last executing test programs: 16.027779103s ago: executing program 1 (id=1255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000440)=0x82, 0x49) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) socket$key(0xf, 0x3, 0x2) 15.812444901s ago: executing program 1 (id=1256): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000092cc22616c9e753f6ef684a2ad9142caea7927612a787fcdfb9bad513e0d32824db64ebb0bb8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000780)=""/115, 0x73) getdents(r6, &(0x7f00000001c0)=""/59, 0x9c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x19, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) 15.079882553s ago: executing program 1 (id=1257): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) writev(r0, 0x0, 0x0) 13.34134277s ago: executing program 1 (id=1263): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) ptrace(0x4207, 0x0) 12.299557328s ago: executing program 1 (id=1268): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) ptrace(0x4207, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 11.289950044s ago: executing program 1 (id=1271): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x3810744, &(0x7f00000004c0), 0x1, 0x45d, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x33) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000002640)=ANY=[@ANYBLOB, @ANYBLOB="f3a17b0f7e67602ec956202d4090f63c12398a7e57913d565927635f6f0ce0c35857e057692470899f71b04e85052aabe111d723af15362134348a18310f10fd9332c006a653a7efb104c6f92d8dd93645720034016f53780aea1096ea1ba4f79fc6080a17f0400db70b5e54de0c94a18d", @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYBLOB="e78ee8b25b00eb2f7ecc1a0c8e9f9ea1c8fa8ecb1d06ca42a0a4f0922d39707cb9b2393306ecd3543185fc025dc467e6575925d2c3f2d7bb068f552a9cb8799f218b2cc9b1306033b3174c10b29925b31a096d70982f87fe7a735227394d709209f60e1e0ae6588a668b6e6070870499e759837b9e2c7e77be", @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 4.676262604s ago: executing program 3 (id=1336): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x14}}, {@stripe}, {@grpid}, {@errors_remount}, {@nombcache}, {@noblock_validity}, {@errors_continue}, {@lazytime}]}, 0x1, 0x62c, &(0x7f0000000600)="$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") getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000180)) 4.580382973s ago: executing program 0 (id=1341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 4.580319603s ago: executing program 0 (id=1342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008048}, 0x48800) 4.569659634s ago: executing program 0 (id=1343): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x3b, 0x3, 0x2, 0x8, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x700, 0x63, 0x8}}) 4.549191385s ago: executing program 0 (id=1344): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x596, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c000100", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000340)={[{@stripe={'stripe', 0x3d, 0x1ff}}, {@grpquota}]}, 0x1, 0x4fb, &(0x7f0000000b40)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000000)='./file0\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f00000003c0)='./file0\x00') 4.196417645s ago: executing program 0 (id=1345): ioperm(0x0, 0x8000, 0xffff) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 4.100616643s ago: executing program 3 (id=1346): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.081606704s ago: executing program 0 (id=1347): r0 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x4052, r0, 0x7920000) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='u']) mount(0x0, &(0x7f0000019180)='./file1\x00', &(0x7f00000191c0)='smb3\x00', 0x0, &(0x7f0000000400)) 3.624025423s ago: executing program 2 (id=1349): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x7, &(0x7f0000000480)=@raw=[@map_fd={0x18, 0xb}, @alu={0x7, 0x0, 0x0, 0xb, 0x8, 0x8}, @ringbuf_query], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.097289778s ago: executing program 2 (id=1350): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCXONC(r0, 0x540b, 0x0) 3.097088498s ago: executing program 3 (id=1351): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.486147539s ago: executing program 2 (id=1352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.485997419s ago: executing program 3 (id=1353): unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f0000000580), 0x4) 304.546194ms ago: executing program 2 (id=1356): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 304.319384ms ago: executing program 3 (id=1357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r3, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x11, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000600)=0x2) 268.890407ms ago: executing program 4 (id=1359): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x4, 0x20000000, 0x4) 260.081568ms ago: executing program 2 (id=1360): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 192.601014ms ago: executing program 3 (id=1361): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 192.468534ms ago: executing program 4 (id=1362): unshare(0x2a020400) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) 134.801849ms ago: executing program 2 (id=1363): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2008843, &(0x7f0000000080), 0x2, 0x64f, &(0x7f00000048c0)="$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") 134.689769ms ago: executing program 4 (id=1364): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001800168014000180100004"], 0x4c}}, 0x0) 86.757633ms ago: executing program 4 (id=1365): r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000000)={@mcast2={0xff, 0x5}, @loopback={0x4f02000000000000}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x13}}}) 62.034805ms ago: executing program 4 (id=1366): r0 = socket$inet(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) 0s ago: executing program 4 (id=1367): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, 0x7a4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4040, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018570000000000000000009500"/38], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x90) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') kernel console output (not intermixed with test programs): 4547] device syzkaller0 entered promiscuous mode [ 304.763035][ T4541] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.770006][ T4541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.777118][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.783876][ T4541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.816063][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.825383][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.833297][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.857692][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.866036][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.872895][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.880373][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.888970][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.895853][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.903251][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.911806][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.931243][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.946690][ T4541] device veth0_vlan entered promiscuous mode [ 304.952982][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.961651][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.969487][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.001970][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.017935][ T4541] device veth1_macvtap entered promiscuous mode [ 305.034408][ T4555] futex_wake_op: syz.3.1032 tries to shift op by -1; fix this program [ 305.342183][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.372159][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.390937][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.407541][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.581240][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.588209][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.595648][ T4558] device bridge_slave_0 entered promiscuous mode [ 305.604962][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.611912][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.621342][ T4558] device bridge_slave_1 entered promiscuous mode [ 305.952247][ T4568] loop3: detected capacity change from 0 to 256 [ 306.111567][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.118467][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.125594][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.132441][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.181104][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.189173][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.219451][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.241361][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.249526][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.256534][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.898910][ T4580] binfmt_misc: register: failed to install interpreter file ./file0 [ 307.546435][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.556278][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.563160][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.583414][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.591664][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.600076][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.608336][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.644700][ T4558] device veth0_vlan entered promiscuous mode [ 307.683895][ T4558] device veth1_macvtap entered promiscuous mode [ 307.696934][ T4586] loop2: detected capacity change from 0 to 512 [ 307.725449][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.745287][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.753567][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.765486][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.899284][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.928334][ T4586] EXT4-fs (loop2): Ignoring removed nobh option [ 307.942519][ T4586] EXT4-fs (loop2): Unrecognized mount option "obj_user=rpfilter" or missing value [ 308.034660][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.056422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.074320][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.081779][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.089141][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.098094][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.106560][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.114718][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.285863][ T3500] device bridge_slave_1 left promiscuous mode [ 308.292697][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.310567][ T3500] device bridge_slave_0 left promiscuous mode [ 308.691594][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.710259][ T3500] device veth1_macvtap left promiscuous mode [ 308.722534][ T3500] device veth0_vlan left promiscuous mode [ 309.349540][ T4617] loop4: detected capacity change from 0 to 256 [ 309.463343][ T4621] futex_wake_op: syz.1.1044 tries to shift op by -1; fix this program [ 309.999844][ T4624] syz.4.1046[4624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.000135][ T4624] syz.4.1046[4624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.362622][ T4628] loop1: detected capacity change from 0 to 1024 [ 310.411908][ T4628] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 310.411908][ T4628] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 310.411908][ T4628] [ 310.577683][ T4634] futex_wake_op: syz.3.1047 tries to shift op by -1; fix this program [ 310.636725][ T4628] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 310.690676][ T4628] EXT4-fs (loop1): orphan cleanup on readonly fs [ 310.785361][ T4628] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1048: bg 0: block 10: padding at end of block bitmap is not set [ 310.816155][ T4628] __quota_error: 1 callbacks suppressed [ 310.816175][ T4628] Quota error (device loop1): write_blk: dquota write failed [ 310.838100][ T4628] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 310.862443][ T4628] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 310.883657][ T4628] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.1048: Failed to acquire dquot type 0 [ 310.906359][ T4628] EXT4-fs error (device loop1): ext4_free_blocks:6225: comm syz.1.1048: Freeing blocks not in datazone - block = 0, count = 4096 [ 310.933042][ T4628] EXT4-fs (loop1): 1 truncate cleaned up [ 310.945148][ T4628] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,min_batch_time=0x00000000000007ff,abort,grpid,noacl,delalloc,,errors=continue. Quota mode: writeback. [ 310.946364][ T4615] loop0: detected capacity change from 0 to 40427 [ 311.082721][ T4615] F2FS-fs (loop0): invalid crc value [ 311.101050][ T4615] F2FS-fs (loop0): Found nat_bits in checkpoint [ 311.141820][ T4615] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 312.195252][ T4641] device syzkaller0 entered promiscuous mode [ 312.201964][ T4645] attempt to access beyond end of device [ 312.201964][ T4645] loop0: rw=524288, want=45072, limit=40427 [ 312.213254][ T4645] attempt to access beyond end of device [ 312.213254][ T4645] loop0: rw=0, want=45072, limit=40427 [ 312.460364][ T4642] netlink: 173 bytes leftover after parsing attributes in process `syz.1.1048'. [ 312.542994][ T4541] attempt to access beyond end of device [ 312.542994][ T4541] loop0: rw=0, want=45072, limit=40427 [ 312.593760][ T313] attempt to access beyond end of device [ 312.593760][ T313] loop0: rw=2049, want=41056, limit=40427 [ 312.681669][ T3500] device bridge_slave_1 left promiscuous mode [ 312.702258][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.710234][ T3500] device bridge_slave_0 left promiscuous