last executing test programs: 15m17.105268687s ago: executing program 0 (id=614): r0 = getpid() sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) socket$xdp(0x2c, 0x3, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 15m12.696158737s ago: executing program 0 (id=624): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fc2, 0x1, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r3, 0x114, 0x271d, 0x0, 0x20000000) 15m10.158819422s ago: executing program 0 (id=628): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000030601020000000000000000070800007301800000000000"], 0x2c}}, 0x20004040) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000280)=ANY=[@ANYBLOB]) sendmmsg$inet6(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='\a', 0x1}], 0x1}}], 0x2, 0x0) 15m6.158947786s ago: executing program 0 (id=635): syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a0297573cb352906385cece74366e628b6a775c9a6f6fff046414c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8000000"], 0x2, 0x152, &(0x7f0000000200)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864d1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) setsockopt$sock_int(r0, 0x28, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_batadv\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0xffffffff, 0x0, &(0x7f0000000280)=0x1c) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 15m3.959146929s ago: executing program 0 (id=638): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15m3.082637454s ago: executing program 0 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETLED(r1, 0x4b32, 0x40) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x49) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) close(r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt(r6, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m2.391198098s ago: executing program 32 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETLED(r1, 0x4b32, 0x40) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x49) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) close(r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt(r6, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m47.848700014s ago: executing program 1 (id=1243): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000002c0)="9b16b741ab367bddf17b4b4d8b0505bb", 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x80}}, {{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000600)='z', 0x1}, {&(0x7f0000000f00)="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", 0x170}], 0x2, 0x0, 0x0, 0x4041}}], 0x3, 0xc000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000030601020000000000000000070800007301800000000000"], 0x2c}}, 0x20004040) 10m45.222980079s ago: executing program 1 (id=1247): syz_usb_connect$uac1(0x5, 0x9a, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5}, [@processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x0, "d885700585"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1004}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6896, 0x2, 0x0, "78f4cd9535ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x408, 0x7, 0x4, 0xca, {0x7, 0x25, 0x1, 0x0, 0xf8, 0x3}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 10m41.930015409s ago: executing program 1 (id=1260): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100008200040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fc, 0x10001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$radio(0x0, 0x1, 0x2) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="28bba7", 0x3}], 0x1, 0x7, 0x96) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r5, &(0x7f0000002180)=""/4099, 0x1003) process_mrelease(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000095000d0000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10m38.281836941s ago: executing program 1 (id=1262): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00'}, 0x2c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000200)=""/69) 10m34.319894975s ago: executing program 1 (id=1268): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x3, 0x0, 0x0) 10m34.246972795s ago: executing program 1 (id=1269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 10m17.732260244s ago: executing program 33 (id=1269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m6.875874089s ago: executing program 4 (id=2579): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000007c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x200000000000000, 0x0}) 2m6.70280324s ago: executing program 4 (id=2580): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x4b52, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x3}}, 0x10, 0x0}, 0x0) socket$inet6(0x10, 0x6, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) 1m59.572030903s ago: executing program 4 (id=2598): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r5, &(0x7f0000000040)=""/4122, 0x101a) 1m57.815252883s ago: executing program 4 (id=2604): r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xb101a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r4, &(0x7f000000ae80)={0x2020}, 0x2020) pread64(r4, &(0x7f00000002c0)=""/220, 0xdc, 0x0) read$FUSE(r4, &(0x7f0000004b80)={0x2020}, 0x2020) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x85, 0x0, &(0x7f0000005e80)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a00"], 0x38}}, 0x20004000) 1m56.883814389s ago: executing program 4 (id=2605): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x5, 0x0, {}, {0xee01}, 0x0, 0xfffffffffffffffb}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000280)={0x0, 0x0}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) bind$xdp(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000340)={&(0x7f0000000900)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$TCFLSH(r1, 0x540b, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x20000023896) 1m55.791475596s ago: executing program 4 (id=2610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) 1m55.208345659s ago: executing program 34 (id=2610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) 22.547765865s ago: executing program 5 (id=2842): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 20.771266635s ago: executing program 5 (id=2845): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) 20.490141417s ago: executing program 5 (id=2846): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00'}, 0x2c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) write$char_usb(r5, &(0x7f0000000040)="e2", 0x1b18) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000200)=""/69) 14.832734481s ago: executing program 5 (id=2856): socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) 14.367730844s ago: executing program 5 (id=2858): syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c"]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0xb) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r5) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r6, 0x325, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24044880}, 0x0) 14.202843375s ago: executing program 3 (id=2860): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045520, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13.995809426s ago: executing program 5 (id=2861): r0 = io_uring_setup(0x7be5, &(0x7f0000000040)={0x0, 0x1, 0x40, 0xfffffffc, 0x40018f}) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) close_range(r0, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) accept4(r2, 0x0, 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) 13.979758586s ago: executing program 3 (id=2862): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xffffffffffffff95}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x24) socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x8000, '\x00', @p_u32=0x0}}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x120}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040801) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) 12.791202333s ago: executing program 3 (id=2863): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='xprtrdma_op_connect\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000200), 0x4) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="100001800400048008000100000001"], 0x28}, 0x1, 0x1000000000000000}, 0x10) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000280)=0x1, 0x4) socket(0x80000000000000a, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073787a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400009000008000440000000220500020007000000380001800c000100626974776973650028000280080003400000000208000140000000140800024000000012080006400000"], 0x10c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 11.876146069s ago: executing program 3 (id=2866): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00'}, 0x2c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) write$char_usb(r5, &(0x7f0000000040)="e2", 0x1b18) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000200)=""/69) 7.167823017s ago: executing program 6 (id=2875): syz_io_uring_setup(0x3fe9, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x1}, &(0x7f0000000600), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0xc0984124, &(0x7f0000000c40)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000005002000000000000c001f0070687930"], 0x28}}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x200000001494) syz_open_dev$hiddev(&(0x7f0000000040), 0x1000, 0x80000) 7.167307897s ago: executing program 2 (id=2876): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) 5.804266845s ago: executing program 2 (id=2878): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) 5.699915846s ago: executing program 6 (id=2879): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x241, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000018c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800020, &(0x7f0000000400)='\'%:%\x00') 5.527881446s ago: executing program 6 (id=2880): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000001080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r3, &(0x7f0000000040)=""/4122, 0x101a) 5.527377537s ago: executing program 2 (id=2881): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x500000000000000}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioperm(0x0, 0x1, 0x18a) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r5, 0x0, 0x3, 0x1}}, 0x20) 5.179834879s ago: executing program 6 (id=2882): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="f2ff05"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.89806163s ago: executing program 7 (id=2883): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 4.755814421s ago: executing program 7 (id=2884): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045520, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.304134934s ago: executing program 7 (id=2885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) ioctl$SNDCTL_TMR_TEMPO(r5, 0x40085112, &(0x7f0000000180)=0x8) r6 = dup(r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) readv(r6, &(0x7f00000034c0)=[{&(0x7f0000000280)=""/4096, 0x4}, {0x0, 0x4}], 0x2) 4.205473805s ago: executing program 3 (id=2886): epoll_create(0x1) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000200), 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 3.543664168s ago: executing program 7 (id=2887): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x4, 0x0, &(0x7f00000000c0)=0xfffffffffffffdaa) 3.414368959s ago: executing program 7 (id=2888): r0 = syz_io_uring_setup(0x3fe9, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x1}, &(0x7f0000000600), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000740)={0x1000000000000059, 0x0, 0x0, &(0x7f0000000200)=[{0xffffffffffffffff}], &(0x7f0000000240)=[0x0, 0x4]}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffe89, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000020601080000000000000000010000000500010006000000050005000a00000005000400000000000900020073797a31000000000c00a35de3223908f02f1b15f4883741a91756eaa853d788459aabce84254bd63ac05c17ec0e82b6efa9b20eeaa3c56f920e4baf4c00"/119], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB="73000000000000008b"]) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000005002000000000000c001f0070687930"], 0x28}}, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x200000001494) syz_open_dev$hiddev(&(0x7f0000000040), 0x1000, 0x80000) 3.17177589s ago: executing program 2 (id=2889): syz_io_uring_setup(0x3fe9, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x1}, &(0x7f0000000600), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0xc0984124, &(0x7f0000000c40)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000005002000000000000c001f0070687930"], 0x28}}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x200000001494) syz_open_dev$hiddev(&(0x7f0000000040), 0x1000, 0x80000) 2.236951537s ago: executing program 7 (id=2890): r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fchown(0xffffffffffffffff, 0x0, 0xee01) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000200)={0x2, 0x0, 0x2, {0xf, 0xffffffff, 0x7427, 0xab1}}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r4, 0x0) connect$rose(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc084}, 0x4000000) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r5, &(0x7f0000000540)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @mcast2, @private1, {[], @param_prob={0x4, 0x0, 0x0, 0x3, {0x3, 0x6, "fefbd4", 0x2, 0x0, 0x1, @private1, @private1}}}}}}, 0x66) 2.154289847s ago: executing program 2 (id=2891): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/4096, 0x0, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 1.59186157s ago: executing program 6 (id=2892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000003800)={0x2020}, 0x2020) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000580)}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 1.044243784s ago: executing program 2 (id=2893): pidfd_send_signal(0xffffffffffffffff, 0x1b, 0x0, 0x700) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) getpid() r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xe9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x9) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) getsockname$qrtr(r2, &(0x7f0000000040), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={0x0, 0x0, 0x5, 0xd71e, 0x1}) 1.010182103s ago: executing program 3 (id=2894): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x8e]}, &(0x7f0000000400)=0x50) 0s ago: executing program 6 (id=2895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008d}, 0x0) syz_io_uring_setup(0x5ec2, &(0x7f0000000140)={0x0, 0xb8e1, 0x8, 0x0, 0x1000005}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x24, 0x0, r2, 0x0, &(0x7f00000001c0)="ca70c10934", 0x5, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x12, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000100)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r8 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000780)={0x1, @pix={0x0, 0x100000, 0x35314142, 0x0, 0x0, 0x4ad5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1e, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") kernel console output (not intermixed with test programs): 2.789996][ T1592] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.811504][ T9815] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 622.837362][ T9815] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-12) [ 622.848128][ T9822] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1329: invalid block [ 622.868118][ T9822] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1329: invalid indirect mapped block 4294967295 (level 1) [ 622.891805][ T9822] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1329: invalid indirect mapped block 4294967295 (level 1) [ 623.157088][ T9822] EXT4-fs (loop2): 2 truncates cleaned up [ 623.208329][ T9822] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 