop1: detected capacity change from 0 to 32768 [ 255.866996][ T7872] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7872) [ 255.885051][ T7790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.897131][ T7872] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.911193][ T7872] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 255.938669][ T7745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.945605][ T7872] BTRFS info (device loop1): using free space tree [ 255.992906][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.005228][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.043379][ T7745] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.079481][ T26] audit: type=1326 audit(1717480716.087:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65f307cf69 code=0x0 [ 256.123578][ T7790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.151167][ T7872] BTRFS info (device loop1): enabling ssd optimizations [ 256.161790][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.172157][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.185869][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.192988][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.250029][ T5850] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.260482][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.278496][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.287442][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.304517][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.311632][ T4425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.384539][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.413880][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.431478][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.450654][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.506637][ T4051] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.541285][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.551622][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.569165][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.589246][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.598899][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.613590][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.622877][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.644816][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.706106][ T4051] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.852184][ T4051] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.690496][ T3579] Bluetooth: hci2: command tx timeout [ 257.881431][ T3579] Bluetooth: hci5: command tx timeout [ 257.900231][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 257.932248][ T4051] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.979879][ T7790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.026503][ T7790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.061491][ T7790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.110974][ T7790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.148925][ T7745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.176001][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.183751][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.254110][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.266372][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.331057][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.339311][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.382499][ T7745] device veth0_vlan entered promiscuous mode [ 258.391847][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.401601][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.409947][ T7884] device bridge_slave_0 entered promiscuous mode [ 258.426338][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.434164][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.446909][ T7745] device veth1_vlan entered promiscuous mode [ 258.457294][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.464658][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.473007][ T7884] device bridge_slave_1 entered promiscuous mode [ 258.488356][ T4051] tipc: Disabling bearer [ 258.495348][ T4051] tipc: Left network mode [ 258.537791][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.575427][ T4051] tipc: Disabling bearer [ 258.658770][ T4051] tipc: Disabling bearer [ 258.666998][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.677039][ T4051] tipc: Left network mode [ 258.740233][ T7745] device veth0_macvtap entered promiscuous mode [ 258.757383][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.766176][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 258.790281][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.808381][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.822318][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.855243][ T7790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.958207][ T7745] device veth1_macvtap entered promiscuous mode [ 258.985402][ T7884] team0: Port device team_slave_0 added [ 258.998808][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.017983][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.027931][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.050475][ T7790] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.066139][ T7884] team0: Port device team_slave_1 added [ 259.093453][ T7745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.108191][ T7745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.119454][ T7745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.130123][ T7745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.140650][ T4937] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 259.148164][ T7745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.148182][ T7745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.148195][ T7745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.148206][ T7745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.148217][ T7745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.148228][ T7745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.149507][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.265282][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.275736][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.299672][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.317158][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.354472][ T7884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.404578][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.414070][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.422689][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.429819][ T5389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.438352][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.447482][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.456087][ T5389] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.463282][ T5389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.471117][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.479929][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.488802][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.497769][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.514747][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.528761][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.540820][ T7745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.557554][ T7745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.567557][ T7745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.578525][ T7745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.588519][ T7745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.591189][ T4937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.600340][ T7745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.627852][ T7745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.631119][ T4937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.639675][ T7745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.660970][ T4937] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 259.668074][ T7745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.670001][ T4937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.681747][ T4937] usb 2-1: config 0 descriptor?? [ 259.699187][ T7745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.713098][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.721141][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.728096][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.757608][ T7884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.780802][ T7790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.792579][ T7790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.830865][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.839043][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.850265][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.868745][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.890073][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.898632][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.916622][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.926204][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.941592][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.952202][ T3579] Bluetooth: hci5: command tx timeout [ 259.977454][ T7745] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.986847][ T7745] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.997528][ T7745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.016541][ T7745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.166304][ T7884] device hsr_slave_0 entered promiscuous mode [ 260.175052][ T7884] device hsr_slave_1 entered promiscuous mode [ 260.184159][ T7884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.192885][ T7884] Cannot create hsr debugfs directory [ 260.197895][ T4937] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 260.241117][ T4937] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 260.260651][ T4937] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 260.404785][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.418651][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.463023][ T4937] usb 2-1: USB disconnect, device number 8 [ 260.480959][ C0] hid-thrustmaster 0003:044F:B65D.000A: URB to get model id failed with error -2 [ 260.512166][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 260.538078][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.548360][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.566948][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 260.685806][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.694022][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.704060][ T7790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.826478][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.847403][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.852626][ T7961] loop3: detected capacity change from 0 to 2048 [ 260.911266][ T7961] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 260.922354][ T4051] device hsr_slave_0 left promiscuous mode [ 260.928616][ T4051] device hsr_slave_1 left promiscuous mode [ 260.944510][ T7961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.956624][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.966565][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.980711][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.011389][ T7961] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.017947][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.056740][ T4051] device bridge_slave_1 left promiscuous mode [ 261.065533][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.083789][ T4051] device bridge_slave_0 left promiscuous mode [ 261.092196][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.106112][ T4051] device hsr_slave_0 left promiscuous mode [ 261.114624][ T4051] device hsr_slave_1 left promiscuous mode [ 261.144090][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.160255][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.186909][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.210680][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.238404][ T4051] device bridge_slave_1 left promiscuous mode [ 261.251128][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.259782][ T4051] device bridge_slave_0 left promiscuous mode [ 261.267104][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.307718][ T4051] device veth1_macvtap left promiscuous mode [ 261.322045][ T4051] device veth0_macvtap left promiscuous mode [ 261.328337][ T4051] device veth1_vlan left promiscuous mode [ 261.338173][ T4051] device veth0_vlan left promiscuous mode [ 261.360393][ T4051] device veth1_macvtap left promiscuous mode [ 261.376892][ T4051] device veth0_macvtap left promiscuous mode [ 261.392120][ T4051] device veth1_vlan left promiscuous mode [ 261.476748][ T7971] loop3: detected capacity change from 0 to 4096 [ 261.496199][ T7971] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 261.578663][ T7979] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 261.968507][ T7971] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 262.021109][ T7971] loop3: detected capacity change from 4096 to 0 [ 262.028512][ C0] I/O error, dev loop3, sector 560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.037946][ T7971] ntfs3: loop3: failed to read volume at offset 0x46000 [ 262.050942][ T3579] Bluetooth: hci5: command tx timeout [ 262.101282][ C0] I/O error, dev loop3, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.110659][ T7745] ntfs3: loop3: failed to read volume at offset 0x45000 [ 262.122729][ C0] I/O error, dev loop3, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.132121][ T7745] ntfs3: loop3: failed to read volume at offset 0x45000 [ 262.181402][ C0] I/O error, dev loop3, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.192919][ T102] ntfs3: loop3: failed to read volume at offset 0x45000 [ 262.209387][ C1] I/O error, dev loop3, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.225744][ T3632] loop: Write error at byte offset 9223372036855820287, length 4096. [ 262.261084][ C1] I/O error, dev loop3, sector 2040 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 262.270752][ C1] Buffer I/O error on dev loop3, logical block 255, lost sync page write [ 262.300059][ C1] I/O error, dev loop3, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.394910][ T7981] loop1: detected capacity change from 0 to 32768 [ 262.426420][ T7981] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (7981) [ 262.499814][ T4051] team0 (unregistering): Port device team_slave_1 removed [ 262.529761][ T4051] team0 (unregistering): Port device team_slave_0 removed [ 262.563539][ T4051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.596152][ T4051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.726592][ T26] audit: type=1326 audit(1717480722.737:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feca0e7cf69 code=0x0 [ 262.737741][ T4051] bond0 (unregistering): Released all slaves [ 262.923036][ T4051] team0 (unregistering): Port device team_slave_1 removed [ 262.951541][ T4051] team0 (unregistering): Port