last executing test programs: 5.049201167s ago: executing program 1 (id=3629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) personality(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000dfff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x83, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 4.778482239s ago: executing program 2 (id=3634): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7f6609000000", @ANYRESHEX=r7, @ANYBLOB=',mmap,\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$FUSE(r8, 0x0, 0x0) 4.291018938s ago: executing program 3 (id=3635): write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20}, 0x20) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x101ff, 0x0, 0x4000, 0x2000, &(0x7f0000863000/0x2000)=nil}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) socket$key(0xf, 0x3, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x44400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x3, 0x4000, 0x1000, &(0x7f000016f000/0x1000)=nil}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0x11, r1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x3, 0x0, 0x0, 0x0, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40000000200958bf1832dab75000073110a00000000001600000200000000ffff740800000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) 4.199272965s ago: executing program 1 (id=3637): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, 0x0}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0) writev(r1, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000fcff00000000030000000500050008000000180001801400020073797a5f74756e"], 0x34}}, 0x0) 4.183249046s ago: executing program 1 (id=3638): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000030000000000000000000000851000000600000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000001600000001000000180000000000000000000000000000009500000000000000360a000000000000180200002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000720afbff0000000485000000060000009500000000000000d582a27ce32b3947c7c45798672fcaf17e2b51e4404c630e959cc93ee9330cfe642b3f8ba76956f1fc3004640135562bf8621156cc6699e3075b151c08388c0ca3aeff2b52cdca7798f1354cf55fc4a3dcec3062ac8d686ad3dd8a4b4a7fda190a97bea718"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x70}, 0x78) 4.117309402s ago: executing program 1 (id=3639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000100000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r6, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r6, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r5) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x80, 0x40, 0x8, 0x6, {{0x58, 0x4, 0x1, 0x13, 0x160, 0x66, 0x0, 0x1, 0x2f, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x44, 0xc2, 0x1, 0x7, [{@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0x6e4a}, {@local, 0x1}, {@broadcast}, {@rand_addr=0x64010101, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@private=0xa010100, 0x5}]}, @cipso={0x86, 0x25, 0x3, [{0x6, 0xf, "8cd1459a1ca1cea43d3a47788f"}, {0x0, 0xc, "46758a0ca1b855039706"}, {0x5, 0x4, "a4f0"}]}, @lsrr={0x83, 0x17, 0xbf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x42}]}, @timestamp_prespec={0x44, 0x44, 0xd3, 0x3, 0x2, [{@loopback, 0x6}, {@remote, 0xfffffff8}, {@rand_addr=0x64010101, 0x7800}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@remote, 0x1}, {@private=0xa010100, 0x101}, {@dev={0xac, 0x14, 0x14, 0x42}}]}, @timestamp_addr={0x44, 0x14, 0x18, 0x1, 0xb, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff7}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x4f, [@loopback, @remote]}, @timestamp_addr={0x44, 0x2c, 0xc4, 0x1, 0x7, [{@multicast2, 0x4}, {@rand_addr=0x64010101, 0x693f}, {@private=0xa010101, 0x5}, {@broadcast, 0x1}, {@local, 0x9}]}, @ssrr={0x89, 0x23, 0xa7, [@multicast2, @remote, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast, @multicast1, @multicast1]}, @rr={0x7, 0x13, 0x8c, [@local, @multicast2, @dev={0xac, 0x14, 0x14, 0x34}, @empty]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r4, r7, 0x25, 0x7, @void}, 0x10) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@main=@item_012={0x2, 0x0, 0x0, "b087"}, @local=@item_012={0x2, 0x2, 0xa, "a011"}, @global=@item_4={0x3, 0x1, 0xa, "ed0100c0"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x40, 0x2, 0x3d, {0x3d, 0x24, "be988b3ab8a2c642ef7f59c8f63603387798bb9025c59a50ae1744c34a239484aaeabced52b605ba1ea8a5f49fff7fc787a06625e1a8b6ad17fff5"}}, &(0x7f0000000140)={0x0, 0x3, 0x95, @string={0x95, 0x3, "4ab68c616ffb338894a12d3d252f45da847af2f66326aa2b12ae4b8d289e7a79e66114fee2f4204c80fdf4e6590b7ce33624c679660e07e765be4507f10ad29624290cd65f686c04e94410727feffb0375d85efbf01b37b80c6e990877c9ae040416d4aee9e5cd2140a5e1007fc3cec0909e47e4b40dfb553f9d014c201705d9e655a71127a3cf88a98246de0372eb233ad3fa"}}, &(0x7f0000000040)={0x0, 0x22, 0x15, {[@main=@item_4={0x3, 0x0, 0x9, "83babe4c"}, @main=@item_4={0x3, 0x0, 0x9, "4234a424"}, @global=@item_012={0x0, 0x1, 0x3}, @local=@item_4={0x3, 0x2, 0x1, "c4d28cea"}, @local=@item_4={0x3, 0x2, 0x3, "c93738aa"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4820, 0xb, 0x1, {0x22, 0xc5f}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x40, 0xe, 0x7c, "b8077c6fb548e88bc9d7e7354328c184e28f9368d9eb8e20d3224bff567650129e2efb3e92348a98a2205c1994631c70ad19a7345fdacac6e6580dd7d0a0ee98660caa77c345f4fe51818e81ec7e6495c7b8baf6dd5c0721e5581034bceba7637cf93c5a19ed0c20ef516b77fa928109072be7f3307d181cd86ad9f8"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000400)={0x20, 0x1, 0x66, "10de6b36594c032ed5dc911f61e6c0d59aeaece414be75eacd2b64b93c51539d01a13df6b52c2f6ea11fdc13faba402e2427570358f01cdf124d585e5b043fee3846760be55824af5e8aeeb6b5ccd5cd3648451f260d9720d05c8c3ad83d3659d1dbe41ffd87"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x3}}) 3.914612318s ago: executing program 2 (id=3642): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\x95:..'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ')(+'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x851) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1ffe3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x50}, 0x1, 0x0, 0x0, 0x20002040}, 0x20000000) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$tcp_congestion(r8, &(0x7f0000000400)='highspeed\x00', 0xa) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x94, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40805}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x6, 0x3}, {0x4, 0x3}, {0x8, 0xf}}, [{0x8, 0xb, 0x5}, {0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r10, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ',\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc5}, 0x4040) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r11, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000810}, 0x20000081) r12 = openat$cgroup(r0, &(0x7f0000000a00)='syz1\x00', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000a40)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r10, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}}, 0x4) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r7, 0x4068aea3, &(0x7f0000000c80)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r8, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000ec0)=[{}, {}], 0x10, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0x55, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1c, 0x4, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf}, [@jmp={0x5, 0x0, 0x9, 0x8, 0x0, 0x4, 0xfffffffffffffffc}]}, &(0x7f0000000d40)='GPL\x00', 0xffffc11b, 0x0, 0x0, 0x41000, 0x55, '\x00', r9, 0x3, r7, 0x8, &(0x7f0000000d80)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000dc0)={0x0, 0xa, 0x40, 0x1}, 0x10, r14, 0xffffffffffffffff, 0x8, &(0x7f0000001100)=[r13], &(0x7f0000001140)=[{0x1, 0x5, 0x4, 0xd}, {0x0, 0x2, 0x5}, {0x0, 0x3, 0x6}, {0x3, 0x2, 0xd, 0x9}, {0x0, 0x1, 0xd, 0x1}, {0x2, 0x4, 0xb, 0x5}, {0x5, 0x3, 0x9, 0x4}, {0x5, 0x4, 0xd, 0x1}], 0x10, 0x3}, 0x90) ioctl$sock_inet_SIOCRTMSG(r13, 0x890d, &(0x7f00000012c0)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e21, @broadcast}, 0x202, 0x0, 0x0, 0x0, 0xa9, &(0x7f0000001280)='ip6gretap0\x00', 0x4, 0x7fffffffffffffff, 0xa230}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001340)=0x0) sched_setscheduler(r15, 0x0, &(0x7f0000001380)=0x7) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r10, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x4040) 3.89043667s ago: executing program 2 (id=3644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 3.837571934s ago: executing program 2 (id=3645): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206104724e000000000001090224000100000000090400000103000200092100000001220500090581"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000500)={0x2c, &(0x7f0000000680)={0x0, 0x0, 0x6, {0x6, 0x0, "a36dcb81"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.480455852s ago: executing program 3 (id=3646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000001100)="48b84e000000000000000f23c00f21f83503000e000f23f866b808018ee82e656564f20f38f1a4759a000000260ffa0cb7400f0f4b00aa0f090fc73eb9bb0a00000f32420f09f3400fc773c3", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f000052a000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1, 0x8}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="8bb177c20a7c0c4100ffa6f380d6f8b97ae2cf989619c4c6a3741628a38e59ce76f73bcd4623d6798a3234c32ef1fb6954cc0701000000acaea457f05e513b1a51d326d737a985"], 0xed) 3.085114194s ago: executing program 0 (id=3647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) personality(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000dfff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x90, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 2.674525747s ago: executing program 3 (id=3651): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.666078607s ago: executing program 3 (id=3652): socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000180)=0x5, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./bus\x00', 0x300000, &(0x7f0000004000)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYRES32, @ANYBLOB="61236432d6a90a0f9a131859644305b8f4d1ac816f27795c3f84dbbba3928bc3d6d54895345bc7a23b24e17e6caf19564d8a32f4956d4d0b896d3685c963f9bd7746e1aee5af56b0663d8935c1cd7260f384bc862d51e5ebc6b9741bfb7f59fba8e299e1a2ab", @ANYRES64=r2, @ANYBLOB="6ea7366302264572ef2c92d0951242da2b8618e2c51241554b3f57f48a65c61817e717ac43f4707e66f5840341e8972be9a6948f841c0ab20f307e341ea9d881f078bb3026c9f095fad181d5b07740c0c7ce2b3744f9365284b74354735ea2531c34bdb5f7ed5dafbf3b6363953f02ee857cd56f6f430fc0f06f7d992efdb3b4718f9f0663cc5a5a9916cd7a1236bdf9adeb50e41b59892a2c34a2c799e2ad26124ab5249d6ad2bfb4292614753aa8cacca5d11cd472d4e66fa3272cd967775ce5bcc6b9ff4a69c68adcd9c043f5ee6c5e048619e5828bf58c629dce144bf4018a33ea452df7025781ec4377d95f78b20f363f260074985939f70996f4fbc8445eadd896f7e8a0f2adc4fb5cbf6030873a98088e14e4a5d6a2f0693c12bc03d109dac2897a9cc22fa7687d53d1b8c30104b6014bc93882b32e358f25df4e1e4a1ac66574713d08d0c6b4d8e915fefb6536a810ed141709c4cfcf666b780821968f47ea1a0f0004c60502327155fd0ab71488a3211e201de6ac7cac9fcdeb0e54d6380e1f2aa46d6f64f4a83303ab1a0217bfaa2158b4b410e77a8c4a03d9f570e99b5c69349ff5f7df88f5d66320687ef38cb0e37bc497082119dbc8d883b201417f35fb7eae4ea89a4c5cabb505f644f1a244c2ee4f61fef5c1a8216521cb92d231ce0018f7ef805ced6ab526965fec561d7a346da1387db888888da076b067bd30110ca4a2f78ed81211ef51587657925941294addeccbe9e47cda4ce51cac04029084dc4ae343aff54e8d469a2d092d62967978b8d79214736ad225395565b3a3a537735dccb2793fd985c89c648a3b0214b988fd4590cf3a872fcb73ff822db081dd6d83bf4028d1f6acde6735b36724592cf53a861da9ca1474c7a03d62ac9eed6a3935073593ef701c1d34e193581821a64b144b02ffe810b2e612db9936356883a3492d70410e447ddffdaa774599139d2afc6d212e24812b28e8d7acd266eb533697f955bd1807387898be1665d7be37e9042b24180a8f6c6ba67573dd1fa0f77660de0104588d027bff38980de5678bfac5e340657847f4df53cb02b3f0ff275b7feceda156f25b4d549fd67c326abad77148c9abac85e6d6c1fc9d846cc1b9852f9ab384e82fe6a1d6c2f56c47f77ef03a4e695c9578d983d2fccad841ae8a7a02ebc1d7426a6c2aa62698dc8d031eea83940bd979b472df01946e2130fddcfde6aa1d26c72328217838fbdfec11b165a71bc7ce3db69b8380589ef079e05dfefe152e85261ee52d8ba14219ade9b7a2bce9366b2315506b3c7efb5abd8c93e454e411b7d7d226b1e178124147227d9aac0dfc3fa879bc85019439be2fb4229d2ec372236096d62933a0eb3476880973547ea5d269b7d52487ec954e74f7e9dc57748f19c03e921786a98c338840f8ac2b71c67c91a390dc706f2133694e9c2bf0bcc3c85a4eab1448d1be8e64d47becf3870d077c1fcbde0056e156b12ee9682619e21507573bebcc05ed40c82eaf08e72d8f742d0a94086c6994263a480f76dfbbab57c74a9e70e2bf53e852761b2cb37fa44a60cf0ae3da0de3c8ee9aa8c0e2126d1eea6905cb555926c7625947bae9b29402a3a26f0d3d243cfd6f70edfc48eacbbd1ccafc35b08a850186f25915d5912aa1eff9431f82f155e5bfe55d156f6f637545a8ddedcfc7b9fd6e77159029e5b44c3f069e99b164a5c2c22590005aec36cd35545724bab5fb5e185ca95d244b6c3d38d45e7666964c8a22e0c13f7b8911944386d509051a45ae701a43fd275a7378297324a5f31fdfc19c0be341d99bb2d4c00e838e86e8b4ba460778989811ebe749867793ecf4a42579b70a13e54945260fb597639d16bbb815e917ed944a32eda474c3e16040e30ce0bfa510e7e832e8022f8593400576798ec643d55a1f20239ebb2af13ce57344e77ad29b18a121fa3cbc1c5f83b1891633a8721908abbd19a3d13fc6c7f3dd93881bde76549c377d32894345cf339183f5ed61284ab1476035f64dcf327b62c7af116d5c0197686c0b5c23e9451bcee3e9ddd0e1aa7a48dd29b788de813ee8eafb4a74fc3b470b7c6f672716d1ad4392d3748a381c21bb7383d0d8d87d59a5743f755aa77352d0925b1e01e918a9b0fa73da837e29b1f435a910f211870174033b04fe97e239124a4a4f25061d056126e41aa6904fd5db5b4e7d938422c0a6e46e69a4a75b0a354b7e24afab33d7291aad832b5f918a1bafdde4d91f4f336530afffc66f612364