last executing test programs: 8.787865943s ago: executing program 4 (id=1195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[], 0xd) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x38500, 0x0) open_tree(r5, 0x0, 0x81000) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0xb, 0xb3, 0x7f}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003980)={&(0x7f0000003880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB="00000000000000006608000000000000180000001000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 8.427564304s ago: executing program 3 (id=1199): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 7.597067459s ago: executing program 4 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x90, 0x30, 0xb, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4, 0x12}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 7.47591224s ago: executing program 3 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x78) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x5b) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r6, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) accept4$packet(r7, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000001c0)) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 7.450547529s ago: executing program 4 (id=1204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x7c}}, 0x0) 7.251030086s ago: executing program 4 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0x20001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x44, 0xf8, 0x9b, 0x20, 0x5ac, 0x262, 0xa363, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x73, 0x7, 0x0, 0x3, 0xca, 0x2}}, {{0x9, 0x4, 0x29, 0x0, 0x1, 0x68, 0xf2, 0x28, 0x0, [], [{{0x9, 0x5, 0x6, 0xc, 0x0, 0x6}}]}}]}}]}}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) setuid(0xee01) setgroups(0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x2}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001940), 0x141202, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001980)={'vxcan0\x00', 0x0}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r5) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x82) sendmsg$can_raw(r3, &(0x7f0000001a80)={&(0x7f00000019c0)={0x1d, r4}, 0x10, &(0x7f0000001a40)={&(0x7f0000001a00)=@can={{0x4, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "153ed27275e88f1c"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_emit_ethernet(0x63e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60cb653e06083afffe800000000000000000000000000000ff02000000000000000000000000000186009078000002000000000000000000050e7db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d980110420fa979a300091598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd20004d429145c793e823829b4376332b2c98aee2dae3e1cb11adb2b381eb30650ac6c45f900a2130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba731b196335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e720fdb20af8ab0a6a09dfcdacf69923d60a0efeacf81e1e7e17db9547a4962bdec794c013af7210e54d43f3fe7da2f88c674f4cfd818f6a7461368bf62f1d5f98fd9394eb74bf0559f1c6b1ebec57dba007f143108e64be3fa330cc21a411b0b7af23ebd9282be17fb702a5ca61650b283eec78e0280e4f2713b42bd4e3615c48c55c1abe5827601038109736f9c6b7242e7c9c917309397b864eedf5ca71db1debb609b6381b54955706017731319e0cc41083f99bd11da748b47d8715080899eb15caf19df36632b73bb22596b8e16186a2e51e277f8c78df609ca44a83914e8f7a8b053210573941b560ff8b114326678c6851c74596300b1c2a1ddc0af5b4cb5f15fa61e42214341368152275070973f3063f35fded9eeb535a0837783921dc2b705e0a0ceacca1882ff23813bc9199a9be39559c9f82a7452ce6113780cd7d26f532b72603afbfe994f5baf7257c9a33b9ac1ecd0b69da263daa9ac7e6a8d4400341926ed1f0c0e9086009c7945c0b255716f5b0dac45a9af480dc1f17beba2a2cddeafed29ecc91ce704895e28d0c46e639591c667a7f34500ea98ef557801dccf733fa61f3cf6740e40418745a42a738440ba9fc2ec415ba0fbf34800e6987b902302d552cf869eb350a9a862cd946f8285b03f03067dc9bae653dc701d97c7e6f7c1f0767624ac9e48b041c51697968b1e1733921270e569ac0b1ac7c25d00936ad05f14d67d3225d6a8cecd9fb63205ab14131e2e742977860e4a38ec056cda185aa357a059d0180056816a7902bdc0951253005099039bd945a6a4e525123cd4fcb8c5b335626464707fc21e92039b9190020eb9ef84c61cddede466a4c3ea2572927153997c33433ce9de0a7d2ed0b5fb0dce9cc6630bd0635a66be0cb490689169618184e896233d49b8f0e0717ae5d557333d54887ed8d983ee01091326af86e76583131104c66753efd58c32e499be23a05249b98e505c4c0237e2e70506fed29a33169d02b74ba5cbefad267e1107f4468e1144ece9656d35b88e405405fbb1438510f0395752c61e57e760de178a58a8da65040946656220817732fa0cd36189027287597cc5ebe709ca9d9a507babd39f1e56a37657326c7ffb654ce5e2773e92e99783e3152562a21a574f521022314da92315c13a6a696122b211e29a85e81ba7a8fb4dee770d1cacaa2fb02d5fb97676d6402513cccc770ff1a9b9d3b1454ff071d6ed6c4e84249607b64a034b8127893a00aac7ce06a0c2820f7084a8d8e61fc6868c0c2c74005af049ea328a94d5d4534aa99c49208a5f339dec460f5231d6a3e42e4b314c913da4d4127f3d8407e7edbbb044d2e034d6c14c0b86de30afe2d0b92bcaa10cb48c54576114ab1844e25eabc3a8c7906e917b052dfe31e110aaf94876488e3ef926f2d6e6cb635836cb11dbd146a83e2034b7d41ebdaa959f4f74444aceab064af4fb73b5ac964eca5e12834cc5c6d280855bc19c25ce7a5a3dd1a64c1fba0001ee7eebfd25e67ebb5ca47dd6c08543f96a01"], 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffff4, 0xc, 0x800000, 0x2a, 0x1b, "be882f95f3aee29a154c0f00"}) 6.974011923s ago: executing program 1 (id=1209): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") open(&(0x7f0000000140)='./bus\x00', 0x14937e, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r0, 0x2007ffb) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000240)='./file2\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRESOCT], 0x1, 0x333, &(0x7f0000000440)="$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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x40, &(0x7f00000010c0)=ANY=[@ANYRES8=r1, @ANYRESOCT, @ANYRES64, @ANYRESHEX=0x0, @ANYBLOB="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"], 0xff, 0x1501, &(0x7f0000003240)="$eJzs3AuYjtXaOPB1r7WeMSbpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhBynMWmcz4eckyZbmiQJCUnW/9Lu++z9tb+v/d97X3//b8/9u651zbrnee77XWvuueZ9nue65v2256h6LerXbkZE4p8Cf/6SIoSIFUIME0JcJ4QIhBCV4ivFXz6eX0HKP/ci7F/r4fSrvQJ2NXH/8zbuf97G/c/buP95G/c/b+P+523c/7yN+89YXrZjTrHreeTdwc//8zJ+//83klt+8pebyt/Y64/OMyUXJfw25f7nbdz/vI37n7dx//M27n/exv3/91frfzjG/c/buP+M5WVX+/nzPzrE/wdr+DcYMVf7948xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWN5w3l+hhRD/Mb/a62KMMcYYY4wxxti/js/395/KDwUYY4wxxhhjjLH/rUBIoYQWgYgR+USsyC/ixDWigLhWFBTXiYi4XsSLG0QhcaMoLIqIoqKYSBDFRQlhBAorSISipCglouImUVrcLBJFGVFWlBNOlBdJ4hZRQdwqKorbRCVxu6gs7hBVRFVRTVQXd4oa4i5RU9QStcXdoo6oK+qJ+uIe0UDcKxqK+0Qjcb9oLB4QTcSDoql4SDQTD4vm4hHRQjwqWorHRCvRWrQRbUW7fyj/JdFXvCz6if4iRQwQA8UrYpAYLIaIoWKYeFUMF6+JEeJ1kSpGilHiDTFavCnGiLfEWDFOjBdviwliopgkJospYqpIE++IaeJdMV28J2aImWKWmC3SxRwxV7wv5on5YoH4QCwUi8RisUQsFctEhvhQZIrlIkt8JFaIj0W2WClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih/hE7BS7xG6xR+wV+8R+8ak4ID4TB8XnIkd88X+Zf+6/5PcCAQIkSNCgIQZiIBZiIQ7ioAAUgIJQECIQgXiIh0JQCApDYSgKRSEBEqAElAAEBAKCklASohCF0lAaEiERykJZcOAgCZKgAtwKFaEiVIJKUBkqQxWoClWhOlSHGlADakJNqA21oQ7UgXpQD+6Be+BeaAgNoRE0gsbQGJpAE2gKTaEZNIPm0BxaQAtoCS2hFbSCNtAG2kE7aA/toQN0gE7QCTpDZ+gCXSAZkqErdIVu0A26Q3foAT2gJ/SEXtAbesNL8BK8DC9Df6gjB8BAGAiDYBAMgaEwFF6F4fAavAavQyqMhFHwBrwBb8IYOAtjYRyMh/FQQ06ESTAZSE6FNEiDaTANpsN0mAEzYSbMhnSYA3NhLsyD+TAfPoCFsAgWwRJYAssgAzIgE5ZDFmTBCjgH2bASVsFqWANrYQ2shw2wHjbBZtgEW2ErbIft8Al8ArtgF+yBPbAP9sGn8Cl8Bp9BKuRADhyCQ3AYDsMROAK5kAtH4Sgcg2NwHI7DCTgBJ+EUnIZTcAbOwFk4B+fhPFyAC3ARXkj4uvm+MhtThbxMSy1jZIyMlbEyTsbJArKALCgLyoiMyHgZLwvJQrKwLCyLyqIyQSbIErKERImSZChLypIyKqOytCwtE2WiLCvLSiedTJJJsoKsICvKirKSvF1WlnfIKrKq7Oiqy+qyhuzkaspasrasLevIurKerC/rywaygWwoG8pGspFsLBvLJvJB2VQOgCHwsLzcmRZyJLSUo6CVbC3byLbyTXhctpdjoIPsKDvJJ+U4GAtdZHuXLJ+RXeUk6Cafk5PhedlDToWe8kXZS/aWfeRLsq/s4PrJ/nIGDJAD5WwYJAfLIXKonAd15eWO1ZOvy1Q5Uo6Sb8hl8KYcI9+SY+U4OV6+LSfIiXKSnCynyKkyTb4jp8l35XT5npwhZ8pZcrZMl3PkXPm+nCfnywXyA7lQLpKL5RK5VC6TGfJDmSmXyyz5kVwhP5bZcqVcJVfLNXKtXCfXyw1yo9wkN8stcqvcJrfLHfITuVPukrvlHrlX7pP75afygPxMHpSfyxz5hTwk/yQPyy/lEfmVzJVfy6PyG3lMfiuPy+/kCfm9PClPydPyB3lG/ijPynPyvPxJXpA/y4vyF3lJeikUKKmU0ipQMSqfilX5VZy6RhVQ16qC6joVUdereHWDKqRuVIVVEVVUFVMJqrgqoYxCZRWpUJVUpVRU3aRKq5tVoiqjyqpyyqnyKkndoiqoW1VFdZuqpG5XldUdqoqqqqqp6upOVUPdpWqqWqq2ulvVUXVVPVVf3aMaqHtVQ3WfaqTuV43VA6qJelA1VQ+pZuph1Vw9olqoR1VL9ZhqpVqrNqqtaqceV+3VE6qD6qg6qSdVZ/WU6qKeVsnqGdVVPau6qedUd/W86qFeUD3Vi6qX6q36qF/UJeVVP9VfpagBaqB6RQ1Sg9UQNVQNU6+q4eo1NUK9rlLVSDVKvaFGqzfVGPWWGqvGqfHqbTVBTVST1GQ1RU1VaeodNU29q6ar99QMNVPNUrNVupqjhvxWacHfkf/u38gf8eurb1c71Cdqp9qldqs9aq/ap/ar/eqAOqAOqoMqR+WoQ+qQOqwOqyPqiMpVueqoOqqOqWPquDquTqgT6qQ6pX5SP6gz6kd1Vp1T59RP6oK6oC7+9jMQGrTUSmsd6BidT8fq/DpOX6ML6Gt1QX2djujrdby+QRfSN+rCuoguqovpBF1cl9BGo7aadKhL6lI6qm/SpfXNOlGX0WV1Oe10eZ2kb/mn8/9ofe10O91et9cddAfdSXfSnXVn3UV30ck6WXfVXXU33U131911D91D99Q9dS/dS/fRfXRf3Vf30/10ik7RA/UrepAerIfooXqYflUP18P1CD1Cp+pUPUqP0qP1aD1Gj9Fj9Vg9Xo/XE/QEPUlP0lP0FJ2m0/Q0PU1P19P1DD1Dz9KzdLpO13P1XD1Pz9ML9AK9UC/Ui/VivVQv1Rk6Q2fqTJ2ls/QKvUJn65V6pV6tV+u1eq1er9frjXqj3qw36616q87WO/QOvVPv1Lv1br1X79X79X59QB/QB/VBnaNz9CF9SB/Wh/URfUTn6lx9VB/Vx/QxfVwf1yf0CX1Sn9Sn9Wl9Rp/RZ/VZfV6f1xf0BX1RX9SX9KXLl32BDGSgAx3EBDFBbBAbxAVxQYGgQFAwKBhEgkgQH8QHhYIbg8JBkaBoUCxICIoHJQITYGADCsKgZFAqiAY3BaWDm4PEoExQNigXuKB8kBTcElQIbg0qBrcFlYLbg8rBHUGVoGpQLage3BnUCO4Kaga1gtrB3UGdoG5QL6gf3BM0CO4NGgb3BY2C+4PGwQNBk+DBoGnwUNAseDhoHjwStAgeDVoGjwWtgtZBm6Bt0O5fWt/7s0WecP1Mf5NiBpiB5hUzyAw2Q8xQM8y8aoab18wI87pJNSPNKPOGGW3eNGPMW2asGWfGm7fNBDPRTDKTzRQz1aSZd8w0866Zbt4zM8xMM8vMNulmjplr3jfzzHyzwHxgFppFZrFZYpaaZSbDfGgyzXKTZT4yK8zHJtusNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdrPDfGJ2ml1mt9lj9pp9Zr/51Bwwn5mD5nOTY74wh8yfzGHzpTlivjK55mtz1HxjjplvzXHznTlhvjfKnDKnzQ/mjPnRnDXnzHnzk7lgfjYXzS/mkvGXL+4vv72jRo0xGIOxGItxGIcFsAAWxIIYwQjGYzwWwkJYGAtjUSyKCZiAJbAEXkZIWBJLYhSjWBpLYyImYlksiw4dJmESVsAKWBErYiWshJWxMlbBKlgNq+GdeCfehXdhLayFd+PdWBfrYn2sjw2wATbEhtgIG2FjbIxNsAk2xabYDJthc2yOLbAFtsSW2ApbYRtsg+2wHbbH9tgBO2An7ISdsTN2wS6YjMnYFbtiN+yG3bE79sAe2BN7Yi/shX2wD/bFvtgP+2EKpuBAHIiDcBAOwSE4DIfhcByOI3AEpmIqjsJROBpH4xgcg2NxHI7Ht3ECTsRJOBmn4FRMwzSchtNwOk7HGTgDZ+EsTMd0nItzcR7OwwW4ABfiQlyMi3EpLsUMzMBMzMQszMIVuAKzMRtX4Spcg2twHa7DDbgBN+Em3IJbcBtuwx24A3fiTtyNu3Ev7sX9uB8P4AE8iAcxB3PwEB7Cw3gYj+ARzMVcPIpH8Rgew+N4HE/gCTyJJ/E0nsYzeAbP4lk8j+fxAv6MF/EXvIQeY60UcfYaW8Beawva62yszW//Mi5qi9kEW9yWsMYWtkX+KkZrbaItY8vactbZ8jbJ3vK7uIqtaqvZ6vZOW8PeZWv+Lm5g77UN7X22kb3f1rf3/FXc2D5gm9hHbVP7mG1mW9vmtq1tYR+1Le1jtpVtbdvYtrazfcp2sU/bZPuM7Wqf/V2caZfbDXaj3WQ32wP2M3ve/mSP2W/tBfuz7Wf722H2VTvcvmZH2Ndtqh35u3i8fdtOsBPtJDvZTrFTfxfPsrNtup1j59r37Tw7/3dxhv3QLrRZdrFdYpfaZb/Gl9eUZT+yK+zHNtuutKvsarvGrrXr7Pr/XOtqu9Vus9vtfvup3Wl32d12j91r9/0aX97HQfu5zbFf2KP2G3vYfmmP2OM21379a3x5f8ftd/aE/d6etKfsafuDPWN/tGftuV/3f3nvP9hf7CXrrSAgSYo0BRRD+SiW8lPcnx8XCEHXUYSup3i6gQrRjVSYilBRKkYJVJxKkCEkS0QhlaRSFKWbqDTdTIlUhspSOXJUnpLoFqpAt1JFuo0q0e1Ume6gKlSVqlF1upNq0F1Uk2pRbbqb6lBdqkf16R5qQPdSQ7qPGtH91JgeoCb0IDWlh6gZPUzN6RFqQY9SS3qMWlFrakNtqR09Tu3pCepAHakTPUmd6SnqQk9TMj1DXelZ6kbPUXd6nnrQC9STXqRe1Jv60EvUl16mftSfUmgADaRXaBANpiE0lIbRqzScXqMR9Dql0kgaRW/QaHqTxtBbNJbG0Xh6mybQRJpEk2kKTaU0eoem0bs0nd6jGTSTZtFsSqc5NJfep3k0nxbQB7SQFtFiWkJLaRll0IeUScspiz6iFfQxZdNKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120Ce0k3bRbtpDe2kf7adP6QB9Rgfpc8qhL+gQ/YkO05d0hL6iXPqajtI3dIy+peP0HZ2g7+kknaLT9AOdoR/pLJ2j8/QTXaCf6SL9QpfIkwghlKEKdRiEMWG+MDbMH8aF14QFwmvDguF1YSS8PowPbwgLhTeGhcMiYdGwWJgQFg9LhCbE0IYUhmHJsFQYDW8KS4c3h4lhmbBsWC50YfkwKbwlrBDeGlYMbwsrhbeHlcM7wiph1fDR+6uHd4Y1wrvCmmGtsHZ4d1gnrBvWC+uH94QNwnvDhuF9YaPw/rBi+EDYJHwwbBo+FDYLHw6bh4+ELcJHw5bhY2GrsHXYJmwbtgsfD9uHT4Qdwo5hp/DJsHP4VNglfDpMDp8Ju4bP/uHxlHBAODB8JXwl9P4+tTS6LJoR/TCaGV0ezYp+FF0R/TiaHV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3RbdHvW+fj7hwEmnnHaBi3H5XKzL7+LcNa6Au9YVdNe5iLvexbsbXCF3oyvsiriirphLcMVdCWccOuvIha6kK+Wi7iZX2t3sEl0ZV9aVc86Vd0murWvn2rn27gnXwXV0ndyT7kn3lHvKPe2eds+4ru5Z180957q7510P94J7wb3oernero97yfV1L7t+rr9LcSluoBvoBrlBbogb4oa5YW64G+5GuBEu1aW6UW6UG+1GuzFujBvrxrrxbryb4Ca4SW6Sm+KmuDSX5qa5aW66m+5muBlulpvl0l26m+vmunlunlvgFriFiQvdYrfYLXVLXYbLcJku02W5LLfCrXDZLtutcqvcGrfGrXPr3Aa3wW1ym9wWt8Vtc9vcDrfD7XQ73W632+11e91+t98dcAfcQXfQ5bgcd8gdcofdYXfEfeVy3dfuqPvGHXPfuuPuO3fCfe9OulPutPvBnXE/urPunDvvfnIX3M/uovvFXXLepUXeiUyLvBuZHnkvMiMyMzIrMjuSHpkTmRt5PzIvMj+yIPJBZGFkUWRxZElkaWRZJCPyYSQzsjySFfkosiLycSQ7sjKyKrI6siayNuJ98Z2hL+lL+ai/yZf2N/tEX8aX9eW88+V9kr/FV/C3+or+Nl/J3+4r+zt8FV/VV/OP+Va+tW/j2/p2/nHf3j/hO/iOvpN/0nf2T/ku/mmf7J/xXf2zvpt/znf3z/se/gXf07/oe/nevo9/yff1L/t+vr9P8QP8QP+KH+QH+yF+qB/mX/XD/Wt+hH/dp/qRfpR/w4/2b/ox/i0/1o/z4/3bfoKf6Cf5yX6Kn+rT/Dt+mn/XT/fv+Rl+pp/lZ/t0P8fP9e/7eX6+X+A/8Av9Ir/YL/FL/TKf4T/0mX65z/If+RX+Y5/tV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrvf4T/xO/0uv9vv8Xv9Pr/ff+oP+M/8Qf+5z/Ff+EP+T/6w/9If8V/5XP+1P+q/8cf8t/64/86f8N/7k/6UP+1/8Gf8j/6sP+fP+5/8Bf+zv+h/8Zf4f9YYY4wxxv4u6g+OD/gb35O/jcsGCiGu3VUs97/W3FL4z/PBMqFzRAjxTP+eD//HqFMnJSXlt3OzlQhKLRFCRK7kx4gr8UrRSTwlkkVHUeFvrm+w7H2B/qB+9HYh4v4iJ1Zcia/Uv/W/qf/4k+MzK4fn4/+H+kuESCx1JSe/uBJfqV/xv6lfpP0frD//l2lCdPiLnALiSnylfpJ4Qjwrkv/qTMYYY4wxxhhj7M8Gy2rd/+j++fL9eYK+kpNPXIn/6P6cMcYYY4wxxhhjV9/zvfs8/XhycsfuPOEJT3jyn5Or/ZeJMcYYY4wx9q925aL/aq+EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5ffJzY1d4jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//5+Y8xA==") ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2090422, &(0x7f0000000380)={[{@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}], [{@smackfsroot={'smackfsroot', 0x3d, '/Bev/kvm\x00'}}, {@subj_user={'subj_user', 0x3d, 'k\\{'}}]}, 0x6, 0x529, &(0x7f0000000780)="$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") capset(&(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.478403988s ago: executing program 3 (id=1210): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x25, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 6.353971105s ago: executing program 3 (id=1211): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0x88801) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) syz_read_part_table(0x105f, &(0x7f0000002100)="$eJzsz81twkAQBeBnrzeWu/ApShOpIkoLaSN/ipRaONACR3qhCaMFc6AB4PB9l9Fo9j1pw109JZn7ZMlU2v67HduY1nPtvi4vX4arYKlJn8M4/33X5PV0/E/2P8nyOeSjjeRtKrVbE614Kdk9n9dW/L65zS8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LEdAwAA//+Oww6X") open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000080)={0x77359400}, 0x10) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000096000040"]) r8 = epoll_create1(0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c095ccb97309c8d5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c898a814261bdb9b44a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c540c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c47020000000000000000fff24f69a5ef05f5408ea197ed09a9510ee6063a29de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d000000000000000015b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014116f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da80575427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd"], &(0x7f0000000100)='GPL\x00'}, 0x90) connect$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x80}, 0xe) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f0000000080), 0x72a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000780)) 5.99988164s ago: executing program 1 (id=1214): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000008c0)={0x0, 0x4}, 0x8}, 0x90) 5.767581639s ago: executing program 0 (id=1216): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlockall(0x5) munlockall() 5.602607393s ago: executing program 1 (id=1217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x7c}}, 0x0) 5.317023779s ago: executing program 0 (id=1219): ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f0000000040)=""/159, 0x9f, 0x7, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001714", @ANYRES8], 0x38}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x33565348}}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xfffffc01, 0x2, 0x0, 0x82, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffc1}, 0x90) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000, 0xffffffe0}}, './file0\x00'}) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0xbf, 0xf8, 0x57, 0x20, 0x5ac, 0x254, 0xca76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x80, 0x2}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="50c3fcd8ce"]}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000dc0), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 5.308901657s ago: executing program 1 (id=1220): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.214800085s ago: executing program 3 (id=1222): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000000240)) 3.387493191s ago: executing