623.765358][ T9714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 623.841139][ T9714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 624.290766][ T9714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 624.332827][ T9714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 624.595693][ T9845] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 624.602334][ T9845] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 625.323021][ T9827] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 626.051124][ T9845] vhci_hcd vhci_hcd.0: Device attached [ 627.274797][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.599098][ T9714] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.656811][ T6864] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 627.677876][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 627.696968][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 627.903312][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 627.903869][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 627.910236][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.910326][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.910750][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 627.911265][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 627.911578][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.911609][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.911950][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 627.912580][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 627.918644][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 627.956520][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 627.960793][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 627.961867][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 627.990359][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 627.991264][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 628.015261][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 628.015899][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 628.031915][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 628.032468][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 628.045666][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 628.553883][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 628.558209][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 628.683632][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.683699][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.968866][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.367413][ T9902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1345'. [ 629.367486][ T9902] tipc: Invalid UDP bearer configuration [ 629.367523][ T9902] tipc: Enabling of bearer rejected, failed to enable media [ 629.490337][ T9908] loop4: detected capacity change from 0 to 256 [ 629.598895][ T9908] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 629.601499][ T9846] vhci_hcd: connection reset by peer [ 629.610462][ T4350] vhci_hcd: stop threads [ 629.610479][ T4350] vhci_hcd: release socket [ 629.610552][ T4350] vhci_hcd: disconnect device [ 629.739101][ T9881] loop5: detected capacity change from 0 to 40427 [ 629.940161][ T9881] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 629.958399][ T9881] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 629.966791][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 630.149150][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 630.235416][ T9881] F2FS-fs (loop5): Found nat_bits in checkpoint [ 630.349871][ T1592] device hsr_slave_0 left promiscuous mode [ 630.375075][ T9881] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 630.404171][ T9881] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 630.455767][ T1592] device hsr_slave_1 left promiscuous mode [ 630.468107][ T1592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.496179][ T1592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.692398][ T1592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.718812][ T1592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.086623][ T1592] device bridge_slave_1 left promiscuous mode [ 631.093707][ T1592] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.115791][ T1592] device bridge_slave_0 left promiscuous mode [ 631.130740][ T1592] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.142542][ T9933] binder: 9925:9933 ioctl c0306201 20000940 returned -14 [ 631.187774][ T1592] device veth1_macvtap left promiscuous mode [ 631.209533][ T1592] device veth0_macvtap left promiscuous mode [ 631.236912][ T1592] device veth1_vlan left promiscuous mode [ 631.316583][ T1592] device veth0_vlan left promiscuous mode [ 633.568640][ T6864] vhci_hcd: vhci_device speed not set [ 634.416633][ T1592] team0 (unregistering): Port device team_slave_1 removed [ 634.616146][ T1592] team0 (unregistering): Port device team_slave_0 removed [ 634.846666][ T1592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.950665][ T1592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.033555][ T9964] loop5: detected capacity change from 0 to 512 [ 635.060250][ T1592] bond0 (unregistering): Released all slaves [ 635.091758][ T9964] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1356: invalid indirect mapped block 4294967295 (level 1) [ 635.106735][ T9964] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1356: invalid indirect mapped block 4294967295 (level 1) [ 635.122162][ T9964] EXT4-fs (loop5): 2 truncates cleaned up [ 635.127929][ T9964] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 635.170396][ T9714] device veth0_vlan entered promiscuous mode [ 635.194108][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 635.215436][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 635.226753][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 635.234964][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 635.283225][ T9714] device veth1_vlan entered promiscuous mode [ 635.417289][ T2412] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 635.817285][ T9714] device veth0_macvtap entered promiscuous mode [ 635.883916][ T9714] device veth1_macvtap entered promiscuous mode [ 635.962950][ T9978] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 635.969579][ T9978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 635.985749][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.081085][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.090953][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.109941][ T9978] vhci_hcd vhci_hcd.0: Device attached [ 636.123781][ T2412] usb 3-1: config index 0 descriptor too short (expected 31, got 27) [ 636.131910][ T2412] usb 3-1: config 1 interface 0 has no altsetting 0 [ 636.143805][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.155972][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.186947][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.222143][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.259039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 636.315688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 636.326916][ T2412] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 636.331513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 636.353880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 636.367180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 636.369574][ T2412] usb 3-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 636.378512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 636.407643][ T2412] usb 3-1: Product: syz [ 636.411835][ T2412] usb 3-1: Manufacturer: syz [ 636.451778][ T6864] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 636.462457][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.486424][ T2412] usb 3-1: SerialNumber: syz [ 636.491146][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.517496][ T9714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.538955][ T9714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.561074][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.698403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 636.707555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.164074][ T9714] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.271407][ T9714] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.407367][ T9714] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.416275][ T9714] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.582716][ T2412] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 637.652255][ T6494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.707327][ T9979] vhci_hcd: connection reset by peer [ 637.712797][ T549] vhci_hcd: stop threads [ 637.717041][ T6494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.722409][ T549] vhci_hcd: release socket [ 637.731465][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 637.757331][ T549] vhci_hcd: disconnect device [ 637.821015][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.841787][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.884479][ T9986] loop4: detected capacity change from 0 to 40427 [ 637.901675][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 637.950181][ T9986] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 637.963252][ T9986] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 638.318310][ T9986] F2FS-fs (loop4): Found nat_bits in checkpoint [ 640.229002][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1299'. [ 642.003493][ T6864] vhci_hcd: vhci_device speed not set [ 642.084351][T10038] binder: 10037:10038 ioctl c0306201 20000940 returned -14 [ 642.519366][T10057] loop3: detected capacity change from 0 to 256 [ 642.837741][T10057] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 648.099491][ T6864] usb 3-1: USB disconnect, device number 19 [ 648.137711][ T6864] usblp0: removed [ 648.555544][T10118] loop5: detected capacity change from 0 to 256 [ 648.836974][T10118] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 648.889950][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 650.794133][T10149] loop6: detected capacity change from 0 to 512 [ 651.001234][T10149] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 651.473498][T10149] EXT4-fs (loop6): 1 truncate cleaned up [ 651.479423][T10149] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 652.847085][T10178] loop3: detected capacity change from 0 to 256 [ 653.058880][T10178] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 653.693949][T10193] netlink: 'syz.3.1405': attribute type 1 has an invalid length. [ 653.701823][T10193] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1405'. [ 655.675516][T10210] overlayfs: missing 'lowerdir' [ 656.811950][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 657.176022][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1414'. [ 657.185103][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1414'. [ 657.258996][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 657.411733][ T21] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 657.551434][ T21] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 657.764389][T10233] loop3: detected capacity change from 0 to 256 [ 657.782961][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.810057][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 657.996852][ T21] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 658.029635][T10233] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 658.038715][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.075819][ T21] usb 5-1: Product: syz [ 658.080015][ T21] usb 5-1: Manufacturer: syz [ 658.114232][ T21] usb 5-1: SerialNumber: syz [ 658.131063][ T21] usb 5-1: config 0 descriptor?? [ 658.204141][ T21] hub 5-1:0.0: bad descriptor, ignoring hub [ 658.216584][ T21] hub: probe of 5-1:0.0 failed with error -5 [ 658.543999][ T21] usb 5-1: USB disconnect, device number 11 [ 660.382171][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1423'. [ 661.684946][T10287] loop2: detected capacity change from 0 to 256 [ 661.900311][T10287] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 666.657875][T10331] loop2: detected capacity change from 0 to 64 [ 669.777927][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1440'. [ 673.655132][T10390] loop3: detected capacity change from 0 to 64 [ 673.810721][T10389] sp0: Synchronizing with TNC [ 673.858369][T10396] sp0: Found TNC [ 674.458853][T10386] [U] è` [ 677.004979][ T26] audit: type=1107 audit(1733178219.444:10): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 678.687973][T10457] loop5: detected capacity change from 0 to 64 [ 678.777812][T10459] loop6: detected capacity change from 0 to 512 [ 679.058334][T10459] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1466: invalid indirect mapped block 4294967295 (level 1) [ 679.084110][T10459] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1466: invalid indirect mapped block 4294967295 (level 1) [ 679.452707][T10459] EXT4-fs (loop6): 2 truncates cleaned up [ 679.489726][T10459] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 680.937881][T10490] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 680.937923][T10490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 680.938028][T10490] vhci_hcd vhci_hcd.0: Device attached [ 681.061109][T10492] vhci_hcd: connection closed [ 681.061979][ T154] vhci_hcd: stop threads [ 681.087643][ T154] vhci_hcd: release socket [ 681.100164][ T154] vhci_hcd: disconnect device [ 681.109299][T10498] binder_alloc: 10495: binder_alloc_buf, no vma [ 681.119967][T10498] binder: 10495:10498 ioctl c0306201 20000940 returned -14 [ 681.152615][ T4688] vhci_hcd: vhci_device speed not set [ 681.451023][T10500] loop3: detected capacity change from 0 to 512 [ 681.505412][T10465] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 682.129706][T10500] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 682.215852][T10508] loop6: detected capacity change from 0 to 256 [ 682.271820][T10508] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 682.341762][T10500] EXT4-fs (loop3): 1 truncate cleaned up [ 682.347512][T10500] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 687.263124][T10544] binder: 10543:10544 ioctl c0306201 20000940 returned -14 [ 687.448937][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1489'. [ 688.918858][T10564] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 691.203095][T10594] team0: Port device team_slave_1 removed [ 692.347082][T10611] binder: BINDER_SET_CONTEXT_MGR already set [ 692.594633][T10611] binder: 10608:10611 ioctl 4018620d 20000040 returned -16 [ 692.642458][T10624] binder: 10608:10624 ioctl c0306201 20000940 returned -14 [ 694.679528][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.679574][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.116363][T10645] 9pnet: Unknown protocol version 9p200 [ 695.384525][T10655] input: syz0 as /devices/virtual/input/input14 [ 696.241795][T10674] loop5: detected capacity change from 0 to 512 [ 696.786415][T10676] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 697.163454][T10686] loop2: detected capacity change from 0 to 256 [ 697.295005][T10686] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 697.308053][T10674] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 697.470230][T10674] EXT4-fs (loop5): 1 truncate cleaned up [ 697.475969][T10674] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 697.511395][ T6951] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 698.570831][ T6951] usb 7-1: config 0 has no interfaces? [ 698.576392][ T6951] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 698.606327][ T6951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.653865][ T6951] usb 7-1: config 0 descriptor?? [ 698.904907][T10717] binder: 10716:10717 ioctl c0306201 20000940 returned -14 [ 698.933753][T10683] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(247689607801085) <= P.seqno(0) <= S.SWH(247689607801159)) and (P.ackno exists or LAWL(201111140329145) <= P.ackno(201111140329146) <= S.AWH(201111140329146), sending SYNC... [ 699.131629][ T13] usb 7-1: USB disconnect, device number 2 [ 700.120757][T10744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 700.183760][T10744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 700.196031][T10744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 700.203927][T10744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 700.211584][T10744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.219931][T10744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.359214][T10747] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 700.957210][T10749] loop6: detected capacity change from 0 to 512 [ 701.118431][T10749] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1535: invalid block [ 701.162537][T10749] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1535: invalid indirect mapped block 4294967295 (level 1) [ 701.410492][T10749] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1535: invalid indirect mapped block 4294967295 (level 1) [ 701.418032][T10764] loop5: detected capacity change from 0 to 512 [ 701.468956][T10764] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 701.494135][T10749] EXT4-fs (loop6): 2 truncates cleaned up [ 702.657869][T10765] loop2: detected capacity change from 0 to 512 [ 702.740982][T10749] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 703.066474][T10765] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 703.110981][T10764] EXT4-fs (loop5): 1 truncate cleaned up [ 703.117418][T10764] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 703.181092][T10765] EXT4-fs (loop2): 1 truncate cleaned up [ 703.186840][T10765] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 704.139237][T10791] 9pnet: Unknown protocol version 9p200 [ 704.223860][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1543'. [ 704.354874][T10780] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 704.361506][T10780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 704.369263][T10780] vhci_hcd vhci_hcd.0: Device attached [ 704.375003][T10788] vhci_hcd: connection closed [ 704.377002][ T1592] vhci_hcd: stop threads [ 704.415106][ T1592] vhci_hcd: release socket [ 704.597353][ T1592] vhci_hcd: disconnect device [ 704.672099][ T4688] vhci_hcd: vhci_device speed not set [ 705.040027][T10806] binder: 10805:10806 ioctl c0306201 20000940 returned -14 [ 705.128389][T10695] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 705.605806][T10813] loop5: detected capacity change from 0 to 256 [ 705.714855][T10814] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 706.359457][T10813] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 706.673271][T10825] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1546'. [ 706.682536][T10825] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1546'. [ 707.714125][ T26] audit: type=1107 audit(1733178248.189:11): pid=10830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 712.598103][T10893] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 714.389665][T10917] overlayfs: missing 'lowerdir' [ 714.680170][T10918] 9pnet: Unknown protocol version 9p200 [ 715.171407][T10923] capability: warning: `syz.4.1568' uses 32-bit capabilities (legacy support in use) [ 715.510527][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1567'. [ 716.388875][T10937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1571'. [ 716.397880][T10937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1571'. [ 717.591117][T10942] sp0: Synchronizing with TNC [ 717.626350][T10945] sp0: Found TNC [ 719.143184][T10941] [U] `èè` [ 719.777670][T10969] 9pnet: Unknown protocol version 9p200 [ 719.939916][T10977] binder: 10976:10977 ioctl c0306201 20000940 returned -14 [ 719.980332][T10981] QAT: failed to copy from user. [ 723.774095][T11037] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1593'. [ 723.834228][T11040] binder: BINDER_SET_CONTEXT_MGR already set [ 723.855464][T11040] binder: 11039:11040 ioctl 4018620d 20000040 returned -16 [ 725.534196][ T4177] Bluetooth: hci5: link tx timeout [ 725.540446][ T4177] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 726.074480][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 727.274415][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.294842][ T13] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 727.309891][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.518750][ T13] usb 4-1: config 0 descriptor?? [ 727.774334][ T4685] Bluetooth: hci5: command 0x0406 tx timeout [ 728.043745][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 728.318375][ T13] pwc: send_video_command error -71 [ 728.324479][ T13] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 728.361911][ T13] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 728.490052][ T13] usb 4-1: USB disconnect, device number 9 [ 729.287715][T11089] binder: BINDER_SET_CONTEXT_MGR already set [ 729.308529][T11089] binder: 11088:11089 ioctl 4018620d 20000040 returned -16 [ 730.195290][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 731.418146][T11114] loop2: detected capacity change from 0 to 64 [ 732.564518][T11130] device syz_tun entered promiscuous mode [ 732.594386][T11130] device syz_tun left promiscuous mode [ 732.829191][T11136] cgroup: Unknown subsys name 'nofavordynmods' [ 734.023468][T11146] binder: BINDER_SET_CONTEXT_MGR already set [ 734.042776][T11146] binder: 11145:11146 ioctl 4018620d 20000040 returned -16 [ 735.201450][T11170] loop2: detected capacity change from 0 to 64 [ 737.385370][T11172] device syz_tun entered promiscuous mode [ 737.507957][T11172] device syz_tun left promiscuous mode [ 739.134534][T11199] binder: 11198:11199 ioctl c0306201 20000940 returned -14 [ 739.260867][T11201] loop4: detected capacity change from 0 to 256 [ 739.546249][T11201] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 739.677911][T11209] loop3: detected capacity change from 0 to 64 [ 740.641855][T11212] device syz_tun entered promiscuous mode [ 742.494074][T11222] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 742.502864][T11212] device syz_tun left promiscuous mode [ 744.523477][T11244] binder: 11243:11244 ioctl c0306201 20000940 returned -14 [ 745.978946][T11260] smc: net device bond0 applied user defined pnetid SYZ0 [ 746.955132][T11273] loop5: detected capacity change from 0 to 256 [ 747.056572][T11273] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 748.090939][T11281] device syz_tun entered promiscuous mode [ 748.421680][T11281] device syz_tun left promiscuous mode [ 749.134350][ T4216] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 749.412169][ T4216] usb 4-1: Using ep0 maxpacket: 16 [ 749.561838][ T4216] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 749.573797][ T4216] usb 4-1: config 0 has no interface number 0 [ 749.586957][ T4216] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 749.609634][ T4216] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 749.787993][T11304] binder: 11303:11304 ioctl c0306201 20000940 returned -14 [ 749.797348][ T4216] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 749.829021][ T4216] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 749.840152][ T4216] usb 4-1: Product: syz [ 749.844343][ T4216] usb 4-1: SerialNumber: syz [ 749.861931][ T4216] usb 4-1: config 0 descriptor?? [ 749.916266][ T4216] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 749.924119][ T4216] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input15 [ 750.193478][ T4216] usb 4-1: USB disconnect, device number 10 [ 750.224790][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 750.233391][ T4216] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 751.863347][T11324] device syz_tun entered promiscuous mode [ 751.931348][T11324] device syz_tun left promiscuous mode [ 752.302344][T11337] loop2: detected capacity change from 0 to 256 [ 752.331943][T11337] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 752.590305][T11344] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1681'. [ 752.599655][T11344] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1681'. [ 753.379385][T11349] binder: BINDER_SET_CONTEXT_MGR already set [ 753.391191][T11349] binder: 11348:11349 ioctl 4018620d 20000040 returned -16 [ 755.039627][T11366] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1688'. [ 755.145890][T11370] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 755.740534][T11379] device syz_tun entered promiscuous mode [ 755.751296][T11379] device syz_tun left promiscuous mode [ 756.205824][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1694'. [ 756.215161][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1694'. [ 757.063408][T11401] binder: BINDER_SET_CONTEXT_MGR already set [ 757.077311][T11401] binder: 11399:11401 ioctl 4018620d 20000040 returned -16 [ 757.472551][T11402] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 757.492435][T11402] kvm: pic: non byte read [ 757.498289][T11402] kvm: pic: level sensitive irq not supported [ 757.498389][T11402] kvm: pic: non byte read [ 757.509659][T11402] kvm: pic: level sensitive irq not supported [ 757.509723][T11402] kvm: pic: non byte read [ 757.525184][T11402] kvm: pic: level sensitive irq not supported [ 757.525284][T11402] kvm: pic: non byte read [ 757.956124][T11421] loop3: detected capacity change from 0 to 256 [ 758.025553][T11423] device syz_tun entered promiscuous mode [ 758.034763][T11423] device syz_tun left promiscuous mode [ 758.236249][T11430] loop2: detected capacity change from 0 to 8192 [ 758.306140][T11421] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 758.307655][T11430] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 758.693000][T11439] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1710'. [ 758.702151][T11439] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1710'. [ 760.025086][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.031525][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.545816][T11470] loop4: detected capacity change from 0 to 40427 [ 762.818825][T11470] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 762.869250][T11470] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 762.878396][T11493] 9pnet: Unknown protocol version 9p200 [ 762.929277][T11502] xt_nat: multiple ranges no longer supported [ 762.963168][T11470] F2FS-fs (loop4): Found nat_bits in checkpoint [ 763.084604][T11470] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 763.100301][T11470] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 763.879996][T11517] loop2: detected capacity change from 0 to 8192 [ 763.973244][T11517] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 764.250269][T11525] loop4: detected capacity change from 0 to 256 [ 764.590096][T11525] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 765.446803][T11542] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 766.199015][T11550] device syz_tun entered promiscuous mode [ 766.324107][T11550] device syz_tun left promiscuous mode [ 767.402422][T11569] loop2: detected capacity change from 0 to 8192 [ 767.460069][T11569] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 768.870243][T11593] device syz_tun entered promiscuous mode [ 769.193548][T11593] device syz_tun left promiscuous mode [ 769.321487][T11603] loop6: detected capacity change from 0 to 256 [ 769.333318][T11604] 9pnet: Unknown protocol version 9p200 [ 769.436482][T11603] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 773.317272][T11639] device syz_tun entered promiscuous mode [ 773.374610][T11639] device syz_tun left promiscuous mode [ 773.603904][T11651] loop2: detected capacity change from 0 to 256 [ 773.734240][T11651] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 773.830873][T11655] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 779.096319][T11697] netlink: 566 bytes leftover after parsing attributes in process `syz.6.1786'. [ 779.306671][T11700] loop6: detected capacity change from 0 to 256 [ 779.454136][T11700] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 782.415552][T11729] loop3: detected capacity change from 0 to 64 [ 783.785567][ T4685] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 783.839594][ T4685] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 784.081823][ T13] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 784.531154][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 784.601913][T11750] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1800'. [ 784.611020][T11750] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1800'. [ 785.299307][ T13] usb 5-1: no configurations [ 785.304073][ T13] usb 5-1: can't read configurations, error -22 [ 786.503247][T11768] loop4: detected capacity change from 0 to 256 [ 786.609043][T11768] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 788.617392][T11786] loop3: detected capacity change from 0 to 64 [ 792.221822][T11834] loop3: detected capacity change from 0 to 64 [ 793.382219][T11843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1825'. [ 793.382307][T11843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1825'. [ 794.176321][T11848] loop3: detected capacity change from 0 to 256 [ 794.260202][T11848] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 796.701954][T11869] loop2: detected capacity change from 0 to 512 [ 797.016766][T11880] loop4: detected capacity change from 0 to 64 [ 797.236803][T11869] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1834: invalid indirect mapped block 4294967295 (level 1) [ 797.542693][T11869] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1834: invalid indirect mapped block 4294967295 (level 1) [ 797.595348][T11869] EXT4-fs (loop2): 2 truncates cleaned up [ 797.602289][T11869] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 797.942189][ T4685] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 798.385790][ T4685] usb 7-1: Using ep0 maxpacket: 32 [ 798.899227][ T4685] usb 7-1: config 0 has no interfaces? [ 799.102337][ T4685] usb 7-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 799.135594][ T4685] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.174926][ T4685] usb 7-1: Product: syz [ 799.204588][ T4685] usb 7-1: Manufacturer: syz [ 799.220926][ T4685] usb 7-1: SerialNumber: syz [ 799.242323][ T4685] usb 7-1: config 0 descriptor?? [ 801.443139][T11918] sp0: Synchronizing with TNC [ 801.467196][T11921] sp0: Found TNC [ 801.488693][ T4216] usb 7-1: USB disconnect, device number 3 [ 801.957546][T11917] [U] `èè` [ 802.173421][ T26] audit: type=1326 audit(1733178336.547:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.6.1846" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb273ad5f19 code=0x0 [ 803.130062][T11938] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1847'. [ 803.139226][T11938] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1847'. [ 804.848443][T11951] kernel read not supported for file /eth0 (pid: 11951 comm: syz.4.1853) [ 804.945657][ T26] audit: type=1800 audit(1733178339.129:13): pid=11951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1853" name="eth0" dev="mqueue" ino=59211 res=0 errno=0 [ 805.029641][T11952] 9pnet: Insufficient options for proto=fd [ 806.127231][T11963] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 806.746841][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'. [ 808.397951][T11996] capability: warning: `syz.4.1869' uses deprecated v2 capabilities in a way that may be insecure [ 808.739713][ T6868] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 809.322638][ T6868] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 809.334450][ T6868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 809.454675][ T6868] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 809.465005][ T6868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.612255][ T6868] usb 