f22b378b4a8bed746b4dd96cd181ae64c38b920cf6036139dfc82af133921de87b724acf72c2fb74d7186367c52326a99e1a079b1db564083b441d119833ebc1c571debc0ccbb534a5c23823c6a4e4116487c691b0ae6459cccc046440e3f6090eaad367308e8563b53ecb3d20dca6e1c93b163ffef729e4bc7e919db2f3179833462e82de37a8054a4342055eaed049ae1ede75653b0dabb202c170d223e7ded73e80068862035b2c67988b30389df3c08b9e3e84db6e8f6fdfd1f0f2ed8c2739de8681c1d841ffe37a5094287d97855150e8e9d66ac3c7244c741a007d85a310afa6a14e391d1fbe4118c6c9f2c7476d20dc96164280614bfb6fc3a6e9a31f5e36b3eddf3995e1d54af2fceecad49c8e6650dc7e6a6bae1077311b456d348325d10e2092deb81c80e640c38a457d053101eaddbb666620ee8e23764c0e694cb853b26a3933711d1d245c0ba5e365d8653935c01d4cafc2156567480bafd6cc13940d5ad2b525dee8920fdabe600419a8c9d4c5a31601c94b30106656c2fea01d865876c3af80094522d4f0cf3f1864f0aba65eb0313c0586f54ad1143b8e6622b95afbe64d7c3862234598cd91a0a063e9bb846a4714ce8c4f3804c5ca0a3ed4f58cc7a10aff1cae88849fa951784db0b29aff030000f1666502ffc12bfa2eef4cd06f8813f4b878ffbb84ae559b98d6ac372238f926e1877f1ea8df915e349bbf391bc35aa38c21c6afbff27ad5257feeec58ded8c8f228c575e0ae981cd9498adf27dc1ee7de8b56f984cb91922a1dc16a1b488fd1a365934353859c8be98be71e947ac98352b19511938f81ce71ba8207d72a182a9c2dd1ba6c98a1cc1cebcb6dc94758039dc5804b0ac01a0feed139cab9149958a6a0035e34ee04a61384436cdc487f8bf29947879e8ad9e2ae97d68a7c6b9cbb2521762b27b8bc83357689de911f76a31ac192c10006bafdc68ae85d3e0c4bd443c912d2a9f2995ea505a4cdb18d79f2e835bddebe687b09d67bf5d132a86b46165cad7fad8465d009eb62a5b2066ab07f74449caa050b6f3c334dfba0b93732d22ddd3bc82f60575c09a8cf1e011038a7e710e121030cf8f7bfcbf8d70f84e641caa6a11d4e615aa71671db787f17b64f73e99eb7e092126d6e710776ac2d6fcfc762c1bd4befde07451e3ff0be593f7844b4cd607243dda3af54dae6dce8e960e9c7d891f5db7d3d34606baaf6894edd8a0d0b504e6eecbf19d9954165d5bf547943eab6b9d192400917a6fe3c396b67c733e216506febe7d60e89eae17a8175cf55aeeebf78680524e4e5f3c923f06d905aa99d45d5e1e0401b6d446a85afd8dbdfde70c21b20650f9598340b1fdfe29d9bc8f787db2b6d7fc404d1cb3543c7add8d3df88b3ab1a3dd2b7cfd3c6f19e8c205c00ec9ccac1b491c156e3426f3674bf16b1e6947291f68d48e1ee356f94f67276085acf01bb46c42c3a6615dec4f62015a7ec0e4acdec4b939ae10fa195c94e464a6fc7af0a59b0df12e2d0fb1bb476e95fe2dac002b93fe19089a1e5e7cf82e66f12e788b4b47c4077e9e53ac7f7635dacf2d1777963e9709e4180740b269887ca0ccb01fd2b21b94982bf7c76a200eebae86b473549f80072604cb34aaa73c8b5484cfcaf027432ee8e0edcd0fa0a8767b3dc5877cef4a303b365cd330be1e83e708dea22882cbc100cf3c01d3e4bc7423e11f2ccabade4b49d6e22745826ea9f8bd20af19ed94eacce64c580e5fccfb6fc2eeeafb1eca04d515627dc0e34775eb96a6243f0c74e226c8eec1315b84814bc70d2404a9323e0cc875d31c835bf1c6ce35bfc7a54cc542cc37839a7c81c68a2b875065f1476bab358fd1481d4de7d22f6e4c5c2be7e3b052725fe4249fccab03fd09a6cff62e57c934f7d605121ef6b5217f34fb4e09ac8bc7313c50b4b16d06944915d849b4188218c22d7d98560b9eac936455bc07f2227c13fb1c7b5d62c6672176f079a3861380ff06040b7ce4cfbd8b6a7516ead9fd01c7bad6c3013a5265341ce4164f048cd872185c86afaab917f08cca9db7fec9cc5b6fae373de19edcb1f83f4d7b3995ad04b2b499b15b02bd00ca541ef498a5cc29cb843dda3701d12140844d88be539cb8cb3c7122025e815c4be3bd781c8d3ccf731bc2336d621708728d6bb17465cfb7d6dbe568dea9d50135cb7d88d667c5f3810a7a581388c496a911288d8740ca516d56fc0a343cd26f4ca64e541eff61faaec55b46631ce1021987a8e5102f7c6b21e9f49e8677a00842b2e554628ecc9c33c77030783dde30d819896ced0385069863b13a5e6d1248b5689be015766e68343ec81726f03b8b682d8f5a18ec3bc8b8ef712259ddb70ccc84e197c096b55c4664a9f9aa80cfd91f588e1f84e85b7ecfd94db42fb2ddb08be0eb94dd583957e85e2745ccb220be2f13c471c0061a8eb4e82ae7fa91bebf7403c3d597216d1734b19038480f8601a04a6b350963ea76c0f80f826ef6ccd15883b336799c20ac6963a2fc6fc7e5fe4b9613e8ae69506d7d91afb93c4c144f8b4e4e6c70b067a3ac83501949edd69fcc1406c75fb88f1b85ffb463053437ee744e0be563c398c8b12a526bcd2317dd8e16ab2379817d32edf64b36dd0931101e9e69dfbe0ee0adb6b66b4055939bb4b174e0f22cd851e92f9fb946febded95e614dedc2914871f732a2a4b55d5bd8849fcc437259557a6857216aa36853c97a750014fbc8b3c2ffd48ac2c2656d75ddcb2b33960f58e9b61687390becbf004d46d523a9b4c2987df749aaabac3fbe388c5950416f62a66d580b432d479459503eb2bb6944c2a059b30458dae51c325affda759f92820631b303e74f7f59ae086b73545320b3ba55d83f949d4c43ae9b57ed2b7c3521e48f8e0134da577c862b8d94e12b27ab4b01bb4cf8158190e0c7ec8b978021dc52a583644ab1bf6fe90f3eb18af7d2bd24aafc3c9eb74e6658862c1d6ca49008c6405325c54ca4e7f63b13b8ec7b0a640e04eb039b8a8f401b3ad7a4fee357db6b789ac1f39ea2a94c1703efdb759f2dbd2f399e7dcdfc34496b71e92561ce375f4767f246e8838450a3e8850e336979ff67be0c879b71797561f4035216f28f66e09e1d73293d66f2a10b21715c83d91c262d198fbde8d0cc81e5dca4f3e1052b1eb80bee907dd1ca14c24a5aa7a856e5e959d97db231ff4bdc283454492d014d2e51c529f6b656e8fba819567e0be7466d7b539d905c7deaa4914d6ca2d8d89fb8e9b4828fcb284b6ca9103b01ffca9f6972035e00fd625f7867d4b1e18ccf979a8369cca2306c8720032ae40a96f34f9ebf87e8cba9208aeeb5f2012136792a342bf4628e231b7be1c1608406679acf5d7a82ebc2ca03cbaf9d5243d310113ce71fe6965f4bd339cf1ebe6b0aead21534ad9b56927c0ca60d586f65d7fd90e61d2a7fcfd0117a1b8e4c3040629b5bc272ec8dae181a015c320e9abca64a3ca8dfcc717a582f837a5e4891ff3205fc6ad1465223cc62f9363c53fd5ec15dc14cec565569e106bdb4fc23bf3c0ac47de605fa7ac0dd3d2f1dfdef0022b913888e63ac1aec4fdcb066d6f49d5df4b55e8a4f5cca317ab4f720"], 0x0, 0x121d, &(0x7f0000000b40)="$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") r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200), 0x175d9003) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000711177000000000016020000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.221563503s ago: executing program 0 (id=3653): open(&(0x7f0000000100)='./file0\x00', 0x1019ff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) truncate(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2.184478216s ago: executing program 0 (id=3654): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r3 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000840)=ANY=[@ANYBLOB="696f63686172f365743d61736369692c646973636172642c646d61736b3d3030303030303030303030307d30303030303030303037000000003d", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES8=r2, @ANYRESHEX=0xee00, @ANYRES64], 0x0, 0x14f5, &(0x7f0000001580)="$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") (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20000009) (async, rerun: 64) close(r4) (async, rerun: 64) chdir(&(0x7f0000000180)='./file0\x00') r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r7}, 0x10) (async) personality(0x8) (async) uname(&(0x7f0000000180)=""/224) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{}, [@TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x800, 0x0, 0x4, 0x800}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0xcf1, 0x1ff, 0xffffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x2c8, 0x4, 0x3ff, 0xfffff001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x100, 0x0, 0x9, 0x0, 0x9}}]}]}}}]}, 0xac}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newtclass={0x70, 0x28, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x6, 0xd}, {0xa, 0xfff2}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x48}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_RATE={0x6, 0x5, {0x6}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x70}}, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x40042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x8000, 0x7d33, 0xc, 0x1, 0x6, '\x00', r8, r9, 0x5, 0x3, 0x5, 0x9}, 0x48) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', r8, r3, 0x2, 0x3, 0x1}, 0x48) (async, rerun: 32) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022120000009b36afad5391bd49afb10815d297c5ff341b"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb, 0x8, 0x1, {0x22, 0xb71}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000480)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)=ANY=[@ANYBLOB="2001e50000000579294a742c877f4373cf579c9289c86379c66d4a7f054208c5000db9a44cc51b45516cf302d40a3a1d79f9c0b7e5a2236f9c19a1972283c1ffacd6fd423cf691ca9ba1af56bcbc37fc1d1265c46ee01e2536c00033bf3220f7feb0c42bac69a858f12bda544af4ad3f0f23ef7bab797719d6b334e4c663efe9b806aecdcbdf0e5a1e4ac1a9b96a97280a2e81580bed57d2cd553dc4e802802ebea7a488cb7fa241acfaea6566b85b9570890cfe9231727b16da1ae67ad9be269c177c5d2fbc32ad8026d63f7477c62237b21ae4b2feb452aa108541b23ea74337610c6437407e080ec743a074dd6b3b2b"], &(0x7f0000000600)={0x20, 0x3, 0x1}}) (async, rerun: 32) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012"], 0x0) (rerun: 32) 2.076900715s ago: executing program 0 (id=3655): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.021497389s ago: executing program 1 (id=3656): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000043, &(0x7f0000000400), 0x3e, 0x4d1, &(0x7f0000001440)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f00000018c0), 0x4) r1 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) recvmsg(r0, 0x0, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) write$binfmt_script(r1, &(0x7f0000002800)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{}, {0x20, '/dev/loop#\x00'}], 0xa, "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"}, 0x110f) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r5 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f00000027c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x1c000, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000180)="8216e1e3686500000000000000", 0xd, 0x0, 0x0, 0x0) 2.020917219s ago: executing program 0 (id=3657): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfffffe0a, 0x4fab, 0x44, 0x201, r1, 0xa, '\x00', 0x0, r1, 0x1, 0x6, 0x1, 0x7}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r3}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x10000, 0x8, 0xfffffffa, 0x40, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0xd}, 0xfffffffffffffce2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x70) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = dup2(r7, r7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.020366689s ago: executing program 1 (id=3658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x0, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@private2, 0x0}, &(0x7f0000000200)=0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0xa, [@const={0x5}, @union={0x8, 0x1, 0x0, 0x5, 0x1, 0x9, [{0x7, 0x3, 0x2}]}, @struct={0xd, 0x1, 0x0, 0x4, 0x0, 0x4a, [{0x3, 0x2, 0x3}]}, @func={0xc, 0x0, 0x0, 0xc, 0x4}, @fwd={0x9}, @union={0x8, 0x3, 0x0, 0x5, 0x1, 0xef, [{0xb, 0x5, 0x9}, {0x9, 0x5, 0x9}, {0xc, 0x1, 0xfffffffd}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x5f, 0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000400)=""/26, 0xa6, 0x1a, 0x0, 0xc4c}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xf, 0xffff, 0x4, 0x40, r0, 0x1, '\x00', r1, r2, 0x97c38ad, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) 1.905520488s ago: executing program 2 (id=3659): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0104000109021200010000000009040000000206"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000094e8b08e030018010000202000202020000000000000000000a100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$unix(0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="c454624e3a363da6a369bb7f815f3bc57d60129f9a9c9c8d46a923ba1000bf3651a406821144e45c04d5ad761e7febaa7de5084854b59855b21d83594ccb51dfc8ad0e496cb5b27b9fb85d22f291e4644e1216e8db50a6ac5155303e5963003e95e5f5cd61e0b81b7cbe9c7223c79552b3659a69742c96d7cc0baac576caa7aa912bdb50ebadf52aafc351200589193ba21eb46391e59ce425d0e06b32fe1951bc6641660cb369c88b780fa37e297aa30256f6067c35a19e3b4ae9289fe0b436f03265f3", @ANYRES16=r2, @ANYRES32=r2, @ANYRES64=r1, @ANYRES16=0x0, @ANYRES32=r0], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000400000023cd04c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000080)=0x2) 1.230596463s ago: executing program 0 (id=3660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) syz_open_procfs(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000300790ea85bada266111c7f71943fd9e9a13c1ea64b7b78edaa0edc51a752698a5bff806da6583bde2c346a6673aec9e833d8802df9ff7e12c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12810000000000086d040ec2000000000001090224000100000200090400000103000000092100000001220b00090581030000000000"], 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) syz_open_dev$hiddev(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0xb, {0xb, 0x23, "93ffb32eacdbfe5d18"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 612.105282ms ago: executing program 4 (id=3662): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000030000000000000000000000851000000600000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000001600000001000000180000000000000000000000000000009500000000000000360a000000000000180200002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000720afbff0000000485000000060000009500000000000000d582a27ce32b3947c7c45798672fcaf17e2b51e4404c630e959cc93ee9330cfe642b3f8ba76956f1fc3004640135562bf8621156cc6699e3075b151c08388c0ca3aeff2b52cdca7798f1354cf55fc4a3dcec3062ac8d686ad3dd8a4b4a7fda190a97bea718"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x72}, 0x78) 611.584612ms ago: executing program 4 (id=3663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x401, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) (async) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x0) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x0) (async) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000006a00010000000000000000000a00000000000000040001"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f00000001c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000003f00)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x0, {{{@in=@remote, @in=@private}, {}, {}, 