program 3 (id=1225): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ad43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) sched_getattr(0x0, &(0x7f00000002c0)={0x38}, 0x38, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r8, &(0x7f00000002c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) 3.327878019s ago: executing program 2 (id=1226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000001000)='signal_generate\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) 3.284413653s ago: executing program 4 (id=1227): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x43, &(0x7f00000000c0)=ANY=[], 0x21, 0x1bb, &(0x7f0000000200)="$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") fsopen(&(0x7f0000000440)='cpuset\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x38ce822, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x1, 0x1cf, &(0x7f0000000780)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='thread_noise\x00', r0}, 0x10) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) socket(0x25, 0x1, 0xfff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) r9 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080), 0x12) 3.207092952s ago: executing program 2 (id=1228): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000008c0)={0x0, 0x4}, 0x8}, 0x90) 3.092628695s ago: executing program 2 (id=1229): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlockall(0x5) munlockall() 2.929181495s ago: executing program 2 (id=1230): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x17, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.756112057s ago: executing program 2 (id=1231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"/4166], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r2, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000880)) write$char_usb(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x2c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) 2.648978297s ago: executing program 2 (id=1232): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902"], 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2.295116574s ago: executing program 1 (id=1233): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@resuid}, {@acl}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000580)=""/45, 0x2d) getdents64(r0, 0x0, 0x480a) 2.05906302s ago: executing program 0 (id=1234): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0) 728.358544ms ago: executing program 4 (id=1235): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000000240)) 590.909462ms ago: executing program 0 (id=1236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x78) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x5b) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r6, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) accept4$packet(r7, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000001c0)) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 456.256318ms ago: executing program 1 (id=1237): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x6) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x3, &(0x7f0000000100)={0x0, "fd5a44512b7e1b3c20ec2a3ba53b31dd77000000000400"}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc010905"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "759f101b"}, @main=@item_4={0x3, 0x0, 0x9, "6ba1aff6"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote, 0x200}, {@private}]}]}}}}}}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 89.776599ms ago: executing program 0 (id=1238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000001000)='signal_generate\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) 0s ago: executing program 0 (id=1239): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 261.304870][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.327315][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.365977][ T11] hsr_slave_0: left promiscuous mode [ 261.394910][ T11] hsr_slave_1: left promiscuous mode [ 261.420199][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.441841][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.457870][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.477308][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.565162][ T11] veth1_macvtap: left promiscuous mode [ 261.577451][ T11] veth0_macvtap: left promiscuous mode [ 261.592123][ T11] veth1_vlan: left promiscuous mode [ 261.607305][ T11] veth0_vlan: left promiscuous mode [ 261.630936][ T11] veth1_macvtap: left promiscuous mode [ 261.636487][ T11] veth0_macvtap: left promiscuous mode [ 261.658088][ T11] veth1_vlan: left promiscuous mode [ 261.667657][ T11] veth0_vlan: left promiscuous mode [ 261.933590][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.612244][ T11] team0 (unregistering): Port device team_slave_1 removed [ 262.669412][ T11] team0 (unregistering): Port device team_slave_0 removed [ 263.602407][ T7932] loop3: detected capacity change from 0 to 256 [ 264.337563][ T7942] 9pnet_fd: Insufficient options for proto=fd [ 264.475574][ T11] team0 (unregistering): Port device team_slave_1 removed [ 264.914143][ T11] team0 (unregistering): Port device team_slave_0 removed [ 264.927009][ T5242] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 264.965144][ T7944] netlink: 'syz.0.690': attribute type 11 has an invalid length. [ 265.044357][ T7947] netlink: 'syz.0.690': attribute type 11 has an invalid length. [ 265.176879][ T7951] loop3: detected capacity change from 0 to 512 [ 265.197856][ T7951] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 265.213918][ T7951] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 265.263641][ T7951] EXT4-fs (loop3): 1 truncate cleaned up [ 265.271667][ T7951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.854369][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.861746][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.888424][ T7789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.902852][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.910049][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.937043][ T7789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.078524][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.322770][ T7789] hsr_slave_0: entered promiscuous mode [ 266.336152][ T7789] hsr_slave_1: entered promiscuous mode [ 266.457763][ T5280] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 266.549392][ T7620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.575908][ T7620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.614938][ T7645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.650027][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.683974][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.711979][ T5280] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 266.724426][ T7620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.731438][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.753791][ T5280] usb 4-1: config 0 descriptor?? [ 266.766012][ T7620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.964673][ T7645] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.043555][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.050821][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.130625][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.137932][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.182037][ T5280] cypress 0003:04B4:DE61.0005: item fetching failed at offset 5/7 [ 267.194875][ T5280] cypress 0003:04B4:DE61.0005: parse failed [ 267.209969][ T7645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.220761][ T5280] cypress 0003:04B4:DE61.0005: probe with driver cypress failed with error -22 [ 267.233820][ T7645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.444816][ T4970] usb 4-1: USB disconnect, device number 12 [ 267.580639][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.683683][ T7620] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.787177][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.794314][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.829922][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.837208][ T4970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.864568][ T7789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.907085][ T7789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.929369][ T7789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.986807][ T7645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.028895][ T7789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.387349][ T7645] veth0_vlan: entered promiscuous mode [ 268.530470][ T7982] 9pnet_fd: Insufficient options for proto=fd [ 269.108050][ T5242] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 269.117399][ T5242] Bluetooth: hci4: Injecting HCI hardware error event [ 269.127797][ T54] Bluetooth: hci4: hardware error 0x00 [ 269.219719][ T7645] veth1_vlan: entered promiscuous mode [ 269.453235][ T7645] veth0_macvtap: entered promiscuous mode [ 269.510587][ T7645] veth1_macvtap: entered promiscuous mode [ 269.553172][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.594785][ T7789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.662655][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.685431][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.710181][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.753078][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.783839][ T7645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.825488][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.861744][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.898555][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.914916][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.962156][ T7645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.989234][ T7789] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.025817][ T7645] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.065465][ T7645] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.065507][ T7645] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.065533][ T7645] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.080218][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.080332][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.101302][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.101411][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.468330][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.468357][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.548271][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.548300][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.609774][ T8021] input: syz0 as /devices/virtual/input/input16 [ 270.610195][ T8021] input: failed to attach handler leds to device input16, error: -6 [ 270.704647][ T7620] veth0_vlan: entered promiscuous mode [ 270.743167][ T7620] veth1_vlan: entered promiscuous mode [ 270.844688][ T7620] veth0_macvtap: entered promiscuous mode [ 270.871118][ T7620] veth1_macvtap: entered promiscuous mode [ 270.916114][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.916143][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.916154][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.916167][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.916179][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.916192][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.924420][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.932465][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.932491][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.932503][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.932516][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.932528][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.932542][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.939517][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.964081][ T8036] tipc: Started in network mode [ 270.964124][ T8036] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 270.964177][ T8036] tipc: Enabling of bearer rejected, failed to enable media [ 270.973702][ T7620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.973744][ T7620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.973774][ T7620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.973804][ T7620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.135917][ T7789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.251103][ T54] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 271.517765][ T3046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.587166][ T3046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.819457][ T8049] loop3: detected capacity change from 0 to 8 [ 272.434094][ T2547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.464417][ T2547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.476245][ T7789] veth0_vlan: entered promiscuous mode [ 272.550062][ T7789] veth1_vlan: entered promiscuous mode [ 272.698308][ T7789] veth0_macvtap: entered promiscuous mode [ 272.750399][ T7789] veth1_macvtap: entered promiscuous mode [ 272.830530][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.041282][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.047777][ T8077] loop4: detected capacity change from 0 to 40427 [ 274.083284][ T8077] F2FS-fs (loop4): Invalid log sectors per block(3) log sectorsize(10) [ 274.091674][ T8077] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 274.117350][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.130433][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.160707][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.176222][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.186801][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.201985][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.215146][ T8077] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045589454292453) [ 274.235096][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.279570][ T8077] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 274.286663][ T8077] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 274.350590][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 274.358277][ T8087] loop3: detected capacity change from 0 to 1024 [ 274.380440][ T8087] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 274.411071][ T8087] JBD2: no valid journal superblock found [ 274.420652][ T8087] EXT4-fs (loop3): Could not load journal inode [ 274.441281][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.452256][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.465315][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.476732][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.487228][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.538865][ T8089] ptrace attach of "./syz-executor exec"[5239] was attempted by "./syz-executor exec"[8089] [ 274.541978][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.597070][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.619869][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.654738][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.683374][ T54] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 274.766844][ T8082] netlink: 'syz.3.716': attribute type 11 has an invalid length. [ 274.779351][ T7789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.821409][ T7789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.851000][ T7789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.863740][ T8087] netlink: 'syz.3.716': attribute type 11 has an invalid length. [ 274.884429][ T7789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.922441][ T8087] debugfs: Directory 'netdev:' with parent 'phy5' already present! [ 275.143130][ C0] eth0: bad gso: type: 1, size: 1408 [ 275.472714][ T8117] loop3: detected capacity change from 0 to 256 [ 275.480583][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 275.510290][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.514339][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 275.527142][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.556354][ T8117] exfat: Deprecated parameter 'namecase' [ 275.584148][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.596335][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 275.596883][ T8117] exfat: Deprecated parameter 'utf8' [ 275.612793][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.630599][ T8117] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 275.753012][ T8124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 276.502744][ T8136] 9pnet_fd: Insufficient options for proto=fd [ 277.742115][ T8150] loop4: detected capacity change from 0 to 32768 [ 277.890274][ T8176] loop3: detected capacity change from 0 to 512 [ 277.986706][ T8176] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 278.177686][ T8150] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 278.447872][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 278.533117][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 278.552325][ T8176] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 278.601978][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 278.655126][ T8150] XFS (loop4): Ending clean mount [ 278.709358][ T8150] XFS (loop4): Quotacheck needed: Please wait. [ 278.837287][ T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 278.846252][ T54] Bluetooth: hci2: Injecting HCI hardware error event [ 278.993779][ T8196] netlink: 176 bytes leftover after parsing attributes in process `syz.2.738'. [ 279.335676][ T54] Bluetooth: hci2: hardware error 0x00 [ 279.609507][ T8182] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 279.657733][ T8150] XFS (loop4): Quotacheck: Done. [ 280.007901][ T7620] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 281.655427][ T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 282.239595][ T8240] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 283.730295][ T8225] loop3: detected capacity change from 0 to 32768 [ 283.774358][ T8225] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 283.774358][ T8225] clean (size 2912): [ 283.774358][ T8225] flags: 0 [ 283.774358][ T8225] journal_seq: 8 [ 283.774358][ T8225] usage: type=inodes v=8 [ 283.774358][ T8225] usage: type=key_version v=0 [ 283.774358][ T8225] usage: type=reserved v=0 [ 283.774358][ T8225] usage: type=reserved v=0 [ 283.774358][ T8225] usage: type=reserved v=0 [ 283.774358][ T8225] usage: type=reserved v=0 [ 283.774358][ T8225] data_usage: btree: 1/1 [0]=2816 [ 283.774358][ T8225] data_usage: journal: 1/1 [0]=0 [ 283.774358][ T8225] data_usage: user: 1/1 [0]=32 [ 283.774358][ T8225] dev_usage: dev=0 [ 283.774358][ T8225] free: buckets=83 sectors=0 fragmented=0 [ 283.774358][ T8225] sb: buckets=25 sectors=6152 fragmented=248 [ 283.774358][ T8225] journal: buckets=8 sectors=2048 fragmented=0 [ 283.774358][ T8225] btree: buckets=11 sectors=2816 fragmented=0 [ 283.774358][ T8225] user: buckets=1 sectors=32 fragmented=224 [ 283.774358][ T8225] cached: buckets=0 sectors=0 fragmented=0 [ 283.774358][ T8225] parity: buckets=0 sectors=0 fragmented=0 [ 283.774358][ T8225] stripe: buckets=0 sectors=0 fragmented=0 [ 283.774358][ T8225] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 283.774358][ T8225] need_discard: buckets=0 sectors=0 fragmented=0 [ 283.774358][ T8225] clock: read=0 [ 283.774358][ T8225] data_usage: need_gc_gens: 0/5 [0 0 0 0 0]=1 [ 283.774358][ T8225] [ 283.978061][ T8225] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 284.085934][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 284.276770][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 284.293525][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 27424, setting to 1024 [ 284.311974][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 284.357867][ T8] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 284.375682][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.384381][ T8] usb 2-1: Product: syz [ 284.389057][ T8] usb 2-1: Manufacturer: syz [ 284.393787][ T8] usb 2-1: SerialNumber: syz [ 284.412268][ T8] usb 2-1: config 0 descriptor?? [ 284.419262][ T8271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.430527][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.790368][ T940] usb 2-1: USB disconnect, device number 6 [ 285.576157][ T8288] 9pnet_fd: p9_fd_create_unix (8288): problem connecting socket: ./file0: -111 [ 286.095690][ T8294] loop3: detected capacity change from 0 to 256 [ 287.630135][ C0] DEBUG: holding rtnl_mutex for 519 jiffies. [ 287.636157][ C0] task:syz.4.744 state:R running task stack:25784 pid:8247 tgid:8239 ppid:7620 flags:0x0000400e [ 287.647982][ C0] Call Trace: [ 287.651295][ C0] [ 287.654166][ C0] sched_show_task+0x506/0x6d0 [ 287.659021][ C0] ? report_rtnl_holders+0x2a5/0x400 [ 287.664341][ C0] ? __pfx__printk+0x10/0x10 [ 287.669022][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 287.674345][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.680320][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 287.686678][ C0] report_rtnl_holders+0x327/0x400 [ 287.691869][ C0] call_timer_fn+0x18e/0x650 [ 287.696517][ C0] ? call_timer_fn+0xc0/0x650 [ 287.701253][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 287.706941][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 287.712216][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 287.717950][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 287.723613][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 287.729380][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.734613][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 287.739886][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 287.745711][ C0] __run_timer_base+0x66a/0x8e0 [ 287.750660][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 287.756107][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.762557][ C0] run_timer_softirq+0xb7/0x170 [ 287.767493][ C0] handle_softirqs+0x2c4/0x970 [ 287.772289][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 287.777071][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 287.782442][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 287.787718][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 287.792340][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 287.797615][ C0] irq_exit_rcu+0x9/0x30 [ 287.801902][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 287.807649][ C0] [ 287.810591][ C0] [ 287.813519][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.819579][ C0] RIP: 0010:preempt_schedule_irq+0xf6/0x1c0 [ 287.825512][ C0] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 8b 00 00 00 bf 01 00 00 00 e8 c5 e8 a0 f5 e8 40 86 d9 f5 fb bf 01 00 00 00 55 ad ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 25 5a 39 f6 48 [ 287.845203][ C0] RSP: 0018:ffffc90002fb76c0 EFLAGS: 00000282 [ 287.851363][ C0] RAX: bf1d8dad7a7d8d00 RBX: 1ffff920005f6ee0 RCX: ffffffff817022aa [ 287.859580][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ad540 RDI: 0000000000000001 [ 287.867628][ C0] RBP: ffffc90002fb7770 R08: ffffffff9373780f R09: 1ffffffff26e6f01 [ 287.875631][ C0] R10: dffffc0000000000 R11: fffffbfff26e6f02 R12: 1ffff920005f6ed8 [ 287.883751][ C0] R13: 1ffff920005f6edc R14: ffffc90002fb76e0 R15: dffffc0000000000 [ 287.891793][ C0] ? mark_lock+0x9a/0x360 [ 287.896138][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 287.902175][ C0] irqentry_exit+0x5e/0x90 [ 287.906647][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 287.912346][ C0] RIP: 0010:synchronize_rcu+0x0/0x360 [ 287.917862][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 c5 37 81 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 287.937576][ C0] RSP: 0018:ffffc90002fb7838 EFLAGS: 00000206 [ 287.943681][ C0] RAX: dffffc0000000000 RBX: 1ffff920005f6f10 RCX: ffffffff94f2f903 [ 287.951805][ C0] RDX: 0000000000000001 RSI: ffffffff8c0ae220 RDI: ffffffff8c607c40 [ 287.959859][ C0] RBP: ffffc90002fb7918 R08: ffffffff94f1d15f R09: 1ffffffff29e3a2b [ 287.967936][ C0] R10: dffffc0000000000 R11: fffffbfff29e3a2c R12: ffffffff94f1aeb8 [ 287.975934][ C0] R13: 1ffff920005f6f0c R14: 0000000000000a03 R15: ffffc90002fb7880 [ 287.984441][ C0] lockdep_unregister_key+0x4b7/0x540 [ 287.989978][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 287.995876][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 288.001220][ C0] ? __qdisc_destroy+0x150/0x410 [ 288.006342][ C0] ? kfree+0x149/0x360 [ 288.011041][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 288.016715][ C0] __qdisc_destroy+0x165/0x410 [ 288.021554][ C0] dev_shutdown+0x9b/0x450 [ 288.026257][ C0] unregister_netdevice_many_notify+0x97b/0x1c40 [ 288.033090][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 288.040359][ C0] ? __asan_memset+0x23/0x50 [ 288.045071][ C0] ? skb_queue_purge_reason+0x2de/0x500 [ 288.050713][ C0] ? __asan_memset+0x23/0x50 [ 288.055484][ C0] ? skb_queue_purge_reason+0x2de/0x500 [ 288.061309][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 288.066534][ C0] unregister_netdevice_queue+0x303/0x370 [ 288.072313][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 288.078735][ C0] __tun_detach+0x6b9/0x1600 [ 288.083704][ C0] tun_chr_close+0x108/0x1b0 [ 288.088360][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 288.093496][ C0] __fput+0x24a/0x8a0 [ 288.097558][ C0] task_work_run+0x24f/0x310 [ 288.102271][ C0] ? __pfx_task_work_run+0x10/0x10 [ 288.107558][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 288.113332][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 288.119052][ C0] do_syscall_64+0x100/0x230 [ 288.123671][ C0] ? clear_bhb_loop+0x35/0x90 [ 288.128413][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.134407][ C0] RIP: 0033:0x7fb913577299 [ 288.139261][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.159082][ C0] RSP: 002b:00007fb914292048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 288.168151][ C0] RAX: 0000000000000000 RBX: 00007fb913706058 RCX: 00007fb913577299 [ 288.176588][ C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 288.184638][ C0] RBP: 00007fb9135e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 288.192813][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.201062][ C0] R13: 000000000000006e R14: 00007fb913706058 R15: 00007fff0e4e2e58 [ 288.209219][ C0] [ 288.212528][ C0] [ 288.212528][ C0] Showing all locks held in the system: [ 288.220383][ C0] 3 locks held by kworker/u8:3/52: [ 288.225612][ C0] #0: ffff8880b933ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 288.235626][ C0] #1: ffff8880b9328948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a7/0x770 [ 288.247139][ C0] #2: ffff8880b932a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 288.256580][ C0] 2 locks held by getty/4984: [ 288.261332][ C0] #0: ffff88802fd200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 288.271251][ C0] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 288.281420][ C0] 3 locks held by syz.4.744/8247: [ 288.286456][ C0] #0: ffffffff8fc82ac8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 288.295484][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 288.305678][ C0] #2: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 288.315596][ C0] 1 lock held by syz.0.757/8258: [ 288.320605][ C0] #0: ffffffff8fc82ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 288.330121][ C0] 1 lock held by syz.2.758/8265: [ 288.335068][ C0] #0: ffffffff8fc82ac8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 288.344435][ C0] 1 lock held by syz.2.758/8269: [ 288.349449][ C0] #0: ffffffff8fc82ac8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 288.359042][ C0] 1 lock held by syz.2.758/8273: [ 288.364596][ C0] #0: ffffffff8fc82ac8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x41c/0x2400 [ 288.373972][ C0] 1 lock held by syz.1.762/8287: [ 288.378984][ C0] #0: ffffffff8fc82ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 288.388499][ C0] 1 lock held by syz.3.765/8294: [ 288.393448][ C0] #0: ffffffff8fc82ac8 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 288.403081][ C0] [ 288.405414][ C0] ============================================= [ 288.405414][ C0] [ 289.145033][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 289.145053][ T29] audit: type=1326 audit(1721982234.888:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470ab77299 code=0x7ffc0000 [ 289.407451][ T29] audit: type=1326 audit(1721982234.928:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470ab77299 code=0x7ffc0000 [ 290.789248][ T29] audit: type=1326 audit(1721982234.938:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f470ab77299 code=0x7ffc0000 [ 290.911431][ T29] audit: type=1326 audit(1721982234.938:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470ab77299 code=0x7ffc0000 [ 291.002509][ T29] audit: type=1326 audit(1721982234.938:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470ab77299 code=0x7ffc0000 [ 291.054467][ T29] audit: type=1326 audit(1721982234.938:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f470ab77299 code=0x7ffc0000 [ 291.113313][ T29] audit: type=1326 audit(1721982234.938:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470ab77299 code=0x7ffc0000 [ 291.162660][ T29] audit: type=1326 audit(1721982234.958:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f470ab77299 code=0x7ffc0000 [ 291.195535][ T8333] loop3: detected capacity change from 0 to 512 [ 291.204016][ T8333] EXT4-fs: Ignoring removed nobh option [ 291.217450][ T8333] EXT4-fs (loop3): can't mount with both data=journal and dax [ 291.253160][ T29] audit: type=1326 audit(1721982234.958:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470ab77299 code=0x7ffc0000 [ 291.260404][ T5280] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 291.383199][ T29] audit: type=1326 audit(1721982234.958:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f470ab77299 code=0x7ffc0000 [ 291.497271][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 291.504603][ T5280] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 291.527231][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.574212][ T8329] pimreg: entered allmulticast mode [ 291.582734][ T5280] usb 5-1: config 0 descriptor?? [ 291.599728][ T5280] usb 5-1: unknown interface protocol 0x3f, assuming v1 [ 291.611931][ T8344] loop2: detected capacity change from 0 to 512 [ 291.631204][ T5280] usb 5-1: cannot find UAC_HEADER [ 291.638677][ T8329] pimreg: left allmulticast mode [ 291.720402][ T5280] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 291.743883][ T8344] EXT4-fs error (device loop2): __ext4_fill_super:5435: inode #2: comm syz.2.784: iget: special inode unallocated [ 291.776560][ T8344] EXT4-fs (loop2): get root inode failed [ 291.782527][ T8344] EXT4-fs (loop2): mount failed [ 291.840126][ T8333] loop3: detected capacity change from 0 to 1024 [ 292.051152][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.858320][ T8333] hfsplus: invalid btree flag [ 292.878024][ T8333] hfsplus: failed to load attributes file [ 294.090439][ T8381] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 294.122586][ T8379] loop3: detected capacity change from 0 to 1024 [ 294.349251][ T8379] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.795' sets config #0 [ 294.461392][ T8] usb 5-1: USB disconnect, device number 8 [ 294.582574][ T8361] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 296.265739][ T8417] loop3: detected capacity change from 0 to 128 [ 296.922610][ T8418] 9pnet_fd: Insufficient options for proto=fd [ 297.217429][ T8417] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 297.267791][ T8415] syz.3.809: attempt to access beyond end of device [ 297.267791][ T8415] loop3: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 297.629020][ T5242] Bluetooth: hci5: sending frame failed (-49) [ 297.640700][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 297.736447][ T8425] sp0: Synchronizing with TNC [ 297.929686][ T8430] loop2: detected capacity change from 0 to 1024 [ 298.066587][ T8430] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.814' sets config #0 [ 298.488869][ T8451] program syz.4.822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.647296][ T8450] loop3: detected capacity change from 0 to 4096 [ 298.692221][ T8450] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 298.701847][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 298.866999][ T8450] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 298.895907][ T8450] ntfs3: loop3: Failed to load $Extend (-22). [ 298.908147][ T8450] ntfs3: loop3: Failed to initialize $Extend. [ 298.991807][ T8467] loop2: detected capacity change from 0 to 256 [ 299.025842][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 299.025864][ T29] audit: type=1800 audit(1721982244.768:192): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.823" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 