last executing test programs: 14.752224503s ago: executing program 0 (id=205): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000340)=ANY=[@ANYBLOB="7070114ecf1fdb27e3d52440b3f76294dec3347fa6a92ab70c1a785634182c3af26a2684144d4fb016cc7006b2947a11aed2c97c5c2cca69e38dd14513fbe5a8d8"]) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001440)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x29, 0x4) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x7fd, 0x400) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 12.813966443s ago: executing program 3 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000a40)=""/4096, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 11.286144626s ago: executing program 0 (id=219): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) unshare(0x52000000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 9.494194684s ago: executing program 0 (id=222): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4086, &(0x7f000000c440)="$eJzszzFK9GAQBuB3k/3/BBFBWwuxs5LY2dhYeYG9wHZ2FvauepvFA3giQfAENp9kExFx7RRRnqeZN/lmBib8uMd1P6+T/E8ePpm5n99tZ9qn265L2iTTi63VUxlc7SXpjvJvo62ymeTy45bZ8ivvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfoWnt9gOpZRSkvpdV51MkkWS+W5pkhxXSV9zUz+fj037h0nOdsavRT/xqt+4Mlt+4y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB9U5eR0jJMcpBliu7a3eWF3Dm0AhKEggN4XEBQjkBD2YDm2YcqmrrJJ7XvmxIm7bNXzyfdeVUdyn2O/z03+S4cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCgAAAA//9DVh8q") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='auxv\x00') read$FUSE(r2, 0x0, 0x0) 7.344376687s ago: executing program 4 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 6.763861886s ago: executing program 4 (id=229): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000340)=ANY=[@ANYBLOB="7070114ecf1fdb27e3d52440b3f76294dec3347fa6a92ab70c1a785634182c3af26a2684144d4fb016cc7006b2947a11aed2c97c5c2cca69e38dd14513fbe5a8d8"]) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001440)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x29, 0x4) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x7fd, 0x400) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 6.633465848s ago: executing program 0 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") close(0x4) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) 5.775330911s ago: executing program 3 (id=232): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 5.774879911s ago: executing program 2 (id=233): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00001001"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) syz_usb_connect$uac1(0x3, 0xa0, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000000000ff6b1d010140000102030109028e00030100f0ff0904000000010100000a2401050007020102082407030200050a072407040300000d2406050303060004000b00090c240206020203a10100ff0209040100000102000009040101010102000007240104070300090501092000bc6607250101e800100904a32f9529e5b0408604020101010200000905820920008008df0725018041080000111ba3cdc13092965816e927a1b41282a8a12087c437a5ee3f6199c9f59e5220c91d0da4802eaf4328a7d76cc0374c"], &(0x7f0000000e40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0xf, 0x9, 0x0, 0x40, 0x2d}, 0x125, &(0x7f0000000ec0)=ANY=[@ANYBLOB]}) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000200)=0x4) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}}], 0x1, 0x0, &(0x7f0000000480)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.602390324s ago: executing program 3 (id=234): r0 = socket(0x11, 0xa, 0x5) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x20002007}) 5.552902814s ago: executing program 0 (id=235): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x51) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x5120400, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r3, r4, 0x0, 0x10ffff) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) mincore(&(0x7f000035c000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/20) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x7, 0x4e22, 0x3, 0x5, 0x20, 0xa0, 0x29, r7}, {0x8, 0x20000000000, 0x8, 0x17ff, 0x5, 0x0, 0x126, 0x343e}, {0x1000, 0x40, 0x2, 0x401}, 0x5, 0x0, 0x2, 0x0, 0x1}, {{@in6=@loopback, 0x4d4, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3500, 0x2, 0x3, 0x6e, 0x8, 0x0, 0x8}}, 0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.455429896s ago: executing program 3 (id=236): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) close(0x3) 4.123043026s ago: executing program 1 (id=237): socket$inet_udp(0x2, 0x2, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b0000000000000712000000000000"], 0x30}, 0x0) 3.984928939s ago: executing program 1 (id=238): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5, 0x1a9, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x141000, 0x7) 3.750388712s ago: executing program 3 (id=239): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0) 3.750107672s ago: executing program 1 (id=240): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4086, &(0x7f000000c440)="$eJzszzFK9GAQBuB3k/3/BBFBWwuxs5LY2dhYeYG9wHZ2FvauepvFA3giQfAENp9kExFx7RRRnqeZN/lmBib8uMd1P6+T/E8ePpm5n99tZ9qn265L2iTTi63VUxlc7SXpjvJvo62ymeTy45bZ8ivvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfoWnt9gOpZRSkvpdV51MkkWS+W5pkhxXSV9zUz+fj037h0nOdsavRT/xqt+4Mlt+4y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB9U5eR0jJMcpBliu7a3eWF3Dm0AhKEggN4XEBQjkBD2YDm2YcqmrrJJ7XvmxIm7bNXzyfdeVUdyn2O/z03+S4cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCgAAAA//9DVh8q") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='auxv\x00') read$FUSE(r2, 0x0, 0x0) 3.742128312s ago: executing program 2 (id=241): bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xd, 0x4, 0x8, 0x9, 0x40000, 0xffffffffffffffff, 0x8ef, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.677074923s ago: executing program 3 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000a40)=""/4096, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 3.614218534s ago: executing program 2 (id=243): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000000)={[{@showassoc}, {@block={'block', 0x3d, 0x800}, 0x0}, {}, {@hide}, {@map_off}, {@map_acorn, 0x41}, {@session={'session', 0x3d, 0x23}}, {@unhide}, {}, {@gid}, {}, {@unhide}, {}]}, 0x2, 0x6a0, &(0x7f0000000a40)="$eJzs3V1rG+n5x/HfyLIte/+E5d8SQnCSO0kXHJoqI3njYFLoqqORPa2kETNysaGwpBt7CZGzbZJC45OtT/oA2zfQs570oC+i0ON9Fz0pLSztWaE9mDIPeoqeol0l2d18P2ZXo3uumfuauRVdjK25JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIMup2nbJUt1r7h+YyZxq4Dey5f9Go+vTvS3rRrpwY2a/khX/p0JBF9KmC9/srz4f/++aNtJnGyrEDwWdvnX+7bvfyOe6209J+PPQvDt88uz04b1O5+jxC8Quae7dv07KdZfWsjEZE7TrNr3Q9xqVXdd4oW92trftW3u10NS8uhsehm23YZzAzbX9wGw6N0xpZ2fLuMVDf7+5W63U3W7jne+UbXvb/GA1HWhJxdDZ8+p1r7mbxMSr45g75pMfpwFupWHM8YPO0dasI4mDSi8SVJ4VVLbL5VKpXC5t3965fce28yMNdsyyezQSsfAXLb5iFvPGDSxALq7/f7Wkugpqal8HMmN/HFUVyFdjwvpMt/6/c8ud2u9g/e9W+QvS97LVF5XU/8vps8uT6v+EXIxMssG4NdaE9vl+lpOMjJ7omU71UPfUUUdHeryAfRuZKwvZyyv42ZWrpjyF8uWpoUrSYrIWox1ta1u23teeagplVJOnulyFOlSottzkFeUokKuK2vIVyGhTjm7IqKQd7WhLRq6KOpSvfTW1q6oq+ncURcd6kJz3rSk5qhtUmhCwOhhUnrKnSfX/Jx+nr9Os/tvU/zdV+jpYTR8+nRYDfAlE2fX/oNzsza68vIwAAAAAAMCiWclv363kb/eXJEWqeXXXft1pAQAAAACABbIUrWpDVnz9L+mSLK7/AQAAAAD4urGSe+wsSevJh/qt/p1QL/JLgKVXkCIAAAAAAPiCkjv/L69IUTJpxRVZc13/AwAAAACAr4DfDMyxn+/OsRt1/6yfkxS2Vq0//3NVwbJ11jr4lnVSiddUTrKYkU8AtGsXrXPZRL3Jw4qk5Jnjblgb6eSY2SSYvXkHPzueNde/FTyXwMrS4A4mJGDFPW/ns2f6RFfTTa5m88zfP80pWZP2sl7z6m7R8et3S6pUzuXa7kH7548e/EIKesd5/KBzVPzgo879JJezuOnsJN7px0Pp5MafjH4uT5P5FpJ7LsYd8Zpq3S5/22ysW0m/dvf4l1Q5yQ12NG0A+n3+StfSMbu2nsaun/Zm3I+PvxAff6mYDNnQ0QfLVj+L0vNHPm4gJmRRSLK4nsZc37yu8t/S5d4o5KzCt5ekcnF0DIayKA9mMftcWP8aORcDWSQP3TUD52IrzuIv8Y4mZLE1XxYjIwIAr8uxLil5F7qkZBLzXhUqZHW3Wx66b2qfq+7Mru7vDVf3p7+PomSDJSmf/W1iai8Fxe/om1ZSh1bSQ8pfHPOObmd1paAJ7+j2F6hucV9/6n8HUpb2SBb/iaLobinp93fPVdU/DHU30m9YLy/Fp/DW05OfJhPgxz48+vDoUbm8tW2/a9u3y1pODiN7WBK1BwAwYvZ37MyMsN7V1TTi6v1/vJMuDVW8/+99pKCoD/SROrqvm92vELgyfq/rAx9DuJletWrgqtWcf/tu8r10w7El3Zx4VZfU0oHYci92Wd1Nhit1P3brJY8CAACv1rUZdXh8/S8M1f+b2kwjNi+Ove4eruXZ1XHvkn5SbGl28u8t+mwAAPBmcIPPrPX2r60g8Frvl3Z2SpX2nmsC3/mhCbzqrmu8ZtsNnL1Kc9c1rcBv+45fN61Aq17VDU2432r5QdvU/MC0/NA7SL753WRf/R66jUqz7Tlhq+5WQtc4frNdcdqm6oWOae1/v+6Fe26QbBy2XMereU6l7flNE/r7geMWjQlddyDQq7rNtlfz4sWmaQVeoxIcmh/59f2Ga6pu6AReq+2nO+z25TVrftBIdlvMR+M+LwAAwBvnybPTh/c6naPHzy+sxZfmacuZJsSMLqzoybP4qjxuyWermCMIAIAvmX4Bn2OjwktMCAAAAAAAAAAAAAAAAAAAAAAAjJh9S9+cC8vjbhaUei0/O5e16Jfq32I4sh9Li05snoXcvFt1b4k4ffjplOC1Xkv39A/GnL2yA/z7/0lvJS1KW/KL72ttyuC+jIXvHqdndGJMvHLsqtXeWOQX/88hXnj0xwmroiiKpm++OnwOV4YOMDet07ykxytzD8HKyEsUwNfV/wIAAP//qMc0fQ==") open(0x0, 0x60840, 0x14) 3.545543585s ago: executing program 4 (id=244): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.381505978s ago: executing program 2 (id=245): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) socket$netlink(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x5b0b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x32) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = creat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000000000000b3000000000000000000"]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/consoles\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1e0000005c2c795e0700000007000000000002", @ANYRES32=r2, @ANYBLOB='\v\x00'/20, @ANYRES32=r3, @ANYBLOB="0300000003000000040000"], 0x50) landlock_create_ruleset(0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3.21840665s ago: executing program 4 (id=246): r0 = socket(0x11, 0xa, 0x5) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x20002007}) 2.084798648s ago: executing program 0 (id=247): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x222, &(0x7f00000005c0)="$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") r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x1000000}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x94a, 0x8001, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000000)={@random="d52d3945bc3c", @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e7ff8c", 