device team_slave_0 removed [ 262.972129][ T4051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.987771][ T4051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.108768][ T4051] bond0 (unregistering): Released all slaves [ 263.210417][ T7790] device veth0_vlan entered promiscuous mode [ 263.221658][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.230117][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.270800][ T7790] device veth1_vlan entered promiscuous mode [ 263.287748][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.297245][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.384187][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.399526][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.417119][ T7790] device veth0_macvtap entered promiscuous mode [ 263.436139][ T7790] device veth1_macvtap entered promiscuous mode [ 263.450059][ T7884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.460058][ T7884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 263.472440][ T7884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.489590][ T7884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.505277][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.515848][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.533181][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.549828][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.565210][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.578218][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.595401][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.606391][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.618216][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.628032][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.639391][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.650541][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.668649][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.679369][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.697619][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.707650][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.725744][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.740051][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.763141][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.789649][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.806854][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.113008][ T3579] Bluetooth: hci5: command tx timeout [ 264.564025][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.576264][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.584962][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.597455][ T7790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.628342][ T7790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.647647][ T7790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.666188][ T7790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.905961][ T8005] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 265.025492][ T3632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.045062][ T3632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.122130][ T3632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.147626][ T3632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.271637][ T3584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 265.283929][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.290453][ T3584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 265.299291][ T3584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 265.303212][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.321775][ T3584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 265.337340][ T3584] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 265.351602][ T3584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.419564][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.490569][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.504091][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.536541][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.580606][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.600221][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.609341][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.616552][ T5287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.630436][ T4937] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 265.684494][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.702249][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.719059][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.727635][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.734774][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.748954][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.790834][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.808687][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.820320][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.909652][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.922140][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.954733][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.987321][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.001212][ T4937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.025480][ T4937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.041961][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.065804][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.079060][ T4937] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 266.107213][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.120784][ T4937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.139913][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.158816][ T4937] usb 2-1: config 0 descriptor?? [ 266.209049][ T8006] chnl_net:caif_netlink_parms(): no params data found [ 266.260021][ T26] audit: type=1326 audit(1717480726.267:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65f307cf69 code=0x0 [ 266.341603][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.349171][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.381805][ T8006] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.394881][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.425858][ T8006] device bridge_slave_0 entered promiscuous mode [ 266.453931][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.474856][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.489836][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.498681][ T8006] device bridge_slave_1 entered promiscuous mode [ 266.581181][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.598874][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.622306][ T8006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.647481][ T8006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.662836][ T4937] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 266.674538][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.685781][ T4937] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 266.686449][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.725263][ T7884] device veth0_vlan entered promiscuous mode [ 266.725704][ T4937] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints? [ 266.769770][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.781218][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.781760][ T8036] loop0: detected capacity change from 0 to 4096 [ 266.799869][ T7884] device veth1_vlan entered promiscuous mode [ 266.823685][ T8006] team0: Port device team_slave_0 added [ 266.829839][ T8036] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 