299.070132][ T8465] loop4: detected capacity change from 0 to 1024 [ 299.102273][ T29] audit: type=1800 audit(1721982244.798:193): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.823" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 299.282330][ T8465] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.830' sets config #0 [ 299.426306][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 299.472154][ T5242] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 299.521181][ T8475] loop2: detected capacity change from 0 to 512 [ 299.831169][ T8475] EXT4-fs: Ignoring removed oldalloc option [ 300.555939][ T8475] EXT4-fs (loop2): orphan cleanup on readonly fs [ 300.577182][ T8482] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 300.642807][ T8475] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.833: error while reading EA inode 32 err=-116 [ 300.643813][ T8489] loop3: detected capacity change from 0 to 1024 [ 300.717948][ T8489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.731880][ T8475] EXT4-fs (loop2): Remounting filesystem read-only [ 300.767854][ T8475] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 300.797006][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 300.816497][ T8475] EXT4-fs warning (device loop2): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 300.840044][ T8475] EXT4-fs (loop2): 1 orphan inode deleted [ 300.853571][ T29] audit: type=1326 audit(1721982246.598:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb913577299 code=0x7ffc0000 [ 300.858147][ T8475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 300.875933][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.892041][ T29] audit: type=1326 audit(1721982246.598:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb913577299 code=0x7ffc0000 [ 300.930415][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.069590][ T29] audit: type=1326 audit(1721982246.638:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb913577299 code=0x7ffc0000 [ 301.175373][ T29] audit: type=1326 audit(1721982246.638:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb913577299 code=0x7ffc0000 [ 301.207575][ T29] audit: type=1326 audit(1721982246.638:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb913577299 code=0x7ffc0000 [ 301.939655][ T5242] Bluetooth: hci5: command 0x1003 tx timeout [ 301.972140][ T8504] loop4: detected capacity change from 0 to 256 [ 301.986697][ T29] audit: type=1326 audit(1721982246.638:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fb913577299 code=0x7ffc0000 [ 302.065494][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 302.176587][ T29] audit: type=1326 audit(1721982246.638:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb913577299 code=0x7ffc0000 [ 302.212837][ T7789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.222365][ T29] audit: type=1326 audit(1721982246.668:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fb913577299 code=0x7ffc0000 [ 303.946678][ T8534] loop4: detected capacity change from 0 to 128 [ 304.110092][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.851'. [ 304.777377][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 305.101643][ T5925] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 305.120321][ T8545] loop2: detected capacity change from 0 to 64 [ 305.241025][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 305.263892][ T5242] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.292403][ T8544] loop3: detected capacity change from 0 to 512 [ 305.341598][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.355084][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.370504][ T5925] usb 5-1: New USB device found, idVendor=056a, idProduct=012c, bcdDevice= 0.00 [ 305.398207][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.415166][ T8544] EXT4-fs: Ignoring removed oldalloc option [ 305.418109][ T5925] usb 5-1: config 0 descriptor?? [ 305.484489][ T8544] EXT4-fs (loop3): orphan cleanup on readonly fs [ 305.518346][ T8544] EXT4-fs error (device loop3): ext4_xattr_inode_iget:445: comm syz.3.857: error while reading EA inode 32 err=-116 [ 305.600743][ T8544] EXT4-fs (loop3): Remounting filesystem read-only [ 305.631253][ T8544] EXT4-fs warning (device loop3): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 305.693160][ T8544] EXT4-fs (loop3): 1 orphan inode deleted [ 305.708409][ T8544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 306.515184][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 306.515209][ T29] audit: type=1804 audit(1721982252.248:206): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.855" name="/newroot/18/bus/bus" dev="loop4" ino=1048639 res=1 errno=0 [ 306.572609][ T5925] wacom 0003:056A:012C.0006: hidraw0: USB HID v0.00 Device [HID 056a:012c] on usb-dummy_hcd.4-1/input0 [ 306.606692][ T8534] syz.4.855: attempt to access beyond end of device [ 306.606692][ T8534] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 306.608295][ T8545] loop2: detected capacity change from 64 to 0 [ 306.620490][ T29] audit: type=1800 audit(1721982252.298:207): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.855" name="bus" dev="loop4" ino=1048639 res=0 errno=0 [ 306.663037][ T8534] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 306.703086][ T8534] syz.4.855: attempt to access beyond end of device [ 306.703086][ T8534] loop4: rw=2049, sector=129, nr_sectors = 4 limit=128 [ 306.786674][ T7789] syz-executor: attempt to access beyond end of device [ 306.786674][ T7789] loop2: rw=2049, sector=10, nr_sectors = 2 limit=0 [ 306.964422][ T943] usb 5-1: USB disconnect, device number 9 [ 307.237756][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 307.700830][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.993310][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 308.065388][ T8567] loop3: detected capacity change from 0 to 2048 [ 308.082850][ T8567] EXT4-fs: Ignoring removed nobh option [ 308.098728][ T8567] ext4: Unknown parameter 'smackfshat' [ 308.218891][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.402033][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.421371][ T5281] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 308.564113][ T8585] loop3: detected capacity change from 0 to 1024 [ 308.640903][ T5281] usb 2-1: No LPM exit latency info found, disabling LPM. [ 308.713398][ T5281] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 308.761692][ T5281] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.031766][ T8587] hfsplus: catalog searching failed [ 309.270963][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.553611][ T5281] usb 2-1: config 1 interface 0 has no altsetting 0 [ 309.572169][ T5281] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 309.581740][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.589984][ T5281] usb 2-1: Product: ߬ [ 309.595157][ T5281] usb 2-1: SerialNumber: አ[ 309.622098][ T8573] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.655534][ T8585] netlink: 84 bytes leftover after parsing attributes in process `syz.3.873'. [ 309.861242][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.067756][ T5281] usb 2-1: USB disconnect, device number 7 [ 310.359962][ T8608] 9pnet_fd: Insufficient options for proto=fd [ 310.378194][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.449873][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.893769][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.911542][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.923490][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 311.931918][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.069802][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 313.328486][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.883'. [ 313.414168][ T12] bridge_slave_1: left allmulticast mode [ 313.445302][ T12] bridge_slave_1: left promiscuous mode [ 313.469031][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.510986][ T12] bridge_slave_0: left allmulticast mode [ 313.516699][ T12] bridge_slave_0: left promiscuous mode [ 313.546365][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.772638][ T29] audit: type=1804 audit(1721982259.518:208): pid=8640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.885" name="/newroot/34/bus/bus" dev="overlay" ino=204 res=1 errno=0 [ 314.037756][ T5242] Bluetooth: hci3: command tx timeout [ 315.204550][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.223106][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.234375][ T12] bond0 (unregistering): Released all slaves [ 315.250329][ T8619] pimreg: entered allmulticast mode [ 315.263143][ T8630] pimreg: left allmulticast mode [ 315.395725][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 315.519788][ C0] eth0: bad gso: type: 1, size: 1408 [ 315.551665][ T8602] chnl_net:caif_netlink_parms(): no params data found [ 315.677262][ T5280] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 315.889133][ T5280] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 315.910329][ T5280] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 315.934648][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 41090, setting to 1024 [ 315.951198][ T5280] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 315.970896][ T5280] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 316.002658][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 316.028493][ T5280] usb 5-1: SerialNumber: syz [ 316.058148][ T5280] usb 5-1: config 0 descriptor?? [ 316.105271][ T8657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 316.146392][ T8657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 316.189162][ T5242] Bluetooth: hci3: command tx timeout [ 316.229641][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 316.250171][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 316.291815][ T12] hsr_slave_0: left promiscuous mode [ 316.307392][ T8686] loop3: detected capacity change from 0 to 64 [ 316.314432][ T5280] port100 5-1:0.0: NFC: Could not get supported command types [ 316.325931][ T12] hsr_slave_1: left promiscuous mode [ 316.364497][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.401158][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.427971][ T5280] usb 5-1: USB disconnect, device number 10 [ 316.444405][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.478044][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.564969][ T12] veth1_macvtap: left promiscuous mode [ 316.575522][ T8686] loop3: detected capacity change from 64 to 0 [ 316.582135][ T12] veth0_macvtap: left promiscuous mode [ 316.590730][ T8693] syz.3.896: attempt to access beyond end of device [ 316.590730][ T8693] loop3: rw=2049, sector=10, nr_sectors = 2 limit=0 [ 316.607424][ T12] veth1_vlan: left promiscuous mode [ 316.617275][ T12] veth0_vlan: left promiscuous mode [ 316.685274][ T5235] syz-executor: attempt to access beyond end of device [ 316.685274][ T5235] loop3: rw=0, sector=8, nr_sectors = 2 limit=0 [ 316.701156][ T5235] Unable to read inode block [ 316.706803][ T5235] syz-executor: attempt to access beyond end of device [ 316.706803][ T5235] loop3: rw=0, sector=8, nr_sectors = 2 limit=0 [ 316.726690][ T5235] Unable to read inode block [ 317.112524][ T8699] loop4: detected capacity change from 0 to 136 [ 317.569580][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.576147][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.812014][ T12] team0 (unregistering): Port device team_slave_1 removed [ 317.955837][ T12] team0 (unregistering): Port device team_slave_0 removed [ 317.974176][ T7620] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 318.021817][ T7620] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 318.277427][ T5242] Bluetooth: hci3: command tx timeout [ 318.853200][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.863604][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.872823][ T8602] bridge_slave_0: entered allmulticast mode [ 318.883179][ T8602] bridge_slave_0: entered promiscuous mode [ 318.959086][ T8709] pimreg: entered allmulticast mode [ 319.000120][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.008139][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.015410][ T8602] bridge_slave_1: entered allmulticast mode [ 319.038631][ T8602] bridge_slave_1: entered promiscuous mode [ 319.048579][ T8710] pimreg: left allmulticast mode [ 319.149250][ T8715] netlink: 84 bytes leftover after parsing attributes in process `syz.0.904'. [ 319.161350][ T1107] kworker/u8:5: attempt to access beyond end of device [ 319.161350][ T1107] loop3: rw=0, sector=8, nr_sectors = 2 limit=0 [ 319.197523][ T1107] Unable to read inode block [ 319.202242][ T1107] kworker/u8:5: attempt to access beyond end of device [ 319.202242][ T1107] loop3: rw=0, sector=8, nr_sectors = 2 limit=0 [ 319.225283][ T1107] Unable to read inode block [ 319.260483][ T8602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.324609][ T8602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.834790][ T8602] team0: Port device team_slave_0 added [ 320.135359][ T8602] team0: Port device team_slave_1 added [ 320.403978][ T5242] Bluetooth: hci3: command tx timeout [ 320.598801][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.605829][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.707282][ T8602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.752744][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.787210][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.861236][ T8602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.897928][ T8733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.070716][ T8602] hsr_slave_0: entered promiscuous mode [ 321.097004][ T8602] hsr_slave_1: entered promiscuous mode [ 321.168949][ T8744] netpci0: tun_chr_ioctl cmd 1074025677 [ 321.182654][ T8744] netpci0: linktype set to 805 [ 321.301661][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.320512][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.329928][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.331299][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.360829][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.375709][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.383821][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.388978][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.398849][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.403309][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.439814][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.458523][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 321.465995][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.576767][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.674505][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.855014][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.162502][ T54] Bluetooth: Wrong link type (-71) [ 322.865398][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.042678][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.078483][ T8746] chnl_net:caif_netlink_parms(): no params data found [ 323.208705][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.372876][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.543943][ T8748] chnl_net:caif_netlink_parms(): no params data found [ 323.551523][ T54] Bluetooth: hci1: command tx timeout [ 323.557332][ T5240] Bluetooth: hci2: command tx timeout [ 323.587759][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.600267][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.609968][ T8746] bridge_slave_0: entered allmulticast mode [ 323.616881][ T8746] bridge_slave_0: entered promiscuous mode [ 323.632813][ T8602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.668679][ T8746] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.691243][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.710282][ T8746] bridge_slave_1: entered allmulticast mode [ 323.720490][ T8746] bridge_slave_1: entered promiscuous mode [ 323.738300][ T8602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.761383][ T8602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 323.849614][ T8602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 323.970302][ T8792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.997605][ T8746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.020179][ T8746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.071991][ T12] bridge_slave_1: left