mode [ 312.716640][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.780417][ T4656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.420819][ T3500] device veth1_macvtap left promiscuous mode [ 313.554730][ T3500] device veth0_vlan left promiscuous mode [ 313.651592][ T4154] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 313.670239][ T4664] loop1: detected capacity change from 0 to 512 [ 313.727150][ T4664] EXT4-fs (loop1): Test dummy encryption mode enabled [ 313.735671][ T4664] EXT4-fs error (device loop1): __ext4_iget:4903: inode #11: block 1: comm syz.1.1057: invalid block [ 313.746634][ T4664] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1057: couldn't read orphan inode 11 (err -117) [ 313.775401][ T4664] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 313.855126][ T368] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 313.934018][ T4671] loop1: detected capacity change from 0 to 512 [ 313.974180][ T4671] EXT4-fs (loop1): 1 orphan inode deleted [ 313.979775][ T4671] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 314.013879][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.020979][ T4154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.032194][ T4672] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.039078][ T4154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.049095][ T4154] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 314.058018][ T4154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.075613][ T4672] device bridge_slave_0 entered promiscuous mode [ 314.087486][ T4154] usb 5-1: config 0 descriptor?? [ 314.092534][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.095295][ T368] usb 4-1: Using ep0 maxpacket: 16 [ 314.104569][ T4672] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.112207][ T4672] device bridge_slave_1 entered promiscuous mode [ 314.495251][ T632] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 314.526897][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.533756][ T4672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.540877][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.547656][ T4672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.565240][ T368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.580546][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.585283][ T368] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 314.588210][ T4650] UDC core: couldn't find an available UDC or it's busy: -16 [ 314.605141][ T368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.606446][ T4650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.614696][ T368] usb 4-1: config 0 descriptor?? [ 314.623563][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.632869][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.650135][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.664571][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.671464][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.689421][ T4154] samsung 0003:0419:0600.0009: unknown main item tag 0x0 [ 314.705458][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.713421][ T4154] samsung 0003:0419:0600.0009: unknown main item tag 0x0 [ 314.722218][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.730343][ T4154] samsung 0003:0419:0600.0009: unknown main item tag 0x0 [ 314.737409][ T4154] samsung 0003:0419:0600.0009: unknown main item tag 0x0 [ 314.744779][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.751644][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.758800][ T4154] samsung 0003:0419:0600.0009: unknown main item tag 0x0 [ 314.759475][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.767551][ T4154] samsung 0003:0419:0600.0009: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 314.773562][ T632] usb 2-1: Using ep0 maxpacket: 8 [ 314.789854][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.797785][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.805802][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.820470][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 314.830984][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 314.849179][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.857106][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.867523][ T4672] device veth0_vlan entered promiscuous mode [ 314.875495][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.882903][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.896488][ T4650] UDC core: couldn't find an available UDC or it's busy: -16 [ 314.905072][ T4650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.912865][ T632] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.925570][ T632] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.925862][ T3500] device bridge_slave_1 left promiscuous mode [ 314.935530][ T632] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 314.943210][ T4154] usb 5-1: USB disconnect, device number 22 [ 314.955932][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.973101][ T3500] device bridge_slave_0 left promiscuous mode [ 314.979143][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.987464][ T3500] device veth1_macvtap left promiscuous mode [ 314.993333][ T3500] device veth0_vlan left promiscuous mode [ 315.024521][ T632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.050220][ T632] usb 2-1: config 0 descriptor?? [ 315.089831][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.097978][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.122356][ T4672] device veth1_macvtap entered promiscuous mode [ 315.150952][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.173902][ T4688] futex_wake_op: syz.2.1062 tries to shift op by -1; fix this program [ 315.201711][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.216801][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.274241][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.284761][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.731272][ T4680] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1060: Directory hole found for htree leaf block 0 [ 315.745384][ T4680] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1060: Directory hole found for htree leaf block 0 [ 315.774462][ T368] usbhid 4-1:0.0: can't add hid device: -71 [ 315.785248][ T368] usbhid: probe of 4-1:0.0 failed with error -71 [ 315.796285][ T368] usb 4-1: USB disconnect, device number 19 [ 315.835072][ T4695] syz.2.1064[4695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.835231][ T4695] syz.2.1064[4695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.969398][ T4697] 9pnet: Insufficient options for proto=fd [ 316.460753][ T4707] device syzkaller0 entered promiscuous mode [ 317.725211][ T632] usbhid 2-1:0.0: can't add hid device: -71 [ 317.731281][ T632] usbhid: probe of 2-1:0.0 failed with error -71 [ 318.095237][ T632] usb 2-1: USB disconnect, device number 20 [ 318.175124][ T4154] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 318.269905][ T4714] loop0: detected capacity change from 0 to 40427 [ 318.479684][ T4730] loop4: detected capacity change from 0 to 1024 [ 318.535230][ T4154] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 318.553416][ T4154] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 318.565299][ T4154] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 318.574154][ T4154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.600561][ T4730] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,noload,lazytime,usrquota,discard,data_err=abort,,errors=continue. Quota mode: writeback. [ 318.625239][ T4722] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 318.935107][ T4741] device syzkaller0 entered promiscuous mode [ 319.919704][ T4744] futex_wake_op: syz.3.1077 tries to shift op by -1; fix this program [ 320.859223][ T4745] overlayfs: './file1' not a directory [ 321.754457][ T4749] loop2: detected capacity change from 0 to 1024 [ 321.892797][ T4749] EXT4-fs (loop2): Ignoring removed orlov option [ 321.901149][ T4749] EXT4-fs (loop2): Invalid want_extra_isize 9 [ 322.009602][ T4760] device syzkaller0 entered promiscuous mode [ 322.263886][ T4763] loop2: detected capacity change from 0 to 256 [ 322.275198][ T4154] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 322.283048][ T4154] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input35 [ 322.293208][ T4154] usb 3-1: USB disconnect, device number 20 [ 322.325137][ T20] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 322.571490][ T4765] binfmt_misc: register: failed to install interpreter file ./file0 [ 322.783965][ T4768] loop3: detected capacity change from 0 to 256 [ 322.808138][ T4768] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 322.842430][ T4770] loop0: detected capacity change from 0 to 16 [ 322.925228][ T20] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 322.936559][ T20] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 322.937260][ T4770] erofs: (device loop0): mounted with root inode @ nid 36. [ 322.948074][ T20] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 323.526237][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.555276][ T4753] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 323.595446][ T4777] attempt to access beyond end of device [ 323.595446][ T4777] loop0: rw=0, want=14552337264, limit=16 [ 323.606886][ T4777] attempt to access beyond end of device [ 323.606886][ T4777] loop0: rw=0, want=14546590688, limit=16 [ 323.737467][ T4777] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1084'. [ 324.015164][ T20] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 324.015418][ T4783] loop0: detected capacity change from 0 to 256 [ 324.022964][ T20] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input36 [ 324.039832][ T20] usb 2-1: USB disconnect, device number 21 [ 324.141618][ T4779] loop2: detected capacity change from 0 to 40427 [ 324.252547][ T4785] binfmt_misc: register: failed to install interpreter file ./file0 [ 324.275210][ T2244] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 324.386486][ T4779] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 324.419199][ T4779] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 324.439048][ T4779] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 324.464316][ T4779] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 324.471220][ T4779] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 324.595154][ T2244] usb 4-1: Using ep0 maxpacket: 32 [ 324.715193][ T2244] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 324.723534][ T2244] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 324.732224][ T2244] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 324.741258][ T2244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 324.741863][ T4312] attempt to access beyond end of device [ 324.741863][ T4312] loop2: rw=2049, want=45104, limit=40427 [ 324.751031][ T2244] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 324.771592][ T2244] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 324.784575][ T2244] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 324.793637][ T2244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.802166][ T2244] usb 4-1: config 0 descriptor?? [ 325.209891][ T2244] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 325.330048][ T377] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 325.585834][ T377] usb 2-1: Using ep0 maxpacket: 8 [ 325.840275][ T377] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 325.854677][ T377] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 326.057069][ T377] usb 2-1: config 135 has no interface number 0 [ 326.105875][ T377] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 326.135407][ T377] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 326.161899][ T377] usb 2-1: config 135 interface 230 has no altsetting 0 [ 326.259687][ T4816] loop4: detected capacity change from 0 to 256 [ 326.293695][ T4817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.340255][ T4816] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 326.375337][ T377] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 326.443545][ T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.511495][ T377] usb 2-1: Product: syz [ 326.616206][ T377] usb 2-1: Manufacturer: syz [ 326.620797][ T377] usb 2-1: SerialNumber: syz [ 327.125307][ T377] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 327.131525][ T377] usb 2-1: No valid video chain found. [ 327.153580][ T4823] loop2: detected capacity change from 0 to 256 [ 327.162600][ T4823] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 327.984975][ T4826] loop0: detected capacity change from 0 to 40427 [ 328.050671][ T4832] futex_wake_op: syz.4.1099 tries to shift op by -1; fix this program [ 328.067393][ T780] usb 4-1: USB disconnect, device number 20 [ 328.148071][ T780] usblp0: removed [ 328.338390][ T419] usb 2-1: USB disconnect, device number 22 [ 328.359346][ T4826] F2FS-fs (loop0): invalid crc value [ 328.397939][ T4841] loop3: detected capacity change from 0 to 256 [ 328.400979][ T4835] loop2: detected capacity change from 0 to 512 [ 328.405818][ T4826] F2FS-fs (loop0): Found nat_bits in checkpoint [ 328.452165][ T4826] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 328.501274][ T4835] EXT4-fs (loop2): Test dummy encryption mode enabled [ 328.528690][ T4835] EXT4-fs error (device loop2): __ext4_iget:4903: inode #11: block 1: comm syz.2.1100: invalid block [ 328.539992][ T4835] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1100: couldn't read orphan inode 11 (err -117) [ 329.557480][ T4835] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 329.693390][ T4858] attempt to access beyond end of device [ 329.693390][ T4858] loop0: rw=524288, want=45072, limit=40427 [ 329.705153][ T4858] attempt to access beyond end of device [ 329.705153][ T4858] loop0: rw=0, want=45072, limit=40427 [ 329.943269][ T4672] attempt to access beyond end of device [ 329.943269][ T4672] loop0: rw=0, want=45072, limit=40427 [ 329.975102][ T10] attempt to access beyond end