0x0, 0x6e6bb9, 0x1}}, [@XFRMA_IF_ID={0x8}, @mark={0xc}]}, 0xd4}}, 0x0) (async) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) (async) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') lstat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000840)) 611.259992ms ago: executing program 3 (id=3664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='ext4_ext_load_extent\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) (async, rerun: 64) r2 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r5, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r6}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000f54b94ca839f57c63341817d5d4e129a331aa27be201335e1e012e1c7911e6348b11d2d5d9023f3828ce24eaa0e821a5fa2e82ca8801e68e05e9642902ff27a567778371f6cd5dd3d27fcd0f11d08d6181fee4e0ec0600000000000000ef", @ANYRES32=r1, @ANYRESHEX], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 611.175022ms ago: executing program 4 (id=3665): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) 611.098462ms ago: executing program 3 (id=3666): ptrace(0x10, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x52, 0x52, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x1}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @datasec={0x4, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x3, 0x2}, {0x3, 0x3, 0x5}], "dae0"}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000000)=""/25, 0x70, 0x19, 0x1, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7fb0000000000007b8af8ff00000000bfa20000000000000702a83da4ac01000000010000009e771c620000f8ffffffb703000008000000b7652d92e11b87a549566ad8beecce4694934bf895e127955da392703a709fda18591e5fb49e3e68bee4f8ffef628e5100d6bc6f21ae6013ae6097fbe2b42862ddf0991883b04a381daee586434cd63fd4e75a4ecf0a6abaf97aff9c26e317e64c676b06460a453390b528657c39153628535b4e9e0d7712febaf1d875a8f25d2f973f526f24ee77b5c50c0f94f1dd"], 0x0, 0x0, 0xfffffffffffffe73, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, r1}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16], 0x0) 98.354433ms ago: executing program 2 (id=3667): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES16=r4, @ANYRES16=r8, @ANYRES16], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) readlinkat(r1, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRESHEX=r9, @ANYRESOCT=r9, @ANYRES32=r6], 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x5, 0x10002, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r10, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010", @ANYRES16=r0], 0xb8}}, 0x0) 72.766975ms ago: executing program 4 (id=3668): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) process_vm_writev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x840) (async) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000001440)='wg0\x00', 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0) (async) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0, 0x0) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x200, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfffffffc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x0, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x1}, 0x48) close(r6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x2, 0x5, 0xfd62, 0x310, r4, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000007e70000b7020000010000e185000000860000001811c720", @ANYRES16=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f0000001480)=ANY=[@ANYRES32=r4, @ANYBLOB="316b5316af637f449b4063fc86d136f8f6ba020139d891bac44902da6e43a65a760de59cbe8040e57cf100dcdf3a8d8801620cab2f708e36919d98ba4862c576", @ANYRESHEX=r3, @ANYBLOB="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", @ANYRES32=r8], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) (async) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 63.574475ms ago: executing program 4 (id=3669): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) (async) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (rerun: 64) 0s ago: executing program 4 (id=3670): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='svc_authenticate\x00'}, 0xffffffffffffff22) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207bbfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x7f, '\x00', 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x30, 0x0, 0x0, 0x0, 0x10001}, 0x90) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x5514, &(0x7f0000005d80)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy67aK3qrv4gV3KqgdPmiZpyG6SKU2a1p48eBQPnv0nRMGTR/8GD569iQfFm6BkZqpbP8ClSWPb3w8mz7xv3jzzvGFZeGZKAjiz5pNffirFtbgUEbMRcTUiOy8VR2Y1D89FxPWImHnsKBXzf0ycj4jLEXFtlDzPWSre+vTm8MbKj2/8/PW3F85d+fyr76a3a2Dano+I7lZ+vtvNY9rK48NivjZsZ7G7PCxi/kb3UTFO87jb3Mgy7NYO1tWyeLuVr0+3dvqjuNmp1Uex1d7M5rd6+QX7w9ZBnuwDD2vb2bjR3Mhiu59msbWf17W3n//ftt8f5HkaRb4PsvQxGBzEfL6518z3s/Uoi/XeoJjP86aN5t4oDotYXC7qaaeR1bFxlG/6/+3Ndm9nLxk2t/vttJesVKovVKp3ytXttNEcNJfLtW7jznKy0OqMlpUHzVp3tZWmrU6zUk+7i8lCq14vV6vJwt3mRrvWS6rVyu3KrfLKYnF2M3n1/jtJp5EsjOLL7d7OoN3pJ5vpdpJ/YjFZqtx+cTG5UU3eWltP1h/cu7e2/vZ7d9+9/9La668Ui/5WVrKwdGtpqVy9VV6qLp6h/X9UFD3G/cORlJ5s+YVJ1QFwguj/gWmYXP+//SBi8v1/6P/H4kT1vxPr/z87s/uHI3nC/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPj+7kvXstO5vPxlWL+qWLqmWJcioiZiPjtH8zG+UM5Z4s8c/+yfu4vNXxTiizD6BoXiuNyRKwWx69PT/pbAAAAgNPryw+vf5J36/nL/LQL4jjlN21mrr4/pnyliJib/2FM2WZGL8+OKVn27/tc7I0pW3YD6+KYkuW33M6NK9t/MnsoXHwslPIwc6zlAAAAx+JwJ3C8XQgAAADH6eNpF8B0lOLgUebBs+DsL+//fCB46dAIAAAAOIFK0y4AAAAAmLis//f7fwAAAHC65b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7lpA1EcgJ8NLvSfiqru26N0B8foEbrssuIAvQRHoFfIBTgD2eUIEUR4HBSiJIrisa2Q75PMMBb8/IzwYmakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0Wa0X//9+/9c2Z7dv54WX/dG2bgAAAHgLttV6Ub+Zpf7H5vzn5tTXpl9ERBkRD43dR/HuJHPU5FSPfL66V8NFRJ1wuMakOT5ExM/muP7S9a8AAAAA52uzXM3TaD29zIYuiD6lSZvy069MeUVEVLOrTGnlIe9bprD6/z2OP5nS6gmsaaawNOU2zpX2LPXjfpy1m95pitSUT38/270DAAA9Gp00/Y5CAAAA6NPvoQtgGEXcLmUelwInqWmW996f9AAAAIBXqBi6AAAAAKBz9fjf/n8AAABw3tL+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW60Xm+Vq3jZnt28nz90AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9tCoAgEIbBrezrX3j/w8YLeoYIZkB42EVBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBH7hnLOLXO2BJPVbVME3vGvaqOrBJnVokrF/p4sPUPfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMvO/bzGUcUBAH8zs7NJq+IaZQ8RseBBLzbd1tbexIMSPPgnCCHd1titP9ocbClCLt4k515EjyKCEm/9H3puoZd662EPFTxX5lcy+XFYhZ3ZZD8fePO+Mwzzvm8WQr77XgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsM/5wL06yQ6+I4/Law2d317P+0YE+c3/78XLWsjhqMunj4Y36SdSvnSw2nwwAAADzIanq+xDCk3RnNevjXl7/p9U9Wc3/00tFXNXzB+v+qq9q/6z9+cfT13YH6hXjZA+9ujEanjucSmd6s5xhz1+e4KZO/ubz716S/AOJP9l6dZzm7zP64cGDj7p5uDD9dAGA/+ds1ZdB9ftQ1g/aTAyAudGpFd5V/Z/02s0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAnjrfBCFUchhOXOXpx59Ozu+lH9/e3Hy1W7dO/edv2Z2SPSEMLVjdHwXFhscDaz7dbtO9fXRqPhzeaDN0MIbY3+QTn9659NcHMIU0rjTEtvfs6CuPywZyWf4xG0+EMJAIATKS1bVtc/SXdWs2vRUgjPf95f/79di8OE9f/Tzy89rI9Vr/8Hjc1w9q1s3vh65dbtO+9u3Fi7Nrw2/PK984P3BxcuX7x4eSX/rqQ4tp0mAAAAx1i3bPX6P146vP5/uhaHCev/b34cfFcfK1H/H2lv0a/tTAAAAObbK2f++Ts64nrU7YZv1zY3bw6K4+75+eLYQqr/2ULZ6vV/stR2VgAAAEATxlvRvvX/K7U4TLj+/+Ivr/9Wf2YSQjhVrv+fXf9qdKW56cy0qfzx8EL5cDsLAAAAKOvxUwfW/9N8/3+8u+UhDiG881YRl/8GcKL6P/n4+1/rY9X3/19oboozKe4X7yPv+yF0+m1nBAAAwEm2mLdeXv//le6sfvH76U+79v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO3fAAAA///FdTwZ") sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b0af8ff00010000bda107000000000007010000f8ffffffb702000008000000b703000000010000850000000500000018010000767b70250000e00000202020db1af8ff70ab658409c01900000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009501671c31873e9ad51088eef51f45427960df79"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000), 0xe) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r6}, 0x10) kernel console output (not intermixed with test programs): ten } for pid=13818 comm="syz.3.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 641.464369][ T1166] usb 3-1: device descriptor read/64, error -71 [ 641.548634][ T1168] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 641.557411][ T1168] usb 2-1: USB disconnect, device number 51 [ 641.805465][ T1149] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 641.819587][T13829] fuse: Bad value for 'fd' [ 641.881813][ T1166] usb 3-1: device descriptor read/64, error -71 [ 642.006139][ T1166] usb usb3-port1: attempt power cycle [ 642.026749][T13838] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 642.054861][T13838] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038 (0x7fffffff) [ 642.148611][ T1168] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 642.405944][ T1149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.417833][ T1149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.427715][ T1149] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 642.437999][ T1166] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 642.446795][ T1149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.456608][ T1149] usb 1-1: config 0 descriptor?? [ 642.510611][ T1162] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 642.609427][ T1166] usb 3-1: device descriptor read/8, error -71 [ 642.617352][T13848] syz.2.3385[13848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 642.617400][T13848] syz.2.3385[13848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 642.701133][ T1168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.725917][ T1168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.736270][ T1168] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 642.746646][ T1168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.762595][ T1168] usb 5-1: config 0 descriptor?? [ 642.812014][ T1162] usb 2-1: Using ep0 maxpacket: 32 [ 642.862904][ T1166] usb 3-1: device descriptor read/8, error -71 [ 642.948714][ T1162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.959757][ T1162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.969701][ T1162] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 642.979246][ T1162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.988303][ T1162] usb 2-1: config 0 descriptor?? [ 643.035079][ T1162] hub 2-1:0.0: USB hub found [ 643.158407][ T449] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 643.226125][T13844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3384'. [ 643.235568][T13844] netlink: 'syz.1.3384': attribute type 1 has an invalid length. [ 643.282383][ T1162] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 643.415399][ T449] usb 4-1: Using ep0 maxpacket: 8 [ 643.558440][ T449] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 643.568272][ T449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.584965][ T449] usb 4-1: config 0 descriptor?? [ 643.590028][ T1162] usbhid 2-1:0.0: can't add hid device: -71 [ 643.596091][ T1162] usbhid: probe of 2-1:0.0 failed with error -71 [ 643.602952][ T1149] uclogic 0003:256C:006D.00BC: interface is invalid, ignoring [ 643.654435][ T1162] usb 2-1: USB disconnect, device number 52 [ 644.038021][ T6815] usb 1-1: USB disconnect, device number 71 [ 644.110895][ T1168] uclogic 0003:256C:006D.00BD: interface is invalid, ignoring [ 644.187274][ T449] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 644.197589][ T449] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 644.244522][ T449] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 644.331110][ T1166] usb 5-1: USB disconnect, device number 40 [ 644.365727][T13891] binder: 13890:13891 ioctl 1 20001200 returned -22 [ 644.373336][T13892] netlink: 'syz.2.3396': attribute type 12 has an invalid length. [ 644.422831][T13896] bpf_get_probe_write_proto: 2 callbacks suppressed [ 644.422842][T13896] syz.2.3397[13896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.430529][T13896] syz.2.3397[13896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.434701][ T1162] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 644.468825][T13896] syz.2.3397[13896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.468875][T13896] syz.2.3397[13896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.691932][ T1162] usb 2-1: Using ep0 maxpacket: 8 [ 644.749046][ T1168] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 644.815636][ T1149] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 644.824440][T13903] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 644.841265][T13904] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 644.841341][ T1162] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.333126][ T1162] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 645.342803][ T1162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.351101][ T1162] usb 2-1: Product: syz [ 645.355730][ T1162] usb 2-1: Manufacturer: syz [ 645.360302][ T1149] usb 1-1: Using ep0 maxpacket: 32 [ 645.366901][ T1162] usb 2-1: SerialNumber: syz [ 645.372670][ T1162] usb 2-1: config 0 descriptor?? [ 645.415802][ T1168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.429848][ T1168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.440665][ T1168] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 645.451500][ T1168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.462685][ T1168] usb 3-1: config 0 descriptor?? [ 645.501530][ T1149] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.513554][ T1168] usbhid 3-1:0.0: can't add hid device: -22 [ 645.519584][ T1149] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.529645][ T1168] usbhid: probe of 3-1:0.0 failed with error -22 [ 645.536681][ T1149] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 645.545880][ T1149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.588247][ T1149] hub 1-1:4.0: USB hub found [ 645.739631][ T449] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 645.750012][ T449] asix: probe of 4-1:0.0 failed with error -71 [ 645.756955][ T449] usb 4-1: USB disconnect, device number 25 [ 645.766412][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3402'. [ 645.806518][ T1149] hub 1-1:4.0: 2 ports detected [ 646.027973][T13899] udc-core: couldn't find an available UDC or it's busy [ 646.035661][T13899] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 646.663592][ T1162] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 646.671743][ T1162] uvcvideo: No valid video chain found. [ 646.695723][ T1162] usb 2-1: USB disconnect, device number 53 [ 646.730678][T13932] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.737809][T13932] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.746266][T13932] device bridge_slave_0 entered promiscuous mode [ 646.753934][T13932] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.761267][T13932] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.769293][T13932] device bridge_slave_1 entered promiscuous mode [ 646.808554][T13932] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.815397][T13932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.822841][T13932] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.829780][T13932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.852997][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 646.861051][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.869306][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.881082][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.890459][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.898296][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.908481][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 646.916589][ T449] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 646.925541][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.932872][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.940556][ T1149] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 646.947520][ T1149] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 646.968704][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.977851][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.994139][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 647.005971][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 647.016806][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 647.048593][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 647.060647][T13932] device veth0_vlan entered promiscuous mode [ 647.074057][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 647.085379][T13932] device veth1_macvtap entered promiscuous mode [ 647.096116][T13938] syz.3.3408[13938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.096198][T13938] syz.3.3408[13938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.110336][T13938] syz.3.3408[13938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.122404][T13938] syz.3.3408[13938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.135942][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 647.158304][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 647.209772][ T24] audit: type=1400 audit(1720942939.380:3565): avc: denied { ioctl } for pid=13945 comm="syz.1.3411" path="socket:[90047]" dev="sockfs" ino=90047 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 647.213640][T13948] udc-core: couldn't find an available UDC or it's busy [ 647.243057][T13948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.292359][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.303949][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.314326][ T449] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.327919][ T449] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 647.337134][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.346338][ T449] usb 5-1: config 0 descriptor?? [ 647.357469][ T1149] usb 3-1: USB disconnect, device number 63 [ 647.362736][T13950] fuse: Bad value for 'rootmode' [ 647.379209][ T2925] device bridge_slave_1 left promiscuous mode [ 647.386099][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.405476][ T2925] device bridge_slave_0 left promiscuous mode [ 647.412544][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.422305][ T2925] device veth1_macvtap left promiscuous mode [ 647.428739][ T2925] device veth0_vlan left promiscuous mode [ 647.492445][ T1148] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 647.500588][ T1168] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 647.759075][ T1148] usb 4-1: device descriptor read/64, error -71 [ 647.835217][ T1149] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 647.864011][ T449] usbhid 5-1:0.0: can't add hid device: -71 [ 647.872781][ T449] usbhid: probe of 5-1:0.0 failed with error -71 [ 647.883660][ T449] usb 5-1: USB disconnect, device number 41 [ 647.997756][ T1168] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 648.007496][ T1168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.015320][ T1168] usb 2-1: Product: syz [ 648.019642][ T1168] usb 2-1: Manufacturer: syz [ 648.024399][ T1168] usb 2-1: SerialNumber: syz [ 648.073397][ T1149] usb 3-1: Using ep0 maxpacket: 8 [ 648.092839][ T1162] usb 1-1: USB disconnect, device number 72 [ 648.130702][ T1148] usb 4-1: device descriptor read/64, error -71 [ 648.187697][ T1149] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 648.198060][ T1149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.208822][ T1149] usb 3-1: config 0 descriptor?? [ 648.216760][ T449] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 648.387687][ T1148] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 648.559301][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.571294][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.583489][ T449] usb 5-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 648.593437][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.602697][ T449] usb 5-1: config 0 descriptor?? [ 648.644968][ T1148] usb 4-1: device descriptor read/64, error -71 [ 648.664046][ T1149] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 648.674349][ T1149] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 648.721303][ T1149] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 649.016699][ T1148] usb 4-1: device descriptor read/64, error -71 [ 649.130908][ T1148] usb usb4-port1: attempt power cycle [ 649.521290][ T1148] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 649.683296][ T1148] usb 4-1: device descriptor read/8, error -71 [ 649.940587][ T1148] usb 4-1: device descriptor read/8, error -71 [ 650.007169][ T1149] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 650.018224][ T1149] asix: probe of 3-1:0.0 failed with error -71 [ 650.025117][ T1149] usb 3-1: USB disconnect, device number 64 [ 650.075772][ T1168] usb 2-1: USB disconnect, device number 54 [ 650.107310][T13976] syz.1.3418[13976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.107386][T13976] syz.1.3418[13976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.122161][T13976] syz.1.3418[13976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.134784][T13976] syz.1.3418[13976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.235243][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3417'. [ 650.759926][ T449] usbhid 5-1:0.0: can't add hid device: -71 [ 650.765921][ T449] usbhid: probe of 5-1:0.0 failed with error -71 [ 650.774304][ T449] usb 5-1: USB disconnect, device number 42 [ 651.207345][ T1149] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 651.283981][ T449] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 651.350497][ T6813] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 651.512507][ T449] usb 5-1: Using ep0 maxpacket: 32 [ 651.521836][ T1148] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 651.550564][ T1149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.562281][ T1149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.572571][ T1149] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 651.581925][ T1149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.591271][ T1149] usb 2-1: config 0 descriptor?? [ 651.636483][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 651.648398][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 651.660505][ T449] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 651.670188][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.679660][ T449] usb 5-1: config 0 descriptor?? [ 651.703005][T13995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 651.703110][ T6813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.722772][ T6813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.732844][ T6813] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 651.741788][ T6813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.750328][ T6813] usb 3-1: config 0 descriptor?? [ 651.759742][ T1148] usb 4-1: Using ep0 maxpacket: 8 [ 651.874541][ T1148] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 651.884261][ T1148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.893051][ T1148] usb 4-1: config 0 descriptor?? [ 652.200236][ T6813] elecom 0003:056E:00FB.00BF: unknown main item tag 0x6 [ 652.208255][ T6813] elecom 0003:056E:00FB.00BF: item fetching failed at offset 4/5 [ 652.217346][ T449] usbhid 5-1:0.0: can't add hid device: -71 [ 652.217848][ T6813] elecom: probe of 0003:056E:00FB.00BF failed with error -22 [ 652.224346][ T449] usbhid: probe of 5-1:0.0 failed with error -71 [ 652.237393][T14003] syz.1.3428[14003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 652.237471][T14003] syz.1.3428[14003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 652.240418][ T449] usb 5-1: USB disconnect, device number 43 [ 652.332060][T14003] udc-core: couldn't find an available UDC or it's busy [ 652.338909][T14003] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 652.359986][ T1148] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 652.363293][T14030] input: syz1 as /devices/virtual/input/input67 [ 652.370552][ T1148] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 652.388591][ T1149] usb 2-1: string descriptor 0 read error: -71 [ 652.400827][ T6810] usb 3-1: USB disconnect, device number 65 [ 652.408291][ T1149] uclogic 0003:256C:006D.00BE: failed retrieving string descriptor #200: -71 [ 652.417076][ T1149] uclogic 0003:256C:006D.00BE: failed retrieving pen parameters: -71 [ 652.430516][ T1148] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 652.443201][ T1149] uclogic 0003:256C:006D.00BE: failed probing pen v2 parameters: -71 [ 652.452705][ T1149] uclogic 0003:256C:006D.00BE: failed probing parameters: -71 [ 652.463558][ T1149] uclogic: probe of 0003:256C:006D.00BE failed with error -71 [ 652.478824][ T1149] usb 2-1: USB disconnect, device number 55 [ 652.874244][ T1149] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 653.112435][ T1149] usb 2-1: Using ep0 maxpacket: 32 [ 653.236363][ T1149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.247412][ T1149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.257178][ T1149] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 653.266214][ T1149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.279063][ T1149] usb 2-1: config 0 descriptor?? [ 653.332667][ T1149] hub 2-1:0.0: USB hub found [ 653.517035][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3439'. [ 653.798462][ T1148] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 653.808974][ T1148] asix: probe of 4-1:0.0 failed with error -71 [ 653.816020][ T1148] usb 4-1: USB disconnect, device number 30 [ 653.821912][ T1149] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 653.862610][ T24] audit: type=1400 audit(1720942946.361:3566): avc: denied { setattr } for pid=14071 comm="syz.1.3441" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 653.915714][T14076] xt_time: unknown flags 0xa0 [ 653.950762][ T1149] usbhid 2-1:0.0: can't add hid device: -71 [ 653.957282][ T1149] usbhid: probe of 2-1:0.0 failed with error -71 [ 653.981113][T14079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14079 comm=syz.1.3443 [ 653.995360][ T1149] usb 2-1: USB disconnect, device number 56 [ 654.272723][T14085] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.282886][T14085] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.291157][T14085] device bridge_slave_0 entered promiscuous mode [ 654.301746][T14085] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.314014][T14085] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.322207][T14085] device bridge_slave_1 entered promiscuous mode [ 654.490421][T14098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 654.498041][T14098] IPv6: NLM_F_CREATE should be set when creating new route [ 654.670820][ T1149] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 654.789353][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 654.797687][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.813437][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.822959][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.832117][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.839155][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.847572][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.856375][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.865295][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.873518][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.892571][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 