4-1: config 0 descriptor?? [ 809.664712][T11987] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 809.704395][ T6868] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 809.779393][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 810.402365][ T4688] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 810.722923][ T4688] usb 3-1: Using ep0 maxpacket: 8 [ 810.857231][ T4688] usb 3-1: config 0 has an invalid interface number: 45 but max is 0 [ 810.878332][ T4688] usb 3-1: config 0 has no interface number 0 [ 810.938584][T12012] loop5: detected capacity change from 0 to 40427 [ 810.982728][T12012] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 811.010929][T12012] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 811.060429][T12012] F2FS-fs (loop5): Found nat_bits in checkpoint [ 811.088216][ T4688] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=4b.42 [ 811.113499][ T4688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.128814][ T4688] usb 3-1: Product: syz [ 811.139658][ T4688] usb 3-1: Manufacturer: syz [ 811.148645][ T4688] usb 3-1: SerialNumber: syz [ 811.172912][ T4688] usb 3-1: config 0 descriptor?? [ 811.190510][T12012] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 811.200523][T12012] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 812.616658][ T6868] usb 4-1: USB disconnect, device number 11 [ 812.693710][ T26] audit: type=1107 audit(1733178346.378:14): pid=12032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 814.101823][ T4688] ums-freecom 3-1:0.45: USB Mass Storage device detected [ 815.135650][T12059] sp0: Synchronizing with TNC [ 815.155288][T12061] sp0: Found TNC [ 815.165851][ T4688] usb 3-1: USB disconnect, device number 20 [ 815.416688][T12055] [U] è` [ 815.943889][T12070] batman_adv: batadv0: Adding interface: dummy0 [ 815.950215][T12070] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.977802][T12070] batman_adv: batadv0: Interface activated: dummy0 [ 816.154577][ T26] audit: type=1107 audit(1733178349.614:15): pid=12071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 818.121359][ T26] audit: type=1326 audit(1733178351.392:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.6.1896" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb273ad5f19 code=0x0 [ 819.819951][T12112] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 819.833641][T12112] Cannot find add_set index 0 as target [ 819.970878][T12114] delete_channel: no stack [ 820.287316][T12120] sp0: Synchronizing with TNC [ 820.463566][T12120] sp0: Found TNC [ 820.473125][T12119] [U] è` [ 822.300794][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1905'. [ 822.310066][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1905'. [ 823.026958][ T26] audit: type=1326 audit(1733178356.050:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12127 comm="syz.4.1908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6672963f19 code=0x0 [ 825.571832][T12159] loop3: detected capacity change from 0 to 256 [ 825.629595][T12162] sp0: Synchronizing with TNC [ 825.638701][T12162] sp0: Found TNC [ 825.644442][T12161] [U] è` [ 825.663269][T12149] loop6: detected capacity change from 0 to 40427 [ 825.703920][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 825.710300][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.722348][T12159] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 825.731874][T12149] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 825.772424][T12149] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 827.381121][T12149] F2FS-fs (loop6): Found nat_bits in checkpoint [ 828.361062][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1922'. [ 832.883332][T12228] loop6: detected capacity change from 0 to 256 [ 832.961850][T12228] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 834.774958][T12224] loop2: detected capacity change from 0 to 40427 [ 834.802250][T12224] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 834.864564][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1935'. [ 835.033253][T12224] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 835.170918][T12224] F2FS-fs (loop2): Found nat_bits in checkpoint [ 835.299755][T12224] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 835.308161][T12224] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 835.389500][T12245] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 837.000391][ T26] audit: type=1326 audit(1733178369.117:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 837.158033][ T26] audit: type=1326 audit(1733178369.117:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 837.288928][ T26] audit: type=1326 audit(1733178369.155:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 837.321103][ T26] audit: type=1326 audit(1733178369.155:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 837.343367][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.492708][ T26] audit: type=1326 audit(1733178369.155:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 838.003053][ T26] audit: type=1326 audit(1733178369.155:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 838.048008][ T26] audit: type=1326 audit(1733178369.174:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 838.165505][ T26] audit: type=1326 audit(1733178369.174:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 838.301295][ T26] audit: type=1326 audit(1733178369.174:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 838.338762][ T26] audit: type=1326 audit(1733178369.174:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 839.866667][T12278] loop5: detected capacity change from 0 to 8192 [ 839.975302][T12278] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 840.060079][T12266] loop3: detected capacity change from 0 to 40427 [ 840.333221][T12266] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 840.346458][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1947'. [ 840.382852][T12266] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 840.644881][T12266] F2FS-fs (loop3): Found nat_bits in checkpoint [ 843.010190][T12320] binder: BINDER_SET_CONTEXT_MGR already set [ 843.031889][T12320] binder: 12319:12320 ioctl 4018620d 20000040 returned -16 [ 845.183791][T12341] loop2: detected capacity change from 0 to 512 [ 845.275859][T12341] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1961: invalid indirect mapped block 4294967295 (level 1) [ 845.315031][T12341] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1961: invalid indirect mapped block 4294967295 (level 1) [ 845.337584][T12341] EXT4-fs (loop2): 2 truncates cleaned up [ 845.430594][T12341] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 848.953922][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1966'. [ 850.059279][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 850.059314][ T26] audit: type=1107 audit(1733178381.334:31): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 850.988245][T12399] loop4: detected capacity change from 0 to 512 [ 851.035545][T12383] loop3: detected capacity change from 0 to 40427 [ 851.182198][T12383] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 851.208176][T12383] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 851.511169][T12399] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1975: invalid indirect mapped block 4294967295 (level 1) [ 851.594143][T12383] F2FS-fs (loop3): Found nat_bits in checkpoint [ 851.780435][T12399] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1975: invalid indirect mapped block 4294967295 (level 1) [ 851.856294][T12399] EXT4-fs (loop4): 2 truncates cleaned up [ 851.866861][T12399] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 852.010802][T12383] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 852.017876][T12383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 854.202836][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1981'. [ 854.314617][T12446] binder: 12445:12446 ioctl c0306201 0 returned -14 [ 854.323678][T12446] binder: 12445:12446 ioctl c0306201 20000940 returned -14 [ 854.748227][ T26] audit: type=1107 audit(1733178385.711:32): pid=12449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 855.883584][T12458] 9pnet: Unknown protocol version 9p200 [ 858.015350][T12470] loop5: detected capacity change from 0 to 512 [ 858.100256][T12470] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1991: invalid block [ 858.464061][T12470] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1991: invalid indirect mapped block 4294967295 (level 1) [ 858.777231][T12470] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1991: invalid indirect mapped block 4294967295 (level 1) [ 858.869312][T12470] EXT4-fs (loop5): 2 truncates cleaned up [ 858.876523][T12470] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 859.190125][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1995'. [ 860.914284][ T4685] Bluetooth: hci5: command 0x0406 tx timeout [ 861.046580][T12512] 9pnet: Unknown protocol version 9p200 [ 862.418064][T12504] loop4: detected capacity change from 0 to 40427 [ 862.481851][T12504] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 862.499101][T12504] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 862.564781][T12504] F2FS-fs (loop4): Found nat_bits in checkpoint [ 862.697657][T12504] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 862.719398][T12504] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 864.650389][T12537] loop6: detected capacity change from 0 to 256 [ 864.852182][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2007'. [ 865.255874][T12537] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 867.646500][ T26] audit: type=1326 audit(1733178397.787:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.5.2011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c47ae9f19 code=0x0 [ 872.356486][T12610] 9pnet: Unknown protocol version 9p200 [ 876.553609][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2026'. [ 876.598931][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2026'. [ 878.457733][T12652] sp0: Synchronizing with TNC [ 878.479565][T12652] sp0: Found TNC [ 878.807864][T12651] [U] è` [ 878.968009][T12658] loop2: detected capacity change from 0 to 512 [ 879.184349][ T26] audit: type=1107 audit(1733178408.573:34): pid=12659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 879.446099][T12658] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2037: invalid block [ 879.537591][T12658] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2037: invalid indirect mapped block 4294967295 (level 1) [ 879.590043][T12658] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2037: invalid indirect mapped block 4294967295 (level 1) [ 879.795068][T12658] EXT4-fs (loop2): 2 truncates cleaned up [ 879.841868][T12658] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 880.130597][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2040'. [ 881.043799][T12678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2042'. [ 881.052994][T12678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2042'. [ 886.935783][T12734] loop3: detected capacity change from 0 to 256 [ 887.033411][T12734] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 888.478329][T12740] loop4: detected capacity change from 0 to 512 [ 888.899141][T12740] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2055: invalid indirect mapped block 4294967295 (level 1) [ 888.934238][T12740] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2055: invalid indirect mapped block 4294967295 (level 1) [ 888.957202][T12740] EXT4-fs (loop4): 2 truncates cleaned up [ 888.966168][T12740] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 889.084150][T12750] sp0: Synchronizing with TNC [ 889.101113][T12750] sp0: Found TNC [ 889.106649][T12746] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 889.716926][T12749] [U] è` [ 891.565553][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 891.571884][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 892.212490][T12778] binder: 12777:12778 ioctl c0306201 20000940 returned -14 [ 892.257723][T12780] loop4: detected capacity change from 0 to 256 [ 892.308260][T12780] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 894.161806][T12790] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 894.419029][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2068'. [ 896.627648][T12819] loop5: detected capacity change from 0 to 512 [ 897.140501][T12819] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2074: invalid indirect mapped block 4294967295 (level 1) [ 897.362440][T12819] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2074: invalid indirect mapped block 4294967295 (level 1) [ 897.610331][T12819] EXT4-fs (loop5): 2 truncates cleaned up [ 897.633620][T12819] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 897.979830][T12833] loop3: detected capacity change from 0 to 256 [ 898.006750][T12829] binder: 12828:12829 ioctl c0306201 20000940 returned -14 [ 898.019732][T12833] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 902.818675][T12879] binder: 12877:12879 ioctl c0306201 20000940 returned -14 [ 903.118001][T12884] loop3: detected capacity change from 0 to 512 [ 903.678980][T12884] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2091: invalid block [ 903.798870][T12884] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2091: invalid indirect mapped block 4294967295 (level 1) [ 903.897085][T12884] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2091: invalid indirect mapped block 4294967295 (level 1) [ 903.960095][T12884] EXT4-fs (loop3): 2 truncates cleaned up [ 903.972551][T12884] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 904.309857][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2092'. [ 905.105935][T12904] loop3: detected capacity change from 0 to 256 [ 905.156690][T12904] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 908.252239][T12906] loop6: detected capacity change from 0 to 40427 [ 909.789558][T12939] loop2: detected capacity change from 0 to 512 [ 911.007535][T12939] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2103: invalid block [ 911.015136][T12951] loop4: detected capacity change from 0 to 256 [ 911.027655][T12939] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2103: invalid indirect mapped block 4294967295 (level 1) [ 911.091542][T12939] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2103: invalid indirect mapped block 4294967295 (level 1) [ 911.141206][T12951] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 911.174401][T12939] EXT4-fs (loop2): 2 truncates cleaned up [ 911.191033][T12939] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 913.883371][T12985] loop3: detected capacity change from 0 to 256 [ 913.898032][T12986] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 913.936152][T12985] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 915.323826][T12977] loop5: detected capacity change from 0 to 40427 [ 915.361553][T12977] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 915.369684][T12977] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 915.899071][T12977] F2FS-fs (loop5): Found nat_bits in checkpoint [ 916.195394][T12977] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 916.233847][T12977] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 917.716032][T13009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2115'. [ 917.725083][T13009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2115'. [ 917.924606][T13012] loop4: detected capacity change from 0 to 256 [ 917.987887][T13013] loop6: detected capacity change from 0 to 512 [ 917.993611][T13012] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 921.759751][T13013] EXT4-fs: failed to create workqueue [ 921.778248][T13013] EXT4-fs (loop6): mount failed [ 922.025470][T13036] loop6: detected capacity change from 0 to 256 [ 922.107140][T13036] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 927.121743][T13056] loop3: detected capacity change from 0 to 40427 [ 929.074476][T13082] loop4: detected capacity change from 0 to 512 [ 929.261838][T13082] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.2135: invalid block [ 929.282383][T13082] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2135: invalid indirect mapped block 4294967295 (level 1) [ 929.347757][T13082] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2135: invalid indirect mapped block 4294967295 (level 1) [ 929.583357][T13082] EXT4-fs (loop4): 2 truncates cleaned up [ 929.592043][T13082] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 930.214444][T13090] loop2: detected capacity change from 0 to 256 [ 930.282662][T13090] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 932.846126][T13086] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 932.903315][T13099] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 932.909940][T13099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 932.922933][T13099] vhci_hcd vhci_hcd.0: Device attached [ 932.931279][T13106] vhci_hcd: connection closed [ 932.932256][ T4384] vhci_hcd: stop threads [ 933.027874][ T4384] vhci_hcd: release socket [ 933.032336][ T4384] vhci_hcd: disconnect device [ 938.720230][T13160] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 939.501389][T13166] loop6: detected capacity change from 0 to 512 [ 940.092357][T13166] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2155: invalid indirect mapped block 4294967295 (level 1) [ 940.692312][T13166] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2155: invalid indirect mapped block 4294967295 (level 1) [ 940.794147][T13166] EXT4-fs (loop6): 2 truncates cleaned up [ 940.806969][T13166] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 950.024904][T13233] loop2: detected capacity change from 0 to 512 [ 950.265268][T13241] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 950.304451][T13233] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2170: invalid indirect mapped block 4294967295 (level 1) [ 950.363095][T13233] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2170: invalid indirect mapped block 4294967295 (level 1) [ 950.589217][T13233] EXT4-fs (loop2): 2 truncates cleaned up [ 950.595035][T13233] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 952.570028][T13240] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 953.307744][T13269] [U] é [ 954.467029][T13282] loop2: detected capacity change from 0 to 256 [ 954.651483][T13282] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 955.846966][T13302] loop5: detected capacity change from 0 to 512 [ 956.161414][T13302] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2188: invalid indirect mapped block 4294967295 (level 1) [ 956.445764][T13302] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2188: invalid indirect mapped block 4294967295 (level 1) [ 957.642658][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 957.654702][T13309] loop3: detected capacity change from 0 to 512 [ 957.692024][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 957.740849][T13302] EXT4-fs (loop5): 2 truncates cleaned up [ 957.756606][T13309] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 957.778962][T13302] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 957.801306][T13309] EXT4-fs (loop3): 1 truncate cleaned up [ 957.807004][T13309] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 957.828638][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.130687][T13313] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 960.344301][T13305] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 962.163833][T13338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2195'. [ 962.173560][T13338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2195'. [ 962.220958][T13341] loop6: detected capacity change from 0 to 256 [ 962.359979][T13341] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 964.320389][T13353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.946731][T13369] loop4: detected capacity change from 0 to 512 [ 967.814090][T13369] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.2204: invalid block [ 967.850558][T13369] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2204: invalid indirect mapped block 4294967295 (level 1) [ 967.883703][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2207'. [ 968.208986][T13387] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2208'. [ 968.218076][T13387] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2208'. [ 968.384318][T13369] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2204: invalid indirect mapped block 4294967295 (level 1) [ 968.559310][T13369] EXT4-fs (loop4): 2 truncates cleaned up [ 968.565076][T13369] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 968.763279][T13395] loop3: detected capacity change from 0 to 256 [ 969.114606][T13398] tmpfs: Unknown parameter 'usrquota' [ 969.660894][T13395] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 974.777215][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2220'. [ 975.279425][T13440] loop4: detected capacity change from 0 to 512 [ 975.372692][T13444] tmpfs: Unknown parameter 'usrquota' [ 976.101693][T13454] netlink: 'syz.6.2227': attribute type 3 has an invalid length. [ 976.146907][T13454] netlink: 'syz.6.2227': attribute type 3 has an invalid length. [ 976.183690][T13440] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2222: invalid indirect mapped block 4294967295 (level 1) [ 976.209148][T13456] loop2: detected capacity change from 0 to 256 [ 976.280724][T13456] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 976.302386][T13440] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2222: invalid indirect mapped block 4294967295 (level 1) [ 976.326583][T13440] EXT4-fs (loop4): 2 truncates cleaned up [ 976.333375][T13440] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 979.456321][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2234'. [ 984.397707][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2246'. [ 985.808520][T13536] loop4: detected capacity change from 0 to 256 [ 987.325257][T13536] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 989.604484][T13561] binder: 13559:13561 ioctl c0306201 0 returned -14 [ 989.653223][T13561] binder: 13559:13561 ioctl c0306201 20000940 returned -14 [ 991.181592][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2260'. [ 992.626835][T13589] sp0: Synchronizing with TNC [ 992.698768][T13589] sp0: Found TNC [ 992.775224][T13593] loop2: detected capacity change from 0 to 256 [ 992.850745][T13593] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 993.155430][T13587] [U] è` [ 996.322823][T13637] loop5: detected capacity change from 0 to 256 [ 996.825766][T13637] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 997.405769][T13646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 997.519564][T13646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 997.560888][T13648] sp0: Synchronizing with TNC [ 997.570962][T13648] sp0: Found TNC [ 997.840665][ T4244] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 998.032033][T13647] [U] è` [ 998.107818][ T4244] usb 4-1: Using ep0 maxpacket: 16 [ 998.236310][ T4244] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 998.253434][ T4244] usb 4-1: config 0 has no interface number 0 [ 998.274480][ T4244] usb 4-1: config 0 interface 161 has no altsetting 0 [ 998.466793][ T4244] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 998.487053][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.508685][ T4244] usb 4-1: Product: syz [ 998.512909][ T4244] usb 4-1: Manufacturer: syz [ 998.528784][ T4244] usb 4-1: SerialNumber: syz [ 998.546589][ T4244] usb 4-1: config 0 descriptor?? [ 998.592002][ T4244] ums-jumpshot 4-1:0.161: USB Mass Storage device detected [ 999.351203][T13651] udc-core: couldn't find an available UDC or it's busy [ 999.715863][T13651] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 999.764926][ T4185] Bluetooth: hci3: Unknown advertising packet type: 0x16 [ 999.765007][ T4185] Bluetooth: hci3: Unknown advertising packet type: 0x1c [ 999.772743][ T4185] Bluetooth: hci3: Unknown advertising packet type: 0x34 [ 1001.156954][ T4244] ums-jumpshot 4-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 1001.606647][ T4244] usb 4-1: USB disconnect, device number 12 [ 1002.057183][T13694] loop4: detected capacity change from 0 to 256 [ 1002.073905][T13695] sp0: Synchronizing with TNC [ 1002.091070][T13695] sp0: Found TNC [ 1002.196250][T13694] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 1002.219925][T13692] [U] è` [ 1004.544440][T13719] kvm: emulating exchange as write [ 1006.192688][T13748] sp0: Synchronizing with TNC [ 1006.237569][T13752] sp0: Found TNC [ 1006.732616][T13747] [U] è` [ 1007.793606][ T4688] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1008.242511][ T4688] usb 6-1: Using ep0 maxpacket: 32 [ 1009.033799][ T4688] usb 6-1: config 0 has no interfaces? [ 1009.181694][T13776] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1011.631670][ T4685] Bluetooth: hci5: command 0x0409 tx timeout [ 1011.696877][ T4688] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1011.736671][ T4688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.811271][ T4688] usb 6-1: Product: syz [ 1011.859243][ T4688] usb 6-1: config 0 descriptor?? [ 1011.880898][ T4688] usb 6-1: can't set config #0, error -71 [ 1011.915439][ T4688] usb 6-1: USB disconnect, device number 4 [ 1013.216055][T13821] loop2: detected capacity change from 0 to 256 [ 1013.358145][T13821] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 1013.641429][ T4688] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1014.582877][ T4688] usb 7-1: Using ep0 maxpacket: 32 [ 1014.742642][ T4688] usb 7-1: config 0 has no interfaces? [ 1014.967245][ T4688] usb 7-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1014.976374][ T4688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.017060][ T4688] usb 7-1: Product: syz [ 1015.031440][ T4688] usb 7-1: Manufacturer: syz [ 1015.188906][ T4688] usb 7-1: SerialNumber: syz [ 1015.203231][ T4688] usb 7-1: config 0 descriptor?? [ 1015.786053][ T2412] usb 7-1: USB disconnect, device number 4 [ 1019.231604][ T26] audit: type=1107 audit(1733178538.790:35): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1020.189008][T13866] 9pnet: Unknown protocol version 9p200 [ 1020.800712][T13888] [U]  [ 1021.466876][ T4690] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1021.509419][ T4690] Bluetooth: hci4: Injecting HCI hardware error event [ 1021.588373][ T4185] Bluetooth: hci4: hardware error 0x00 [ 1022.052112][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2348'. [ 1023.063237][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.074476][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.840203][ T2412] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1024.235727][ T2412] usb 5-1: Using ep0 maxpacket: 32 [ 1024.352297][ T26] audit: type=1107 audit(1733178544.365:36): pid=13927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1024.385914][ T2412] usb 5-1: config 0 has no interfaces? [ 1024.621503][ T2412] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1024.750498][ T2412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.944489][ T2412] usb 5-1: Product: syz [ 1025.027610][ T2412] usb 5-1: Manufacturer: syz [ 1025.173742][ T2412] usb 5-1: SerialNumber: syz [ 1025.189639][ T2412] usb 5-1: config 0 descriptor?? [ 1025.598888][T13938] 9pnet: Unknown protocol version 9p200 [ 1025.693078][ T4685] usb 5-1: USB disconnect, device number 14 [ 1025.918768][T13937] loop3: detected capacity change from 0 to 512 [ 1026.194909][T13937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1026.229191][T13937] EXT4-fs (loop3): 1 truncate cleaned up [ 1026.235014][T13937] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 1029.095206][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2362'. [ 1029.470764][T13975] loop3: detected capacity change from 0 to 512 [ 1029.537187][ T26] audit: type=1107 audit(1733178549.219:37): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1029.689849][T13975] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2368: invalid indirect mapped block 4294967295 (level 1) [ 1029.711414][T13975] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2368: invalid indirect mapped block 4294967295 (level 1) [ 1029.732489][T13975] EXT4-fs (loop3): 2 truncates cleaned up [ 1029.738677][T13975] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1030.522736][T13982] loop2: detected capacity change from 0 to 512 [ 1030.602436][T13982] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1030.636616][T13982] EXT4-fs (loop2): 1 truncate cleaned up [ 1030.642484][T13982] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 1030.691887][T13992] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1030.701117][T13990] netlink: 'syz.4.2373': attribute type 2 has an invalid length. [ 1030.739470][T13990] netlink: 'syz.4.2373': attribute type 1 has an invalid length. [ 1030.877340][ T6862] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1031.216662][ T6862] usb 6-1: Using ep0 maxpacket: 32 [ 1031.942454][ T6862] usb 6-1: config 0 has no interfaces? [ 1032.467714][ T6862] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1032.489934][ T6862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.549274][ T6862] usb 6-1: Product: syz [ 1032.632731][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2378'. [ 1033.002169][ T6862] usb 6-1: Manufacturer: syz [ 1033.006884][ T6862] usb 6-1: SerialNumber: syz [ 1033.076542][ T6862] usb 6-1: config 0 descriptor?? [ 1033.109042][ T6862] usb 6-1: can't set config #0, error -71 [ 1033.163327][ T6862] usb 6-1: USB disconnect, device number 5 [ 1033.191440][ T26] audit: type=1107 audit(1733178552.634:38): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1033.632104][T14036] loop2: detected capacity change from 0 to 512 [ 1033.745961][T14036] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1033.933738][T14036] EXT4-fs (loop2): 1 truncate cleaned up [ 1033.940101][T14036] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 1034.131814][ T6862] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1035.360816][ T6862] usb 6-1: Using ep0 maxpacket: 8 [ 1035.611103][ T6862] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1035.751882][ T6862] usb 6-1: config 8 has an invalid interface number: 255 but max is 0 [ 1035.877277][ T6862] usb 6-1: config 8 has no interface number 0 [ 1035.898926][ T6862] usb 6-1: config 8 interface 255 has no altsetting 0 [ 1036.171371][ T26] audit: type=1107 audit(1733178555.384:39): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1036.317064][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2393'. [ 1036.668932][ T6862] usb 6-1: string descriptor 0 read error: -71 [ 1036.678487][ T6862] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1036.754495][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1036.762162][ T6862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.822625][ T6862] usb 6-1: can't set config #8, error -71 [ 1036.870183][ T6862] usb 6-1: USB disconnect, device number 6 [ 1036.973345][T14089] kAFS: No cell specified [ 1037.031760][T14088] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 1037.032544][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 1037.182226][ T7] usb 4-1: config 0 has no interfaces? [ 1037.264449][T14100] fuse: Bad value for 'fd' [ 1037.942799][ T7] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1038.072616][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.241202][ T7] usb 4-1: Product: syz [ 1038.299221][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2406'. [ 1038.533564][ T7] usb 4-1: Manufacturer: syz [ 1038.538343][ T7] usb 4-1: SerialNumber: syz [ 1038.544796][ T7] usb 4-1: config 0 descriptor?? [ 1039.256384][ T7] usb 4-1: USB