of device [ 329.975102][ T10] loop0: rw=2049, want=41056, limit=40427 [ 330.501125][ T4868] device syzkaller0 entered promiscuous mode [ 330.837110][ T4873] loop3: detected capacity change from 0 to 256 [ 330.911444][ T4873] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 331.003173][ T4877] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 331.312204][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.319458][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.327061][ T4876] device bridge_slave_0 entered promiscuous mode [ 331.334019][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.341416][ T4876] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.374515][ T4883] loop4: detected capacity change from 0 to 2048 [ 331.405348][ T419] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 331.487258][ T4876] device bridge_slave_1 entered promiscuous mode [ 331.661155][ T4883] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 331.685709][ T10] device bridge_slave_1 left promiscuous mode [ 331.691660][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.705259][ T419] usb 2-1: Using ep0 maxpacket: 8 [ 331.712338][ T10] device bridge_slave_0 left promiscuous mode [ 331.718731][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.744261][ T4891] loop3: detected capacity change from 0 to 256 [ 331.761796][ T10] device veth1_macvtap left promiscuous mode [ 331.775420][ T10] device veth0_vlan left promiscuous mode [ 331.837698][ T4891] FAT-fs (loop3): Unrecognized mount option "dont_h" or missing value [ 331.855186][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.875471][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.885046][ T419] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 331.899836][ T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.908405][ T419] usb 2-1: config 0 descriptor?? [ 331.930748][ T4886] loop2: detected capacity change from 0 to 40427 [ 331.992913][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.999793][ T4876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.006898][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.013660][ T4876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.023964][ T4886] F2FS-fs (loop2): invalid crc value [ 332.039699][ T4886] F2FS-fs (loop2): Found nat_bits in checkpoint [ 332.060681][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.068392][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.076333][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.083679][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.087038][ T4886] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 332.103895][ T4893] loop3: detected capacity change from 0 to 256 [ 332.116698][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.128295][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.135174][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.143003][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.191464][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.198357][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.215596][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.232327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.247854][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.264038][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.278042][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.286121][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.294950][ T4876] device veth0_vlan entered promiscuous mode [ 332.302211][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.310424][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.365879][ T4876] device veth1_macvtap entered promiscuous mode [ 332.395024][ T4903] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.476393][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.506898][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.517941][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.577287][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.624690][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.644253][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.688009][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.115336][ T780] Bluetooth: hci0: command 0x1003 tx timeout [ 333.137546][ T4914] loop4: detected capacity change from 0 to 512 [ 333.211749][ T4914] EXT4-fs (loop4): Test dummy encryption mode enabled [ 333.263813][ T4919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.331678][ T4914] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.1117: invalid block [ 333.343987][ T4914] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1117: couldn't read orphan inode 11 (err -117) [ 333.359714][ T4914] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 333.623318][ T4924] loop0: detected capacity change from 0 to 256 [ 334.401845][ T4933] tipc: Started in network mode [ 334.404820][ T4935] loop4: detected capacity change from 0 to 512 [ 334.406675][ T4933] tipc: Node identity 1, cluster identity 4711 [ 334.419189][ T4933] tipc: Node number set to 1 [ 334.425420][ T419] usbhid 2-1:0.0: can't add hid device: -71 [ 334.431266][ T419] usbhid: probe of 2-1:0.0 failed with error -71 [ 334.439012][ T419] usb 2-1: USB disconnect, device number 23 [ 334.446883][ T4935] EXT4-fs (loop4): Test dummy encryption mode enabled [ 334.463254][ T4935] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.1124: invalid block [ 334.474151][ T4935] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1124: couldn't read orphan inode 11 (err -117) [ 334.485962][ T4935] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 334.609313][ T4946] loop0: detected capacity change from 0 to 1024 [ 334.951261][ T4954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.976718][ T30] audit: type=1326 audit(1728649118.409:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 335.011888][ T4946] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,noload,lazytime,usrquota,discard,data_err=abort,,errors=continue. Quota mode: writeback. [ 335.050441][ T30] audit: type=1326 audit(1728649118.409:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 335.089779][ T30] audit: type=1326 audit(1728649118.419:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 335.118155][ T30] audit: type=1326 audit(1728649118.419:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 335.167364][ T30] audit: type=1326 audit(1728649118.419:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 335.193987][ T30] audit: type=1326 audit(1728649118.429:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 335.195179][ T780] Bluetooth: hci0: command 0x1001 tx timeout [ 335.223714][ T30] audit: type=1326 audit(1728649118.429:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 335.237475][ T349] Bluetooth: hci0: sending frame failed (-49) [ 335.260726][ T30] audit: type=1326 audit(1728649118.429:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 335.285492][ T30] audit: type=1326 audit(1728649118.429:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 335.327165][ T30] audit: type=1326 audit(1728649118.429:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 335.433021][ T4958] usb usb7: usbfs: process 4958 (syz.0.1126) did not claim interface 0 before use [ 335.442956][ T4958] overlayfs: './file1' not a directory [ 335.604460][ T4950] loop3: detected capacity change from 0 to 40427 [ 335.664390][ T4962] loop4: detected capacity change from 0 to 1024 [ 335.706780][ T4950] F2FS-fs (loop3): invalid crc value [ 335.719073][ T4962] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 335.719073][ T4962] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 335.719073][ T4962] [ 335.737045][ T4950] F2FS-fs (loop3): Found nat_bits in checkpoint [ 335.936224][ T4962] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 335.956421][ T4962] EXT4-fs (loop4): orphan cleanup on readonly fs [ 335.967826][ T4962] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1130: bg 0: block 10: padding at end of block bitmap is not set [ 335.986653][ T4962] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.1130: Failed to acquire dquot type 0 [ 335.999622][ T4962] EXT4-fs error (device loop4): ext4_free_blocks:6225: comm syz.4.1130: Freeing blocks not in datazone - block = 0, count = 4096 [ 336.000627][ T4950] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 336.013318][ T4962] EXT4-fs (loop4): 1 truncate cleaned up [ 336.026255][ T4962] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,min_batch_time=0x00000000000007ff,abort,grpid,noacl,delalloc,,errors=continue. Quota mode: writeback. [ 336.249199][ T4977] netlink: 173 bytes leftover after parsing attributes in process `syz.4.1130'. [ 336.543881][ T4982] loop3: detected capacity change from 0 to 256 [ 337.285232][ T780] Bluetooth: hci0: command 0x1009 tx timeout [ 337.414769][ T4999] loop2: detected capacity change from 0 to 2048 [ 337.559217][ T5004] loop4: detected capacity change from 0 to 256 [ 337.562159][ T4999] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 337.764168][ T5004] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 338.407750][ T5017] loop0: detected capacity change from 0 to 512 [ 338.473523][ T5021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.501256][ T5017] EXT4-fs (loop0): Test dummy encryption mode enabled [ 338.510386][ T5017] EXT4-fs error (device loop0): __ext4_iget:4903: inode #11: block 1: comm syz.0.1143: invalid block [ 338.527766][ T5017] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1143: couldn't read orphan inode 11 (err -117) [ 338.540173][ T5017] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 340.015399][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 340.015417][ T30] audit: type=1326 audit(1728649123.019:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f512fd91ff9 code=0x7ffc0000 [ 340.144660][ T30] audit: type=1326 audit(1728649123.019:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512fd91ff9 code=0x7ffc0000 [ 340.170546][ T30] audit: type=1326 audit(1728649123.019:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512fd91ff9 code=0x7ffc0000 [ 340.318846][ T30] audit: type=1326 audit(1728649123.019:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f512fd91ff9 code=0x7ffc0000 [ 340.472190][ T30] audit: type=1326 audit(1728649123.019:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512fd91ff9 code=0x7ffc0000 [ 340.496500][ T30] audit: type=1326 audit(1728649123.019:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512fd91ff9 code=0x7ffc0000 [ 340.540423][ T30] audit: type=1326 audit(1728649123.019:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f512fd91ff9 code=0x7ffc0000 [ 340.570783][ T30] audit: type=1326 audit(1728649123.019:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 340.594709][ T30] audit: type=1326 audit(1728649123.019:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512fd91ff9 code=0x7ffc0000 [ 340.618085][ T30] audit: type=1326 audit(1728649123.019:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512fd91ff9 code=0x7ffc0000 [ 340.949264][ T5056] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.956310][ T5056] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.963523][ T5056] device bridge_slave_0 entered promiscuous mode [ 340.970552][ T5056] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.979410][ T5056] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.986983][ T5056] device bridge_slave_1 entered promiscuous mode [ 341.066707][ T5065] loop0: detected capacity change from 0 to 256 [ 341.139214][ T5056] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.146112][ T5056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.153237][ T5056] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.157668][ T5072] loop3: detected capacity change from 0 to 16 [ 341.160110][ T5056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.245961][ T5072] erofs: (device loop3): mounted with root inode @ nid 36. [ 341.268564][ T298] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 341.281287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.678720][ T5076] binfmt_misc: register: failed to install interpreter file ./file0 [ 341.854559][ T5078] attempt to access beyond end of device [ 341.854559][ T5078] loop3: rw=0, want=14552337264, limit=16 [ 341.865837][ T5078] attempt to access beyond end of device [ 341.865837][ T5078] loop3: rw=0, want=14546590688, limit=16 [ 341.880712][ T5078] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1157'. [ 342.022147][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.097629][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.156143][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.164951][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.173649][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.180524][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.191467][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.227490][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.235674][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.242536][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.255355][ T5086] loop3: detected capacity change from 0 to 512 [ 342.256029][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.269655][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.277912][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.286227][ T298] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 342.295181][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.321519][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 342.330200][ T5086] EXT4-fs (loop3): Test dummy encryption mode enabled [ 342.334493][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 342.365591][ T5086] EXT4-fs error (device loop3): __ext4_iget:4903: inode #11: block 1: comm syz.3.1159: invalid block [ 342.376597][ T5086] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1159: couldn't read orphan inode 11 (err -117) [ 342.388716][ T5086] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 342.396224][ T5056] device veth0_vlan entered promiscuous mode [ 342.526046][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 342.535239][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 342.543190][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.550621][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.567452][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 342.575513][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.591572][ T5056] device veth1_macvtap entered promiscuous mode [ 342.618255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 342.659243][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.668488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.724215][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.738924][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.805430][ T419] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 343.145721][ T419] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 343.156973][ T45] device bridge_slave_1 left promiscuous mode [ 343.167401][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.182345][ T45] device bridge_slave_0 left promiscuous mode [ 343.193799][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.212284][ T45] device veth1_macvtap left promiscuous mode [ 343.224763][ T45] device veth0_vlan left promiscuous mode [ 343.265190][ T298] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 343.279786][ T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.358828][ T5105] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 343.645221][ T1222] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 343.966034][ T1222] usb 4-1: Using ep0 maxpacket: 8 [ 344.045418][ T298] usb 3-1: string descriptor 0 read error: -71 [ 344.051933][ T298] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 344.059607][ T298] usb 3-1: No valid video chain found. [ 344.089565][ T298] usb 3-1: USB disconnect, device number 21 [ 344.125651][ T1222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.138649][ T1222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.148411][ T419] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 344.157370][ T1222] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 344.166234][ T419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.173966][ T1222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.183819][ T1222] usb 4-1: config 0 descriptor?? [ 344.652321][ T5119] fuse: Unknown parameter 'use00000000000000000000' [ 344.659325][ T419] usb 5-1: string descriptor 0 read error: -71 [ 344.665563][ T419] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 344.672318][ T419] usb 5-1: No valid video chain found. [ 344.700802][ T419] usb 5-1: USB disconnect, device number 23 [ 344.825161][ T20] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 345.028876][ T5123] loop0: detected capacity change from 0 to 40427 [ 345.065117][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 345.126640][ T5123] F2FS-fs (loop0): invalid crc value [ 345.133523][ T5123] F2FS-fs (loop0): Found nat_bits in checkpoint [ 345.182155][ T5123] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 345.189639][ T20] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 345.205837][ T20] usb 3-1: config 0 has no interface number 0 [ 345.217992][ T20] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 345.227889][ T20] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 345.439081][ T5134] attempt to access beyond end of device [ 345.439081][ T5134] loop0: rw=524288, want=45072, limit=40427 [ 345.450477][ T5134] attempt to access beyond end of device [ 345.450477][ T5134] loop0: rw=0, want=45072, limit=40427 [ 345.462976][ T419] Bluetooth: hci0: command 0x1003 tx timeout [ 345.769134][ T4876] attempt to access beyond end of device [ 345.769134][ T4876] loop0: rw=0, want=45072, limit=40427 [ 345.797451][ T45] attempt to access beyond end of device [ 345.797451][ T45] loop0: rw=2049, want=41056, limit=40427 [ 345.815253][ T20] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 345.824235][ T20] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 345.832117][ T20] usb 3-1: Product: syz [ 345.836107][ T20] usb 3-1: SerialNumber: syz [ 345.841327][ T20] usb 3-1: config 0 descriptor?? [ 346.041534][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.041787][ T5144] loop4: detected capacity change from 0 to 512 [ 346.048497][ T5139] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.054574][ T419] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 346.062343][ T5139] device bridge_slave_0 entered promiscuous mode [ 346.075919][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.082838][ T5139] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.090335][ T5139] device bridge_slave_1 entered promiscuous mode [ 346.099640][ T5144] EXT4-fs (loop4): Test dummy encryption mode enabled [ 346.107575][ T5144] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.1174: invalid block [ 346.118799][ T5144] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1174: couldn't read orphan inode 11 (err -117) [ 346.126134][ T20] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 346.131401][ T5144] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 346.138580][ T20] usb 3-1: USB disconnect, device number 22 [ 346.240647][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.247538][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.254614][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.261415][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.285443][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.292864][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.300230][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.311046][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.319360][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.326228][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.345766][ T1222] usbhid 4-1:0.0: can't add hid device: -71 [ 346.351900][ T1222] usbhid: probe of 4-1:0.0 failed with error -71 [ 346.390614][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 346.390649][ T30] audit: type=1326 audit(1728649130.089:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 346.428124][ T1222] usb 4-1: USB disconnect, device number 21 [ 346.498309][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.507048][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.513893][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.523837][ T30] audit: type=1326 audit(1728649130.089:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 346.549753][ T30] audit: type=1326 audit(1728649130.089:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 346.565189][ T419] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.573331][ T30] audit: type=1326 audit(1728649130.099:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 346.586734][ T419] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.605867][ T30] audit: type=1326 audit(1728649130.099:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 346.615679][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.637984][ T30] audit: type=1326 audit(1728649130.099:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 346.645265][ T419] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 346.668809][ T30] audit: type=1326 audit(1728649130.099:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 346.685712][ T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.700692][ T30] audit: type=1326 audit(1728649130.099:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5143 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1928124ff9 code=0x7ffc0000 [ 346.708709][ T45] device bridge_slave_1 left promiscuous mode [ 346.746084][ T419] usb 2-1: config 0 descriptor?? [ 346.751980][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.759763][ T45] device bridge_slave_0 left promiscuous mode [ 346.765913][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.773959][ T45] device veth1_macvtap left promiscuous mode [ 346.779987][ T45] device veth0_vlan left promiscuous mode [ 346.917743][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.926774][ T5150] loop2: detected capacity change from 0 to 40427 [ 346.933066][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 346.941609][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.951189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.961522][ T5150] F2FS-fs (loop2): invalid crc value [ 346.967348][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.969163][ T5150] F2FS-fs (loop2): Found nat_bits in checkpoint [ 346.977495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.039447][ T5150] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 347.061532][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.069406][ T5139] device veth0_vlan entered promiscuous mode [ 347.082573][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.090931][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.100943][ T5139] device veth1_macvtap entered promiscuous mode [ 347.112447][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.120833][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.129221][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.146443][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.154695][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.318250][ T5166] attempt to access beyond end of device [ 347.318250][ T5166] loop2: rw=524288, want=45072, limit=40427 [ 347.359044][ T5166] attempt to access beyond end of device [ 347.359044][ T5166] loop2: rw=0, want=45072, limit=40427 [ 347.515541][ T1222] Bluetooth: hci0: command 0x1001 tx timeout [ 347.521423][ T349] Bluetooth: hci0: sending frame failed (-49) [ 347.668353][ T4312] attempt to access beyond end of device [ 347.668353][ T4312] loop2: rw=0, want=45072, limit=40427 [ 347.693938][ T45] attempt to access beyond end of device [ 347.693938][ T45] loop2: rw=2049, want=41056, limit=40427 [ 347.726774][ T45] tipc: Left network mode [ 347.954607][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.961756][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.969123][ T5171] device bridge_slave_0 entered promiscuous mode [ 347.988879][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.996207][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.006819][ T5171] device bridge_slave_1 entered promiscuous mode [ 348.308367][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.315340][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.322439][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.329221][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.359760][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.367396][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.375919][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.493309][ T5171] device veth0_vlan entered promiscuous mode [ 348.509211][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.520206][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.531816][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.542542][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.552010][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.562310][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.605218][ T780] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 348.630459][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.641286][ T5171] device veth1_macvtap entered promiscuous mode [ 348.653098][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.663255][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.685982][ T45] device bridge_slave_1 left promiscuous mode [ 348.693694][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.701382][ T45] device bridge_slave_0 left promiscuous mode [ 348.707395][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.715446][ T45] device veth1_macvtap left promiscuous mode [ 348.721332][ T45] device veth0_vlan left promiscuous mode [ 348.797250][ T632] usb 2-1: USB disconnect, device number 24 [ 348.829746][ T5188] loop1: detected capacity change from 0 to 256 [ 348.865163][ T780] usb 5-1: Using ep0 maxpacket: 8 [ 348.995163][ T1222] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 349.025419][ T780] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 349.036395][ T780] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 349.046321][ T780] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 349.055317][ T780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.143995][ T5190] syz.1.1183[5190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.145178][ T5190] syz.1.1183[5190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.486316][ T30] audit: type=1400 audit(1728649133.199:625): avc: denied { create } for pid=5194 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 349.517216][ T30] audit: type=1400 audit(1728649133.199:626): avc: denied { connect } for pid=5194 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 349.565139][ T1222] usb 3-1: Using ep0 maxpacket: 8 [ 349.605020][ T632] Bluetooth: hci0: command 0x1009 tx timeout [ 350.205314][ T780] usb 5-1: string descriptor 0 read error: -71 [ 350.211676][ T1222] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 350.224300][ T780] hub 5-1:32.0: USB hub found [ 350.228943][ T1222] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 350.239185][ T1222] usb 3-1: config 135 has no interface number 0 [ 350.245401][ T1222] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 350.256490][ T1222] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 350.269987][ T1222] usb 3-1: config 135 interface 230 has no altsetting 0 [ 350.285175][ T780] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 350.315420][ T780] usb 5-1: USB disconnect, device number 24 [ 350.455219][ T1222] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 350.464083][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.472678][ T1222] usb 3-1: Product: syz [ 350.477121][ T1222] usb 3-1: Manufacturer: syz [ 350.481543][ T1222] usb 3-1: SerialNumber: syz [ 350.495164][ T20] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 350.745230][ T1222] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 350.751517][ T1222] usb 3-1: No valid video chain found. [ 350.845144][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 350.947467][ T368] usb 3-1: USB disconnect, device number 23 [ 350.985391][ T20] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 350.993204][ T20] usb 2-1: config 0 has no interface number 0 [ 350.999276][ T20] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 351.005146][ T780] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 351.008749][ T20] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 351.155424][ T20] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 351.164342][ T20] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 351.172129][ T20] usb 2-1: Product: syz [ 351.176114][ T20] usb 2-1: SerialNumber: syz [ 351.181111][ T20] usb 2-1: config 0 descriptor?? [ 351.255167][ T780] usb 5-1: Using ep0 maxpacket: 8 [ 351.375189][ T780] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 351.383408][ T780] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 351.393510][ T780] usb 5-1: config 135 has no interface number 0 [ 351.399545][ T780] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 351.410620][ T780] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 351.423890][ T780] usb 5-1: config 135 interface 230 has no altsetting 0 [ 351.455960][ T20] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 351.467249][ T20] usb 2-1: USB disconnect, device number 25 [ 351.585211][ T780] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 351.594099][ T780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.602076][ T780] usb 5-1: Product: syz [ 351.605980][ T780] usb 5-1: Manufacturer: syz [ 351.610385][ T780] usb 5-1: SerialNumber: syz [ 351.765145][ T632] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 351.875191][ T780] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 351.881473][ T780] usb 5-1: No valid video chain found. [ 352.078517][ T780] usb 5-1: USB disconnect, device number 25 [ 352.125370][ T632] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.145182][ T632] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 352.153939][ T632] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 352.180775][ T632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.189528][ T632] usb 3-1: config 0 descriptor?? [ 352.197861][ T5224] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1195'. [ 352.225152][ T20] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 352.349158][ T5228] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.665162][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 352.785233][ T20] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 352.793542][ T20] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 352.802675][ T20] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 352.811770][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 352.821634][ T20] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 352.842293][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 352.855202][ T20] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 352.864031][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.872626][ T20] usb 2-1: config 0 descriptor?? [ 353.164443][ T5238] loop0: detected capacity change from 0 to 256 [ 353.267007][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.274002][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.283184][ T5240] device bridge_slave_0 entered promiscuous mode [ 353.293164][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.300229][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.307558][ T5240] device bridge_slave_1 entered promiscuous mode [ 353.356465][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.363427][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.370538][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.377301][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.449931][ T5245] syz.0.1198[5245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.450008][ T5245] syz.0.1198[5245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.075386][ T20] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 354.146318][ T5252] syz.4.1201[5252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.146392][ T5252] syz.4.1201[5252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.183041][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.215811][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.244199][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.267769][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.276309][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.284358][ T1737] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.291244][ T1737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.302040][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.310301][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.319692][ T1737] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.326680][ T1737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.338930][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.347146][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.363969][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.382523][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.400590][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.409132][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.423497][ T5240] device veth0_vlan entered promiscuous mode [ 354.430349][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.438702][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.447736][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.455248][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.473715][ T5240] device veth1_macvtap entered promiscuous mode [ 354.480913][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.500422][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.520595][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 354.532694][ T20] usb 3-1: USB disconnect, device number 24 [ 354.560233][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.580970][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.599611][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.611914][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.654608][ T5261] loop2: detected capacity change from 0 to 1024 [ 354.711131][ T5261] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,noload,lazytime,usrquota,discard,data_err=abort,,errors=continue. Quota mode: writeback. [ 354.865657][ T10] device bridge_slave_1 left promiscuous mode [ 354.872120][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.881763][ T10] device bridge_slave_0 left promiscuous mode [ 354.888404][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.901458][ T10] device veth1_macvtap left promiscuous mode [ 354.973861][ T5270] usb usb7: usbfs: process 5270 (syz.2.1203) did not claim interface 0 before use [ 355.005760][ T5270] overlayfs: './file1' not a directory [ 355.221558][ T10] device veth0_vlan left promiscuous mode [ 355.248373][ T6] usb 2-1: USB disconnect, device number 26 [ 355.255317][ T6] usblp0: removed [ 355.268172][ T5274] loop4: detected capacity change from 0 to 512 [ 355.319382][ T5278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.328397][ T5274] EXT4-fs (loop4): 1 orphan inode deleted [ 355.335761][ T5280] loop0: detected capacity change from 0 to 2048 [ 355.340290][ T5274] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 355.408901][ T5274] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 355.425559][ T5271] device syzkaller0 entered promiscuous mode [ 355.436529][ T5280] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 355.942655][ T780] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 356.364917][ T780] usb 1-1: Using ep0 maxpacket: 8 [ 356.555267][ T780] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 356.586167][ T780] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 356.607954][ T780] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 356.618225][ T780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.642003][ T5306] loop3: detected capacity change from 0 to 256 [ 356.689769][ T5306] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 356.830381][ T377] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 356.915312][ T780] usb 1-1: string descriptor 0 read error: -71 [ 356.922746][ T780] hub 1-1:32.0: USB hub found [ 356.997266][ T780] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 357.086895][ T780] usb 1-1: USB disconnect, device number 21 [ 357.205198][ T377] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.215433][ T377] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 357.253483][ T377] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 357.262533][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.271091][ T377] usb 3-1: config 0 descriptor?? [ 357.435124][ T1799] Bluetooth: hci0: command 0x1003 tx timeout [ 357.441037][ T349] Bluetooth: hci0: sending frame failed (-49) [ 358.327721][ T5326] loop1: detected capacity change from 0 to 256 [ 358.481622][ T5326] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 359.395134][ T20] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 359.435963][ T5338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.525190][ T1799] Bluetooth: hci0: command 0x1001 tx timeout [ 359.531279][ T349] Bluetooth: hci0: sending frame failed (-49) [ 359.534824][ T377] usb 3-1: USB disconnect, device number 25 [ 359.569024][ T5340] loop2: detected capacity change from 0 to 512 [ 359.616103][ T5340] EXT4-fs (loop2): Test dummy encryption mode enabled [ 359.623985][ T5340] EXT4-fs error (device loop2): __ext4_iget:4903: inode #11: block 1: comm syz.2.1223: invalid block [ 359.635289][ T5340] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1223: couldn't read orphan inode 11 (err -117) [ 359.647111][ T5340] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 359.960125][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 359.960178][ T30] audit: type=1326 audit(1728649143.589:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde708c1ff9 code=0x7ffc0000 [ 359.992124][ T30] audit: type=1326 audit(1728649143.589:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde708c1ff9 code=0x7ffc0000 [ 360.000522][ T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.016174][ T30] audit: type=1326 audit(1728649143.609:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fde708c1ff9 code=0x7ffc0000 [ 360.041807][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.048657][ T30] audit: type=1326 audit(1728649143.609:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde708c1ff9 code=0x7ffc0000 [ 360.080237][ T30] audit: type=1326 audit(1728649143.609:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde708c1ff9 code=0x7ffc0000 [ 360.103426][ T30] audit: type=1326 audit(1728649143.609:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fde708c1ff9 code=0x7ffc0000 [ 360.126618][ T30] audit: type=1326 audit(1728649143.619:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde708c1ff9 code=0x7ffc0000 [ 360.150096][ T30] audit: type=1326 audit(1728649143.619:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde708c1ff9 code=0x7ffc0000 [ 360.173471][ T30] audit: type=1326 audit(1728649143.649:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fde708c1ff9 code=0x7ffc0000 [ 360.175180][ T20] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 360.196746][ T30] audit: type=1326 audit(1728649143.649:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 360.205816][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 360.237089][ T20] usb 4-1: SerialNumber: syz [ 360.253512][ T5347] loop1: detected capacity change from 0 to 256 [ 360.536749][ T5351] binfmt_misc: register: failed to install interpreter file ./file0 [ 361.493295][ T20] usb 4-1: 0:2 : does not exist [ 361.595380][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 361.618422][ T5362] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1228'. [ 362.935137][ T419] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 363.295259][ T419] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.305494][ T419] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 363.314630][ T419] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 363.324378][ T419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.347071][ T419] usb 1-1: config 0 descriptor?? [ 363.495554][ T5389] loop1: detected capacity change from 0 to 16 [ 363.508242][ T1799] usb 4-1: USB disconnect, device number 22 [ 363.568374][ T5389] erofs: (device loop1): mounted with root inode @ nid 36. [ 363.763403][ T5396] attempt to access beyond end of device [ 363.763403][ T5396] loop1: rw=0, want=14552337264, limit=16 [ 363.774688][ T5396] attempt to access beyond end of device [ 363.774688][ T5396] loop1: rw=0, want=14546590688, limit=16 [ 363.816942][ T5396] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1234'. [ 364.012467][ T5391] loop3: detected capacity change from 0 to 40427 [ 364.106787][ T5391] F2FS-fs (loop3): invalid crc value [ 364.114296][ T5391] F2FS-fs (loop3): Found nat_bits in checkpoint [ 364.135142][ T20] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 364.147866][ T5391] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 364.319941][ T5404] attempt to access beyond end of device [ 364.319941][ T5404] loop3: rw=524288, want=45072, limit=40427 [ 364.347171][ T5404] attempt to access beyond end of device [ 364.347171][ T5404] loop3: rw=0, want=45072, limit=40427 [ 364.395138][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 364.515213][ T5240] attempt to access beyond end of device [ 364.515213][ T5240] loop3: rw=0, want=45072, limit=40427 [ 364.526147][ T20] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 364.534372][ T20] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 364.545576][ T20] usb 3-1: config 135 has no interface number 0 [ 364.551694][ T20] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 364.576437][ T20] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 364.590283][ T3500] attempt to access beyond end of device [ 364.590283][ T3500] loop3: rw=2049, want=41056, limit=40427 [ 364.601730][ T20] usb 3-1: config 135 interface 230 has no altsetting 0 [ 364.765215][ T20] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 364.774086][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.795465][ T20] usb 3-1: Product: syz [ 364.799549][ T20] usb 3-1: Manufacturer: syz [ 364.803971][ T20] usb 3-1: SerialNumber: syz [ 364.983601][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.990556][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.998031][ T5410] device bridge_slave_0 entered promiscuous mode [ 365.004905][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.012048][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.019492][ T5410] device bridge_slave_1 entered promiscuous mode [ 365.075210][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.082051][ T5410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.089188][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.095165][ T20] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 365.095955][ T5410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.102206][ T20] usb 3-1: No valid video chain found. [ 365.127857][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.135411][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.142523][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.152148][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.160201][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.167080][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.177473][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.185523][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.192353][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.204866][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.214107][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.222864][ T3500] device bridge_slave_1 left promiscuous mode [ 365.229052][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.236320][ T3500] device bridge_slave_0 left promiscuous mode [ 365.242278][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.249918][ T3500] device veth1_macvtap left promiscuous mode [ 365.255751][ T3500] device veth0_vlan left promiscuous mode [ 365.310779][ T1799] usb 3-1: USB disconnect, device number 26 [ 365.345768][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.358866][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.367910][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 365.375555][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.383349][ T5410] device veth0_vlan entered promiscuous mode [ 365.414142][ T5410] device veth1_macvtap entered promiscuous mode [ 365.467932][ T5420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.729697][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.741084][ T20] usb 1-1: USB disconnect, device number 22 [ 365.741293][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.755773][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.796518][ T5424] loop0: detected capacity change from 0 to 1024 [ 365.823265][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.831278][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.839735][ T5418] device bridge_slave_0 entered promiscuous mode [ 365.847047][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.853907][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.861056][ T5424] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 365.861056][ T5424] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 365.861056][ T5424] [ 365.861492][ T5418] device bridge_slave_1 entered promiscuous mode [ 365.888545][ T5424] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 365.897022][ T5424] EXT4-fs (loop0): orphan cleanup on readonly fs [ 365.904161][ T5424] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1243: bg 0: block 10: padding at end of block bitmap is not set [ 365.918584][ T5424] __quota_error: 2 callbacks suppressed [ 365.918598][ T5424] Quota error (device loop0): write_blk: dquota write failed [ 365.934731][ T5424] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 365.944931][ T5424] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 365.963497][ T5424] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.1243: Failed to acquire dquot type 0 [ 365.966949][ T5431] syz.2.1244[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.974595][ T5431] syz.2.1244[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.975461][ T5424] EXT4-fs error (device loop0): ext4_free_blocks:6225: comm syz.0.1243: Freeing blocks not in datazone - block = 0, count = 4096 [ 366.029220][ T5424] EXT4-fs (loop0): 1 truncate cleaned up [ 366.106086][ T5424] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,min_batch_time=0x00000000000007ff,abort,grpid,noacl,delalloc,,errors=continue. Quota mode: writeback. [ 366.141975][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.148855][ T5418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.155959][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.162720][ T5418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.176368][ T5433] 9pnet: Insufficient options for proto=fd [ 366.270935][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.279528][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.294190][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.353135][ T5418] device veth0_vlan entered promiscuous mode [ 366.396841][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.405215][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.414037][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.422677][ T5437] futex_wake_op: syz.1.1245 tries to shift op by -1; fix this program [ 366.428856][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.470916][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.485572][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.492475][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.500794][ T5439] netlink: 173 bytes leftover after parsing attributes in process `syz.0.1243'. [ 366.520600][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.533776][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.540676][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.548227][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.559370][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.596647][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.605642][ T5418] device veth1_macvtap entered promiscuous mode [ 366.621026][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.640820][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.775286][ T5446] loop0: detected capacity change from 0 to 512 [ 367.596625][ T30] audit: type=1400 audit(1728649151.259:641): avc: denied { map } for pid=5442 comm="syz.4.1242" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 368.032610][ T5446] EXT4-fs (loop0): Test dummy encryption mode enabled [ 368.077659][ T5446] EXT4-fs error (device loop0): __ext4_iget:4903: inode #11: block 1: comm syz.0.1247: invalid block [ 368.296227][ T5446] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1247: couldn't read orphan inode 11 (err -117) [ 368.310385][ T5446] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 368.460431][ T5453] loop1: detected capacity change from 0 to 40427 [ 368.480048][ T30] audit: type=1326 audit(1728649152.189:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6878aff9 code=0x7ffc0000 [ 368.503429][ T30] audit: type=1326 audit(1728649152.189:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6878aff9 code=0x7ffc0000 [ 368.526982][ T1799] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 368.528421][ T30] audit: type=1326 audit(1728649152.219:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b6878aff9 code=0x7ffc0000 [ 368.559304][ T30] audit: type=1326 audit(1728649152.219:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6878aff9 code=0x7ffc0000 [ 368.564993][ T5453] F2FS-fs (loop1): invalid crc value [ 368.582529][ T30] audit: type=1326 audit(1728649152.219:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6878aff9 code=0x7ffc0000 [ 368.582564][ T30] audit: type=1326 audit(1728649152.239:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.0.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b6878aff9 code=0x7ffc0000 [ 368.625117][ T419] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 368.636744][ T5453] F2FS-fs (loop1): Found nat_bits in checkpoint [ 368.665993][ T313] device bridge_slave_1 left promiscuous mode [ 368.673041][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.689038][ T313] device bridge_slave_0 left promiscuous mode [ 368.696360][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.707068][ T313] device veth1_macvtap left promiscuous mode [ 368.708546][ T5453] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 368.712960][ T313] device veth0_vlan left promiscuous mode [ 368.836281][ T1799] usb 4-1: Using ep0 maxpacket: 16 [ 369.046274][ T419] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.112392][ T419] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.142550][ T5477] attempt to access beyond end of device [ 369.142550][ T5477] loop1: rw=524288, want=45072, limit=40427 [ 369.153968][ T419] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 369.163286][ T419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.171768][ T5477] attempt to access beyond end of device [ 369.171768][ T5477] loop1: rw=0, want=45072, limit=40427 [ 369.186809][ T419] usb 5-1: config 0 descriptor?? [ 369.343477][ T5056] attempt to access beyond end of device [ 369.343477][ T5056] loop1: rw=0, want=45072, limit=40427 [ 369.368954][ T313] attempt to access beyond end of device [ 369.368954][ T313] loop1: rw=2049, want=41056, limit=40427 [ 369.425203][ T1799] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 369.434256][ T1799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.442365][ T1799] usb 4-1: Product: syz [ 369.446607][ T1799] usb 4-1: Manufacturer: syz [ 369.451162][ T1799] usb 4-1: SerialNumber: syz [ 369.455583][ T780] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 369.468232][ T1799] r8152-cfgselector 4-1: config 0 descriptor?? [ 369.673984][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.681524][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.689204][ T5480] device bridge_slave_0 entered promiscuous mode [ 369.695127][ T780] usb 3-1: Using ep0 maxpacket: 16 [ 369.696650][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.707590][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.714922][ T5480] device bridge_slave_1 entered promiscuous mode [ 369.735261][ T1799] r8152-cfgselector 4-1: Unknown version 0x0000 [ 369.783567][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.790562][ T5480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.797670][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.804435][ T5480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.825138][ T780] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 369.825700][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.833085][ T780] usb 3-1: config 0 has no interface number 0 [ 369.833116][ T780] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 369.856349][ T780] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 369.866032][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.873361][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.885538][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.893742][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.901788][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.908673][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.916179][ T20] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 369.924646][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 369.933172][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.941381][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.945295][ T1799] r8152-cfgselector 4-1: Unknown version 0x0000 [ 369.948251][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.961615][ T1799] r8152-cfgselector 4-1: bad CDC descriptors [ 369.969009][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.976826][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.984533][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.985706][ T780] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 369.992224][ T1799] r8152-cfgselector 4-1: Unknown version 0x0000 [ 369.995185][ T1799] r8152-cfgselector 4-1: USB disconnect, device number 23 [ 370.001725][ T780] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 370.008461][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.021894][ T780] usb 3-1: Product: syz [ 370.033480][ T780] usb 3-1: SerialNumber: syz [ 370.041580][ T780] usb 3-1: config 0 descriptor?? [ 370.043022][ T5480] device veth0_vlan entered promiscuous mode [ 370.053626][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.061884][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.070211][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 370.078183][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.086413][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 370.093641][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 370.107103][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.115339][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.124311][ T313] device bridge_slave_1 left promiscuous mode [ 370.130351][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.137775][ T313] device bridge_slave_0 left promiscuous mode [ 370.143750][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.151630][ T313] device veth1_macvtap left promiscuous mode [ 370.158595][ T313] device veth0_vlan left promiscuous mode [ 