266.857840][ T8006] team0: Port device team_slave_1 added [ 266.879340][ T7884] device veth0_macvtap entered promiscuous mode [ 266.887585][ T8036] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 266.894236][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.904242][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.926066][ T7884] device veth1_macvtap entered promiscuous mode [ 266.934349][ T4937] usb 2-1: USB disconnect, device number 9 [ 266.935369][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.941023][ C0] hid-thrustmaster 0003:044F:B65D.000B: URB to get model id failed with error -71 [ 266.948919][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 266.989128][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.997475][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.026066][ T8006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.040262][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.052439][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.053085][ T8036] loop0: detected capacity change from 4096 to 0 [ 267.062496][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.080201][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.092875][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.104309][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.114725][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.114720][ C0] I/O error, dev loop0, sector 560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.134847][ T8038] ntfs3: loop0: failed to read volume at offset 0x46000 [ 267.142576][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.158525][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.175226][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.187916][ C1] I/O error, dev loop0, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.197336][ T7790] ntfs3: loop0: failed to read volume at offset 0x45000 [ 267.205507][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.220801][ C0] I/O error, dev loop0, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.222490][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.237748][ T7790] ntfs3: loop0: failed to read volume at offset 0x45000 [ 267.252529][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.289431][ C0] I/O error, dev loop0, sector 552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.298887][ T3632] ntfs3: loop0: failed to read volume at offset 0x45000 [ 267.299925][ T8006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.326887][ C1] I/O error, dev loop0, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.336895][ T46] loop: Write error at byte offset 9223372036855820287, length 4096. [ 267.345268][ C1] I/O error, dev loop0, sector 2040 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 267.354958][ C1] Buffer I/O error on dev loop0, logical block 255, lost sync page write [ 267.379783][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.389124][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.391168][ T3579] Bluetooth: hci3: command tx timeout [ 267.397781][ C1] I/O error, dev loop0, sector 40 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.427955][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.443623][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.471071][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.494027][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.506892][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.519950][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.530289][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.595855][ T8045] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 267.612061][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.639794][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.679338][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.744549][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.846303][ T8006] device hsr_slave_0 entered promiscuous mode [ 267.859496][ T8006] device hsr_slave_1 entered promiscuous mode [ 267.869350][ T8006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.884821][ T8006] Cannot create hsr debugfs directory [ 267.968099][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.990583][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.025611][ T7884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.035890][ T7884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.047139][ T7884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.056675][ T7884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.226198][ T8006] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.288138][ T3632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.303629][ T3632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.337615][ T8006] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.647202][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.691581][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.712539][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.723286][ T8006] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.771088][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 268.804905][ T26] audit: type=1326 audit(1717480728.817:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feca0e7cf69 code=0x0 [ 268.830758][ T4051] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.881591][ T8006] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.898181][ T3579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.911700][ T3579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.920084][ T3579] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.931778][ T3579] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.942995][ T3579] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 268.950218][ T3579] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.039233][ T4051] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.149991][ T8071] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 269.251113][ T8072] loop4: detected capacity change from 32768 to 0 [ 269.283693][ T4051] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.413915][ T4051] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.540996][ T3584] Bluetooth: hci3: command tx timeout [ 270.354005][ T8006] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.427687][ T8006] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.476697][ T8076] loop2: detected capacity change from 0 to 32768 [ 270.496625][ T8006] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.526413][ T8076] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (8076) [ 270.535086][ T8006] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.566972][ T8061] chnl_net:caif_netlink_parms(): no params data found [ 271.003175][ T3578] Bluetooth: hci2: command tx timeout [ 271.115957][ T8101] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 271.171061][ T8105] loop1: detected capacity change from 0 to 4096 [ 271.188355][ T8105] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 271.239437][ T8105] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 271.240956][ T26] audit: type=1326 audit(1717480731.247:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f401287cf69 code=0x0 [ 271.514057][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.525135][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.534037][ T8061] device bridge_slave_0 entered promiscuous mode [ 271.551076][ T3578] Bluetooth: hci3: command tx timeout [ 272.238651][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.265705][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.287324][ T8061] device