disconnect, device number 13 [ 1039.822669][ T26] audit: type=1107 audit(1733178558.789:40): pid=14123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1041.244583][ T4244] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1041.411040][T14159] loop5: detected capacity change from 0 to 256 [ 1041.459863][T14159] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 1041.654791][T14148] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 1041.689874][ T4244] usb 5-1: Using ep0 maxpacket: 8 [ 1041.765104][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2422'. [ 1041.843313][ T4244] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1042.153378][ T4244] usb 5-1: config 0 has no interface number 0 [ 1043.544563][ T4244] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 64 [ 1043.569039][ T4244] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1043.588144][ T4244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.615225][ T4244] usb 5-1: config 0 descriptor?? [ 1043.758380][ T4244] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1043.805148][ T4690] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1044.143438][ T4244] usb 5-1: USB disconnect, device number 15 [ 1044.302490][ T26] audit: type=1107 audit(1733178563.035:41): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1044.419567][ T4690] usb 3-1: Using ep0 maxpacket: 32 [ 1044.595539][ T2412] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1044.868715][ T2412] usb 7-1: Using ep0 maxpacket: 16 [ 1044.997807][ T4690] usb 3-1: unable to read config index 0 descriptor/all [ 1045.010021][ T4690] usb 3-1: can't read configurations, error -71 [ 1045.040407][ T2412] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.077870][ T2412] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1045.341158][ T2412] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1045.372546][ T2412] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.532766][T14204] loop2: detected capacity change from 0 to 256 [ 1045.543781][ T2412] usb 7-1: config 0 descriptor?? [ 1045.622788][T14204] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 1045.652605][T14207] loop5: detected capacity change from 0 to 256 [ 1045.667188][T14207] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 1047.106562][ T2412] HID 045e:07da: Invalid code 65791 type 1 [ 1048.006385][ T2412] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0006/input/input30 [ 1048.023845][ T2412] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1048.043634][ T2412] usb 7-1: USB disconnect, device number 5 [ 1048.448719][T14224] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 1049.817388][ T26] audit: type=1107 audit(1733178568.189:42): pid=14234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1049.939456][T14240] netlink: 'syz.4.2442': attribute type 1 has an invalid length. [ 1050.235266][ T4690] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1050.260465][T14250] loop2: detected capacity change from 0 to 256 [ 1050.311933][T14250] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 1051.010743][T14255] loop3: detected capacity change from 0 to 256 [ 1051.118454][T14255] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 1051.421992][ T4690] usb 7-1: Using ep0 maxpacket: 32 [ 1052.455641][ T4690] usb 7-1: config 0 has no interfaces? [ 1053.613576][ T4690] usb 7-1: string descriptor 0 read error: -71 [ 1053.621280][ T4690] usb 7-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1053.799860][ T4690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.810393][ T4690] usb 7-1: config 0 descriptor?? [ 1053.838207][ T4690] usb 7-1: can't set config #0, error -71 [ 1053.859647][ T4690] usb 7-1: USB disconnect, device number 6 [ 1054.037759][T14282] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 1056.420706][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2460'. [ 1057.121985][T14311] loop4: detected capacity change from 0 to 256 [ 1057.158748][T14311] FAT-fs (loop4): Unrecognized mount option "{hortname=lower" or missing value [ 1058.221286][ T4216] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1058.653861][T14328] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1058.689551][T14324] kvm: pic: non byte read [ 1058.702219][ T4216] usb 4-1: Using ep0 maxpacket: 32 [ 1058.710463][T14324] kvm: pic: level sensitive irq not supported [ 1058.710563][T14324] kvm: pic: non byte read [ 1058.876917][ T4216] usb 4-1: config 0 has no interfaces? [ 1058.887897][T14324] kvm: pic: level sensitive irq not supported [ 1058.887961][T14324] kvm: pic: non byte read [ 1059.099118][ T4216] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1059.313437][ T4216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.395512][T14324] kvm: pic: level sensitive irq not supported [ 1059.395606][T14324] kvm: pic: non byte read [ 1059.436348][ T4216] usb 4-1: Product: syz [ 1059.464500][ T4216] usb 4-1: Manufacturer: syz [ 1059.676192][ T4216] usb 4-1: SerialNumber: syz [ 1059.735020][ T4216] usb 4-1: config 0 descriptor?? [ 1059.774789][T14336] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 1060.134634][T14322] usb 4-1: USB disconnect, device number 14 [ 1061.276107][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2474'. [ 1063.184476][T14384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2470'. [ 1063.193490][T14384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2470'. [ 1064.124184][T14386] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 1064.967521][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2486'. [ 1065.336257][T14406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2488'. [ 1066.250050][ T13] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1066.559872][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 1066.688657][ T13] usb 5-1: config 0 has no interfaces? [ 1066.859320][ T13] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1066.880024][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.950536][ T13] usb 5-1: Product: syz [ 1066.977196][ T2412] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1066.994304][ T13] usb 5-1: Manufacturer: syz [ 1067.022014][ T13] usb 5-1: SerialNumber: syz [ 1067.081369][ T13] usb 5-1: config 0 descriptor?? [ 1067.209450][T14431] loop5: detected capacity change from 0 to 256 [ 1067.356819][T14432] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 1067.438995][ T4244] usb 5-1: USB disconnect, device number 16 [ 1067.528592][T14431] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 1067.976509][T14434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2496'. [ 1067.986663][T14434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2496'. [ 1068.273095][ T2412] usb 3-1: Using ep0 maxpacket: 8 [ 1069.446573][ T2412] usb 3-1: unable to read config index 1 descriptor/all [ 1069.453569][ T2412] usb 3-1: can't read configurations, error -71 [ 1069.538923][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2499'. [ 1072.431202][T14474] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 1073.970169][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2513'. [ 1074.478072][T14496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2516'. [ 1074.527542][T14496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2516'. [ 1078.053553][T14525] binder: BINDER_SET_CONTEXT_MGR already set [ 1078.071016][T14525] binder: 14524:14525 ioctl 4018620d 20000040 returned -16 [ 1078.115623][T14525] binder: 14524:14525 ioctl c0306201 20000940 returned -14 [ 1080.305915][T14548] 9pnet: Unknown protocol version 9p200 [ 1081.548115][ T13] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1081.724392][ T4244] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1082.308925][ T13] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 1082.335612][ T13] usb 3-1: config 0 has no interface number 0 [ 1082.347284][ T4244] usb 5-1: Using ep0 maxpacket: 32 [ 1082.367837][ T13] usb 3-1: config 0 interface 112 has no altsetting 0 [ 1082.389759][T14564] loop3: detected capacity change from 0 to 256 [ 1082.537537][T14564] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 1083.130457][ T4244] usb 5-1: config 0 has no interfaces? [ 1083.280237][ T13] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= c.d8 [ 1084.032844][ T4244] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1084.047190][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.056309][ T4244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.099076][ T13] usb 3-1: Product: syz [ 1084.115536][ T4244] usb 5-1: Product: syz [ 1084.119728][ T4244] usb 5-1: Manufacturer: syz [ 1084.242972][ T13] usb 3-1: Manufacturer: syz [ 1084.285768][ T4244] usb 5-1: SerialNumber: syz [ 1084.314127][ T13] usb 3-1: config 0 descriptor?? [ 1084.345515][ T4244] usb 5-1: config 0 descriptor?? [ 1085.168487][ T13] usb 3-1: can't set config #0, error -71 [ 1085.459177][ T13] usb 3-1: USB disconnect, device number 25 [ 1085.535950][ T4244] usb 5-1: can't set config #0, error -71 [ 1085.543476][ T4244] usb 5-1: USB disconnect, device number 17 [ 1085.899507][T14598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2547'. [ 1085.918623][T14598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2547'. [ 1087.457468][T14614] loop6: detected capacity change from 0 to 256 [ 1087.537673][T14614] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 1088.782053][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.006862][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1089.747916][ T4690] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1090.100641][ T4690] usb 6-1: Using ep0 maxpacket: 32 [ 1090.200413][T14643] loop2: detected capacity change from 0 to 256 [ 1090.270063][T14643] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 1090.461627][ T4690] usb 6-1: config 0 has no interfaces? [ 1092.699812][T14658] binder: BINDER_SET_CONTEXT_MGR already set [ 1093.033227][T14658] binder: 14656:14658 ioctl 4018620d 20000040 returned -16 [ 1093.041162][ T4690] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1093.050565][ T4690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.369016][T14664] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2567'. [ 1093.399582][ T4690] usb 6-1: Product: syz [ 1093.412751][ T4690] usb 6-1: Manufacturer: syz [ 1093.610316][ T4690] usb 6-1: config 0 descriptor?? [ 1093.650051][ T4690] usb 6-1: can't set config #0, error -71 [ 1093.843419][ T4690] usb 6-1: USB disconnect, device number 7 [ 1095.775259][T14692] loop2: detected capacity change from 0 to 256 [ 1095.950296][T14692] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 1096.672879][T14694] 9pnet: Unknown protocol version 9p200 [ 1097.831650][ T4216] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1098.492667][ T4216] usb 4-1: Using ep0 maxpacket: 32 [ 1098.674637][ T4216] usb 4-1: config 0 has no interfaces? [ 1099.230882][ T4216] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1099.240483][ T4216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.253839][ T4216] usb 4-1: Product: syz [ 1099.258151][ T4216] usb 4-1: Manufacturer: syz [ 1099.270614][ T4216] usb 4-1: SerialNumber: syz [ 1099.289055][ T4216] usb 4-1: config 0 descriptor?? [ 1099.544906][ T6950] usb 4-1: USB disconnect, device number 15 [ 1099.876823][T14736] loop5: detected capacity change from 0 to 256 [ 1099.987153][T14739] 9pnet: Unknown protocol version 9p200 [ 1100.147050][T14736] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 1103.918867][T14763] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2595'. [ 1103.928047][T14763] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2595'. [ 1106.097045][T14773] misc userio: No port type given on /dev/userio [ 1106.649182][T14791] 9pnet: Unknown protocol version 9p200 [ 1107.569218][ T6868] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1107.945352][ T6868] usb 3-1: Using ep0 maxpacket: 32 [ 1108.021171][T14804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2608'. [ 1108.309922][ T4350] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.745092][ T6868] usb 3-1: device descriptor read/all, error -71 [ 1108.953694][ T4350] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.056570][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2611'. [ 1109.065733][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2611'. [ 1110.163209][ T4350] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.673217][ T4350] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.130833][T14834] 9pnet: Unknown protocol version 9p200 [ 1114.708509][T14835] chnl_net:caif_netlink_parms(): no params data found [ 1114.735619][ T4690] Bluetooth: hci1: command 0x0409 tx timeout [ 1115.021300][ T4690] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1115.088951][T14866] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2624'. [ 1115.098099][T14866] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2624'. [ 1115.774543][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2626'. [ 1116.399440][ T4690] usb 3-1: Using ep0 maxpacket: 32 [ 1116.564868][T14835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.643740][T14835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.859788][T14835] device bridge_slave_0 entered promiscuous mode [ 1116.891400][ T4690] usb 3-1: config 0 has no interfaces? [ 1116.950827][ T2412] Bluetooth: hci1: command 0x041b tx timeout [ 1116.966932][T14894] 9pnet: Unknown protocol version 9p200 [ 1117.111791][T14835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.171241][ T4690] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1117.263196][ T4690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.331176][T14835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.489932][ T4690] usb 3-1: Product: syz [ 1117.539597][T14835] device bridge_slave_1 entered promiscuous mode [ 1117.588169][ T4690] usb 3-1: Manufacturer: syz [ 1117.592794][ T4690] usb 3-1: SerialNumber: syz [ 1117.633245][T14835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.654124][T14835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.775354][ T4690] usb 3-1: config 0 descriptor?? [ 1117.782912][T14835] team0: Port device team_slave_0 added [ 1118.179613][T14835] team0: Port device team_slave_1 added [ 1118.349569][ T4690] usb 3-1: can't set config #0, error -71 [ 1118.360257][ T4690] usb 3-1: USB disconnect, device number 28 [ 1118.536774][T14835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.566899][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.759949][T14835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.773204][T14835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.781003][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.806934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.834791][T14835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.997251][ T4216] Bluetooth: hci1: command 0x040f tx timeout [ 1121.396208][T14835] device hsr_slave_0 entered promiscuous mode [ 1121.413597][ T26] audit: type=1326 audit(1733178635.155:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 1121.569148][ T26] audit: type=1326 audit(1733178635.257:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 1121.614096][ T26] audit: type=1326 audit(1733178635.276:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 1121.793055][ T26] audit: type=1326 audit(1733178635.276:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 1121.813391][T14835] device hsr_slave_1 entered promiscuous mode [ 1121.822111][T14835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1121.829698][T14835] Cannot create hsr debugfs directory [ 1121.850153][T14926] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2635'. [ 1121.859409][T14926] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2635'. [ 1121.920589][ T26] audit: type=1326 audit(1733178635.276:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 1121.946674][ T26] audit: type=1326 audit(1733178635.276:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 