allmulticast mode [ 324.095746][ T12] bridge_slave_1: left promiscuous mode [ 324.102147][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.122062][ T12] bridge_slave_0: left allmulticast mode [ 324.128624][ T12] bridge_slave_0: left promiscuous mode [ 324.134710][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.147978][ T12] team0: left allmulticast mode [ 324.152885][ T12] team_slave_0: left allmulticast mode [ 324.159890][ T12] team_slave_1: left allmulticast mode [ 324.165682][ T12] bridge0: port 4(team0) entered disabled state [ 324.182259][ T12] erspan0: left allmulticast mode [ 324.190127][ T12] erspan0: left promiscuous mode [ 324.201856][ T12] bridge0: port 3(erspan0) entered disabled state [ 324.210578][ T12] bridge_slave_1: left allmulticast mode [ 324.216461][ T12] bridge_slave_1: left promiscuous mode [ 324.223283][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.232962][ T12] bridge_slave_0: left allmulticast mode [ 324.239427][ T12] bridge_slave_0: left promiscuous mode [ 324.245271][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.264444][ T8796] xt_socket: unknown flags 0x8 [ 325.145715][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.163270][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.175386][ T12] bond0 (unregistering): Released all slaves [ 325.189402][ T12] bond1 (unregistering): Released all slaves [ 325.416954][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.433965][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.444515][ T12] bond0 (unregistering): Released all slaves [ 325.536841][ T8746] team0: Port device team_slave_0 added [ 325.629784][ T54] Bluetooth: hci1: command tx timeout [ 325.637318][ T54] Bluetooth: hci2: command tx timeout [ 325.828039][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.837450][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.845031][ T8748] bridge_slave_0: entered allmulticast mode [ 325.880755][ T12] IPVS: stopping master sync thread 8482 ... [ 325.892556][ T8748] bridge_slave_0: entered promiscuous mode [ 325.923532][ T8746] team0: Port device team_slave_1 added [ 325.933518][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.949159][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.959036][ T8748] bridge_slave_1: entered allmulticast mode [ 325.970262][ T8748] bridge_slave_1: entered promiscuous mode [ 326.298215][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.305300][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.367202][ T8746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.432312][ T8748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.494243][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.508110][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.567223][ T8746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.600171][ T8748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.735100][ T8748] team0: Port device team_slave_0 added [ 326.813122][ T8746] hsr_slave_0: entered promiscuous mode [ 326.835868][ T8746] hsr_slave_1: entered promiscuous mode [ 326.850911][ T8746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.864587][ T8746] Cannot create hsr debugfs directory [ 326.887782][ T8748] team0: Port device team_slave_1 added [ 327.043594][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.067696][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.118946][ T8748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.571495][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.693075][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.752191][ T5240] Bluetooth: hci2: command tx timeout [ 327.761293][ T5240] Bluetooth: hci1: command tx timeout [ 327.875078][ T8748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.987866][ T12] hsr_slave_0: left promiscuous mode [ 328.046486][ T12] hsr_slave_1: left promiscuous mode [ 328.066732][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.097955][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.112032][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.135233][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.158537][ T12] hsr_slave_0: left promiscuous mode [ 328.175405][ T12] hsr_slave_1: left promiscuous mode [ 328.183365][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.192232][ T5242] Bluetooth: hci0: command 0x0406 tx timeout [ 328.207820][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.236046][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.259909][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.429340][ T12] veth1_macvtap: left promiscuous mode [ 328.449700][ T12] veth0_macvtap: left promiscuous mode [ 328.460698][ T12] veth1_vlan: left promiscuous mode [ 328.466164][ T12] veth0_vlan: left promiscuous mode [ 328.475868][ T12] veth1_macvtap: left promiscuous mode [ 328.484449][ T12] veth0_macvtap: left promiscuous mode [ 328.491291][ T12] veth1_vlan: left promiscuous mode [ 328.497651][ T12] veth0_vlan: left promiscuous mode [ 329.096130][ T8849] xt_socket: unknown flags 0x8 [ 329.371568][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 329.476995][ T12] team0 (unregistering): Port device team_slave_1 removed [ 329.543299][ T12] team0 (unregistering): Port device team_slave_0 removed [ 329.577460][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 329.590489][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.601207][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 329.610905][ T8] usb 2-1: config 1 has no interface number 1 [ 329.617435][ T8] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.628854][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 329.642424][ T8] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x69, changing to 0x9 [ 329.661802][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 329.677976][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.695019][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.703714][ T8] usb 2-1: Product: syz [ 329.708322][ T8] usb 2-1: Manufacturer: syz [ 329.713104][ T8] usb 2-1: SerialNumber: syz [ 329.798922][ T54] Bluetooth: hci1: command tx timeout [ 329.798953][ T5242] Bluetooth: hci2: command tx timeout [ 331.055452][ T12] team_slave_1 (unregistering): left promiscuous mode [ 331.074758][ T12] team0 (unregistering): Port device team_slave_1 removed [ 331.138447][ T12] team_slave_0 (unregistering): left promiscuous mode [ 331.153830][ T12] team0 (unregistering): Port device team_slave_0 removed [ 332.046887][ C0] eth0: bad gso: type: 1, size: 1408 [ 332.119933][ T8748] hsr_slave_0: entered promiscuous mode [ 332.133471][ T8748] hsr_slave_1: entered promiscuous mode [ 332.153272][ T8748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.165227][ T8748] Cannot create hsr debugfs directory [ 332.517854][ T8602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.580964][ T8] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 332.834824][ T8] usb 2-1: USB disconnect, device number 8 [ 333.245875][ T8602] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.288627][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.295916][ T5925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.315506][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.322990][ T5925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.421488][ T5485] udevd[5485]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.896810][ T8746] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 333.943456][ T8746] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.974325][ T8746] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.035848][ T8602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.044128][ T8746] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 334.262825][ T8602] veth0_vlan: entered promiscuous mode [ 334.306995][ T8602] veth1_vlan: entered promiscuous mode [ 334.480598][ T8748] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.504254][ T8748] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.544911][ T8602] veth0_macvtap: entered promiscuous mode [ 334.561864][ T8746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.590749][ T8748] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.611138][ T8602] veth1_macvtap: entered promiscuous mode [ 334.622678][ T8748] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.722989][ T8746] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.769965][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.790913][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.811511][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.823326][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.836818][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.876407][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.883969][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.943274][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.950717][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.971669][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.991999][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.005999][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.018442][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.033931][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.081149][ T8602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.103687][ T8602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.122974][ T8602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.133787][ T8602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.291722][ T8748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.424238][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.498116][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.514232][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.521537][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.563703][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.643320][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.651300][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.807591][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.848997][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.976864][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.059886][ C0] eth0: bad gso: type: 1, size: 1408 [ 336.082001][ T8938] bridge0: port 3(macvlan2) entered blocking state [ 336.127255][ T8938] bridge0: port 3(macvlan2) entered disabled state [ 336.156906][ T8938] macvlan2: entered allmulticast mode [ 336.186008][ T8938] macvlan2: entered promiscuous mode [ 336.330442][ T8945] xt_socket: unknown flags 0x8 [ 336.518163][ T8748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.648319][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 336.733245][ T8748] veth0_vlan: entered promiscuous mode [ 336.805766][ T8748] veth1_vlan: entered promiscuous mode [ 336.846575][ T8746] veth0_vlan: entered promiscuous mode [ 336.857405][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 336.882487][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.896468][ T8746] veth1_vlan: entered promiscuous mode [ 336.905055][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 336.929547][ T8] usb 2-1: config 1 has no interface number 1 [ 336.936155][ T8] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.954230][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 336.988068][ T8] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x69, changing to 0x9 [ 336.991556][ T8748] veth0_macvtap: entered promiscuous mode [ 337.027412][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 337.055835][ T8748] veth1_macvtap: entered promiscuous mode [ 337.086453][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.116916][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.124870][ T8746] veth0_macvtap: entered promiscuous mode [ 337.146012][ T29] audit: type=1326 audit(1721982282.888:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.0.948" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe241977299 code=0x0 [ 337.178925][ T8] usb 2-1: Product: syz [ 337.197258][ T8] usb 2-1: Manufacturer: syz [ 337.205752][ T8] usb 2-1: SerialNumber: syz [ 337.211098][ T8746] veth1_macvtap: entered promiscuous mode [ 337.265975][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.284070][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.295849][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.317459][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.360738][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.394776][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.429000][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.456102][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.491290][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.525564][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.558016][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.582563][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.605318][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.631710][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.674656][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.705171][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.716038][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.727501][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.739347][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.751411][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.787379][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.799908][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.816787][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.823879][ T8987] loop2: detected capacity change from 0 to 4096 [ 337.845274][ T8748] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.862718][ T8748] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.873557][ T8748] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.883626][ T8748] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.892501][ T8988] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.910655][ T8987] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 337.946727][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.963905][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.975317][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.995090][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.005936][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.024940][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.066819][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.069707][ T8] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 338.085715][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.128030][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.204648][ T8] usb 2-1: USB disconnect, device number 9 [ 338.287413][ T943] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 338.287960][ T8746] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.349620][ T8746] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.367317][ T8746] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.386481][ T8746] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.508767][ T943] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 338.527306][ T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.568125][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.575111][ T943] usb 3-1: config 0 descriptor?? [ 338.610067][ T943] smsusb:smsusb_probe: board id=8, interface number 0 [ 338.625533][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.629079][ T943] smsusb:smsusb_probe: Device initialized with return code -19 [ 338.846081][ T5280] usb 3-1: USB disconnect, device number 10 [ 338.853204][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.884271][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.901896][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.935414][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.081671][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.105364][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.713124][ T9012] loop2: detected capacity change from 0 to 136 [ 340.267889][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 340.280056][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 340.292452][ T54] Bluetooth: hci3: hardware error 0x00 [ 340.601421][ T8602] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 340.620331][ T8602] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 340.676623][ T9023] sd 0:0:1:0: PR command