654.900679][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.909577][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.927290][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 654.940450][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 654.950127][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 654.957719][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 654.967175][T14085] device veth0_vlan entered promiscuous mode [ 654.980311][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 654.990961][T14085] device veth1_macvtap entered promiscuous mode [ 655.004197][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 655.019087][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 655.036954][ T1149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.053883][ T1149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.066788][ T1149] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 655.076651][ T1149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.087029][ T1149] usb 2-1: config 0 descriptor?? [ 655.102497][T14116] syz.0.3453[14116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.102572][T14116] syz.0.3453[14116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.116909][T14116] syz.0.3453[14116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.129828][T14116] syz.0.3453[14116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.255738][ T1175] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 655.474908][ T6813] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 655.656302][ T1175] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.668556][ T1175] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.703423][ T6813] usb 3-1: Using ep0 maxpacket: 32 [ 655.714450][ T7] device bridge_slave_1 left promiscuous mode [ 655.720784][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.729492][ T7] device bridge_slave_0 left promiscuous mode [ 655.736419][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.744619][ T449] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 655.754037][ T7] device bridge0 left promiscuous mode [ 655.759638][ T7] device veth1_macvtap left promiscuous mode [ 655.766281][ T7] device veth0_vlan left promiscuous mode [ 655.770243][ T1175] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 655.782484][ T1175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 655.791085][ T1175] usb 4-1: SerialNumber: syz [ 655.817898][ T6813] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.829946][ T6813] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.840309][ T6813] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 655.849880][ T6813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.875069][ T1149] usb 2-1: string descriptor 0 read error: -71 [ 655.897242][ T6813] hub 3-1:4.0: USB hub found [ 655.904268][ T1149] uclogic 0003:256C:006D.00C0: failed retrieving string descriptor #200: -71 [ 655.913207][ T1149] uclogic 0003:256C:006D.00C0: failed retrieving pen parameters: -71 [ 655.921426][ T1149] uclogic 0003:256C:006D.00C0: failed probing pen v2 parameters: -71 [ 655.929711][ T1149] uclogic 0003:256C:006D.00C0: failed probing parameters: -71 [ 655.938093][ T1149] uclogic: probe of 0003:256C:006D.00C0 failed with error -71 [ 655.947205][ T1149] usb 2-1: USB disconnect, device number 57 [ 655.985810][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3457'. [ 655.998945][ T449] usb 5-1: Using ep0 maxpacket: 8 [ 656.047520][ T1175] usb 4-1: 0:2 : does not exist [ 656.052601][ T1175] usb 4-1: unit 5 not found! [ 656.103562][ T6813] hub 3-1:4.0: 2 ports detected [ 656.141972][ T449] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 656.151700][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.161777][ T449] usb 5-1: config 0 descriptor?? [ 656.361630][ T6816] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 656.380373][T14138] tipc: Started in network mode [ 656.385375][T14138] tipc: Own node identity 3f000000000000000000000000000001, cluster identity 4711 [ 656.394938][T14138] tipc: Enabling of bearer rejected, failed to enable media [ 656.589238][ T6816] usb 1-1: Using ep0 maxpacket: 16 [ 656.618000][ T449] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 656.628284][ T449] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 656.675408][ T6827] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 656.684758][ T449] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 656.703811][ T6816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.715492][ T6816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 656.725282][ T6816] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 656.734832][ T6816] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 656.817945][ T6816] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 656.827174][ T6816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 656.835680][ T6816] usb 1-1: SerialNumber: syz [ 656.875952][ T6816] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 656.883939][ T6816] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 656.932167][ T6827] usb 2-1: device descriptor read/64, error -71 [ 657.067451][ T6816] usb 1-1: USB disconnect, device number 73 [ 657.208496][ T6813] hub 3-1:4.0: hub_hub_status failed (err = -32) [ 657.215853][ T6813] hub 3-1:4.0: config failed, can't get hub status (err -32) [ 657.303746][ T6827] usb 2-1: device descriptor read/64, error -71 [ 657.560920][ T6827] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 657.575558][T14148] xt_CT: No such helper "pptp" [ 657.654440][T14150] syz.0.3465[14150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 657.654513][T14150] syz.0.3465[14150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 657.668295][T14150] syz.0.3465[14150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 657.680625][T14150] syz.0.3465[14150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 657.732809][ T1149] usb 4-1: USB disconnect, device number 31 [ 657.762714][T14154] IPv6: NLM_F_REPLACE set, but no existing node found! [ 657.837497][ T6827] usb 2-1: device descriptor read/64, error -71 [ 657.870295][T14154] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 657.878072][T14154] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 657.887492][T14154] F2FS-fs (loop3): invalid crc value [ 657.894120][T14154] F2FS-fs (loop3): Found nat_bits in checkpoint [ 657.916105][T14154] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 657.923328][T14154] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 657.961285][ T1166] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 657.969535][ T449] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 657.980358][ T449] asix: probe of 5-1:0.0 failed with error -71 [ 657.980582][T12967] attempt to access beyond end of device [ 657.980582][T12967] loop3: rw=2049, want=45104, limit=40427 [ 657.987684][ T449] usb 5-1: USB disconnect, device number 44 [ 658.218545][ T6827] usb 2-1: device descriptor read/64, error -71 [ 658.227661][ T1166] usb 1-1: Using ep0 maxpacket: 16 [ 658.332594][ T6827] usb usb2-port1: attempt power cycle [ 658.351701][ T1166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.364150][ T1166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.377960][ T1166] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 658.380201][ T6816] usb 3-1: USB disconnect, device number 66 [ 658.387050][ T1166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.401915][ T1166] usb 1-1: config 0 descriptor?? [ 658.704018][ T6816] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 658.723199][ T6827] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 658.838568][ T24] audit: type=1400 audit(1720942951.589:3567): avc: denied { append } for pid=14151 comm="syz.0.3466" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 658.867787][T14152] udc-core: couldn't find an available UDC or it's busy [ 658.875317][T14152] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 658.894593][ T6827] usb 2-1: device descriptor read/8, error -71 [ 659.018618][ T1166] usbhid 1-1:0.0: can't add hid device: -71 [ 659.024548][ T1166] usbhid: probe of 1-1:0.0 failed with error -71 [ 659.032383][ T1166] usb 1-1: USB disconnect, device number 74 [ 659.085167][ T6816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 659.096970][ T6816] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 659.180958][ T6827] usb 2-1: device descriptor read/8, error -71 [ 659.199803][ T6809] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 659.208837][ T6816] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 659.218134][ T6816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 659.228182][ T6816] usb 5-1: SerialNumber: syz [ 659.247455][T14167] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 659.300448][T14181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=62 sclass=netlink_audit_socket pid=14181 comm=syz.1.3475 [ 659.314484][T14181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14181 comm=syz.1.3475 [ 659.337235][ T24] audit: type=1400 audit(1720942952.114:3568): avc: denied { accept } for pid=14182 comm="syz.1.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 659.358717][T14183] fuse: Unknown parameter 'uid<00000000000000000000' [ 659.456497][ T6809] usb 4-1: Using ep0 maxpacket: 16 [ 659.462441][T14166] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 659.483529][T14192] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.491693][T14192] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.499448][T14192] device bridge_slave_0 entered promiscuous mode [ 659.509001][T14192] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.517828][T14192] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.526826][T14192] device bridge_slave_1 entered promiscuous mode [ 659.580414][ T6809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.596962][T14192] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.603976][T14192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.611210][T14192] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.618588][T14192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.645763][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 659.655342][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.663712][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.676078][ T6809] usb 4-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 659.685834][ T6809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 659.694316][ T6809] usb 4-1: SerialNumber: syz [ 659.711359][ T6816] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 659.736628][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 659.745849][ T6809] usb-storage 4-1:1.0: USB Mass Storage device detected [ 659.758403][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.765490][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.773591][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.782467][ T6809] usb-storage 4-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 659.791679][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.798553][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.806082][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 659.815208][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 659.837016][ T6809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 659.848893][T14192] device veth0_vlan entered promiscuous mode [ 659.858417][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 659.872703][T14192] device veth1_macvtap entered promiscuous mode [ 659.881227][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 659.890876][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 659.906909][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 659.907461][ T449] usb 5-1: USB disconnect, device number 45 [ 659.935550][ T6809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 659.936333][T14175] udc-core: couldn't find an available UDC or it's busy [ 659.944427][ T6809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 659.959355][ T449] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 659.971063][T14175] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 659.993027][ T1166] usb 4-1: USB disconnect, device number 32 [ 660.031630][ T2925] device bridge_slave_1 left promiscuous mode [ 660.047547][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.076429][ T2925] device bridge_slave_0 left promiscuous mode [ 660.082666][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.105569][ T2925] device veth1_macvtap left promiscuous mode [ 660.123964][ T2925] device veth0_vlan left promiscuous mode [ 660.552551][ T6827] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 660.924501][ T449] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 660.971637][ T6827] usb 2-1: Using ep0 maxpacket: 32 [ 661.104679][ T6827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 661.117730][ T6827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 661.130004][ T6827] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 661.139959][ T6827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.154963][ T6827] usb 2-1: config 0 descriptor?? [ 661.182421][T14256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'. [ 661.210303][T14231] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 661.409601][ T449] usb 5-1: Using ep0 maxpacket: 8 [ 661.447487][ T1148] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 661.533611][ T449] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 661.543048][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.551873][ T449] usb 