bridge_slave_1 entered promiscuous mode [ 272.322551][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.373326][ T8006] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.380273][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.392376][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.432961][ T8061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.461242][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.469869][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.487631][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.494766][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.551360][ T8061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.560788][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.666596][ T8061] team0: Port device team_slave_0 added [ 272.681101][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.700468][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.709072][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.716214][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.853040][ T8136] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 272.903749][ T8061] team0: Port device team_slave_1 added [ 272.997118][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.045029][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.055649][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.083900][ T3578] Bluetooth: hci2: command tx timeout [ 273.110988][ T8141] loop2: detected capacity change from 0 to 4096 [ 273.133507][ T8141] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 273.176352][ T8061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.185209][ T8141] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 273.221947][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.240409][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.283484][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.321764][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.330434][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.371450][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.379867][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.418681][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.427623][ T26] audit: type=1326 audit(1717480733.437:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f401287cf69 code=0x0 [ 273.431880][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.485837][ T8061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.497663][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.549183][ T8006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.631183][ T3578] Bluetooth: hci3: command tx timeout [ 273.729699][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.738708][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.895750][ T8061] device hsr_slave_0 entered promiscuous mode [ 274.019257][ T8061] device hsr_slave_1 entered promiscuous mode [ 274.167829][ T8061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.317615][ T8061] Cannot create hsr debugfs directory [ 274.639632][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.653589][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.679751][ T8006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.734759][ T4051] device hsr_slave_0 left promiscuous mode [ 274.744696][ T4051] device hsr_slave_1 left promiscuous mode [ 274.759139][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.781341][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.794414][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.813840][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.834921][ T4051] device bridge_slave_1 left promiscuous mode [ 274.842412][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.885981][ T4051] device bridge_slave_0 left promiscuous mode [ 274.894347][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.909155][ T4051] device hsr_slave_0 left promiscuous mode [ 274.918117][ T4051] device hsr_slave_1 left promiscuous mode [ 274.927190][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.934882][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.944348][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.951868][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.961173][ T4051] device bridge_slave_1 left promiscuous mode [ 274.967494][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.987569][ T4051] device bridge_slave_0 left promiscuous mode [ 275.009646][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.059848][ T4051] device veth1_macvtap left promiscuous mode [ 275.076885][ T8174] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 275.091753][ T4051] device veth0_macvtap left promiscuous mode [ 275.112876][ T4051] device veth1_vlan left promiscuous mode [ 275.128851][ T4051] device veth0_vlan left promiscuous mode [ 275.159569][ T3578] Bluetooth: hci2: command tx timeout [ 275.173073][ T4051] device veth1_macvtap left promiscuous mode [ 275.179117][ T4051] device veth0_macvtap left promiscuous mode [ 275.202935][ T26] audit: type=1326 audit(1717480735.217:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f401287cf69 code=0x0 [ 275.208705][ T4051] device veth1_vlan left promiscuous mode [ 275.232187][ T4051] device veth0_vlan left promiscuous mode [ 276.378353][ T4051] team0 (unregistering): Port device team_slave_1 removed [ 276.431687][ T4051] team0 (unregistering): Port device team_slave_0 removed [ 276.451954][ T4051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.467003][ T4051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.507172][ T8176] loop1: detected capacity change from 0 to 32768 [ 276.531210][ T8176] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (8176) [ 276.608175][ T4051] bond0 (unregistering): Released all slaves [ 276.831518][ T4051] team0 (unregistering): Port device team_slave_1 removed [ 276.849391][ T4051] team0 (unregistering): Port device team_slave_0 removed [ 276.861152][ T4051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.875424][ T4051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.935823][ T4051] bond0 (unregistering): Released all slaves [ 277.085114][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.102873][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.168319][ T8006] device veth0_vlan entered promiscuous mode [ 277.200257][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.211357][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.222842][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.231424][ T3578] Bluetooth: hci2: command tx timeout [ 277.251567][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.280756][ T8006] device veth1_vlan entered promiscuous mode [ 277.373297][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.385959][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.419936][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.439642][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.452673][ T8006] device veth0_macvtap entered promiscuous mode [ 277.486349][ T8006] device veth1_macvtap entered promiscuous mode [ 277.518822][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.553408][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.576258][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.588218][ T26] audit: type=1326 audit(1717480737.597:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f401287cf69 code=0x0 [ 277.611212][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.621536][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.634083][ T8208] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 