370.165241][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 370.237846][ T5480] device veth1_macvtap entered promiscuous mode [ 370.247488][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 370.255311][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.263356][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.273249][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 370.281395][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 370.325816][ T20] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 370.325885][ T780] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 370.341160][ T20] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 370.348986][ T780] usb 3-1: USB disconnect, device number 27 [ 370.355848][ T20] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 370.364673][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.374131][ T20] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 370.383780][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 370.405242][ T20] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 370.422961][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.431782][ T20] usb 1-1: config 0 descriptor?? [ 370.498893][ T5489] loop1: detected capacity change from 0 to 40427 [ 370.601708][ T5493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.782522][ T20] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 370.805927][ T5489] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 370.812205][ T5489] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 370.823812][ T5489] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 371.029427][ T5489] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 371.055297][ T5489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 371.165188][ T20] usb 5-1: USB disconnect, device number 26 [ 371.388515][ T5507] device syzkaller0 entered promiscuous mode [ 372.040074][ T5480] attempt to access beyond end of device [ 372.040074][ T5480] loop1: rw=2049, want=45104, limit=40427 [ 372.095137][ T60] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 372.256751][ T5518] futex_wake_op: syz.3.1264 tries to shift op by -1; fix this program [ 372.775239][ T20] usb 1-1: USB disconnect, device number 23 [ 372.781893][ T20] usblp0: removed [ 372.925293][ T5515] loop4: detected capacity change from 0 to 40427 [ 372.967295][ T5515] F2FS-fs (loop4): invalid crc value [ 372.983658][ T5515] F2FS-fs (loop4): Found nat_bits in checkpoint [ 373.031891][ T60] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 373.052293][ T60] usb 3-1: too many endpoints for config 17 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 373.066278][ T60] usb 3-1: config 17 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 373.093835][ T60] usb 3-1: config 17 interface 0 has no altsetting 0 [ 373.100561][ T5515] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 373.114964][ T60] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 373.147281][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.225712][ T60] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 373.599707][ T5525] loop3: detected capacity change from 0 to 40427 [ 373.682360][ T5538] attempt to access beyond end of device [ 373.682360][ T5538] loop4: rw=524288, want=45072, limit=40427 [ 373.718298][ T5538] attempt to access beyond end of device [ 373.718298][ T5538] loop4: rw=0, want=45072, limit=40427 [ 373.878179][ T5542] loop3: detected capacity change from 0 to 256 [ 374.201023][ T5547] loop1: detected capacity change from 0 to 512 [ 374.378849][ T5547] EXT4-fs (loop1): 1 orphan inode deleted [ 374.384857][ T5547] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.423463][ T5418] attempt to access beyond end of device [ 374.423463][ T5418] loop4: rw=0, want=45072, limit=40427 [ 374.454283][ T313] attempt to access beyond end of device [ 374.454283][ T313] loop4: rw=2049, want=41056, limit=40427 [ 374.529883][ T60] usb 3-1: USB disconnect, device number 28 [ 374.640469][ T5554] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 374.833551][ T5556] loop2: detected capacity change from 0 to 1024 [ 374.873859][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 374.873875][ T30] audit: type=1400 audit(1728649158.579:653): avc: denied { setopt } for pid=5559 comm="syz.0.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 374.914265][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 375.012524][ T5556] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nobarrier,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 375.110819][ T780] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 375.112869][ T5574] loop0: detected capacity change from 0 to 512 [ 375.136081][ T5574] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 375.145047][ T5574] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 375.145047][ T5574] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 375.145047][ T5574] [ 375.177573][ T5574] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,bsdgroups,usrjquota=./file1,noquota,noacl,minixdf,noblock_validity,,errors=continue. Quota mode: writeback. [ 375.195248][ T5574] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 375.347294][ T5580] netlink: 'syz.2.1282': attribute type 4 has an invalid length. [ 375.365119][ T780] usb 2-1: Using ep0 maxpacket: 8 [ 375.389588][ T5580] netlink: 'syz.2.1282': attribute type 4 has an invalid length. [ 375.401557][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.402485][ T30] audit: type=1400 audit(1728649159.109:654): avc: denied { name_bind } for pid=5579 comm="syz.2.1282" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 375.430968][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.450352][ T5570] device bridge_slave_0 entered promiscuous mode [ 375.459868][ T313] device bridge_slave_1 left promiscuous mode [ 375.466746][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.474998][ T313] device bridge_slave_0 left promiscuous mode [ 375.481338][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.492444][ T313] device veth1_macvtap left promiscuous mode [ 375.498666][ T313] device veth0_vlan left promiscuous mode [ 375.505249][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.517111][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.526983][ T780] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 375.535936][ T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.550885][ T780] usb 2-1: config 0 descriptor?? [ 375.622191][ T30] audit: type=1400 audit(1728649159.329:655): avc: denied { sys_admin } for pid=5586 comm="syz.3.1284" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 375.663502][ T30] audit: type=1400 audit(1728649159.329:656): avc: denied { sys_ptrace } for pid=5586 comm="syz.3.1284" capability=19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 375.741590][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.748598][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.758723][ T5570] device bridge_slave_1 entered promiscuous mode [ 375.935221][ T60] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 375.956128][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.963015][ T5570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.970133][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.976986][ T5570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.995271][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.004432][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.037696][ T5553] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1271: Directory hole found for htree leaf block 0 [ 376.050623][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.050967][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.065974][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.074007][ T5553] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1271: Directory hole found for htree leaf block 0 [ 376.077715][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.094968][ T1737] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.101847][ T1737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.109114][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.117951][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.126029][ T1737] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.132860][ T1737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.143682][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.151612][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.159754][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.168005][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.190102][ T5570] device veth0_vlan entered promiscuous mode [ 376.196846][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 376.206308][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.214486][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.221300][ T5596] loop0: detected capacity change from 0 to 2048 [ 376.222544][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.237689][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.245009][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 376.259182][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 376.263423][ T5596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 376.267387][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 376.277562][ T20] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 376.287488][ T5570] device veth1_macvtap entered promiscuous mode [ 376.303741][ T30] audit: type=1400 audit(1728649160.019:657): avc: denied { map } for pid=5595 comm="syz.0.1288" path="/30/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 376.309614][ T5596] input: syz1 as /devices/virtual/input/input38 [ 376.326759][ T30] audit: type=1400 audit(1728649160.019:658): avc: denied { execute } for pid=5595 comm="syz.0.1288" path="/30/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 376.331919][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 376.362175][ T30] audit: type=1400 audit(1728649160.019:659): avc: denied { read write } for pid=5595 comm="syz.0.1288" name="uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 376.362702][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 376.389754][ T30] audit: type=1400 audit(1728649160.019:660): avc: denied { open } for pid=5595 comm="syz.0.1288" path="/dev/uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 376.416939][ T30] audit: type=1400 audit(1728649160.019:661): avc: denied { ioctl } for pid=5595 comm="syz.0.1288" path="/dev/uinput" dev="devtmpfs" ino=166 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 376.442071][ T60] usb 3-1: config 7 descriptor has 1 excess byte, ignoring [ 376.449324][ T60] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 376.453441][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 376.468820][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 376.477182][ T2632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.620237][ T30] audit: type=1400 audit(1728649160.329:662): avc: denied { write } for pid=5613 comm="syz.4.1293" name="pfkey" dev="proc" ino=4026532872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 376.643032][ T60] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 376.654632][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.664194][ T60] usb 3-1: Product: syz [ 376.670696][ T60] usb 3-1: Manufacturer: syz [ 376.675246][ T60] usb 3-1: SerialNumber: syz [ 376.735403][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.745802][ T60] rndis_host 3-1:7.0: skipping garbage [ 376.751676][ T60] usb 3-1: bad CDC descriptors [ 376.756354][ T20] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 376.769386][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.777899][ T20] usb 4-1: config 0 descriptor?? [ 376.875478][ T298] Bluetooth: hci0: command 0x1003 tx timeout [ 376.935129][ T377] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 376.943728][ T20] usb 3-1: USB disconnect, device number 29 [ 376.985242][ T419] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 377.035450][ T298] usb 4-1: USB disconnect, device number 24 [ 377.175201][ T377] usb 5-1: Using ep0 maxpacket: 32 [ 377.235225][ T780] usbhid 2-1:0.0: can't add hid device: -71 [ 377.241009][ T780] usbhid: probe of 2-1:0.0 failed with error -71 [ 377.249367][ T780] usb 2-1: USB disconnect, device number 27 [ 377.295278][ T377] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.305527][ T377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.316292][ T377] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 377.328904][ T377] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 377.337721][ T377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.345678][ T419] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 377.356546][ T419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.366428][ T377] usb 5-1: config 0 descriptor?? [ 377.371219][ T419] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 377.383950][ T419] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 377.392862][ T419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.401370][ T419] usb 1-1: config 0 descriptor?? [ 377.605137][ T298] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 377.765134][ T780] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 377.846141][ T377] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 377.852862][ T377] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 377.859607][ T377] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 377.867315][ T419] hid-generic 0003:1B1C:1D00.000B: unknown main item tag 0x0 [ 377.874532][ T419] hid-generic 0003:1B1C:1D00.000B: unknown main item tag 0x0 [ 377.881839][ T377] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 377.888656][ T377] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 377.895473][ T419] hid-generic 0003:1B1C:1D00.000B: unknown main item tag 0x0 [ 377.902674][ T419] hid-generic 0003:1B1C:1D00.000B: unknown main item tag 0x0 [ 377.910634][ T377] ntrig 0003:1B96:000A.000A: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 