failed: 1026 [ 340.685746][ T9023] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 340.701075][ T9023] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 340.817326][ T943] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 341.009790][ T943] usb 4-1: Using ep0 maxpacket: 16 [ 341.024567][ T943] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 341.037285][ T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.056354][ T943] usb 4-1: Product: syz [ 341.074508][ T943] usb 4-1: Manufacturer: syz [ 341.084670][ T943] usb 4-1: SerialNumber: syz [ 341.103781][ T943] usb 4-1: config 0 descriptor?? [ 341.120501][ T943] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 341.182010][ T9027] loop4: detected capacity change from 0 to 32768 [ 341.205747][ T9027] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.960 (9027) [ 341.240495][ T9027] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 341.254924][ T9027] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 341.264586][ T9027] BTRFS info (device loop4): using free-space-tree [ 341.330180][ T943] ssu100 4-1:0.0: probe with driver ssu100 failed with error -5 [ 341.521169][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 341.533141][ T29] audit: type=1804 audit(1721982287.278:210): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.960" name="/newroot/4/file0/file1" dev="loop4" ino=260 res=1 errno=0 [ 341.728830][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.740482][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 341.751301][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.757440][ T9027] loop4: detected capacity change from 32768 to 0 [ 341.774773][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.784978][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.795935][ T8] usb 2-1: Product: syz [ 341.808332][ T8] usb 2-1: Manufacturer: syz [ 341.813370][ T8] usb 2-1: SerialNumber: syz [ 341.819450][ T9049] syz.4.960: attempt to access beyond end of device [ 341.819450][ T9049] loop4: rw=0, sector=10440, nr_sectors = 8 limit=0 [ 341.858848][ T9049] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 0, rd 1, flush 0, corrupt 0, gen 0 [ 341.859756][ T8] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 341.885826][ T8] cdc_ncm 2-1:1.0: bind() failure [ 341.913153][ T3046] BTRFS warning (device loop4): direct IO failed ino 260 op 0x0 offset 0x0 len 4096 err no 10 [ 342.062527][ T9052] netlink: 64 bytes leftover after parsing attributes in process `syz.3.957'. [ 342.075688][ T12] kworker/u8:1: attempt to access beyond end of device [ 342.075688][ T12] loop4: rw=4097, sector=10456, nr_sectors = 8 limit=0 [ 342.122907][ T12] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 1, rd 1, flush 0, corrupt 0, gen 0 [ 342.135500][ T12] kworker/u8:1: attempt to access beyond end of device [ 342.135500][ T12] loop4: rw=4097, sector=10480, nr_sectors = 8 limit=0 [ 342.165785][ T12] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 2, rd 1, flush 0, corrupt 0, gen 0 [ 342.176086][ T12] kworker/u8:1: attempt to access beyond end of device [ 342.176086][ T12] loop4: rw=4097, sector=10488, nr_sectors = 8 limit=0 [ 342.191284][ T12] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 3, rd 1, flush 0, corrupt 0, gen 0 [ 342.203115][ T12] kworker/u8:1: attempt to access beyond end of device [ 342.203115][ T12] loop4: rw=4097, sector=10496, nr_sectors = 8 limit=0 [ 342.221214][ T12] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 4, rd 1, flush 0, corrupt 0, gen 0 [ 342.233520][ T12] kworker/u8:1: attempt to access beyond end of device [ 342.233520][ T12] loop4: rw=4097, sector=13448, nr_sectors = 8 limit=0 [ 342.253484][ T12] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 5, rd 1, flush 0, corrupt 0, gen 0 [ 342.265152][ T8746] BTRFS error (device loop4 state A): Transaction aborted (error -5) [ 342.279116][ T8746] BTRFS: error (device loop4 state A) in btrfs_start_dirty_block_groups:3459: errno=-5 IO failure [ 342.294028][ T8746] BTRFS info (device loop4 state EA): forced readonly [ 342.301800][ T8746] BTRFS info (device loop4 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 342.321993][ T9047] BTRFS: error (device loop4 state EAL) in free_log_tree:3269: errno=-5 IO failure [ 342.507694][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 343.018506][ T2547] Bluetooth: Error in BCSP hdr checksum [ 343.820559][ T2980] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.841096][ T9064] loop4: detected capacity change from 0 to 512 [ 343.876310][ T9064] EXT4-fs: Ignoring removed nobh option [ 343.890702][ T9064] EXT4-fs (loop4): can't mount with both data=journal and dax [ 344.207441][ T2980] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.293091][ T9063] pimreg: entered allmulticast mode [ 344.325181][ T9066] pimreg: left allmulticast mode [ 344.397666][ T8] usb 2-1: USB disconnect, device number 10 [ 344.461223][ T5282] usb 4-1: USB disconnect, device number 13 [ 344.578731][ T9063] loop4: detected capacity change from 0 to 1024 [ 344.623703][ T2980] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.631096][ T9063] hfsplus: invalid btree flag [ 344.639885][ T9063] hfsplus: failed to load attributes file [ 344.748237][ T5242] Bluetooth: hci3: command 0x1003 tx timeout [ 344.775047][ T54] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 344.974556][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.991086][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.003992][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.014280][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.022983][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.030506][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.093004][ T2980] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.782239][ T9085] binder: 9080:9085 ioctl 4018620d 0 returned -22 [ 346.483705][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'. [ 346.494621][ T9092] netlink: 'syz.3.973': attribute type 15 has an invalid length. [ 346.511846][ T9092] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 346.522237][ T9092] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 346.531610][ T9092] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 346.540906][ T9092] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 346.554277][ T9092] vxlan0: entered promiscuous mode [ 346.820603][ T2980] bridge_slave_1: left allmulticast mode [ 346.843487][ T2980] bridge_slave_1: left promiscuous mode [ 346.849709][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.881490][ T2980] bridge_slave_0: left allmulticast mode [ 346.891451][ T2980] bridge_slave_0: left promiscuous mode [ 346.898906][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.073764][ T5242] Bluetooth: hci3: command tx timeout [ 347.473773][ T9102] loop4: detected capacity change from 0 to 32768 [ 347.586507][ T9102] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 347.815876][ T9102] XFS (loop4): Ending clean mount [ 347.836066][ T9102] XFS (loop4): Quotacheck needed: Please wait. [ 347.965040][ T9095] overlayfs: overlapping lowerdir path [ 348.141357][ T9102] XFS (loop4): Quotacheck: Done. [ 348.723190][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.758948][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.773786][ T2980] bond0 (unregistering): Released all slaves [ 348.809873][ T9072] chnl_net:caif_netlink_parms(): no params data found [ 348.813998][ T8746] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 349.147261][ T5242] Bluetooth: hci3: command tx timeout [ 349.524511][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 349.566397][ T9148] netlink: 'syz.3.986': attribute type 15 has an invalid length. [ 349.794502][ T9156] binder: 9140:9156 ioctl 4018620d 0 returned -22 [ 350.877227][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.899481][ T9175] mmap: syz.0.994 (9175) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 350.911979][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.927432][ T9072] bridge_slave_0: entered allmulticast mode [ 350.969057][ T9072] bridge_slave_0: entered promiscuous mode [ 351.059391][ T9072] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.087606][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.098567][ T9072] bridge_slave_1: entered allmulticast mode [ 351.106028][ T9072] bridge_slave_1: entered promiscuous mode [ 351.213856][ T9185] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 351.228409][ T5242] Bluetooth: hci3: command tx timeout [ 351.287989][ T2980] hsr_slave_0: left promiscuous mode [ 351.304404][ T9185] loop4: detected capacity change from 0 to 1024 [ 351.332882][ T2980] hsr_slave_1: left promiscuous mode [ 351.364158][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.375637][ T9185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.389160][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.409098][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.416937][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.506464][ T2980] veth1_macvtap: left promiscuous mode [ 351.553122][ T2980] veth0_macvtap: left promiscuous mode [ 351.568332][ T2980] veth1_vlan: left promiscuous mode [ 351.588451][ T2980] veth0_vlan: left promiscuous mode [ 351.718067][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 351.927348][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 351.969134][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 352.000251][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.036839][ T9] usb 4-1: Product: syz [ 352.067428][ T9] usb 4-1: Manufacturer: syz [ 352.072363][ T9] usb 4-1: SerialNumber: syz [ 352.116972][ T9] usb 4-1: config 0 descriptor?? [ 352.136013][ T8746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.687404][ T9209] syz.0.1004 (9209): attempted to duplicate a private mapping with mremap. This is not supported. [ 353.006416][ T5280] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 353.221164][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 353.244855][ T5280] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 353.255671][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.270262][ T5280] usb 5-1: Product: syz [ 353.278459][ T5280] usb 5-1: Manufacturer: syz [ 353.284467][ T5280] usb 5-1: SerialNumber: syz [ 353.320223][ T5242] Bluetooth: hci3: command tx timeout [ 353.348817][ T5280] usb 5-1: config 0 descriptor?? [ 353.358327][ T5280] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 353.575307][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 353.584464][ T5280] ssu100 5-1:0.0: probe with driver ssu100 failed with error -5 [ 353.655878][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 354.289040][ T9219] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1006'. [ 354.685300][ T9072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.748616][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 354.777345][ T9214] tc_dump_action: action bad kind [ 354.793657][ T940] usb 4-1: USB disconnect, device number 14 [ 354.869136][ T9072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.901727][ T940] f81534a_ctrl 4-1:0.0: failed to set register 0x116: -19 [ 354.928058][ T940] f81534a_ctrl 4-1:0.0: failed to enable ports: -19 [ 355.094783][ T9072] team0: Port device team_slave_0 added [ 355.171118][ T9072] team0: Port device team_slave_1 added [ 355.320920][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.342795][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.352681][ T9230] loop3: detected capacity change from 0 to 512 [ 355.464537][ T9072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.559268][ T9230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.621043][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.637919][ T9230] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.728401][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.761716][ T9230] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1011: Directory hole found for htree leaf block 0 [ 355.855768][ T9072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.861908][ T9237] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1012'. [ 356.136669][ T9243] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1011: Directory hole found for htree leaf block 0 [ 356.839318][ T8748] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.856455][ T8] usb 5-1: USB disconnect, device number 11 [ 356.920684][ T9249] overlayfs: overlapping lowerdir path [ 356.999226][ T9072] hsr_slave_0: entered promiscuous mode [ 357.045195][ T9072] hsr_slave_1: entered promiscuous mode [ 357.371127][ T29] audit: type=1400 audit(1721982303.108:211): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="&//" pid=9259 comm="syz.3.1016" [ 357.725201][ T9272] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 357.953202][ T9272] loop3: detected capacity change from 0 to 1024 [ 358.034457][ T9272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.157659][ T5283] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 358.377845][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 358.428172][ T5283] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 358.467314][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.506974][ T5283] usb 5-1: Product: syz [ 358.514861][ T5283] usb 5-1: Manufacturer: syz [ 358.529825][ T5283] usb 5-1: SerialNumber: syz [ 358.541803][ T5283] usb 5-1: config 0 descriptor?? [ 358.617911][ T8748] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.948523][ T9291] loop1: detected capacity change from 0 to 4096 [ 358.993618][ T940] usb 5-1: USB disconnect, device number 12 [ 359.036517][ T940] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -19 [ 359.069005][ T940] f81534a_ctrl 5-1:0.0: failed to enable ports: -19 [ 359.089663][ T9300] loop3: detected capacity change from 0 to 512 [ 359.117217][ T9300] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 359.146363][ T9072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.196192][ T9300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 359.198701][ T9072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 359.239412][ T9300] System zones: 1-12 [ 359.243113][ T9072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 359.274690][ T9300] EXT4-fs (loop3): orphan cleanup on readonly fs [ 359.321142][ T9072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 359.387813][ T9300] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1024: bg 0: block 361: padding at end of block bitmap is not set [ 359.461306][ T9300] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 359.500476][ T9300] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1024: attempt to clear invalid blocks 33619980 len 1 [ 359.581535][ T9307] loop1: detected capacity change from 0 to 512 [ 359.598946][ T9300] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1024: invalid indirect mapped block 1811939328 (level 0) [ 359.647904][ T9300] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1024: invalid indirect mapped block 2 (level 2) [ 359.653913][ T9307] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1025: casefold flag without casefold feature [ 359.679168][ T9300] EXT4-fs (loop3): 1 truncate cleaned up [ 359.686243][ T9300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 359.730973][ T9307] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1025: couldn't read orphan inode 15 (err -117) [ 359.742286][ T9072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.790204][ T9307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.827271][ T9300] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 359.843053][ T9072] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.880667][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.888636][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.993111][ T9307] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1025: Directory hole found for htree leaf block 0 [ 359.995032][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.013766][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.043728][ T8748] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 360.059738][ T9307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1025'. [ 360.193964][ T9317] loop4: detected capacity change from 0 to 2048 [ 360.223816][ T9072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.245834][ T29] audit: type=1400 audit(1721982305.988:212): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="&//" pid=9321 