0x36, 0x6, 0x0, @remote, @rand_addr=' \x01\x00', {[], {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x44, 0x10, 0x0, 0x0, 0x9}, {"49977c2557d55a1570839e6831f2"}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000002800)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4004000) pwrite64(r2, 0x0, 0x0, 0x8000c61) fallocate(r2, 0x0, 0x0, 0x8000c62) llistxattr(&(0x7f0000000980)='./file0\x00', 0x0, 0x0) 2.080770318s ago: executing program 2 (id=248): socket$inet_udp(0x2, 0x2, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b0000000000000712000000000000"], 0x30}, 0x0) 1.964256759s ago: executing program 4 (id=249): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.866122501s ago: executing program 1 (id=250): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1}, 0x0, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6(0xa, 0x3, 0x6) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) open$dir(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) fsync(r0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.676356034s ago: executing program 4 (id=251): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00001001"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) syz_usb_connect$uac1(0x3, 0xa0, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000000000ff6b1d010140000102030109028e00030100f0ff0904000000010100000a2401050007020102082407030200050a072407040300000d2406050303060004000b00090c240206020203a10100ff0209040100000102000009040101010102000007240104070300090501092000bc6607250101e800100904a32f9529e5b0408604020101010200000905820920008008df0725018041080000111ba3cdc13092965816e927a1b41282a8a12087c437a5ee3f6199c9f59e5220c91d0da4802eaf4328a7d76cc0374c"], &(0x7f0000000e40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0xf, 0x9, 0x0, 0x40, 0x2d}, 0x125, &(0x7f0000000ec0)=ANY=[@ANYBLOB]}) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000200)=0x4) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}}], 0x1, 0x0, &(0x7f0000000480)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 698.603489ms ago: executing program 1 (id=252): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) unshare(0x8000600) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x9}, 0x1c) 66.302239ms ago: executing program 1 (id=253): r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvfrom$unix(r0, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) memfd_create(0x0, 0x2) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000900)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x111200) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) 0s ago: executing program 2 (id=254): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000340)=ANY=[@ANYBLOB="7070114ecf1fdb27e3d52440b3f76294dec3347fa6a92ab70c1a785634182c3af26a2684144d4fb016cc7006b2947a11aed2c97c5c2cca69e38dd14513fbe5a8d8"]) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001440)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x29, 0x4) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x7fd, 0x400) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 49.357792][ T4158] cgroup: Unknown subsys name 'net' [ 49.460477][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.673878][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.451553][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 52.509316][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 52.630590][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.637775][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.646048][ T4169] device bridge_slave_0 entered promiscuous mode [ 52.654549][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 52.669487][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.678493][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.687246][ T4170] device bridge_slave_0 entered promiscuous mode [ 52.695485][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.702676][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.710341][ T4170] device bridge_slave_1 entered promiscuous mode [ 52.718048][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.725200][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.733471][ T4169] device bridge_slave_1 entered promiscuous mode [ 52.790362][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.831152][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.842253][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.867540][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.878537][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.898232][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.942725][ T4170] team0: Port device team_slave_0 added [ 52.964889][ T4169] team0: Port device team_slave_0 added [ 52.972321][ T4170] team0: Port device team_slave_1 added [ 52.978476][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.985527][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.994622][ T4178] device bridge_slave_0 entered promiscuous mode [ 53.018646][ T4169] team0: Port device team_slave_1 added [ 53.038055][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.045119][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.053722][ T4178] device bridge_slave_1 entered promiscuous mode [ 53.071869][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.079011][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.087518][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.115719][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.123121][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.131618][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.139204][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.146381][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.172751][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.199364][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.206569][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.232905][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.251060][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.258166][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.284289][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.297829][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.315768][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.322836][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.348931][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.370908][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.380512][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.387879][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.396226][ T4184] device bridge_slave_0 entered promiscuous mode [ 53.407261][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.419679][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.444218][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.451812][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.459533][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.492286][ T4178] team0: Port device team_slave_0 added [ 53.507539][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.524044][ T4182] team0: Port device team_slave_0 added [ 53.533185][ T4182] team0: Port device team_slave_1 added [ 53.540148][ T4178] team0: Port device team_slave_1 added [ 53.562957][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.591449][ T4169] device hsr_slave_0 entered promiscuous mode [ 53.598151][ T4169] device hsr_slave_1 entered promiscuous mode [ 53.614948][ T4170] device hsr_slave_0 entered promiscuous mode [ 53.621976][ T4170] device hsr_slave_1 entered promiscuous mode [ 53.629035][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.637177][ T4170] Cannot create hsr debugfs directory [ 53.671879][ T4184] team0: Port device team_slave_0 added [ 53.679726][ T4184] team0: Port device team_slave_1 added [ 53.685825][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.692824][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.719066][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.730373][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.737422][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.764205][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.779001][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.786013][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.812045][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.835396][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.842625][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.868838][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.898480][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.905444][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.932028][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.971086][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.978249][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.004661][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.026885][ T4178] device hsr_slave_0 entered promiscuous mode [ 54.033485][ T4178] device hsr_slave_1 entered promiscuous mode [ 54.040013][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.047846][ T4178] Cannot create hsr debugfs directory [ 54.089700][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.096643][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.103031][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.110787][ T4182] Cannot create hsr debugfs directory [ 54.179165][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.187082][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 54.191634][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.193667][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 54.205698][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 54.205813][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.219989][ T4184] Cannot create hsr debugfs directory [ 54.266317][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 54.346130][ T2367] Bluetooth: hci4: command 0x0409 tx timeout [ 54.440418][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.452407][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.462426][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.473751][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.528956][ T4170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.543238][ T4170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.559403][ T4170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.570272][ T4170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.608913][ T4178] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.636527][ T4178] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.645760][ T4178] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.673858][ T4178] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.706237][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.750149][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.760926][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.770333][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.779138][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.791884][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.806520][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.816976][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.841292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.852228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.861965][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.869228][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.900424][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.911178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.919668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.928847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.937508][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.944554][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.952904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.969095][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.994657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.006148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.015445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.025733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.034624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.043993][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.053537][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.064099][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.082632][ T4169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.094084][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.109606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.117966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.126622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.135298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.144311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.153058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.176428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.184231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.194248][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.234360][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.252112][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.261050][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.268284][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.278652][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.327782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.343737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.354070][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.361225][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.370297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.379441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.410315][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.423202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.433550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.442312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.452325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.461898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.477694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.486790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.495073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.505027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.512841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.520784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.540251][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.555203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.564707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.573323][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.580669][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.591531][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.600515][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.622685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.631360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.640811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.649409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.658415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.669369][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.686150][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.696272][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.704607][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.711775][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.739866][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.747948][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.755571][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.768488][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.778256][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.791960][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.804801][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.815649][ T4169] device veth0_vlan entered promiscuous mode [ 55.825592][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.836578][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.844637][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.854523][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.863768][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.870884][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.879941][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.894215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.906634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.915051][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.922323][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.930657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.947796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.956587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.997344][ T4169] device veth1_vlan entered promiscuous mode [ 56.004875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.022130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.033892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.043798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.053459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.064995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.073480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.081701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.090205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.099960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.109091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.117649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.127290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.135641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.143706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.155844][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.168275][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.184456][ T4178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.196825][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.222654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.231333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.240188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.249581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.258079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.266145][ T4171] Bluetooth: hci1: command 0x041b tx timeout [ 56.272000][ T1325] Bluetooth: hci0: command 0x041b tx timeout [ 56.272350][ T4171] Bluetooth: hci2: command 0x041b tx timeout [ 56.280569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.293348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.302170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.309784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.319000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.331096][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.341825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.350710][ T1325] Bluetooth: hci3: command 0x041b tx timeout [ 56.363222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.371983][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.379122][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.407584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.426732][ T1325] Bluetooth: hci4: command 0x041b tx timeout [ 56.437440][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.460397][ T4169] device veth0_macvtap entered promiscuous mode [ 56.498519][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.517063][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.541625][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.550360][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.559597][ T546] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.566777][ T546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.574447][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.586318][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.604972][ T4169] device veth1_macvtap entered promiscuous mode [ 56.614797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.654154][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.662572][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.688426][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.698563][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.730481][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.746317][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.754653][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.764082][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.774563][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.783460][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.791986][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.802657][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.810705][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.818590][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.827829][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.846451][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.853657][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.862631][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.874933][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.883870][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.903496][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.913157][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.933246][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.942764][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.957869][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.967653][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.976962][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.985770][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.058258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.069241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.084209][ T4184] device veth0_vlan entered promiscuous mode [ 57.100715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.109433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.118265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.126935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.135627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.143626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.188354][ T4184] device veth1_vlan entered promiscuous mode [ 57.200368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.210276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.218720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.231562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.242978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.251898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.260678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.271377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.279782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.294493][ T4178] device veth0_vlan entered promiscuous mode [ 57.325128][ T4170] device veth0_vlan entered promiscuous mode [ 57.345914][ T4178] device veth1_vlan entered promiscuous mode [ 57.371856][ T4170] device veth1_vlan entered promiscuous mode [ 57.381689][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.390273][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.398835][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.407747][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.415298][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.441127][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.449671][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.465263][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.475999][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.484407][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.493045][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.502111][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.510745][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.537227][ T4184] device veth0_macvtap entered promiscuous mode [ 57.552649][ T4170] device veth0_macvtap entered promiscuous mode [ 57.561811][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.570801][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.581026][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.589641][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.601352][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.610563][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.623654][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.625695][ T4184] device veth1_macvtap entered promiscuous mode [ 57.638856][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.665576][ T4170] device veth1_macvtap entered promiscuous mode [ 57.674350][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.683095][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.691790][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.711489][ T4178] device veth0_macvtap entered promiscuous mode [ 57.729485][ T4178] device veth1_macvtap entered promiscuous mode [ 57.754909][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.772908][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.785540][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.806973][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.821697][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.832451][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.843097][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.854055][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.865325][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.877510][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.888706][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.897791][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.908640][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.918764][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.929590][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.939989][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.950803][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.964452][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.975341][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.986257][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.996195][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.006857][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.018599][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.026248][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.034370][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.043289][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.052256][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.061786][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.070857][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.079925][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.088421][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.097099][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.105475][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.114983][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.124447][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.133224][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.142570][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.152544][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.161421][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.176790][ T4170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.185601][ T4170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.205373][ T4170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.214498][ T4170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.239497][ T4246] loop1: detected capacity change from 0 to 512 [ 58.250806][ T4182] device veth0_vlan entered promiscuous mode [ 58.265301][ T4178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.280551][ T4178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.282474][ T4246] EXT4-fs (loop1): Ignoring removed orlov option [ 58.289765][ T4178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.305189][ T4178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.318110][ T4246] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 58.324126][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.341315][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.352228][ T4246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 58.358525][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 58.360254][ T4160] Bluetooth: hci2: command 0x040f tx timeout [ 58.375509][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.376006][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 58.402185][ T4246] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.2: corrupted in-inode xattr [ 58.419208][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.426639][ T4160] Bluetooth: hci3: command 0x040f tx timeout [ 58.437029][ T4246] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 58.440355][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.450615][ T4246] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 58.459649][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.506487][ T26] Bluetooth: hci4: command 0x040f tx timeout [ 58.520843][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.526841][ T4246] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.551757][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.562309][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.576647][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.585382][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.617944][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.633196][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.685866][ T4182] device veth1_vlan entered promiscuous mode [ 58.845479][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.858436][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.872528][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.874215][ T4182] device veth0_macvtap entered promiscuous mode [ 58.906653][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.929757][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.930520][ T4182] device veth1_macvtap entered promiscuous mode [ 58.947193][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.955003][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.964155][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.975018][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.015678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.039491][ T4256] Zero length message leads to an empty skb [ 59.043594][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.060601][ T546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.060756][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.072887][ T546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.080589][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.100759][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.111498][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.125154][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.135174][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.146827][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.158545][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.179867][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.188357][ T546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.198021][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.206996][ T546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.215833][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.239093][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.251387][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.261367][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.272116][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.282156][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.293410][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.303465][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.314283][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.325565][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.358841][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.371062][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.382116][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.394435][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.408608][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.417556][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.426726][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.445069][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.482178][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.499934][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.522369][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.537511][ T4262] loop3: detected capacity change from 0 to 256 [ 59.561176][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.569806][ T4262] ======================================================= [ 59.569806][ T4262] WARNING: The mand mount option has been deprecated and [ 59.569806][ T4262] and is ignored by this kernel. Remove the mand [ 59.569806][ T4262] option from the mount to silence this warning. [ 59.569806][ T4262] ======================================================= [ 59.607283][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.648752][ T4262] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 59.695454][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.745851][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.754617][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.795116][ T4267] loop4: detected capacity change from 0 to 16 [ 59.813837][ T4262] attempt to access beyond end of device [ 59.813837][ T4262] loop3: rw=524288, want=408, limit=256 [ 59.855427][ T4262] attempt to access beyond end of device [ 59.855427][ T4262] loop3: rw=524288, want=664, limit=256 [ 59.874451][ T4262] attempt to access beyond end of device [ 59.874451][ T4262] loop3: rw=0, want=288, limit=256 [ 59.893631][ T25] audit: type=1800 audit(1750243212.263:2): pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="file1" dev="loop3" ino=1048588 res=0 errno=0 [ 59.961629][ T4267] erofs: (device loop4): mounted with root inode @ nid 36. [ 60.307286][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.353046][ T4274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.443697][ T4214] Bluetooth: hci1: command 0x0419 tx timeout [ 60.472473][ T4214] Bluetooth: hci0: command 0x0419 tx timeout [ 60.547971][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.839089][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.908955][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.956109][ T4214] Bluetooth: hci2: command 0x0419 tx timeout [ 60.963101][ T4213] Bluetooth: hci3: command 0x0419 tx timeout [ 60.971014][ T4213] Bluetooth: hci4: command 0x0419 tx timeout [ 61.414684][ T4214] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.346286][ T4293] loop4: detected capacity change from 0 to 256 [ 62.385573][ T25] audit: type=1800 audit(1750243214.753:3): pid=4293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10" name="file0" dev="loop4" ino=1048591 res=0 errno=0 [ 62.426499][ T4214] usb 2-1: Using ep0 maxpacket: 16 [ 62.456018][ T25] audit: type=1804 audit(1750243214.793:4): pid=4293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.10" name="/newroot/2/bus/file0" dev="loop4" ino=1048591 res=1 errno=0 [ 62.492444][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.505595][ T4295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.508219][ T4298] loop3: detected capacity change from 0 to 164 [ 62.556258][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.581532][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.630707][ T4214] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 62.651325][ T4298] Unable to read rock-ridge attributes [ 62.687998][ T4214] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 62.731170][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.746847][ T4240] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.788848][ T4214] usb 2-1: config 0 descriptor?? [ 62.904893][ T4301] Unable to read rock-ridge attributes [ 62.957211][ T4301] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 62.990808][ T4300] Unable to read rock-ridge attributes [ 63.001441][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 63.002395][ T4300] attempt to access beyond end of device [ 63.002395][ T4300] loop3: rw=524288, want=263332, limit=164 [ 63.010431][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 63.022095][ T4300] attempt to access beyond end of device [ 63.022095][ T4300] loop3: rw=0, want=263332, limit=164 [ 63.030892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 63.052111][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 63.065020][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 63.069951][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 63.074353][ T25] audit: type=1800 audit(1750243215.403:5): pid=4300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.23" name="file0" dev="loop3" ino=1862 res=0 errno=0 [ 63.083079][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.084122][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.125913][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.135915][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.664617][ T4303] loop4: detected capacity change from 0 to 512 [ 64.597650][ T4303] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.609124][ T4303] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.746387][ T4214] usbhid 2-1:0.0: can't add hid device: -71 [ 64.771207][ T4214] usbhid: probe of 2-1:0.0 failed with error -71 [ 64.834102][ T4314] loop1: detected capacity change from 0 to 512 [ 64.846873][ T4214] usb 2-1: USB disconnect, device number 2 [ 64.906103][ T4314] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.012135][ T4314] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.052538][ T4314] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 65.096979][ T4316] loop4: detected capacity change from 0 to 256 [ 65.119238][ T4314] EXT4-fs (loop1): 1 truncate cleaned up [ 65.124971][ T4314] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,block_validity,debug_want_extra_isize=0x0000000000000068,quota,resuid=0x0000000000000000,acl,norecovery,dioread_nolock,nodioread_nolock,stripe=0x0000000000000ffd,,errors=continue. Quota mode: writeback. [ 65.379676][ T4320] loop4: detected capacity change from 0 to 16 [ 65.431884][ T4320] erofs: (device loop4): mounted with root inode @ nid 36. [ 65.560156][ T4240] usb 3-1: unable to read config index 0 descriptor/all [ 65.572432][ T4240] usb 3-1: can't read configurations, error -71 [ 66.826064][ T4240] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 67.090088][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 67.216823][ T4240] usb 3-1: Using ep0 maxpacket: 32 [ 67.406327][ T4240] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.425505][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.434681][ T4345] loop4: detected capacity change from 0 to 512 [ 67.496456][ T4240] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 67.504831][ T4240] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 67.504875][ T4240] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 67.559548][ T4346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.578662][ T4345] EXT4-fs (loop4): Ignoring removed orlov option [ 67.586188][ T4345] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 67.614098][ T4345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 67.671803][ T4240] usb 3-1: config 128 has no interface number 0 [ 67.709029][ T4240] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 67.722166][ T4345] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.26: corrupted in-inode xattr [ 67.745823][ T4240] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.771669][ T4345] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.26: couldn't read orphan inode 15 (err -117) [ 67.829182][ T4345] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 67.830675][ T4240] usb 3-1: config 128 interface 127 has no altsetting 0 [ 67.885249][ T4357] loop1: detected capacity change from 0 to 164 [ 67.941008][ T4357] Unable to read rock-ridge attributes [ 68.016902][ T4361] loop3: detected capacity change from 0 to 256 [ 68.136354][ T4240] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 68.170626][ T4240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.260146][ T4362] Unable to read rock-ridge attributes [ 68.633008][ T4362] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 68.757667][ T4240] usb 3-1: Product: syz [ 68.762964][ T4240] usb 3-1: Manufacturer: syz [ 68.865636][ T4357] Unable to read rock-ridge attributes [ 68.906098][ T4240] usb 3-1: SerialNumber: syz [ 68.981561][ T25] audit: type=1800 audit(1750243221.353:6): pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.27" name="file0" dev="loop1" ino=1862 res=0 errno=0 [ 69.037240][ T4240] usb 3-1: can't set config #128, error -71 [ 70.719680][ T4240] usb 3-1: USB disconnect, device number 3 [ 70.927767][ T4382] loop3: detected capacity change from 0 to 16 [ 70.970452][ T4382] erofs: (device loop3): mounted with root inode @ nid 36. [ 70.994753][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.001468][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.935980][ T4240] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.035863][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 72.276789][ T4392] loop3: detected capacity change from 0 to 256 [ 72.326088][ T4240] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 72.346202][ T4240] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.428249][ T4240] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.474333][ T4240] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.504114][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.584244][ T4240] usb 3-1: invalid MIDI out EP 0 [ 72.657608][ T4397] loop3: detected capacity change from 0 to 512 [ 72.717769][ T4397] EXT4-fs (loop3): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value [ 72.878272][ T4240] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 72.919264][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.938016][ T4401] loop0: detected capacity change from 0 to 256 [ 73.027576][ T4401] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 73.104325][ T4401] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 73.199911][ T4401] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 73.248994][ T4401] UDF-fs: Scanning with blocksize 512 failed [ 73.270555][ T4401] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 73.431679][ T4401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.951817][ T4415] loop1: detected capacity change from 0 to 1024 [ 75.627277][ T4415] hfsplus: failed to load attributes file [ 76.048191][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 76.108914][ T21] cfg80211: failed to load regulatory.db [ 76.233006][ T4428] loop1: detected capacity change from 0 to 8192 [ 76.345930][ T4240] usb 3-1: USB disconnect, device number 4 [ 76.499657][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.572554][ T13] hid-generic 0005:0CC5:1018.0001: item fetching failed at offset 0/1 [ 76.587142][ T4438] loop0: detected capacity change from 0 to 16 [ 76.595617][ T4434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.623632][ T4438] erofs: (device loop0): mounted with root inode @ nid 36. [ 76.649972][ T13] hid-generic: probe of 0005:0CC5:1018.0001 failed with error -22 [ 80.194910][ T4462] loop2: detected capacity change from 0 to 1024 [ 80.397607][ T4458] loop1: detected capacity change from 0 to 128 [ 80.576916][ T4471] capability: warning: `syz.0.61' uses deprecated v2 capabilities in a way that may be insecure [ 80.617531][ T4458] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 81.129236][ T4458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.464147][ T4486] loop0: detected capacity change from 0 to 128 [ 81.505975][ T4214] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.662474][ T4486] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.673876][ T4486] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.697729][ T4493] loop1: detected capacity change from 0 to 16 [ 81.881744][ T4493] erofs: (device loop1): mounted with root inode @ nid 36. [ 81.896180][ T4214] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 81.925797][ T4214] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.932202][ T4498] loop3: detected capacity change from 0 to 1024 [ 81.975525][ T4502] loop0: detected capacity change from 0 to 256 [ 81.986011][ T4214] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.101767][ T4214] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.111350][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.185401][ T4502] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9d80cab, utbl_chksum : 0xe619d30d) [ 82.219261][ T4214] usb 5-1: invalid MIDI out EP 0 [ 82.237253][ T4498] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 82.369809][ T4498] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.590736][ T4502] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 82.826417][ T4502] exFAT-fs (loop0): Filesystem has been set read-only [ 82.833545][ T4502] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805fd68160 iblock : 8, err : -5) [ 82.903208][ T4214] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 82.919028][ T4502] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 82.967732][ T4498] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm syz.3.70: lblock 3 mapped to illegal pblock 3 (length 1) [ 82.980901][ T4509] loop1: detected capacity change from 0 to 1024 [ 83.046883][ T4509] EXT4-fs (loop1): Ignoring removed orlov option [ 83.106602][ T4509] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 83.140022][ T4480] udc-core: couldn't find an available UDC or it's busy [ 83.148160][ T4480] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.170392][ T4480] udc-core: couldn't find an available UDC or it's busy [ 83.180293][ T4480] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.216857][ T13] usb 5-1: USB disconnect, device number 2 [ 83.227664][ T4214] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 83.239352][ T4518] netlink: 40 bytes leftover after parsing attributes in process `syz.3.75'. [ 83.250458][ T4214] Bluetooth: hci3: Injecting HCI hardware error event [ 83.348233][ T4509] EXT4-fs (loop1): shut down requested (0) [ 83.371017][ T4179] Bluetooth: hci3: hardware error 0x00 [ 83.436422][ T4522] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.457943][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.580964][ T4524] loop2: detected capacity change from 0 to 1024 [ 83.639906][ T4526] loop3: detected capacity change from 0 to 1024 [ 85.177879][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.216865][ T4534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.444458][ T4565] loop2: detected capacity change from 0 to 1024 [ 86.649290][ T4571] loop1: detected capacity change from 0 to 1024 [ 86.892824][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.904358][ T4574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.224933][ T4583] loop4: detected capacity change from 0 to 1024 [ 88.435266][ T4366] hfsplus: b-tree write err: -5, ino 4 [ 89.141994][ T4606] loop1: detected capacity change from 0 to 1024 [ 90.140047][ T4623] loop0: detected capacity change from 0 to 1024 [ 91.662930][ T4637] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.116' sets config #0 [ 91.798224][ T4638] syz.0.116 (4638) used greatest stack depth: 20776 bytes left [ 92.167855][ T4366] hfsplus: b-tree write err: -5, ino 4 [ 92.997376][ T4652] loop4: detected capacity change from 0 to 256 [ 93.358838][ T4652] exfat: Unknown parameter 'keep_last_dots' [ 93.639833][ T4663] loop0: detected capacity change from 0 to 1024 [ 93.888457][ T4670] loop4: detected capacity change from 0 to 1024 [ 93.945345][ T4670] EXT4-fs (loop4): Ignoring removed orlov option [ 94.026148][ T4160] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.077264][ T4670] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 94.145832][ T4670] EXT4-fs (loop4): shut down requested (0) [ 95.871944][ T4682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 95.881707][ T4160] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 95.906545][ T4160] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.946243][ T4160] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.000287][ T4160] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.038952][ T4160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.119197][ T4160] usb 3-1: invalid MIDI out EP 0 [ 96.244939][ T4160] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 96.348537][ T4161] udevd[4161]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.430684][ T4668] udc-core: couldn't find an available UDC or it's busy [ 96.480043][ T4668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 96.496611][ T4694] loop4: detected capacity change from 0 to 256 [ 96.558880][ T4668] udc-core: couldn't find an available UDC or it's busy [ 96.606193][ T4668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 96.672775][ T4694] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 97.327742][ T4694] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 97.472981][ T4702] loop0: detected capacity change from 0 to 1024 [ 97.513306][ T4240] usb 3-1: USB disconnect, device number 5 [ 97.810864][ T4707] loop3: detected capacity change from 0 to 512 [ 97.896091][ T4707] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.934904][ T4707] EXT4-fs (loop3): 1 truncate cleaned up [ 97.942882][ T4707] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000001,nogrpid,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 98.165499][ T4713] loop0: detected capacity change from 0 to 1024 [ 98.230573][ T4713] EXT4-fs (loop0): Ignoring removed orlov option [ 98.331957][ T4713] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 98.378203][ T4710] mmap: syz.4.152 (4710) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 98.425056][ T4721] netlink: 41594 bytes leftover after parsing attributes in process `syz.1.145'. [ 98.469881][ T4713] EXT4-fs (loop0): shut down requested (0) [ 98.540572][ T4725] loop3: detected capacity change from 0 to 1024 [ 99.856635][ T4744] loop0: detected capacity change from 0 to 164 [ 99.905813][ T4746] loop1: detected capacity change from 0 to 1024 [ 99.962263][ T4744] Unable to read rock-ridge attributes [ 99.982109][ T4744] Unable to read rock-ridge attributes [ 100.012717][ T4744] attempt to access beyond end of device [ 100.012717][ T4744] loop0: rw=524288, want=263332, limit=164 [ 100.086548][ T4744] attempt to access beyond end of device [ 100.086548][ T4744] loop0: rw=0, want=263332, limit=164 [ 100.135397][ T25] audit: type=1800 audit(1750243252.503:7): pid=4744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.154" name="file0" dev="loop0" ino=1862 res=0 errno=0 [ 101.468338][ T4754] loop2: detected capacity change from 0 to 16 [ 101.538753][ T4754] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x56197709, 0x2a6de271 expected [ 101.808589][ T4762] loop1: detected capacity change from 0 to 1024 [ 101.886132][ T4764] binder: 4763:4764 ioctl 4018620d 0 returned -22 [ 102.643864][ T25] audit: type=1326 audit(1750243255.013:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9960b14929 code=0x7ffc0000 [ 102.735686][ T25] audit: type=1326 audit(1750243255.063:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9960b14929 code=0x7ffc0000 [ 102.835417][ T25] audit: type=1326 audit(1750243255.133:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9960b14929 code=0x7ffc0000 [ 103.929601][ T4782] loop4: detected capacity change from 0 to 128 [ 103.943484][ T25] audit: type=1326 audit(1750243255.133:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9960b14929 code=0x7ffc0000 [ 103.976679][ T25] audit: type=1326 audit(1750243255.133:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9960b14929 code=0x7ffc0000 [ 104.016307][ T4782] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 104.024770][ T25] audit: type=1326 audit(1750243255.133:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9960ab0b19 code=0x7ffc0000 [ 104.054743][ T25] audit: type=1326 audit(1750243255.133:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9960b14929 code=0x7ffc0000 [ 104.080500][ T25] audit: type=1326 audit(1750243255.133:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9960b14929 code=0x7ffc0000 [ 104.084215][ T4782] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.124220][ T25] audit: type=1326 audit(1750243255.133:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9960ab0b19 code=0x7ffc0000 [ 104.196328][ T4788] loop2: detected capacity change from 0 to 1024 [ 104.203911][ T4782] ext2 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.250525][ T4788] EXT4-fs (loop2): Ignoring removed orlov option [ 104.313614][ T4788] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 104.408886][ T4788] EXT4-fs (loop2): shut down requested (0) [ 104.437443][ T4782] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.157: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 104.653830][ T4795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 104.714415][ T4796] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.868036][ T4804] loop1: detected capacity change from 0 to 1024 [ 105.904045][ T4808] loop3: detected capacity change from 0 to 1024 [ 106.943761][ T4825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'. [ 107.017232][ T4829] loop4: detected capacity change from 0 to 8 [ 107.046252][ T4160] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.094301][ T4829] SQUASHFS error: Unable to read inode 0x127 [ 107.195667][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 107.447116][ T4160] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.485844][ T4160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.563454][ T4160] usb 3-1: config 0 descriptor?? [ 107.891845][ T4841] loop1: detected capacity change from 0 to 16 [ 107.892484][ T4160] cp210x 3-1:0.0: cp210x converter detected [ 107.909641][ T4841] erofs: (device loop1): mounted with root inode @ nid 36. [ 108.801888][ T1325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.991301][ T4160] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 109.562960][ T4160] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 109.599420][ T4160] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 109.620415][ T4160] usb 3-1: cp210x converter now attached to ttyUSB0 [ 109.632745][ T4160] usb 3-1: USB disconnect, device number 6 [ 109.745099][ T4160] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.765125][ T4160] cp210x 3-1:0.0: device disconnected [ 109.852434][ T4855] loop1: detected capacity change from 0 to 512 [ 110.567717][ T4855] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000001,nolazytime,delalloc,i_version,lazytime,nodiscard,grpjquota=,block_validity,errors=remount-ro,. Quota mode: writeback. [ 110.587924][ T4855] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.678736][ T4864] loop2: detected capacity change from 0 to 8 [ 110.823902][ T4864] SQUASHFS error: zlib decompression failed, data probably corrupt [ 110.836349][ T4864] SQUASHFS error: Failed to read block 0x9b: -5 [ 110.861084][ T4864] SQUASHFS error: Unable to read metadata cache entry [99] [ 110.925993][ T4864] SQUASHFS error: Unable to read inode 0x127 [ 111.666919][ T4870] loop0: detected capacity change from 0 to 512 [ 111.761584][ T4870] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.827194][ T4870] EXT4-fs (loop0): 1 truncate cleaned up [ 112.385641][ T4870] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,grpquota,nodioread_nolock,errors=remount-ro,noload,. Quota mode: writeback. [ 112.486950][ T1325] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 112.569800][ T1325] usb 4-1: can't read configurations, error -71 [ 112.587166][ T25] kauditd_printk_skb: 35 callbacks suppressed [ 112.587181][ T25] audit: type=1800 audit(1750243264.963:52): pid=4882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.195" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 112.775739][ T4886] loop1: detected capacity change from 0 to 256 [ 113.569541][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 113.580987][ T4890] loop2: detected capacity change from 0 to 16 [ 113.673698][ T4890] erofs: (device loop2): mounted with root inode @ nid 36. [ 114.316070][ T1325] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 114.536068][ T4160] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.566066][ T1325] usb 1-1: device descriptor read/64, error -71 [ 114.846173][ T1325] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 114.906043][ T4160] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 114.942600][ T4160] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.986186][ T4160] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.039840][ T4160] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.058301][ T1325] usb 1-1: device descriptor read/64, error -71 [ 115.076199][ T4160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.186106][ T1325] usb usb1-port1: attempt power cycle [ 115.219174][ T4160] usb 2-1: invalid MIDI out EP 0 [ 115.254842][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.300328][ T4160] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 115.344759][ T4922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.372556][ T4161] udevd[4161]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.444005][ T4911] udc-core: couldn't find an available UDC or it's busy [ 115.453972][ T4911] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.655995][ T1325] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 115.836850][ T1325] usb 1-1: device descriptor read/8, error -71 [ 115.883644][ T4927] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.014003][ T4930] loop2: detected capacity change from 0 to 8 [ 116.196004][ T1325] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 117.081449][ T4939] loop2: detected capacity change from 0 to 164 [ 117.136155][ T1325] usb 1-1: device descriptor read/8, error -71 [ 117.173792][ T4939] Unable to read rock-ridge attributes [ 117.805590][ T1325] usb usb1-port1: unable to enumerate USB device [ 119.042384][ T4211] usb 2-1: USB disconnect, device number 4 [ 119.135931][ T4950] loop2: detected capacity change from 0 to 1024 [ 119.221297][ T4954] loop1: detected capacity change from 0 to 16 [ 119.314309][ T4954] erofs: (device loop1): mounted with root inode @ nid 36. [ 120.801633][ T4972] loop2: detected capacity change from 0 to 256 [ 121.783800][ C0] sched: RT throttling activated [ 122.348980][ T4981] loop0: detected capacity change from 0 to 512 [ 122.444279][ T4985] loop2: detected capacity change from 0 to 164 [ 122.556248][ T4981] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.594163][ T4985] Unable to read rock-ridge attributes [ 122.683451][ T4981] EXT4-fs (loop0): 1 truncate