1122.009148][ T26] audit: type=1326 audit(1733178635.276:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 1122.172139][ T26] audit: type=1326 audit(1733178635.276:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c47ae9f19 code=0x7ffc0000 [ 1122.244363][T14942] 9pnet: Unknown protocol version 9p200 [ 1123.166680][T14322] Bluetooth: hci1: command 0x0419 tx timeout [ 1123.188694][T14949] loop2: detected capacity change from 0 to 256 [ 1123.275228][T14949] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 1123.357465][T14835] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1123.367420][T14835] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1123.555032][T14835] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1125.478125][T14835] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1125.558567][ T4350] device hsr_slave_0 left promiscuous mode [ 1125.594265][ T4350] device hsr_slave_1 left promiscuous mode [ 1125.628468][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.667163][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.060484][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.187680][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.251407][ T4350] device bridge_slave_1 left promiscuous mode [ 1126.719551][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.774613][ T4350] device bridge_slave_0 left promiscuous mode [ 1126.801615][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.870050][ T4350] device veth1_macvtap left promiscuous mode [ 1126.908334][ T4350] device veth0_macvtap left promiscuous mode [ 1126.919466][ T4350] device veth1_vlan left promiscuous mode [ 1126.947113][ T4350] device veth0_vlan left promiscuous mode [ 1127.260225][ T4350] bond1 (unregistering): Released all slaves [ 1128.023044][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 1128.051320][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 1128.072518][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.098513][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.627349][ T4350] bond0 (unregistering): Released all slaves [ 1128.738980][T15000] 9pnet: Unknown protocol version 9p200 [ 1130.509896][T15012] ptrace attach of "./syz-executor exec"[15013] was attempted by "./syz-executor exec"[15012] [ 1130.998747][T14835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.355121][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2660'. [ 1134.400519][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1134.414242][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1134.651895][T14322] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1134.673631][T14835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.998337][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1136.110956][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1136.377389][T15045] 9pnet: Unknown protocol version 9p200 [ 1137.015921][ T13] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 1137.613666][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.621458][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.909717][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1137.930502][ T13] usb 4-1: device descriptor read/all, error -71 [ 1137.995425][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1138.023705][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1138.096554][T14919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.103714][T14919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.237844][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1138.278751][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1140.129529][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1140.153252][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1140.189897][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1140.199230][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1140.230457][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1140.278932][ T4690] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1140.443369][T15079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1141.006350][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1141.083101][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1141.103496][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1141.128057][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1141.243634][T14835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1141.298975][ T4690] usb 3-1: Using ep0 maxpacket: 8 [ 1141.437080][ T4690] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1142.151298][ T4690] usb 3-1: can't read configurations, error -71 [ 1143.063818][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1143.080537][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1143.173999][T14835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.249247][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2683'. [ 1147.694232][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2688'. [ 1147.721546][T15160] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 1147.785505][T15160] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 1148.293530][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1148.476635][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1149.130440][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1149.154885][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1150.044608][T14835] device veth0_vlan entered promiscuous mode [ 1150.799914][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1150.811645][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1150.823994][T14835] device veth1_vlan entered promiscuous mode [ 1150.892602][T15199] sp0: Synchronizing with TNC [ 1150.907250][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1150.928428][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1150.956250][T15200] sp0: Found TNC [ 1151.018292][T14835] device veth0_macvtap entered promiscuous mode [ 1151.614013][T14835] device veth1_macvtap entered promiscuous mode [ 1151.862733][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.967077][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.024172][T15216] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1152.056765][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.105006][T15216] XFS (loop3): SB validate failed with error -5. [ 1152.516587][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.746105][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.789735][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.813113][T14835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.861125][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1152.882773][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1152.916245][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1152.944127][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1153.097280][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.124502][T15200] [U] è``è [ 1153.143430][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.211368][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.342431][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.573877][T14835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.915065][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1153.935635][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1153.969063][T14835] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.002515][T14835] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.025415][T14835] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.037648][T14835] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.127397][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1154.133709][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1155.641599][T15246] device syz_tun entered promiscuous mode [ 1155.733058][T15246] device syz_tun left promiscuous mode [ 1155.932096][ T4410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.973918][ T4410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.386326][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1158.051578][ T549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.068565][ T549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.090072][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1159.913290][T15305] device syz_tun entered promiscuous mode [ 1159.987118][T15305] device syz_tun left promiscuous mode [ 1161.269563][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2726'. [ 1161.524675][ T13] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1161.936625][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 1162.072245][ T13] usb 6-1: config 0 has no interfaces? [ 1162.230165][ T4482] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1162.241781][ T13] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1162.273809][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.301698][ T13] usb 6-1: Product: syz [ 1162.320596][ T13] usb 6-1: Manufacturer: syz [ 1162.326361][ T13] usb 6-1: SerialNumber: syz [ 1162.338420][ T13] usb 6-1: config 0 descriptor?? [ 1162.487306][ T4482] usb 8-1: Using ep0 maxpacket: 8 [ 1162.648702][ T4482] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1162.724915][ T4482] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1162.918346][ T4482] usb 8-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1163.071191][ T4244] usb 6-1: USB disconnect, device number 8 [ 1163.150338][ T4482] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1163.165790][ T4482] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1163.208338][ T4482] usb 8-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1163.384850][ T4482] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1163.402606][ T4482] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1163.431910][ T4482] usb 8-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1163.671897][T15377] loop6: detected capacity change from 0 to 8192 [ 1163.781288][ T4482] usb 8-1: string descriptor 0 read error: -22 [ 1163.806562][ T4482] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1163.973969][ T4482] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.231798][ T4482] adutux 8-1:168.0: interrupt endpoints not found [ 1164.419156][ T2412] usb 8-1: USB disconnect, device number 2 [ 1164.445874][T15377] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 1164.602534][T15402] device syz_tun entered promiscuous mode [ 1164.742578][T15402] device syz_tun left promiscuous mode [ 1165.192418][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2740'. [ 1165.877671][ T2412] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1167.905543][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2751'. [ 1167.939062][ T4244] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1168.127910][T15455] loop7: detected capacity change from 0 to 8192 [ 1168.260696][T15455] FAT-fs (loop7): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 1168.476288][ T4244] usb 7-1: Using ep0 maxpacket: 32 [ 1169.235054][ T4244] usb 7-1: config 0 has no interfaces? [ 1169.543186][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2756'. [ 1169.554554][ T4244] usb 7-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1169.563982][ T4244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.708423][ T4244] usb 7-1: Product: syz [ 1169.719144][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1169.733294][ T4244] usb 7-1: Manufacturer: syz [ 1169.742067][ T4244] usb 7-1: SerialNumber: syz [ 1169.770882][ T4244] usb 7-1: config 0 descriptor?? [ 1169.935077][ T6862] usb 7-1: USB disconnect, device number 7 [ 1169.973026][ T2412] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1170.892831][ T2412] usb 6-1: Using ep0 maxpacket: 8 [ 1170.926182][T15520] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2760'. [ 1170.940221][T15520] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2760'. [ 1171.584467][ T2412] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1171.599542][ T2412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.625632][ T2412] usb 6-1: Product: syz [ 1171.636648][ T2412] usb 6-1: Manufacturer: syz [ 1171.647231][ T2412] usb 6-1: SerialNumber: syz [ 1171.667861][T15527] loop6: detected capacity change from 0 to 8192 [ 1171.675230][ T2412] usb 6-1: config 0 descriptor?? [ 1171.803176][T15527] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 1171.953440][ T2412] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1172.553005][T15547] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2771'. [ 1173.282805][T15552] syz.3.2773 sent an empty control message without MSG_MORE. [ 1173.316414][ T4482] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1173.572984][ T6950] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1173.631677][T15559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2776'. [ 1173.640773][T15559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2776'. [ 1173.894124][ T6950] usb 7-1: Using ep0 maxpacket: 32 [ 1174.043494][ T6950] usb 7-1: config 0 has an invalid interface number: 23 but max is 0 [ 1174.083764][ T6950] usb 7-1: config 0 has no interface number 0 [ 1174.151368][ T4482] usb 3-1: Using ep0 maxpacket: 32 [ 1174.177208][ T6950] usb 7-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1174.190783][T15562] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2777'. [ 1174.191332][ T6950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.292956][ T4482] usb 3-1: config 0 has no interfaces? [ 1174.379297][ T6950] usb 7-1: config 0 descriptor?? [ 1174.386009][ T2412] usb write operation failed. (-71) [ 1174.430243][ T6950] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 1174.445989][ T2412] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1174.485524][ T2412] dvbdev: DVB: registering new adapter (Terratec H7) [ 1174.512165][T15567] sp0: Synchronizing with TNC [ 1174.519145][ T2412] usb 6-1: media controller created [ 1174.529310][T15567] sp0: Found TNC [ 1174.558927][ T2412] usb read operation failed. (-71) [ 1174.600260][ T2412] usb write operation failed. (-71) [ 1174.717300][ T4482] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1174.726415][ T4482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.769876][ T4482] usb 3-1: Product: syz [ 1174.888342][ T4482] usb 3-1: Manufacturer: syz [ 1175.005351][ T4482] usb 3-1: SerialNumber: syz [ 1176.440964][ T4482] usb 3-1: config 0 descriptor?? [ 1176.459794][ T4482] usb 3-1: can't set config #0, error -71 [ 1176.511684][ T2412] dvb_usb_az6007: probe of 6-1:0.0 failed with error -5 [ 1176.522590][ T6950] usb 7-1: USB disconnect, device number 8 [ 1176.536874][ T2412] usb 6-1: USB disconnect, device number 9 [ 1176.675724][ T4482] usb 3-1: USB disconnect, device number 32 [ 1177.937266][T15567] [U] è``è [ 1179.791476][T15615] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2788'. [ 1179.924781][T15617] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2789'. [ 1180.522654][T15634] futex_wake_op: syz.6.2791 tries to shift op by 144; fix this program [ 1180.972702][T15638] loop5: detected capacity change from 0 to 256 [ 1180.990636][T15637] loop7: detected capacity change from 0 to 256 [ 1181.072740][T15638] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 1181.075696][T15637] FAT-fs (loop7): Unrecognized mount option "{hortname=lower" or missing value [ 1186.362062][T15661] sp0: Synchronizing with TNC [ 1186.389511][T15661] sp0: Found TNC [ 1186.938852][T15660] [U] è` [ 1187.177894][T15675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2799'. [ 1188.232011][ T6862] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1188.248362][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2801'. [ 1188.302501][T15696] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2802'. [ 1189.341676][ T6862] usb 4-1: Using ep0 maxpacket: 8 [ 1189.395055][T15712] netlink: 'syz.5.2807': attribute type 10 has an invalid length. [ 