comm="syz.3.1028" [ 360.311709][ T7645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.343738][ T9317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.417856][ T29] audit: type=1800 audit(1721982306.168:213): pid=9317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1027" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 360.539527][ T29] audit: type=1800 audit(1721982306.208:214): pid=9317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1027" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 360.636474][ T9333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1029'. [ 360.740689][ T8746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.923412][ T9344] loop4: detected capacity change from 0 to 128 [ 360.972941][ T9072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.126758][ T8746] sysv_free_block: flc_count > flc_size [ 361.145250][ T9072] veth0_vlan: entered promiscuous mode [ 361.151617][ T8746] sysv_free_block: flc_count > flc_size [ 361.177310][ T8746] sysv_free_block: flc_count > flc_size [ 361.190926][ T9072] veth1_vlan: entered promiscuous mode [ 361.194819][ T8746] sysv_free_block: flc_count > flc_size [ 361.215129][ T8746] sysv_free_block: flc_count > flc_size [ 361.221293][ T8746] sysv_free_block: flc_count > flc_size [ 361.227333][ T8746] sysv_free_block: flc_count > flc_size [ 361.247352][ T8746] sysv_free_block: flc_count > flc_size [ 361.254065][ T8746] sysv_free_block: flc_count > flc_size [ 361.272799][ T8746] sysv_free_block: flc_count > flc_size [ 361.284517][ T8746] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 361.341662][ T9072] veth0_macvtap: entered promiscuous mode [ 361.383103][ T9072] veth1_macvtap: entered promiscuous mode [ 361.503512][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.536785][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.572675][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.617176][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.670731][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.729962][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.751459][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.763387][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.797045][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.848210][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.927305][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.956605][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.997251][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.012082][ T9371] loop3: detected capacity change from 0 to 512 [ 362.019237][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.032932][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.050659][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.063893][ T9371] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1039: casefold flag without casefold feature [ 362.076876][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.082964][ T9371] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1039: couldn't read orphan inode 15 (err -117) [ 362.093556][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.131378][ T9072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.141147][ T9072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.150619][ T9072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.160626][ T9072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.211481][ T9371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.262324][ T940] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 362.427865][ T9371] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1039: Directory hole found for htree leaf block 0 [ 362.479490][ T940] usb 2-1: Using ep0 maxpacket: 32 [ 362.495310][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 362.534738][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.715909][ T9371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1039'. [ 362.744980][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.995171][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 363.006194][ T940] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 363.022605][ T940] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 363.034645][ T940] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 363.044218][ T940] usb 2-1: Product: syz [ 363.063841][ T940] usb 2-1: Manufacturer: syz [ 363.086907][ T940] usb 2-1: SerialNumber: syz [ 363.112596][ T940] usb 2-1: config 0 descriptor?? [ 363.173787][ T8748] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.184644][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.239649][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.410224][ T9398] netlink: 'syz.3.1043': attribute type 23 has an invalid length. [ 363.442179][ T9] usb 2-1: USB disconnect, device number 11 [ 363.505628][ T9401] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 364.428266][ T9407] loop3: detected capacity change from 0 to 32768 [ 364.456896][ T9407] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1045 (9407) [ 364.526006][ T9407] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 364.560781][ T9407] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 364.581323][ T9407] BTRFS info (device loop3): using free-space-tree [ 365.123102][ T9457] loop1: detected capacity change from 0 to 8 [ 365.170163][ T8748] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 365.205961][ T9457] loop1: detected capacity change from 0 to 8 [ 365.579176][ T9462] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 365.588476][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 365.614520][ T9464] loop2: detected capacity change from 0 to 512 [ 365.778301][ T9464] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1054: corrupted in-inode xattr: invalid ea_ino [ 365.850955][ T9468] loop3: detected capacity change from 0 to 512 [ 365.901860][ T9464] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1054: couldn't read orphan inode 15 (err -117) [ 365.938841][ T9468] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1053: casefold flag without casefold feature [ 365.939804][ T9464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.017717][ T9468] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1053: couldn't read orphan inode 15 (err -117) [ 366.017751][ T9471] trusted_key: syz.4.1056 sent an empty control message without MSG_MORE. [ 366.083566][ T9468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.266311][ T9468] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1053: Directory hole found for htree leaf block 0 [ 366.329426][ T9468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1053'. [ 366.508799][ T9072] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.624101][ T8748] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.258349][ T9504] loop1: detected capacity change from 0 to 8 [ 367.381994][ T9504] loop1: detected capacity change from 0 to 8 [ 367.795097][ C0] eth0: bad gso: type: 1, size: 1408 [ 368.504815][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 368.745299][ T9530] binder: 9525:9530 ioctl 4018620d 0 returned -22 [ 369.612834][ T9537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1078'. [ 369.624778][ T9537] tipc: Invalid UDP bearer configuration [ 369.624854][ T9537] tipc: Enabling of bearer rejected, failed to enable media [ 369.941699][ T9548] loop3: detected capacity change from 0 to 256 [ 370.113715][ T9554] loop4: detected capacity change from 0 to 16 [ 370.133949][ T9557] loop2: detected capacity change from 0 to 8 [ 370.148481][ T9554] erofs: Unknown parameter 'ÿÿÿÿ)|' [ 370.274869][ T9557] loop2: detected capacity change from 0 to 8 [ 370.412112][ T9561] loop1: detected capacity change from 0 to 512 [ 370.444122][ T9561] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 370.671484][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 370.693755][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 371.140264][ T9584] loop4: detected capacity change from 0 to 512 [ 371.158140][ T9584] ext4: Bad value for 'max_dir_size_kb' [ 371.264490][ T9584] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1094'. [ 371.407374][ T5281] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 371.726998][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.738903][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.797484][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.812098][ T5281] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.860047][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.899159][ T5281] usb 3-1: config 0 descriptor?? [ 372.050865][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.064402][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.170259][ T9599] bridge_slave_1: left allmulticast mode [ 372.184779][ T9599] bridge_slave_1: left promiscuous mode [ 372.205106][ T9599] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.299929][ T9599] bridge_slave_0: left allmulticast mode [ 372.334047][ T9599] bridge_slave_0: left promiscuous mode [ 372.346817][ T9599] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.361620][ T5281] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 372.384184][ T5281] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 372.436177][ T5281] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 372.553074][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 372.806429][ T9616] loop1: detected capacity change from 0 to 512 [ 372.845789][ T9616] ext4: Bad value for 'max_dir_size_kb' [ 372.983634][ T9616] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1108'. [ 374.892409][ T5282] usb 3-1: USB disconnect, device number 11 [ 375.680068][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 375.898321][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 375.913519][ T9] usb 4-1: config 1 has an invalid interface descriptor of length 7, skipping [ 375.971714][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 376.018847][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 376.059532][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 376.108946][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.128082][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.187739][ T9] usb 4-1: Product: syz [ 376.210153][ T9] usb 4-1: Manufacturer: syz [ 376.239606][ T9] usb 4-1: SerialNumber: syz [ 376.802183][ T9] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 376.813946][ T9] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 376.825079][ T9] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 376.844986][ T9] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 376.971587][ T9] usb 4-1: USB disconnect, device number 15 [ 377.115608][ T29] audit: type=1326 audit(1721982322.858:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.0.1131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe241977299 code=0x0 [ 377.321324][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.460081][ T5242] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 377.475951][ T5242] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 377.476606][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 377.764099][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.771953][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.806646][ T9694] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.807862][ T9699] capability: warning: `syz.2.1133' uses 32-bit capabilities (legacy support in use) [ 377.814581][ T9694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.836284][ T9694] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.843595][ T9694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.944388][ T9700] loop3: detected capacity change from 0 to 512 [ 377.956267][ T9694] team0: Port device bridge0 added [ 378.630546][ T9700] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1134: casefold flag without casefold feature [ 378.648759][ T9700] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1134: couldn't read orphan inode 15 (err -117) [ 378.776265][ T9700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.950249][ C0] eth0: bad gso: type: 1, size: 1408 [ 379.003920][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.011745][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.791635][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'. [ 379.897787][ T8748] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.083082][ T9733] loop3: detected capacity change from 0 to 1024 [ 380.417578][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 380.561753][ T9746] netlink: zone id is out of range [ 380.568598][ T9746] netlink: zone id is out of range [ 380.573808][ T9746] netlink: zone id is out of range [ 380.579095][ T9746] netlink: zone id is out of range [ 380.584271][ T9746] netlink: zone id is out of range [ 380.589761][ T9746] netlink: zone id is out of range [ 380.595109][ T9746] netlink: zone id is out of range [ 380.600426][ T9746] netlink: zone id is out of range [ 380.605609][ T9746] netlink: zone id is out of range [ 381.038596][ T9744] loop4: detected capacity change from 0 to 16 [ 381.069205][ T9744] erofs: Unknown parameter 'ÿÿÿÿ)|' [ 381.341775][ T9750] loop1: detected capacity change from 0 to 4096 [ 381.357203][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 381.365616][ T9] usb 3-1: config 1 has an invalid interface descriptor of length 7, skipping [ 381.383519][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 381.400300][ T9756] futex_wake_op: syz.0.1152 tries to shift op by -1; fix this program [ 381.412010][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 381.444340][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.467879][ T5242] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 381.480105][ T5242] Bluetooth: hci3: Injecting HCI hardware error event [ 381.491329][ T54] Bluetooth: hci3: hardware error 0x00 [ 381.568086][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.582884][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.591033][ T9] usb 3-1: Product: syz [ 381.595703][ T9] usb 3-1: Manufacturer: syz [ 381.600540][ T9] usb 3-1: SerialNumber: syz [ 381.974740][ T9] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 381.992416][ T9] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 382.005427][ T9] usb 3-1: found format II with max.bitrate = 0, frame size=0 [ 382.013754][ T9] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 382.585146][ T9] usb 3-1: USB disconnect, device number 12 [ 382.909684][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.113355][ T9776] loop3: detected capacity change from 0 to 1764 [ 383.216348][ T8748] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 383.234768][ T8748] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 383.628456][ T9787] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1163'. [ 383.657418][ T9787] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1163'. [ 383.666433][ T9787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1163'. [ 383.717163][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 383.740305][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 385.103957][ T9808] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 385.164573][ T9808] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.253892][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 385.470854][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.478167][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.565181][ T9824] bridge_slave_1: left allmulticast mode [ 385.613001][ T9824] bridge_slave_1: left promiscuous mode [ 385.626196][ T9826] loop3: detected capacity change from 0 to 2048 [ 385.641428][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.664823][ T9826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.672920][ T9829] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1177'. [ 385.699723][ T9824] bridge_slave_0: left allmulticast mode [ 385.721913][ T9824] bridge_slave_0: left promiscuous mode [ 385.747545][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.878028][ T9824] team0: Port device bridge0 removed [ 385.957660][ T9829] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1177'. [ 385.973709][ T9829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1177'. [ 386.234796][ T9835] loop4: detected capacity change from 0 to 1024 [ 386.249912][ T9835] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.371862][ T9835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.259027][ T8746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.309438][ T9857] loop3: detected capacity change from 0 to 1024 [ 390.381593][ T9856] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 390.457483][ T9856] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.547538][ T52] hfsplus: b-tree write err: -5, ino 4 [ 390.668725][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 390.741090][ T9874] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1190'. [ 390.757786][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.765519][ T9871] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.819766][ T9871] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.829552][ T9871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.839763][ T9871] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.847128][ T9871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.933689][ T9871] team0: Port device bridge0 added [ 390.944066][ T9874] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1190'. [ 390.965486][ T9874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1190'. [ 391.397324][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 392.387186][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 392.409683][ T8] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 392.430489][ T8] usb 3-1: config 1 has no interface number 1 [ 392.443722][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.492530][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.523244][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.531423][ T9907] team_slave_0: entered promiscuous mode [ 392.537674][ T9907] team_slave_1: entered promiscuous mode [ 392.541414][ T8] usb 3-1: Product: syz [ 392.554744][ T8] usb 3-1: Manufacturer: syz [ 392.563499][ T8] usb 3-1: SerialNumber: syz [ 392.577827][ T9907] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 392.661756][ T9907] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 392.912481][ T9889] netlink: 'syz.2.1194': attribute type 11 has an invalid length. [ 392.928965][ T9907] bond0: entered promiscuous mode [ 392.945625][ T9907] bond_slave_0: entered promiscuous mode [ 392.955217][ T9920] loop1: detected capacity change from 0 to 128 [ 392.978898][ T9907] bond_slave_1: entered promiscuous mode [ 392.994498][ T9889] syz.2.1194 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 393.017533][ T9907] macvlan2: entered promiscuous mode [ 393.034155][ T9907] team0: entered promiscuous mode [ 393.046898][ T9920] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.080272][ T9914] loop4: detected capacity change from 0 to 40427 [ 393.095996][ T9914] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 393.104057][ T9914] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 393.128155][ T9920] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 393.143669][ T9914] F2FS-fs (loop4): Found nat_bits in checkpoint [ 393.181965][ T8] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 393.197960][ T8] usb 3-1: 2:1: cannot set freq 5590914 to ep 0x82 [ 393.218546][ T9914] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 393.225636][ T9914] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 393.269788][ T8] usb 3-1: USB disconnect, device number 13 [ 393.608797][ T5925] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 393.609570][ T9859] udevd[9859]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.678017][ T9933] loop3: detected capacity change from 0 to 8192 [ 393.731381][ T9920] syz.1.1209 (9920) used greatest stack depth: 17648 bytes left [ 393.748809][ T9933] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 393.755774][ T9933] loop3: partition table partially beyond EOD, truncated [ 393.768451][ T9933] loop3: p1 start 277760 is beyond EOD, truncated [ 393.774947][ T9933] loop3: p2 start 6684676 is beyond EOD, truncated [ 393.787275][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 393.818766][ T5925] usb 5-1: config 0 has an invalid interface number: 115 but max is 1 [ 393.838730][ T5925] usb 5-1: config 0 has an invalid interface number: 41 but max is 1 [ 393.848356][ T5925] usb 5-1: config 0 has no interface number 0 [ 393.857014][ T9933] loop3: p5 start 6684676 is beyond EOD, [ 393.857848][ T7645] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.865419][ T9933] truncated [ 393.873861][ T5925] usb 5-1: config 0 has no interface number 1 [ 393.884297][ T5925] usb 5-1: config 0 interface 41 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 393.917152][ T5925] usb 5-1: config 0 interface 115 has no altsetting 0 [ 393.933370][ T5925] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=a3.63 [ 393.952925][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.971427][ T5925] usb 5-1: Product: syz [ 393.975920][ T5925] usb 5-1: Manufacturer: syz [ 394.000543][ T5925] usb 5-1: SerialNumber: syz [ 394.020003][ T5925] usb 5-1: config 0 descriptor?? [ 394.068177][ T5925] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.115/input/input20 [ 394.104654][ T9943] netlink: 420 bytes leftover after parsing attributes in process `syz.2.1215'. [ 394.666007][ T9962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1219'. [ 394.789502][ T9963] netlink: 'syz.2.1221': attribute type 1 has an invalid length. [ 394.811755][ T9963] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.927418][ T4668] bcm5974 5-1:0.115: could not read from device [ 394.995533][ T5925] usb 5-1: USB disconnect, device number 13 [ 395.007186][ T5282] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 395.046695][ T9973] loop2: detected capacity change from 0 to 1024 [ 395.074773][ T9973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.125046][ T9973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.327576][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 395.334469][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.345510][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.355403][ T5282] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 395.676676][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.999148][ T5282] usb 2-1: config 0 descriptor?? [ 396.300242][ T9072] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.520064][ T5282] pantherlord 0003:0810:0001.0008: item fetching failed at offset 2/5 [ 396.555626][ T5282] pantherlord 0003:0810:0001.0008: parse failed [ 396.577233][ T5282] pantherlord 0003:0810:0001.0008: probe with driver pantherlord failed with error -22 [ 396.743098][ T5925] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 396.774503][ T5282] usb 2-1: USB disconnect, device number 12 [ 396.949110][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.962091][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.977382][ T5925] usb 4-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 396.986796][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.026511][ T5925] usb 4-1: config 0 descriptor?? [ 397.057951][ T9992] loop4: detected capacity change from 0 to 8 [ 397.598273][T10000] xt_hashlimit: overflow, try lower: 0/0 [ 397.657458][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 397.728480][T10001] loop1: detected capacity change from 0 to 1024 [ 398.929787][T10001] EXT4-fs: Ignoring removed orlov option [ 398.982352][T10001] EXT4-fs (loop1): Test dummy encryption mode enabled [ 399.033428][ T8] usb 3-1: config 0 has no interfaces? [ 399.092868][ T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 399.119322][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.155656][T10001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.189184][ T8] usb 3-1: config 0 descriptor?? [ 399.323509][T10009] team_slave_0: entered promiscuous mode [ 399.329790][T10009] team_slave_1: entered promiscuous mode [ 399.335611][T10009] bridge0: entered promiscuous mode [ 399.351009][T10009] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 399.373936][ T7645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.398308][T10009] team_slave_0: left promiscuous mode [ 399.404009][T10009] team_slave_1: left promiscuous mode [ 399.409864][T10009] bridge0: left promiscuous mode [ 399.453145][ T8] usb 3-1: USB disconnect, device number 14 [ 399.581097][T10014] usb usb1: usbfs: process 10014 (syz.1.1237) did not claim interface 0 before use [ 399.610001][T10012] bond0: entered promiscuous mode [ 399.615131][T10012] bond_slave_0: entered promiscuous mode [ 399.646263][T10012] bond_slave_1: entered promiscuous mode [ 399.876712][ C1] Oops: general protection fault, probably for non-canonical address 0xe3fffb24000b81e1: 0000 [#1] PREEMPT SMP KASAN PTI [ 399.876738][ C1] KASAN: maybe wild-memory-access in range [0x1ffff920005c0f08-0x1ffff920005c0f0f] [ 399.876763][ C1] CPU: 1 UID: 0 PID: 10018 Comm: syz.0.1239 Not tainted 6.10.0-next-20240726-syzkaller #0 [ 399.876782][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 399.876794][ C1] RIP: 0010:__xsk_map_flush+0x56/0x2b0 [ 399.876823][ C1] Code: 80 3c 28 00 74 08 48 89 df e8 46 73 5c f6 4c 8b 3b 49 39 df 0f 84 43 02 00 00 48 89 1c 24 4c 89 f8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 28 00 74 08 4c 89 ff e8 1b 73 5c f6 49 8b 07 48 89 44 24 [ 399.876841][ C1] RSP: 0018:ffffc90000a18ae8 EFLAGS: 00010206 [ 399.876860][ C1] RAX: 03ffff24000b81e1 RBX: ffffc90002e07820 RCX: ffff888022dd5a00 [ 399.876875][ C1] RDX: 0000000080000101 RSI: 0000000000000010 RDI: ffffc90002e07820 [ 399.876886][ C1] RBP: dffffc0000000000 R08: ffffffff8992342a R09: 1ffffffff202fc75 [ 399.876899][ C1] R10: dffffc0000000000 R11: fffffbfff202fc76 R12: 0000000000000000 [ 399.876910][ C1] R13: dffffc0000000000 R14: 0000000000000010 R15: 1ffff920005c0f08 [ 399.876923][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 399.876940][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.876953][ C1] CR2: 00007f40d51f6350 CR3: 0000000053dfe000 CR4: 00000000003506f0 [ 399.876969][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.876981][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.876993][ C1] Call Trace: [ 399.876999][ C1] [ 399.877006][ C1] ? __die_body+0x88/0xe0 [ 399.877024][ C1] ? die_addr+0x108/0x140 [ 399.877047][ C1] ? exc_general_protection+0x3dd/0x5d0 [ 399.877076][ C1] ? asm_exc_general_protection+0x26/0x30 [ 399.877098][ C1] ? xdp_do_check_flushed+0x10a/0x240 [ 399.877122][ C1] ? __xsk_map_flush+0x56/0x2b0 [ 399.877145][ C1] ? __xsk_map_flush+0x24/0x2b0 [ 399.877170][ C1] xdp_do_check_flushed+0x18e/0x240 [ 399.877198][ C1] __napi_poll+0xe4/0x490 [ 399.877223][ C1] net_rx_action+0x89b/0x1240 [ 399.877257][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 399.877285][ C1] ? sched_clock+0x4a/0x70 [ 399.877321][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 399.877351][ C1] handle_softirqs+0x2c4/0x970 [ 399.877378][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 399.877403][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 399.877428][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 399.877444][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 399.877456][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 399.877470][ C1] irq_exit_rcu+0x9/0x30 [ 399.877481][ C1] common_interrupt+0xaa/0xd0 [ 399.877499][ C1] [ 399.877506][ C1] [ 399.877513][ C1] asm_common_interrupt+0x26/0x40 [ 399.877533][ C1] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 399.877553][ C1] Code: c9 50 e8 39 b8 0b 00 48 83 c4 08 4c 89 f7 e8 dd 38 00 00 0f 1f 44 00 00 4c 89 f7 e8 60 99 5f 0a e8 fb 85 37 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 399.877569][ C1] RSP: 0018:ffffc90002e075c8 EFLAGS: 00000282 [ 399.877579][ C1] RAX: 29a46bd6bf419900 RBX: ffff888022dd5a00 RCX: ffffffff94f2f903 [ 399.877587][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad540 RDI: ffffffff8c607c40 [ 399.877594][ C1] RBP: ffffc90002e07610 R08: ffffffff9017e3af R09: 1ffffffff202fc75 [ 399.877602][ C1] R10: dffffc0000000000 R11: fffffbfff202fc76 R12: 1ffff11017267ef3 [ 399.877610][ C1] R13: dffffc0000000000 R14: ffff8880b933ea00 R15: ffff8880b933f798 [ 399.877622][ C1] ? finish_task_switch+0x1e5/0x870 [ 399.877641][ C1] __schedule+0x1808/0x4a60 [ 399.877677][ C1] ? __pfx___schedule+0x10/0x10 [ 399.877707][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 399.877724][ C1] ? __wake_up_common_lock+0x18c/0x1e0 [ 399.877742][ C1] ? preempt_schedule+0xe1/0xf0 [ 399.877843][ C1] preempt_schedule_common+0x84/0xd0 [ 399.877872][ C1] preempt_schedule+0xe1/0xf0 [ 399.877898][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 399.877922][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 399.877938][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 399.877953][ C1] preempt_schedule_thunk+0x1a/0x30 [ 399.877968][ C1] _raw_write_unlock_irq+0x44/0x50 [ 399.877993][ C1] release_task+0x176e/0x1830 [ 399.878029][ C1] ? do_exit+0x1b01/0x27f0 [ 399.878048][ C1] ? __pfx_release_task+0x10/0x10 [ 399.878061][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 399.878076][ C1] ? _raw_write_unlock_irq+0x23/0x50 [ 399.878090][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 399.878105][ C1] do_exit+0x1b01/0x27f0 [ 399.878122][ C1] ? __pfx_do_exit+0x10/0x10 [ 399.878141][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 399.878166][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 399.878195][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 399.878210][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 399.878224][ C1] do_group_exit+0x207/0x2c0 [ 399.878234][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.878254][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 399.878279][ C1] get_signal+0x16a1/0x1740 [ 399.878307][ C1] ? __pfx_get_signal+0x10/0x10 [ 399.878332][ C1] arch_do_signal_or_restart+0x96/0x830 [ 399.878358][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 399.878382][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 399.878417][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 399.878447][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 399.878478][ C1] do_syscall_64+0x100/0x230 [ 399.878496][ C1] ? clear_bhb_loop+0x35/0x90 [ 399.878508][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.878521][ C1] RIP: 0033:0x7fe241977299 [ 399.878532][ C1] Code: Unable to access opcode bytes at 0x7fe24197726f. [ 399.878539][ C1] RSP: 002b:00007fe2426bc0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 399.878560][ C1] RAX: fffffffffffffe00 RBX: 00007fe241b05f88 RCX: 00007fe241977299 [ 399.878575][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe241b05f88 [ 399.878589][ C1] RBP: 00007fe241b05f80 R08: 00007fe2426bc6c0 R09: 00007fe2426bc6c0 [ 399.878610][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe241b05f8c [ 399.878623][ C1] R13: 000000000000000b R14: 00007ffdb3c495f0 R15: 00007ffdb3c496d8 [ 399.878637][ C1] [ 399.878642][ C1] Modules linked in: [ 399.878724][ C1] ---[ end trace 0000000000000000 ]--- [ 399.907155][ T5283] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 399.910761][ C1] RIP: 0010:__xsk_map_flush+0x56/0x2b0 [ 400.127289][ T5283] usb 2-1: Using ep0 maxpacket: 16 [ 400.129003][ C1] Code: 80 3c 28 00 74 08 48 89 df e8 46 73 5c f6 4c 8b 3b 49 39 df 0f 84 43 02 00 00 48 89 1c 24 4c 89 f8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 28 00 74 08 4c 89 ff e8 1b 73 5c f6 49 8b 07 48 89 44 24 [ 400.190524][ T5283] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2D, changing to 0xD [ 400.194205][ C1] RSP: 0018:ffffc90000a18ae8 EFLAGS: 00010206 [ 400.225124][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 33032, setting to 1024 [ 400.226549][ C1] [ 400.226562][ C1] RAX: 03ffff24000b81e1 RBX: ffffc90002e07820 RCX: ffff888022dd5a00 [ 400.226580][ C1] RDX: 0000000080000101 RSI: 0000000000000010 RDI: ffffc90002e07820 [ 400.226594][ C1] RBP: dffffc0000000000 R08: ffffffff8992342a R09: 1ffffffff202fc75 [ 400.243459][ T5283] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 400.247338][ C1] R10: dffffc0000000000 R11: fffffbfff202fc76 R12: 0000000000000000 [ 400.247369][ C1] R13: dffffc0000000000 R14: 0000000000000010 R15: 1ffff920005c0f08 [ 400.247382][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 400.247397][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.247409][ C1] CR2: 00007f40d51f6350 CR3: 0000000053dfe000 CR4: 00000000003506f0 [ 400.247425][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.247438][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.247453][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 400.247748][ C1] Kernel Offset: disabled