cleaned up [ 122.726363][ T4981] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000001,nogrpid,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 124.468082][ T5006] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.622337][ T5008] loop1: detected capacity change from 0 to 8 [ 124.956901][ T5019] loop2: detected capacity change from 0 to 164 [ 125.053226][ T5019] Unable to read rock-ridge attributes [ 128.571950][ T5051] [ 128.574422][ T5051] ====================================================== [ 128.581454][ T5051] WARNING: possible circular locking dependency detected [ 128.588485][ T5051] 5.15.185-syzkaller #0 Not tainted [ 128.593687][ T5051] ------------------------------------------------------ [ 128.600712][ T5051] syz.1.253/5051 is trying to acquire lock: [ 128.606610][ T5051] ffff8880796b0c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 128.617681][ T5051] [ 128.617681][ T5051] but task is already holding lock: [ 128.625058][ T5051] ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 128.634777][ T5051] [ 128.634777][ T5051] which lock already depends on the new lock. [ 128.634777][ T5051] [ 128.645348][ T5051] [ 128.645348][ T5051] the existing dependency chain (in reverse order) is: [ 128.654373][ T5051] [ 128.654373][ T5051] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 128.662388][ T5051] __mutex_lock_common+0x1eb/0x2390 [ 128.668251][ T5051] mutex_lock_nested+0x17/0x20 [ 128.673541][ T5051] rfkill_register+0x33/0x8a0 [ 128.678766][ T5051] hci_register_dev+0x452/0x970 [ 128.684170][ T5051] vhci_create_device+0x32c/0x5c0 [ 128.689821][ T5051] vhci_write+0x391/0x450 [ 128.694871][ T5051] vfs_write+0x712/0xd00 [ 128.699654][ T5051] ksys_write+0x14d/0x250 [ 128.704605][ T5051] do_syscall_64+0x4c/0xa0 [ 128.709567][ T5051] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.716005][ T5051] [ 128.716005][ T5051] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 128.723845][ T5051] __mutex_lock_common+0x1eb/0x2390 [ 128.729585][ T5051] mutex_lock_nested+0x17/0x20 [ 128.734881][ T5051] vhci_send_frame+0x88/0x100 [ 128.740356][ T5051] hci_send_frame+0x1a9/0x2e0 [ 128.745619][ T5051] hci_tx_work+0x9f9/0x1710 [ 128.750658][ T5051] process_one_work+0x863/0x1000 [ 128.756139][ T5051] worker_thread+0xaa8/0x12a0 [ 128.761354][ T5051] kthread+0x436/0x520 [ 128.766136][ T5051] ret_from_fork+0x1f/0x30 [ 128.771092][ T5051] [ 128.771092][ T5051] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 128.780328][ T5051] __flush_work+0xdd/0x1b0 [ 128.785279][ T5051] hci_dev_do_close+0x1e7/0x1030 [ 128.790756][ T5051] hci_error_reset+0x101/0x2c0 [ 128.796059][ T5051] process_one_work+0x863/0x1000 [ 128.801540][ T5051] worker_thread+0xaa8/0x12a0 [ 128.806749][ T5051] kthread+0x436/0x520 [ 128.811440][ T5051] ret_from_fork+0x1f/0x30 [ 128.815898][ T5054] loop0: detected capacity change from 0 to 16 [ 128.816390][ T5051] [ 128.816390][ T5051] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 128.830207][ T5051] __mutex_lock_common+0x1eb/0x2390 [ 128.835947][ T5051] mutex_lock_nested+0x17/0x20 [ 128.837244][ T5054] erofs: (device loop0): mounted with root inode @ nid 36. [ 128.841251][ T5051] bg_scan_update+0x44/0x3b0 [ 128.841275][ T5051] process_one_work+0x863/0x1000 [ 128.841292][ T5051] worker_thread+0xaa8/0x12a0 [ 128.864255][ T5051] kthread+0x436/0x520 [ 128.868864][ T5051] ret_from_fork+0x1f/0x30 [ 128.873820][ T5051] [ 128.873820][ T5051] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 128.883751][ T5051] __lock_acquire+0x2c33/0x7c60 [ 128.889154][ T5051] lock_acquire+0x197/0x3f0 [ 128.894206][ T5051] __flush_work+0xdd/0x1b0 [ 128.899168][ T5051] __cancel_work_timer+0x3ac/0x520 [ 128.904819][ T5051] hci_request_cancel_all+0xcc/0x300 [ 128.910639][ T5051] hci_dev_do_close+0x4e/0x1030 [ 128.916034][ T5051] hci_rfkill_set_block+0x10a/0x190 [ 128.921782][ T5051] rfkill_set_block+0x1c6/0x420 [ 128.927201][ T5051] rfkill_fop_write+0x458/0x560 [ 128.932595][ T5051] vfs_write+0x300/0xd00 [ 128.937389][ T5051] ksys_write+0x14d/0x250 [ 128.942254][ T5051] do_syscall_64+0x4c/0xa0 [ 128.947208][ T5051] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.953646][ T5051] [ 128.953646][ T5051] other info that might help us debug this: [ 128.953646][ T5051] [ 128.963885][ T5051] Chain exists of: [ 128.963885][ T5051] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 128.963885][ T5051] [ 128.979643][ T5051] Possible unsafe locking scenario: [ 128.979643][ T5051] [ 128.987159][ T5051] CPU0 CPU1 [ 128.992542][ T5051] ---- ---- [ 128.997919][ T5051] lock(rfkill_global_mutex); [ 129.003002][ T5051] lock(&data->open_mutex); [ 129.010139][ T5051] lock(rfkill_global_mutex); [ 129.017538][ T5051] lock((work_completion)(&hdev->bg_scan_update)); [ 129.024260][ T5051] [ 129.024260][ T5051] *** DEADLOCK *** [ 129.024260][ T5051] [ 129.032523][ T5051] 1 lock held by syz.1.253/5051: [ 129.037478][ T5051] #0: ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 129.047690][ T5051] [ 129.047690][ T5051] stack backtrace: [ 129.053605][ T5051] CPU: 1 PID: 5051 Comm: syz.1.253 Not tainted 5.15.185-syzkaller #0 [ 129.061798][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.071886][ T5051] Call Trace: [ 129.075183][ T5051] [ 129.078140][ T5051] dump_stack_lvl+0x168/0x230 [ 129.082844][ T5051] ? load_image+0x3b0/0x3b0 [ 129.087374][ T5051] ? show_regs_print_info+0x20/0x20 [ 129.092755][ T5051] ? print_circular_bug+0x12b/0x1a0 [ 129.097977][ T5051] check_noncircular+0x274/0x310 [ 129.102942][ T5051] ? add_chain_block+0x940/0x940 [ 129.107891][ T5051] ? lockdep_lock+0xdc/0x1e0 [ 129.112503][ T5051] ? __lock_acquire+0x12d9/0x7c60 [ 129.117546][ T5051] ? lockdep_lock+0x1e0/0x1e0 [ 129.122338][ T5051] ? mark_lock+0x94/0x320 [ 129.126688][ T5051] __lock_acquire+0x2c33/0x7c60 [ 129.131566][ T5051] ? verify_lock_unused+0x140/0x140 [ 129.136784][ T5051] ? mark_lock+0x94/0x320 [ 129.141129][ T5051] ? verify_lock_unused+0x140/0x140 [ 129.146352][ T5051] lock_acquire+0x197/0x3f0 [ 129.150872][ T5051] ? __flush_work+0xc1/0x1b0 [ 129.155482][ T5051] ? __lock_acquire+0x7c60/0x7c60 [ 129.160525][ T5051] ? read_lock_is_recursive+0x10/0x10 [ 129.165916][ T5051] ? start_flush_work+0x776/0x820 [ 129.170959][ T5051] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 129.176882][ T5051] ? _raw_spin_unlock+0x40/0x40 [ 129.181757][ T5051] __flush_work+0xdd/0x1b0 [ 129.186306][ T5051] ? __flush_work+0xc1/0x1b0 [ 129.190914][ T5051] ? flush_work+0x20/0x20 [ 129.195268][ T5051] ? try_to_grab_pending+0xf3/0x7e0 [ 129.200481][ T5051] ? lockdep_hardirqs_off+0x70/0x100 [ 129.205788][ T5051] ? mark_lock+0x94/0x320 [ 129.210147][ T5051] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 129.216154][ T5051] ? lock_chain_count+0x20/0x20 [ 129.221192][ T5051] ? mark_lock+0x94/0x320 [ 129.225553][ T5051] ? __cancel_work_timer+0x331/0x520 [ 129.230944][ T5051] __cancel_work_timer+0x3ac/0x520 [ 129.236087][ T5051] ? cancel_work_sync+0x20/0x20 [ 129.241098][ T5051] ? __cancel_work+0x1f4/0x2d0 [ 129.245886][ T5051] ? lockdep_hardirqs_on+0x94/0x140 [ 129.251207][ T5051] ? __cancel_work+0x26f/0x2d0 [ 129.256138][ T5051] ? cancel_work+0x20/0x20 [ 129.260586][ T5051] ? lock_chain_count+0x20/0x20 [ 129.265546][ T5051] hci_request_cancel_all+0xcc/0x300 [ 129.270860][ T5051] hci_dev_do_close+0x4e/0x1030 [ 129.275733][ T5051] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 129.281808][ T5051] ? _raw_spin_unlock+0x40/0x40 [ 129.286679][ T5051] hci_rfkill_set_block+0x10a/0x190 [ 129.291908][ T5051] ? rcu_lock_release+0x20/0x20 [ 129.296784][ T5051] rfkill_set_block+0x1c6/0x420 [ 129.301671][ T5051] rfkill_fop_write+0x458/0x560 [ 129.306549][ T5051] ? rfkill_fop_read+0x4b0/0x4b0 [ 129.311501][ T5051] ? common_file_perm+0x160/0x1c0 [ 129.316557][ T5051] ? fsnotify_perm+0x5d/0x560 [ 129.320293][ T7] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 129.321256][ T5051] ? security_file_permission+0x75/0xa0 [ 129.334353][ T5051] ? rfkill_fop_read+0x4b0/0x4b0 [ 129.339519][ T5051] vfs_write+0x300/0xd00 [ 129.343789][ T5051] ? file_end_write+0x250/0x250 [ 129.348666][ T5051] ? __fget_files+0x40f/0x480 [ 129.353376][ T5051] ? __fdget_pos+0x1e2/0x370 [ 129.358030][ T5051] ? ksys_write+0x71/0x250 [ 129.362464][ T5051] ksys_write+0x14d/0x250 [ 129.366808][ T5051] ? __ia32_sys_read+0x80/0x80 [ 129.371596][ T5051] ? lockdep_hardirqs_on+0x94/0x140 [ 129.376818][ T5051] do_syscall_64+0x4c/0xa0 [ 129.381245][ T5051] ? clear_bhb_loop+0x30/0x80 [ 129.385944][ T5051] ? clear_bhb_loop+0x30/0x80 [ 129.390634][ T5051] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.396543][ T5051] RIP: 0033:0x7f3895e81929 [ 129.400974][ T5051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.420710][ T5051] RSP: 002b:00007f3893cc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.429241][ T5051] RAX: ffffffffffffffda RBX: 00007f38960a9080 RCX: 00007f3895e81929 [ 129.437336][ T5051] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000006 [ 129.445592][ T5051] RBP: 00007f3895f03b39 R08: 0000000000000000 R09: 0000000000000000 [ 129.453588][ T5051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.461576][ T5051] R13: 0000000000000000 R14: 00007f38960a9080 R15: 00007ffcee5873a8 [ 129.469560][ T5051] [ 129.579983][ T7] usb 3-1: device descriptor read/64, error -71 [ 129.849810][ T7] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 130.039709][ T7] usb 3-1: device descriptor read/64, error -71 [ 130.160071][ T7] usb usb3-port1: attempt power cycle [ 130.569431][ T7] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 130.659776][ T7] usb 3-1: device descriptor read/8, error -71 [ 130.929298][ T7] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 131.019337][ T7] usb 3-1: device descriptor read/8, error -71 [ 131.139494][ T7] usb usb3-port1: unable to enumerate USB device [ 132.419741][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.426052][ T1422] ieee802154 phy1 wpan1: encryption failed: -22