277.717843][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.727744][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.738262][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.760269][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.796379][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.812394][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.833984][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.604431][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.615182][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.645337][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.664417][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.676299][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.691993][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.703487][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.713500][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.726470][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.740770][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.765303][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.783699][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.814777][ T8006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.834968][ T8006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.860030][ T8006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.886184][ T8006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.095788][ T4740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.113621][ T4740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.150078][ T8061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.191551][ T8061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.230039][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.251115][ T8061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.273552][ T8061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.310829][ T8220] loop2: detected capacity change from 0 to 32768 [ 279.325762][ T8220] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (8220) [ 279.360809][ T3632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.386159][ T3632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.461080][ T8239] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 279.472877][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.636551][ T26] audit: type=1326 audit(1717480739.647:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feca0e7cf69 code=0x0 [ 279.764666][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.803663][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.815076][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.836718][ T8061] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.864382][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.880133][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.060163][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.067361][ T5390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.078745][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.107186][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.413826][ T8256] loop2: detected capacity change from 0 to 4096 [ 280.490963][ T8256] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 281.141618][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.150107][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.157229][ T4425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.190333][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.206413][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.226440][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.414508][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.423229][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.441927][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.485201][ T8061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.531686][ T8256] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 281.584970][ T8061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.801014][ T8275] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 281.810957][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.819048][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.827675][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.836440][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.845016][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.862815][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.002926][ T26] audit: type=1326 audit(1717480742.017:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feca0e7cf69 code=0x0 [ 282.432217][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.445518][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.527448][ T8061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.631775][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.653934][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.735992][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.754854][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.803847][ T8061] device veth0_vlan entered promiscuous mode [ 282.837730][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.860647][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.920582][ T8061] device veth1_vlan entered promiscuous mode [ 283.048312][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.070357][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.129183][ T8061] device veth0_macvtap entered promiscuous mode [ 283.177074][ T8061] device veth1_macvtap entered promiscuous mode [ 283.268310][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.357201][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.443569][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.508289][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.551134][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.587021][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.606888][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.646632][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.660125][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.680986][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.699417][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.724895][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.729603][ T8310] loop1: detected capacity change from 0 to 4096 [ 283.734520][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.764151][ T8310] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 283.921634][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.930762][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.950784][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.966087][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.976342][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.977120][ T8310] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 283.986834][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.986852][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.986867][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.986881][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.986893][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.986905][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.986916][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.065677][ T8325] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 284.071254][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.083464][ T26] audit: type=1326 audit(1717480744.097:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65f307cf69 code=0x0 [ 284.088686][ T8061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.122804][ T8061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.139513][ T8061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.156320][ T8061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.168104][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.189450][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.405651][ T3632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.423809][ T3632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.723315][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.752988][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.770768][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.851734][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.636702][ T8338] loop2: detected capacity change from 0 to 32768 [ 285.647182][ T8338] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (8338) [ 286.760196][ T26] audit: type=1326 audit(1717480746.767:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f401287cf69 code=0x0 [ 286.800131][ T8373] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 287.114471][ T8372] loop1: detected capacity change from 0 to 4096 [ 287.127725][ T8372] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 287.208076][ T8372] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 287.491056][ T26] audit: type=1804 audit(1717480747.467:925): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2423650652/syzkaller.kbM5XT/199/file0/bus" dev="loop1" ino=33 res=1 errno=0 [ 288.311157][ T3578] Bluetooth: hci4: command 0x0406 tx timeout [ 288.800158][ T26] audit: type=1326 audit(1717480748.807:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ae7cf69 code=0x0 [ 289.030595][ T8413] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 289.220713][ T8388] loop1: detected capacity change from 0 to 32768 [ 289.267820][ T8388] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (8388) [ 291.021059][ T26] audit: type=1326 audit(1717480750.957:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65f307cf69 code=0x0 [ 291.482110][ T8459] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 292.446333][ T8450] loop0: detected capacity change from 0 to 32768 [ 292.512425][ T8450] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (8450) [ 293.073118][ T26] audit: type=1326 audit(1717480753.087:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feca0e7cf69 code=0x0 [ 294.315093][ T8514] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 295.456380][ T26] audit: type=1326 audit(1717480755.467:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f6ae7cf69 code=0x0 [ 295.960134][ T8529] loop2: detected capacity change from 0 to 32768 [ 295.993198][ T8529] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (8529) [ 296.479540][ T8568] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 298.318595][ T26] audit: type=1326 audit(1717480758.327:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f401287cf69 code=0x0 [ 298.371100][ T27] INFO: task syz-executor.4:5622 blocked for more than 143 seconds. [ 298.387528][ T27] Not tainted 6.1.92-syzkaller #0 2024/06/04 05:59:18 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 298.422159][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.513209][ T27] task:syz-executor.4 state:D stack:22280 pid:5622 ppid:3570 flags:0x00004006 [ 298.534797][ T27] Call Trace: [ 298.542743][ T27] [ 298.549070][ T27] __schedule+0x142d/0x4550 [ 298.559450][ T27] ? __sched_text_start+0x8/0x8 [ 298.570383][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 298.583015][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 298.593651][ T27] schedule+0xbf/0x180 [ 298.597762][ T27] wait_extent_bit+0x423/0x570 [ 298.608966][ T27] ? __set_extent_bit+0x13b1/0x18c0 [ 298.614220][ T27] ? clear_state_bit+0x330/0x330 [ 298.619173][ T27] ? wake_bit_function+0x210/0x210 [ 298.630696][ T27] lock_extent+0x17a/0x200 [ 298.635162][ T27] ? try_lock_extent+0x1a0/0x1a0 [ 298.640111][ T27] ? folio_wait_writeback+0x1aa/0x1e0 [ 298.655251][ T27] btrfs_page_mkwrite+0x550/0xc90 [ 298.660530][ T27] ? btrfs_dio_write+0x100/0x100 [ 298.679631][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 298.684829][ T27] do_page_mkwrite+0x1a1/0x5f0 [ 298.689612][ T27] wp_page_shared+0x164/0x380 [ 298.694388][ T27] handle_mm_fault+0x2525/0x5340 [ 298.699343][ T27] ? mt_find+0x29a/0xc60 [ 298.703651][ T27] ? mt_find+0x29a/0xc60 [ 298.707933][ T27] ? numa_migrate_prep+0x250/0x250 [ 298.713167][ T27] ? lock_mm_and_find_vma+0xae/0x2e0 [ 298.718470][ T27] exc_page_fault+0x26f/0x660 [ 298.723236][ T27] asm_exc_page_fault+0x22/0x30 [ 298.728097][ T27] RIP: 0010:copy_user_short_string+0xd/0x40 [ 298.734091][ T27] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 0f 1f 80 00 00 00 00 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 298.753935][ T27] RSP: 0018:ffffc900034573b0 EFLAGS: 00050202 [ 298.760079][ T27] RAX: ffffffff84385601 RBX: 00007fffffffefc8 RCX: 0000000000000007 [ 298.775260][ T27] RDX: 0000000000000000 RSI: ffffc90003457460 RDI: 00000000200002a0 [ 298.786515][ T27] RBP: ffffc90003457510 R08: 0000000000000000 R09: fffff5200068ae93 [ 298.797685][ T27] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000038 [ 298.808976][ T27] R13: ffffc90003457460 R14: 00000000200002a0 R15: ffffc90003457460 [ 298.820393][ T27] ? _copy_to_user+0x71/0x130 [ 298.828495][ T27] _copy_to_user+0xe9/0x130 [ 298.833214][ T27] fiemap_fill_next_extent+0x231/0x410 [ 298.838764][ T27] ? vfs_ioctl+0xc0/0xc0 [ 298.843288][ T27] ? btrfs_is_data_extent_shared+0x110c/0x1390 [ 298.849530][ T27] fiemap_process_hole+0x107e/0x1290 [ 298.854938][ T27] ? extent_fiemap+0x1ff0/0x1ff0 [ 298.859950][ T27] ? btrfs_get_token_64+0x600/0x600 [ 298.865324][ T27] ? memcpy+0x3c/0x60 [ 298.870055][ T27] extent_fiemap+0xef7/0x1ff0 [ 298.878942][ T27] ? try_release_extent_mapping+0x560/0x560 [ 298.886448][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 298.892596][ T27] ? print_irqtrace_events+0x210/0x210 [ 298.898132][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 298.903435][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 298.908714][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 298.914245][ T27] ? _raw_spin_unlock_irq+0x2a/0x40 [ 298.919529][ T27] ? btrfs_lookup_first_ordered_extent+0x50a/0x700 [ 298.926212][ T27] ? btrfs_wait_ordered_range+0x242/0x260 [ 298.932040][ T27] btrfs_fiemap+0x174/0x1e0 [ 298.936625][ T27] ? btrfs_getattr+0x4a0/0x4a0 [ 298.941571][ T27] ? __might_fault+0xbd/0x110 [ 298.946332][ T27] ? btrfs_getattr+0x4a0/0x4a0 [ 298.951227][ T27] do_vfs_ioctl+0x18e9/0x2a90 [ 298.955981][ T27] ? __x64_compat_sys_ioctl+0x80/0x80 [ 298.961545][ T27] ? __lock_acquire+0x1f80/0x1f80 [ 298.966644][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 298.972790][ T27] ? __kmem_cache_free+0x25c/0x3c0 [ 298.978001][ T27] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 298.985948][ T27] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 299.004526][ T27] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 299.010303][ T27] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 299.019030][ T27] ? __fget_files+0x28/0x4a0 [ 299.026984][ T27] ? __fget_files+0x28/0x4a0 [ 299.034986][ T27] ? __fget_files+0x28/0x4a0 [ 299.039654][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 299.047996][ T27] ? security_file_ioctl+0x7d/0xa0 [ 299.056352][ T27] __se_sys_ioctl+0x81/0x160 [ 299.064358][ T27] do_syscall_64+0x3b/0xb0 [ 299.068857][ T27] ? clear_bhb_loop+0x45/0xa0 [ 299.078243][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.087505][ T27] RIP: 0033:0x7fd10207cf69 [ 299.097077][ T27] RSP: 002b:00007fd102e880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.110017][ T27] RAX: ffffffffffffffda RBX: 00007fd1021b3fa0 R