1189.415792][T15712] device syz_tun entered promiscuous mode [ 1190.296581][T15712] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1190.314506][ T6862] usb 4-1: unable to read config index 0 descriptor/all [ 1190.321695][ T6862] usb 4-1: can't read configurations, error -71 [ 1190.414805][T15718] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2808'. [ 1190.423852][T15718] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2808'. [ 1190.573696][T15723] loop3: detected capacity change from 0 to 256 [ 1191.084351][T15723] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 1192.760761][T15761] sp0: Synchronizing with TNC [ 1192.775682][T15761] sp0: Found TNC [ 1192.884824][T15758] delete_channel: no stack [ 1192.980987][T15755] [U] `èè` [ 1193.152736][T15770] 9pnet: Unknown protocol version 9p200 [ 1193.450850][T15778] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 1194.164008][T15795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2821'. [ 1194.173319][T15795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2821'. [ 1194.961667][T15799] netlink: 'syz.2.2824': attribute type 1 has an invalid length. [ 1195.918765][T15799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1195.990208][T15805] bond1: (slave gretap1): making interface the new active one [ 1196.035837][T15805] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1196.167592][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1196.348116][T15823] loop2: detected capacity change from 0 to 256 [ 1196.368199][T15826] sp0: Synchronizing with TNC [ 1196.392720][T15829] loop6: detected capacity change from 0 to 256 [ 1196.407366][T15826] sp0: Found TNC [ 1196.442783][T15829] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 1196.486018][T15823] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 1196.847285][T15824] [U] è` [ 1199.408454][T15858] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2835'. [ 1199.417837][T15858] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2835'. [ 1200.566776][ T4688] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1200.575254][ T4688] Bluetooth: hci3: Injecting HCI hardware error event [ 1200.579010][T15863] netlink: 'syz.3.2836': attribute type 10 has an invalid length. [ 1200.592910][T13901] Bluetooth: hci3: hardware error 0x00 [ 1201.566881][T15870] wlan1: mtu less than device minimum [ 1202.095457][ T4244] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1203.968417][T15901] 9pnet: Unknown protocol version 9p200 [ 1205.473717][ T4244] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1205.493465][T15918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.502355][T15918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.612781][ T4244] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1205.620396][ T4244] usb 8-1: can't read configurations, error -71 [ 1205.804210][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2849'. [ 1206.703799][T15930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2850'. [ 1206.712852][T15930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2850'. [ 1207.336972][T15931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2851'. [ 1207.655535][T15918] device bridge_slave_1 left promiscuous mode [ 1207.724341][T15918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.833212][T15918] device bridge_slave_0 left promiscuous mode [ 1207.906725][T15918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.887776][T15962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1210.033564][ T6890] bond0: (slave syz_tun): Releasing backup interface [ 1210.070164][T15967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1210.260567][ T4350] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.564151][T15977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2862'. [ 1210.573294][T15977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2862'. [ 1212.148557][ T4350] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.364621][ T4350] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.128317][T15995] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 1214.128719][ T4350] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.229888][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2867'. [ 1215.083860][T16015] loop7: detected capacity change from 0 to 512 [ 1215.208373][T16015] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1215.360684][T16015] EXT4-fs (loop7): 1 truncate cleaned up [ 1215.366548][T16015] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 1215.908421][T15994] chnl_net:caif_netlink_parms(): no params data found [ 1216.820077][T16031] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2873'. [ 1216.829174][T16031] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2873'. [ 1216.911896][ T4688] Bluetooth: hci2: command 0x0409 tx timeout [ 1218.281366][T16043] /dev/nbd2: Can't open blockdev [ 1218.511420][T15994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.518768][T15994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.526959][T15994] device bridge_slave_0 entered promiscuous mode [ 1218.535266][T15994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.542534][T15994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.550625][T15994] device bridge_slave_1 entered promiscuous mode [ 1218.578189][T15994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.589727][T15994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.618744][T15994] team0: Port device team_slave_0 added [ 1218.645312][T15994] team0: Port device team_slave_1 added [ 1218.965394][T15994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.972374][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.171153][T15994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.172359][ T6950] Bluetooth: hci2: command 0x041b tx timeout [ 1219.232911][T15994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.293070][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.395956][T15994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.862071][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1219.868444][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1220.551320][T15994] device hsr_slave_0 entered promiscuous mode [ 1220.600440][T15994] device hsr_slave_1 entered promiscuous mode [ 1220.636786][T15994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1220.696170][T15994] Cannot create hsr debugfs directory [ 1220.755354][ T4244] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1221.017846][ T4244] usb 7-1: Using ep0 maxpacket: 16 [ 1221.264469][ T4244] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.284435][ T4244] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.338872][ T6950] Bluetooth: hci2: command 0x040f tx timeout [ 1221.932860][ T4244] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1221.942588][ T4244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.044190][ T4244] usb 7-1: config 0 descriptor?? [ 1222.919611][T15994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.049082][ T4244] usbhid 7-1:0.0: can't add hid device: -71 [ 1223.055064][ T4244] usbhid: probe of 7-1:0.0 failed with error -71 [ 1223.064564][ T4244] usb 7-1: USB disconnect, device number 9 [ 1223.583703][ T6950] Bluetooth: hci2: command 0x0419 tx timeout [ 1224.076495][T16115] page:ffffea0001680140 refcount:4 mapcount:1 mapping:ffff888078196098 index:0x0 pfn:0x5a005 [ 1224.087767][T16115] memcg:ffff888068668000 [ 1224.092043][T16115] aops:shmem_aops ino:911 [ 1224.096374][T16115] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 1224.106202][T16115] raw: 00fff00000080015 ffffea0001680108 ffffea0001662808 ffff888078196098 [ 1224.114811][T16115] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888068668000 [ 1224.123394][T16115] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 1224.130427][T16115] page_owner tracks the page as allocated [ 1224.136136][T16115] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 16116, ts 1223189374875, free_ts 1223133230220 [ 1224.151167][T16115] get_page_from_freelist+0x3b78/0x3d40 [ 1224.156724][T16115] __alloc_pages+0x272/0x700 [ 1224.161309][T16115] alloc_pages_vma+0x39a/0x800 [ 1224.166075][T16115] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 1224.171723][T16115] shmem_getpage_gfp+0x17b1/0x3190 [ 1224.176845][T16115] shmem_read_mapping_page_gfp+0xfd/0x180 [ 1224.182575][T16115] udmabuf_create+0xa62/0x15e0 [ 1224.187350][T16115] udmabuf_ioctl+0x300/0x4e0 [ 1224.191952][T16115] __se_sys_ioctl+0xf1/0x160 [ 1224.196552][T16115] do_syscall_64+0x3b/0xb0 [ 1224.200977][T16115] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1224.206888][T16115] page last free stack trace: [ 1224.211558][T16115] free_unref_page_prepare+0xc34/0xcf0 [ 1224.217025][T16115] free_unref_page_list+0x1f7/0x8e0 [ 1224.222224][T16115] release_pages+0x1bb9/0x1f40 [ 1224.226996][T16115] __pagevec_release+0x80/0xf0 [ 1224.231776][T16115] shmem_undo_range+0x67a/0x1b50 [ 1224.236717][T16115] shmem_evict_inode+0x21b/0xa00 [ 1224.241655][T16115] evict+0x529/0x930 [ 1224.245545][T16115] __dentry_kill+0x436/0x650 [ 1224.250142][T16115] dentry_kill+0xbb/0x290 [ 1224.254483][T16115] dput+0xd8/0x1a0 [ 1224.258211][T16115] __fput+0x636/0x8e0 [ 1224.262186][T16115] task_work_run+0x129/0x1a0 [ 1224.266771][T16115] do_exit+0x6a3/0x2480 [ 1224.270935][T16115] do_group_exit+0x144/0x310 [ 1224.275531][T16115] __x64_sys_exit_group+0x3b/0x40 [ 1224.280562][T16115] do_syscall_64+0x3b/0xb0 [ 1224.285068][T16115] ------------[ cut here ]------------ [ 1224.290515][T16115] kernel BUG at mm/filemap.c:166! [ 1224.295571][T16115] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1224.301649][T16115] CPU: 1 PID: 16115 Comm: syz.3.2894 Not tainted 5.15.173-syzkaller #0 [ 1224.309887][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1224.319948][T16115] RIP: 0010:unaccount_page_cache_page+0x79d/0x8b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1224.326381][T16115] Code: e8 b8 77 d8 ff 4c 89 f7 48 c7 c6 c0 14 b3 8a e8 c9 c9 0e 00 0f 0b e8 a2 77 d8 ff 4c 89 f7 48 c7 c6 00 15 b3 8a e8 b3 c9 0e 00 <0f> 0b 48 85 ed 75 62 e8 87 77 d8 ff 4c 89 eb eb 60 e8 7d 77 d8 ff [ 1224.346017][T16115] RSP: 0018:ffffc90003f77610 EFLAGS: 00010046 [ 1224.352096][T16115] RAX: ec398c091abb5600 RBX: 0000000000000000 RCX: ffff88801feb9dc0 [ 1224.360072][T16115] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 1224.368051][T16115] RBP: 0000000000000000 R08: ffffffff81d10e84 R09: ffffed10171e4f24 [ 1224.376032][T16115] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd40002d0029 [ 1224.384012][T16115] R13: ffffea0001680148 R14: ffffea0001680140 R15: dffffc0000000000 [ 1224.391992][T16115] FS: 000055556eb96500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1224.400932][T16115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1224.407521][T16115] CR2: 000000110c44ffa3 CR3: 0000000052c5d000 CR4: 00000000003506e0 [ 1224.415499][T16115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1224.423479][T16115] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1224.431458][T16115] Call Trace: [ 1224.434742][T16115] [ 1224.437676][T16115] ? __die_body+0x5e/0xa0 [ 1224.442017][T16115] ? die+0x83/0xb0 [ 1224.445740][T16115] ? do_trap+0x11e/0x350 [ 1224.449977][T16115] ? unaccount_page_cache_page+0x79d/0x8b0 [ 1224.455781][T16115] ? unaccount_page_cache_page+0x79d/0x8b0 [ 1224.461651][T16115] ? do_error_trap+0x13d/0x1e0 [ 1224.466420][T16115] ? unaccount_page_cache_page+0x79d/0x8b0 [ 1224.472235][T16115] ? do_int3+0x30/0x30 [ 1224.476319][T16115] ? unaccount_page_cache_page+0x79d/0x8b0 [ 1224.482128][T16115] ? handle_invalid_op+0x2c/0x40 [ 1224.487076][T16115] ? unaccount_page_cache_page+0x79d/0x8b0 [ 1224.492884][T16115] ? exc_invalid_op+0x2f/0x40 [ 1224.497564][T16115] ? asm_exc_invalid_op+0x16/0x20 [ 1224.502598][T16115] ? __dump_page_owner+0x414/0x620 [ 1224.507713][T16115] ? unaccount_page_cache_page+0x79d/0x8b0 [ 1224.513521][T16115] ? rcu_is_watching+0x11/0xa0 [ 1224.518281][T16115] __delete_from_page_cache+0xd1/0x860 [ 1224.523749][T16115] ? __rwlock_init+0x140/0x140 [ 1224.528523][T16115] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 1224.535549][T16115] ? _raw_spin_lock_irq+0xdb/0x110 [ 1224.540657][T16115] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1224.546211][T16115] ? page_mapping+0x312/0x440 [ 1224.550887][T16115] delete_from_page_cache+0x126/0x190 [ 1224.556267][T16115] truncate_inode_page+0x8d/0xb0 [ 1224.561199][T16115] shmem_undo_range+0x535/0x1b50 [ 1224.566147][T16115] ? shmem_truncate_range+0xa0/0xa0 [ 1224.571346][T16115] ? __lock_acquire+0x1ff0/0x1ff0 [ 1224.576366][T16115] ? do_raw_spin_lock+0x14a/0x370 [ 1224.581393][T16115] shmem_evict_inode+0x21b/0xa00 [ 1224.586340][T16115] ? _raw_spin_unlock+0x24/0x40 [ 1224.591284][T16115] ? inode_wait_for_writeback+0x21f/0x280 [ 1224.596999][T16115] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1224.602542][T16115] ? bit_waitqueue+0x30/0x30 [ 1224.607131][T16115] ? do_raw_spin_unlock+0x137/0x8b0 [ 1224.612325][T16115] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1224.617878][T16115] evict+0x529/0x930 [ 1224.621769][T16115] ? mode_strip_sgid+0x210/0x210 [ 1224.626686][T16115] ? _raw_spin_unlock+0x24/0x40 [ 1224.631518][T16115] ? iput+0x6f5/0x8b0 [ 1224.635481][T16115] __dentry_kill+0x436/0x650 [ 1224.640071][T16115] dentry_kill+0xbb/0x290 [ 1224.644410][T16115] dput+0xd8/0x1a0 [ 1224.648109][T16115] __fput+0x636/0x8e0 [ 1224.652071][T16115] task_work_run+0x129/0x1a0 [ 1224.656640][T16115] exit_to_user_mode_loop+0x106/0x130 [ 1224.661995][T16115] exit_to_user_mode_prepare+0xb1/0x140 [ 1224.667515][T16115] syscall_exit_to_user_mode+0x5d/0x240 [ 1224.673038][T16115] do_syscall_64+0x47/0xb0 [ 1224.677431][T16115] ? clear_bhb_loop+0x15/0x70 [ 1224.682090][T16115] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1224.687966][T16115] RIP: 0033:0x7f9bddd0df19 [ 1224.692360][T16115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.712072][T16115] RSP: 002b:00007fff4b99ea98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1224.720466][T16115] RAX: 0000000000000000 RBX: 00007f9bdded5ba0 RCX: 00007f9bddd0df19 [ 1224.728418][T16115] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1224.736385][T16115] RBP: 00007f9bdded5ba0 R08: 00000000000000a4 R09: 00007fff4b99ed7f [ 1224.744342][T16115] R10: 00007f9bdded5ac0 R11: 0000000000000246 R12: 0000000000120605 [ 1224.752307][T16115] R13: 00007fff4b99eba0 R14: 0000000000000032 R15: ffffffffffffffff [ 1224.760268][T16115] [ 1224.763266][T16115] Modules linked in: [ 1224.767152][T16115] ---[ end trace 11ca763e8236229e ]--- [ 1224.772597][T16115] RIP: 0010:unaccount_page_cache_page+0x79d/0x8b0 [ 1224.779001][T16115] Code: e8 b8 77 d8 ff 4c 89 f7 48 c7 c6 c0 14 b3 8a e8 c9 c9 0e 00 0f 0b e8 a2 77 d8 ff 4c 89 f7 48 c7 c6 00 15 b3 8a e8 b3 c9 0e 00 <0f> 0b 48 85 ed 75 62 e8 87 77 d8 ff 4c 89 eb eb 60 e8 7d 77 d8 ff [ 1224.798588][T16115] RSP: 0018:ffffc90003f77610 EFLAGS: 00010046 [ 1224.804646][T16115] RAX: ec398c091abb5600 RBX: 0000000000000000 RCX: ffff88801feb9dc0 [ 1224.812609][T16115] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 1224.820571][T16115] RBP: 0000000000000000 R08: ffffffff81d10e84 R09: ffffed10171e4f24 [ 1224.828553][T16115] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd40002d0029 [ 1224.836515][T16115] R13: ffffea0001680148 R14: ffffea0001680140 R15: dffffc0000000000 [ 1224.844476][T16115] FS: 000055556eb96500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1224.853401][T16115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1224.859971][T16115] CR2: 000000110c44ffa3 CR3: 0000000052c5d000 CR4: 00000000003506e0 [ 1224.867936][T16115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1224.875890][T16115] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1224.883861][T16115] Kernel panic - not syncing: Fatal exception [ 1224.890290][T16115] Kernel Offset: disabled [ 1224.894598][T16115] Rebooting in 86400 seconds..