377.922849][ T419] hid-generic 0003:1B1C:1D00.000B: hidraw1: USB HID v0.02 Device [HID 1b1c:1d00] on usb-dummy_hcd.0-1/input0 [ 377.975199][ T298] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.985209][ T298] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 377.994047][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.003158][ T298] usb 4-1: config 0 descriptor?? [ 378.015217][ T780] usb 3-1: Using ep0 maxpacket: 32 [ 378.067418][ T298] usb 1-1: USB disconnect, device number 24 [ 378.135273][ T780] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 378.144191][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.152810][ T780] usb 3-1: config 0 descriptor?? [ 378.159371][ T377] usb 5-1: USB disconnect, device number 27 [ 378.955128][ T377] Bluetooth: hci0: command 0x1001 tx timeout [ 378.961074][ T349] Bluetooth: hci0: sending frame failed (-49) [ 379.100152][ T5655] loop4: detected capacity change from 0 to 128 [ 379.149105][ T5655] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 379.162177][ T5655] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 379.185118][ T60] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 379.259936][ T1799] usb 4-1: USB disconnect, device number 25 [ 379.329339][ T5670] bridge0: port 3(veth0) entered blocking state [ 379.336304][ T5670] bridge0: port 3(veth0) entered disabled state [ 379.343425][ T5670] device veth0 entered promiscuous mode [ 379.349082][ T5670] bridge0: port 3(veth0) entered blocking state [ 379.355162][ T5670] bridge0: port 3(veth0) entered forwarding state [ 379.374748][ T5672] device syzkaller0 entered promiscuous mode [ 379.467169][ T5683] serio: Serial port ptm0 [ 379.498917][ T5685] loop4: detected capacity change from 0 to 2048 [ 379.575163][ T60] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 379.585408][ T60] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 379.596872][ T60] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 379.607206][ T60] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.618006][ T5685] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 379.620148][ T60] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.645708][ T5685] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 379.662134][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.670104][ T5685] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 379.672846][ T5699] loop3: detected capacity change from 0 to 1024 [ 379.686501][ T5685] EXT4-fs (loop4): This should not happen!! Data will be lost [ 379.686501][ T5685] [ 379.697936][ T5685] EXT4-fs (loop4): Total free blocks count 0 [ 379.698649][ T5700] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 379.703728][ T5685] EXT4-fs (loop4): Free/Dirty block details [ 379.703743][ T5685] EXT4-fs (loop4): free_blocks=2415919104 [ 379.716520][ T5700] EXT4-fs (loop4): This should not happen!! Data will be lost [ 379.716520][ T5700] [ 379.722680][ T60] usb 1-1: invalid MIDI out EP 0 [ 379.731047][ T5700] EXT4-fs (loop4): Total free blocks count 0 [ 379.743765][ T5685] EXT4-fs (loop4): dirty_blocks=16 [ 379.747395][ T5700] EXT4-fs (loop4): Free/Dirty block details [ 379.752723][ T60] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 379.760100][ T5699] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,nodiscard,errors=remount-ro,noinit_itable,data_err=abort,. Quota mode: writeback. [ 379.853189][ T5707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5707 comm=syz.4.1330 [ 379.924371][ T377] usb 1-1: USB disconnect, device number 25 [ 380.145139][ T298] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 380.445413][ T5713] loop0: detected capacity change from 0 to 1024 [ 380.496246][ T377] usb 3-1: USB disconnect, device number 30 [ 380.506847][ T298] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 380.511315][ T5715] loop2: detected capacity change from 0 to 512 [ 380.517257][ T298] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.527958][ T5713] EXT4-fs (loop0): dax option not supported [ 380.536086][ T298] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.550723][ T298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.559541][ T298] usb 5-1: config 0 descriptor?? [ 380.595710][ T298] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 380.629565][ T5715] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 380.645203][ T5715] ext4 filesystem being mounted at /23/control supports timestamps until 2038 (0x7fffffff) [ 380.674036][ T5715] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.1333: path /23/control: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 380.699297][ T5723] loop3: detected capacity change from 0 to 1024 [ 380.786918][ T5723] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 380.813676][ T5723] EXT4-fs (loop3): orphan cleanup on readonly fs [ 380.840020][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 380.840046][ T30] audit: type=1400 audit(1728649164.549:672): avc: denied { create } for pid=5741 comm="syz.0.1344" dev="anon_inodefs" ino=42935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 380.866561][ T5742] Zero length message leads to an empty skb [ 380.876812][ T5742] loop0: detected capacity change from 0 to 512 [ 380.878561][ T5723] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 380.883002][ T30] audit: type=1400 audit(1728649164.549:673): avc: denied { ioctl } for pid=5741 comm="syz.0.1344" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=42935 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 380.897220][ T5723] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #3: comm syz.3.1336: mark_inode_dirty error [ 380.929486][ T5723] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1336: Invalid block bitmap block 3 in block_group 0 [ 380.943280][ T5723] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 380.953146][ T5723] EXT4-fs error (device loop3): ext4_dirty_inode:6038: inode #3: comm syz.3.1336: mark_inode_dirty error [ 380.955191][ T30] audit: type=1400 audit(1728649164.659:674): avc: denied { nlmsg_write } for pid=5732 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 380.964632][ T5723] Quota error (device loop3): write_blk: dquota write failed [ 380.992006][ T5723] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm syz.3.1336: lblock 6 mapped to illegal pblock 1 (length 1) [ 381.005915][ T5723] Quota error (device loop3): write_blk: dquota write failed [ 381.013528][ T5723] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 381.023318][ T5723] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.1336: lblock 0 mapped to illegal pblock 48 (length 1) [ 381.025562][ T5742] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x00000000000001ff,grpquota,,errors=continue. Quota mode: writeback. [ 381.037708][ T5723] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 381.051042][ T377] Bluetooth: hci0: command 0x1009 tx timeout [ 381.051577][ T30] audit: type=1400 audit(1728649164.769:675): avc: denied { mount } for pid=5741 comm="syz.0.1344" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 381.059776][ T5723] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.1336: Failed to acquire dquot type 0 [ 381.065997][ T5742] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038 (0x7fffffff) [ 381.087179][ T5723] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 381.116712][ T30] audit: type=1400 audit(1728649164.819:676): avc: denied { mounton } for pid=5741 comm="syz.0.1344" path="/49/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.119028][ T5139] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 256: padding at end of block bitmap is not set [ 381.141228][ T30] audit: type=1400 audit(1728649164.819:677): avc: denied { unmount } for pid=5139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 381.173635][ T5723] EXT4-fs error (device loop3): ext4_ext_truncate:4433: inode #15: comm syz.3.1336: mark_inode_dirty error [ 381.173961][ T5139] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz-executor: Failed to acquire dquot type 1 [ 381.185723][ T5723] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 381.205560][ T5723] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 381.214146][ T5723] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 381.224533][ T5723] EXT4-fs error (device loop3): ext4_truncate:4303: inode #15: comm syz.3.1336: mark_inode_dirty error [ 381.235717][ T5723] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 381.244508][ T5723] EXT4-fs (loop3): 1 truncate cleaned up [ 381.250175][ T5723] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000014,stripe=0x0000000000000000,grpid,errors=remount-ro,nombcache,noblock_validity,errors=continue,lazytime,. Quota mode: none. [ 382.186430][ T2632] device bridge_slave_1 left promiscuous mode [ 382.192468][ T2632] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.200267][ T2632] device bridge_slave_0 left promiscuous mode [ 382.206393][ T2632] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.214484][ T2632] device veth1_macvtap left promiscuous mode [ 382.220666][ T2632] device veth0_vlan left promiscuous mode [ 382.881827][ T60] usb 5-1: USB disconnect, device number 28 [ 384.200798][ T5774] request_module fs-autofs succeeded, but still no fs? [ 384.217756][ T5774] device syz_tun entered promiscuous mode [ 384.227778][ T5774] device vlan2 entered promiscuous mode [ 384.234508][ T5774] device syz_tun left promiscuous mode [ 385.126387][ T5796] input: syz0 as /devices/virtual/input/input39 [ 385.257910][ T5814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1364'. [ 385.258370][ T5812] loop2: detected capacity change from 0 to 1024 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=0 req=1348 state=1 status=67 (errno 9: Bad file descriptor) [ 385.348895][ T5812] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 385.379622][ T5812] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 385.417397][ T5812] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 385.435903][ T5812] journal_init_common: Cannot get buffer for journal superblock [ 385.443410][ T5812] EXT4-fs (loop2): Could not load journal inode [ 385.511976][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.519043][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.526405][ T5833] device bridge_slave_0 entered promiscuous mode [ 385.535561][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.542407][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.549922][ T5833] device bridge_slave_1 entered promiscuous mode [ 385.595342][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.602208][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.609363][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.616207][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.640534][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.648289][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.655549][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.664522][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.672631][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.679467][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.689850][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.697845][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.704662][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.716215][ T3500] device bridge_slave_1 left promiscuous mode [ 385.722214][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.729605][ T3500] device bridge_slave_0 left promiscuous mode [ 385.735699][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.743505][ T3500] device veth1_macvtap left promiscuous mode [ 385.749347][ T3500] device veth0_vlan left promiscuous mode [ 385.880680][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.890065][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.903856][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 385.915328][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.923238][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.930906][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.939125][ T5833] device veth0_vlan entered promiscuous mode [ 385.949904][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.958876][ T5833] device veth1_macvtap entered promiscuous mode [ 385.968582][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.978521][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.996794][ T3500] device bridge_slave_1 left promiscuous mode [ 387.002828][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.010206][ T3500] device bridge_slave_0 left promiscuous mode [ 387.016236][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.023860][ T3500] device bridge_slave_1 left promiscuous mode [ 387.029873][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.037274][ T3500] device bridge_slave_0 left promiscuous mode [ 387.043187][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.051022][ T3500] device veth0 left promiscuous mode [ 387.056201][ T3500] bridge0: port 3(veth0) entered disabled state [ 387.062594][ T3500] device bridge_slave_1 left promiscuous mode [ 387.068546][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.075746][ T3500] device bridge_slave_0 left promiscuous mode [ 387.081651][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.089596][ T3500] device bridge_slave_1 left promiscuous mode [ 387.095598][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.102804][ T3500] device bridge_slave_0 left promiscuous mode [ 387.108840][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.117306][ T3500] device veth1_macvtap left promiscuous mode [ 387.123119][ T3500] device veth0_vlan left promiscuous mode [ 387.129013][ T3500] device veth1_macvtap left promiscuous mode [ 387.134832][ T3500] device veth0_vlan left promiscuous mode [ 387.140740][ T3500] device veth1_macvtap left promiscuous mode [ 387.146568][ T3500] device veth0_vlan left promiscuous mode [ 387.152214][ T3500] device veth1_macvtap left promiscuous mode [ 387.158192][ T3500] device veth0_vlan left promiscuous mode