5-1: config 0 descriptor?? [ 661.649389][ T6827] hid-rmi 0003:0461:4E72.00C1: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 661.818948][ T1148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.829983][ T1148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.840191][ T1148] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 661.849807][ T1148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.859118][ T1148] usb 4-1: config 0 descriptor?? [ 661.873231][ T1168] usb 2-1: USB disconnect, device number 62 [ 662.009475][ T449] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 662.019849][ T449] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 662.066901][ T449] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 662.088046][T14246] udc-core: couldn't find an available UDC or it's busy [ 662.096203][T14246] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 662.143119][ T6827] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 662.333646][ T1148] hid (null): bogus close delimiter [ 662.380975][ T6827] usb 1-1: Using ep0 maxpacket: 32 [ 662.524050][ T6827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 662.535642][ T6827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 662.547384][ T6827] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 662.556564][ T6827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.633458][ T6827] usb 1-1: config 0 descriptor?? [ 662.666963][T14259] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 662.974837][T14246] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 662.983196][T14246] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 662.994526][T14246] F2FS-fs (loop3): Found nat_bits in checkpoint [ 663.018429][T14246] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 663.026495][T14246] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 663.057374][ T1148] usb 4-1: language id specifier not provided by device, defaulting to English [ 663.106616][ T6827] hid-rmi 0003:0461:4E72.00C3: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 663.257520][T14246] udc-core: couldn't find an available UDC or it's busy [ 663.264688][T14246] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.301715][ T1168] usb 1-1: USB disconnect, device number 75 [ 663.324446][T14272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3489'. [ 663.571841][ T449] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 663.582214][ T449] asix: probe of 5-1:0.0 failed with error -71 [ 663.589362][ T449] usb 5-1: USB disconnect, device number 46 [ 663.610733][ T1166] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 663.686432][ T1148] uclogic 0003:256C:006D.00C2: failed retrieving string descriptor #100: -71 [ 663.696232][ T1148] uclogic 0003:256C:006D.00C2: failed retrieving pen parameters: -71 [ 663.704569][ T1148] uclogic 0003:256C:006D.00C2: failed probing pen v1 parameters: -71 [ 663.712521][ T1148] uclogic 0003:256C:006D.00C2: failed probing parameters: -71 [ 663.719835][ T1148] uclogic: probe of 0003:256C:006D.00C2 failed with error -71 [ 663.728527][ T1148] usb 4-1: USB disconnect, device number 33 [ 664.077069][ T449] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 664.143594][ T1166] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 664.153334][ T1166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.161470][ T1166] usb 2-1: Product: syz [ 664.161860][T12967] attempt to access beyond end of device [ 664.161860][T12967] loop3: rw=2049, want=45104, limit=40427 [ 664.165685][ T1166] usb 2-1: Manufacturer: syz [ 664.182261][ T1166] usb 2-1: SerialNumber: syz [ 664.315072][ T6827] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 664.324012][ T449] usb 1-1: Using ep0 maxpacket: 32 [ 664.438848][ T449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.450508][ T449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.461272][ T449] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 664.470591][ T449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.480293][ T449] usb 1-1: config 0 descriptor?? [ 664.515544][ T6809] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 664.657901][ T6827] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.668997][ T6827] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.743645][ T6809] usb 4-1: Using ep0 maxpacket: 16 [ 664.867137][ T6827] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.876150][ T6827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.884550][ T6827] usb 5-1: Product: syz [ 664.888746][ T6827] usb 5-1: Manufacturer: syz [ 664.893176][ T6827] usb 5-1: SerialNumber: syz [ 664.944590][ T6827] usb 5-1: selecting invalid altsetting 1 [ 664.990905][ T449] usbhid 1-1:0.0: can't add hid device: -71 [ 664.991101][ T6809] usb 4-1: config 1 has an invalid interface descriptor of length 2, skipping [ 664.997216][ T449] usbhid: probe of 1-1:0.0 failed with error -71 [ 665.005859][ T6809] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 665.014146][ T449] usb 1-1: USB disconnect, device number 76 [ 665.021504][ T6809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.037588][ T6809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.200654][ T6809] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 665.212265][ T6809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.220523][ T6809] usb 4-1: Product: ф [ 665.224434][ T6809] usb 4-1: Manufacturer: 뾫苝㗼榢䷻䲻䗮≽劝ࢴ㳙①舔⊇⃞ꃸ䡾䁢ꋢๆ瀖꣣贓ࠗ쵒籈겒硤뻯橲᤮❿ခ⩳䉼휤녦䬸쫉╾㘶됺ẩُ躭感盅謱驑꟬闆௼㭒햨⬈垚搊젛ఏ〟ᬡ槲밄ꨪⰉꋘ錸偳봃ᝤ㺜燆雹믈쀔著ૻ [ 665.252274][ T6809] usb 4-1: SerialNumber: 㛚幕㿋獠뺯儲ሑ㵯不ᓐ썒뾝憉噋퓦ܼ桛೘䣸ۉ௥ὄ羭ӕꋡ繏༪鬣ᄭ侩왋䞀쨱᤮벰ȶ쵇ᝨ᫠㠶ࡨ㺂摈쐈ﰑ୩⋻簕뫼쀁䥛랿཈䄈ꦮ᷐꼐鷦턕⾥邮ꢽ뭬泚飹㎬똫✶멸㵗＜꩞縖❊皉亮䰍ῼ襁崈쨒䊤탺逘ꈇ굋ᐲꚮ徰嶣碓때셇㺎괘渿홢㗸렪ꑉ䀴싳Ꞻ詙㙻穇캹鐱⯕⃫쐟 [ 665.302637][T14283] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.310053][T14283] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.317656][T14283] device bridge_slave_0 entered promiscuous mode [ 665.329709][T14283] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.336907][T14283] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.344458][T14283] device bridge_slave_1 entered promiscuous mode [ 665.403031][T14283] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.412004][T14283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.420132][T14283] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.427369][T14283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.455552][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 665.464997][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.473100][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.484762][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 665.493913][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.501098][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.510103][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 665.519341][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.526591][ T6813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.558962][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 665.570854][T14278] udc-core: couldn't find an available UDC or it's busy [ 665.579370][T14278] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.602700][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 665.611983][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 665.635697][T14283] device veth0_vlan entered promiscuous mode [ 665.646152][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 665.655009][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 665.663018][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 665.671444][T14290] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.678995][T14290] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.686907][T14290] device bridge_slave_0 entered promiscuous mode [ 665.694759][T14290] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.702177][T14290] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.709746][T14290] device bridge_slave_1 entered promiscuous mode [ 665.724088][T14283] device veth1_macvtap entered promiscuous mode [ 665.734568][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 665.763428][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 665.782519][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 665.798624][ T7] device bridge_slave_1 left promiscuous mode [ 665.804977][ T6809] usb 4-1: 0:2 : does not exist [ 665.810748][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.818494][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.819526][ T6809] usb 4-1: USB disconnect, device number 34 [ 665.837802][ T7] device veth1_macvtap left promiscuous mode [ 665.844839][ T7] device veth0_vlan left promiscuous mode [ 665.942669][T14296] tipc: Started in network mode [ 665.948189][T14296] tipc: Own node identity 4c000000000000000000000000000001, cluster identity 4711 [ 665.958309][T14296] tipc: Enabling of bearer rejected, failed to enable media [ 665.972547][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 665.980691][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 665.991459][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.999346][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.012272][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 666.025811][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.034716][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.042767][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.065949][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 666.083480][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 666.095949][ T6827] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 666.102801][ T6827] cdc_ncm 5-1:1.1: bind() failure [ 666.103280][T14290] device veth0_vlan entered promiscuous mode [ 666.121699][ T6827] usb 5-1: USB disconnect, device number 47 [ 666.128603][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 666.140373][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 666.149540][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 666.158296][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 666.172776][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 666.186388][T14290] device veth1_macvtap entered promiscuous mode [ 666.198671][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 666.209775][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 666.211873][ T6839] usb 2-1: USB disconnect, device number 63 [ 666.222122][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 666.235433][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 666.282972][ T7] tipc: Disabling bearer [ 666.288875][ T7] tipc: Left network mode [ 666.350952][T14310] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.358067][T14310] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.365889][T14310] device bridge_slave_0 entered promiscuous mode [ 666.373375][T14310] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.380337][T14310] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.388326][T14310] device bridge_slave_1 entered promiscuous mode [ 666.438998][T14310] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.446621][T14310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.454408][T14310] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.461543][T14310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.489166][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 666.497712][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.505283][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.521125][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 666.530574][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.538115][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.543921][ T6809] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 666.548698][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.562089][ T1166] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 666.570173][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.577455][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.601927][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 666.610982][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 666.619649][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 666.628223][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 666.635757][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 666.643966][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 666.652523][T14310] device veth0_vlan entered promiscuous mode [ 666.668027][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 666.682355][T14310] device veth1_macvtap entered promiscuous mode [ 666.695546][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 666.705500][ T6839] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 666.706107][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 666.796122][T14316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14316 comm=syz.4.3500 [ 666.820635][ T7] device bridge_slave_1 left promiscuous mode [ 666.826868][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.834816][ T7] device bridge_slave_0 left promiscuous mode [ 666.841347][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.850277][ T7] device bridge_slave_1 left promiscuous mode [ 666.856511][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.864483][ T7] device bridge_slave_0 left promiscuous mode [ 666.875316][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.885783][ T7] device veth0_vlan left promiscuous mode [ 666.892221][ T7] device veth1_macvtap left promiscuous mode [ 666.898759][ T7] device veth0_vlan left promiscuous mode [ 666.905919][ T1166] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.924006][ T1166] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.994931][ T6839] usb 2-1: Using ep0 maxpacket: 16 [ 667.003378][T14325] binder: 14317:14325 ioctl 4018620d 0 returned -22 [ 667.010523][ T1166] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 667.022242][ T1166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 667.030893][ T1166] usb 1-1: SerialNumber: syz [ 667.124890][ T6839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 667.139672][T14306] udc-core: couldn't find an available UDC or it's busy [ 667.175499][T14306] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 667.185308][ T6839] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 667.210737][ T6839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.279876][ T6839] usb 2-1: config 0 descriptor?? [ 667.296055][ T6809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 667.309051][T14309] udc-core: couldn't find an available UDC or it's busy [ 667.316336][T14309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 667.335317][ T1166] usb 1-1: 0:2 : does not exist [ 667.372723][ T6809] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 667.380528][ T6809] usb 4-1: can't read configurations, error -71 [ 667.524887][ T6813] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 667.763872][ T1175] usb 1-1: USB disconnect, device number 77 [ 667.778614][T14332] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.786703][T14332] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.794943][T14332] device bridge_slave_0 entered promiscuous mode [ 667.807181][T14332] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.814284][ T6813] usb 3-1: Using ep0 maxpacket: 8 [ 667.819321][T14332] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.826954][T14332] device bridge_slave_1 entered promiscuous mode [ 667.925350][ T6813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.953596][ T6839] usbhid 2-1:0.0: can't add hid device: -71 [ 667.961693][ T6839] usbhid: probe of 2-1:0.0 failed with error -71 [ 667.980872][ T6813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.041923][ T6839] usb 2-1: USB disconnect, device number 64 [ 668.063132][ T6813] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 668.112294][ T6813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.124333][T14332] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.124920][ T6813] usb 3-1: config 0 descriptor?? [ 668.131402][T14332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.143536][T14332] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.150327][T14332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.170778][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 668.179861][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.189005][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.200450][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 668.208797][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.215862][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.225496][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 668.234506][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.241491][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.260095][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 668.268861][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 668.284730][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 668.293483][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.308958][T14332] device veth0_vlan entered promiscuous mode [ 668.317870][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 668.325708][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 668.335874][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 668.343601][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 668.368606][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 668.381016][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 668.392067][T14332] device veth1_macvtap entered promiscuous mode [ 668.416833][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 668.428222][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.437332][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.461060][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.470622][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.613601][ T7] device bridge_slave_1 left promiscuous mode [ 668.622797][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.632308][ T7] device bridge_slave_0 left promiscuous mode [ 668.639529][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.648647][ T7] device veth1_macvtap left promiscuous mode [ 668.655657][ T7] device veth0_vlan left promiscuous mode [ 668.668252][ T6813] hid-picolcd 0003:04D8:F002.00C4: No report with id 0xf3 found [ 668.676068][ T6813] hid-picolcd 0003:04D8:F002.00C4: No report with id 0xf4 found [ 668.772547][ T1162] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 668.797724][T14353] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.804638][T14353] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.812362][T14353] device bridge_slave_0 entered promiscuous mode [ 668.819406][T14353] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.827055][T14353] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.834686][T14353] device bridge_slave_1 entered promiscuous mode [ 668.858686][ T24] audit: type=1326 audit(1720942962.108:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14351 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356114bbd9 code=0x7fc00000 [ 668.859505][T14354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3508'. [ 668.896396][ T24] audit: type=1326 audit(1720942962.108:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14351 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f356114bbd9 code=0x7fc00000 [ 668.911379][T14353] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.926746][T14353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.934104][T14353] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.941264][T14353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.961882][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 668.969839][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.981242][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.992636][ T6809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 669.001297][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.009037][ T6809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.016811][ T6809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 669.026243][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.033406][ T6809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.053292][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 669.073064][ T6810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 669.091212][ T6810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 669.108279][T14353] device veth0_vlan entered promiscuous mode [ 669.114789][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 669.123172][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 669.131216][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 669.134560][ T1162] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.139238][ T7] tipc: Left network mode [ 669.160312][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 669.162961][ T1162] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 669.171317][T14353] device veth1_macvtap entered promiscuous mode [ 669.178240][T14361] udc-core: couldn't find an available UDC or it's busy [ 669.191252][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 669.191525][T14361] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 669.214555][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 669.248279][T14365] tipc: Started in network mode [ 669.253534][T14365] tipc: Own node identity 5f000000000000000000000000000001, cluster identity 4711 [ 669.262857][T14365] tipc: Enabling of bearer rejected, failed to enable media [ 669.296545][ T1162] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 669.305660][ T1162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 669.314091][ T1162] usb 4-1: SerialNumber: syz [ 669.387640][ T24] audit: type=1326 audit(1720942962.665:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14351 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356114bbd9 code=0x7fc00000 [ 669.477559][ T1149] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 669.534840][ T6827] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 669.592429][ T7] device bridge_slave_1 left promiscuous mode [ 669.598586][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.606061][ T7] device bridge_slave_0 left promiscuous mode [ 669.612108][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.619834][ T7] device veth1_macvtap left promiscuous mode [ 669.626023][ T7] device veth0_vlan left promiscuous mode [ 669.696744][ T1175] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 669.715720][ T1149] usb 1-1: Using ep0 maxpacket: 8 [ 669.763191][ T6827] usb 2-1: Using ep0 maxpacket: 32 [ 669.791931][ T6810] usb 3-1: reset high-speed USB device number 67 using dummy_hcd [ 669.835161][ T6813] usb 4-1: USB disconnect, device number 37 [ 669.906299][ T6827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 669.917947][ T6827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 669.929106][ T6827] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 669.938249][ T6827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.949177][ T6827] usb 2-1: config 0 descriptor?? [ 669.972936][T14367] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 670.039595][ T1149] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=30.f4 [ 670.049213][ T1149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.057289][ T1149] usb 1-1: Product: syz [ 670.062440][ T1149] usb 1-1: Manufacturer: syz [ 670.067092][ T1149] usb 1-1: SerialNumber: syz [ 670.072509][ T1149] usb 1-1: config 0 descriptor?? [ 670.087207][ T1175] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 670.096577][ T1175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.104968][ T1175] usb 5-1: config 0 descriptor?? [ 670.116136][ T1149] dm9601: probe of 1-1:0.0 failed with error -22 [ 670.122503][ T1149] sr9700: probe of 1-1:0.0 failed with error -22 [ 670.310187][ T1166] usb 1-1: USB disconnect, device number 78 [ 670.412415][ T6827] hid-rmi 0003:0461:4E72.00C5: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 670.603561][ T6827] usb 2-1: USB disconnect, device number 65 [ 670.620652][ T1149] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 670.661514][T14382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3515'. [ 670.669391][ T6809] usb 3-1: USB disconnect, device number 67 [ 670.697407][ T1175] usb 5-1: Cannot read MAC address [ 670.703314][ T1175] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -61 [ 670.973296][ T1149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.992749][ T1149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.021050][ T1149] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 671.036162][ T1149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.053693][ T1149] usb 4-1: config 0 descriptor?? [ 671.070995][ T24] audit: type=1400 audit(1720942964.428:3572): avc: denied { mounton } for pid=14392 comm="syz.2.3519" path="/7/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 671.121643][T14397] tipc: Started in network mode [ 671.126658][T14397] tipc: Own node identity 60000000000000000000000000000001, cluster identity 4711 [ 671.136300][T14397] tipc: Enabling of bearer rejected, failed to enable media [ 671.196028][ T24] audit: type=1326 audit(1720942964.565:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e146bd9 code=0x7ffc0000 [ 671.221012][ T24] audit: type=1326 audit(1720942964.565:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f1b3e146bd9 code=0x7ffc0000 [ 671.245824][ T24] audit: type=1326 audit(1720942964.565:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e146bd9 code=0x7ffc0000 [ 671.269735][ T24] audit: type=1326 audit(1720942964.575:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e146bd9 code=0x7ffc0000 [ 671.355625][ T2925] tipc: Left network mode [ 671.383752][ T6813] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 671.444700][T14408] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.452818][T14408] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.461522][T14408] device bridge_slave_0 entered promiscuous mode [ 671.470906][T14408] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.478383][T14408] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.486430][T14408] device bridge_slave_1 entered promiscuous mode [ 671.523993][T14408] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.531382][T14408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.535523][ T1149] hid (null): bogus close delimiter [ 671.539319][T14408] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.551720][T14408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.554730][ T1166] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 671.576364][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 671.585086][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.593483][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.604960][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 671.613513][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.620945][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.629458][ T6809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 671.638318][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.645982][ T6809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.667575][T14408] device veth0_vlan entered promiscuous mode [ 671.674728][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 671.685246][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 671.694559][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 671.702916][ T6813] usb 2-1: device descriptor read/64, error -71 [ 671.710251][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 671.718325][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.727352][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.741961][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 671.752062][T14408] device veth1_macvtap entered promiscuous mode [ 671.754901][ T1149] usb 4-1: language id specifier not provided by device, defaulting to English [ 671.765003][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 671.782700][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 671.859925][ T2925] device bridge_slave_1 left promiscuous mode [ 671.866164][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.874197][ T2925] device bridge_slave_0 left promiscuous mode [ 671.880507][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.889135][ T2925] device veth1_macvtap left promiscuous mode [ 671.895030][ T2925] device veth0_vlan left promiscuous mode [ 671.906677][ T1166] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 671.915785][ T1166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.924961][ T1166] usb 1-1: config 0 descriptor?? [ 671.964293][ T1166] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 672.106470][ T6813] usb 2-1: device descriptor read/64, error -71 [ 672.166619][ T1149] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00C6/input/input68 [ 672.187664][ T1149] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00C6/input/input69 [ 672.211214][ T1149] uclogic 0003:256C:006D.00C6: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 672.290113][ T1149] usb 1-1: USB disconnect, device number 79 [ 672.373594][ T6813] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 672.382219][ T6818] usb 4-1: USB disconnect, device number 38 [ 672.668511][ T6813] usb 2-1: device descriptor read/64, error -71 [ 672.717688][ T7] tipc: Left network mode [ 672.765463][T14423] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.772871][T14423] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.780460][T14423] device bridge_slave_0 entered promiscuous mode [ 672.787592][T14423] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.794584][T14423] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.801826][T14423] device bridge_slave_1 entered promiscuous mode [ 672.842810][T14423] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.849953][T14423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.857599][T14423] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.864402][T14423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.893953][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 672.901919][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.910567][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.921870][ T6810] usb 5-1: USB disconnect, device number 48 [ 672.948307][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 672.954179][T14428] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 672.975149][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 672.981991][T14428] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000001,resuid=0x0000000000000000,i_version,data=ordered,jqfmt=vfsold,barrier=0x0000000000000006,barrier=0x0000000000000007,,errors=continue [ 673.008970][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.016669][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 673.025044][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 673.034978][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.042552][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.050882][ T6813] usb 2-1: device descriptor read/64, error -71 [ 673.057224][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 673.065603][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.072997][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.080849][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 673.089470][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 673.098644][T14423] device veth0_vlan entered promiscuous mode [ 673.117045][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 673.127749][T14423] device veth1_macvtap entered promiscuous mode [ 673.146855][ T6809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 673.157180][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 673.164219][ T6813] usb usb2-port1: attempt power cycle [ 673.166168][T14436] exfat: Deprecated parameter 'namecase' [ 673.200062][T14436] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x6693f4b9, utbl_chksum : 0xe619d30d) [ 673.215417][T14436] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x0009ffff) [ 673.226590][T14436] exFAT-fs (loop3): failed to initialize root inode [ 673.345590][ T7] device bridge_slave_1 left promiscuous mode [ 673.351717][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.359775][ T7] device bridge_slave_0 left promiscuous mode [ 673.366352][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.374909][ T7] device veth1_macvtap left promiscuous mode [ 673.380877][ T7] device veth0_vlan left promiscuous mode [ 673.430666][ T1166] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 673.459589][ T6810] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 673.602063][ T6813] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 673.764319][ T6813] usb 2-1: device descriptor read/8, error -71 [ 673.773632][ T1166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.784746][ T1166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.794370][ T1166] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 673.803546][ T1166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.813361][ T1166] usb 4-1: config 0 descriptor?? [ 673.840352][ T6810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 673.851569][ T6810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 673.862181][ T6810] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 673.871301][ T6810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.880116][ T6810] usb 5-1: config 0 descriptor?? [ 673.917089][ T6810] usb 5-1: MIDIStreaming interface descriptor not found [ 673.924879][ T6810] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 674.036541][ T6813] usb 2-1: device descriptor read/8, error -71 [ 674.069008][ T24] audit: type=1400 audit(1720942967.567:3577): avc: denied { ioctl } for pid=14454 comm="syz.0.3534" path="socket:[94064]" dev="sockfs" ino=94064 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 674.229249][ T6810] usb 5-1: USB disconnect, device number 49 [ 674.449532][ T24] audit: type=1400 audit(1720942967.567:3578): avc: denied { append } for pid=14454 comm="syz.0.3534" name="loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 674.449544][T14408] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 674.486634][T14408] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 674.497662][ T1166] usbhid 4-1:0.0: can't add hid device: -71 [ 674.497986][ T24] audit: type=1400 audit(1720942967.662:3579): avc: denied { ioctl } for pid=14450 comm="syz.1.3533" path="/dev/usbmon0" dev="devtmpfs" ino=134 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 674.504252][ T1166] usbhid: probe of 4-1:0.0 failed with error -71 [ 674.531185][T14408] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 674.550810][ T1166] usb 4-1: USB disconnect, device number 39 [ 674.703437][T14474] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.712644][T14474] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.720893][T14474] device bridge_slave_0 entered promiscuous mode [ 674.728226][T14474] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.735444][T14474] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.743446][T14474] device bridge_slave_1 entered promiscuous mode [ 674.788604][T14474] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.795578][T14474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.802710][T14474] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.809903][T14474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.817468][ T1168] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 674.841977][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 674.850414][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.857908][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.895024][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 674.903836][ T1166] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 674.915827][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 674.925548][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.933080][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.944104][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 674.952363][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.959548][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.967482][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 674.975543][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 674.986457][T14488] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 674.995913][ T24] audit: type=1400 audit(1720942968.554:3580): avc: denied { ioctl } for pid=14487 comm="syz.4.3545" path="socket:[95254]" dev="sockfs" ino=95254 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 674.997098][T14474] device veth0_vlan entered promiscuous mode [ 675.029891][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 675.042913][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 675.051527][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 675.069599][T14474] device veth1_macvtap entered promiscuous mode [ 675.082770][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 675.090734][ T1168] usb 1-1: Using ep0 maxpacket: 16 [ 675.102462][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 675.111998][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 675.186776][ T1166] usb 4-1: Using ep0 maxpacket: 16 [ 675.231093][ T1168] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 675.239282][ T1168] usb 1-1: config 0 has no interface number 0 [ 675.240554][ T6813] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 675.246327][ T1168] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 675.263171][ T1168] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 675.274511][ T9] device bridge_slave_1 left promiscuous mode [ 675.549155][T14507] 9pnet: Insufficient options for proto=fd [ 675.579295][ T24] audit: type=1400 audit(1720942968.900:3581): avc: denied { lock } for pid=14502 comm="syz.2.3541" path="socket:[95298]" dev="sockfs" ino=95298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 675.581339][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.615549][ T9] device bridge_slave_0 left promiscuous mode [ 675.622645][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.637693][ T9] device veth1_macvtap left promiscuous mode [ 675.644452][ T9] device veth0_vlan left promiscuous mode [ 675.678621][ T1166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.697184][ T1166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.723807][ T1166] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 675.745626][ T6813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.777542][ T1166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.780318][ T6813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.807209][ T1168] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 675.827219][ T6813] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 675.836198][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 675.844740][ T6813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.853931][ T1168] usb 1-1: Product: syz [ 675.858375][ T1168] usb 1-1: SerialNumber: syz [ 675.863277][ T1166] usb 4-1: config 0 descriptor?? [ 675.873382][ T6813] usb 2-1: config 0 descriptor?? [ 675.880475][ T1168] usb 1-1: config 0 descriptor?? [ 675.987092][ T24] audit: type=1400 audit(1720942969.593:3582): avc: denied { setattr } for pid=14509 comm="syz.4.3548" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 676.262890][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3550'. [ 676.836636][ T1166] cp2112 0003:10C4:EA90.00C7: unknown main item tag 0x0 [ 676.843737][ T1166] cp2112 0003:10C4:EA90.00C7: unknown main item tag 0x0 [ 676.850647][ T1166] cp2112 0003:10C4:EA90.00C7: unknown main item tag 0x0 [ 676.857722][ T1166] cp2112 0003:10C4:EA90.00C7: unknown main item tag 0x0 [ 676.866015][ T1166] cp2112 0003:10C4:EA90.00C7: unknown main item tag 0x0 [ 676.890620][ T1166] cp2112 0003:10C4:EA90.00C7: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 676.908576][ T6813] hid (null): report_id 0 is invalid [ 676.915231][ T6813] lg-g15 0003:046D:C222.00C8: unknown main item tag 0x0 [ 676.922472][ T6813] lg-g15 0003:046D:C222.00C8: unknown main item tag 0x0 [ 676.942571][ T6813] lg-g15 0003:046D:C222.00C8: report_id 0 is invalid [ 676.947289][T14536] device syzkaller0 entered promiscuous mode [ 676.949445][ T6813] lg-g15 0003:046D:C222.00C8: item 0 1 1 8 parsing failed [ 677.009248][ T6813] lg-g15: probe of 0003:046D:C222.00C8 failed with error -22 [ 677.012242][ T1166] cp2112 0003:10C4:EA90.00C7: error requesting version [ 677.038412][ T1166] cp2112: probe of 0003:10C4:EA90.00C7 failed with error -32 [ 677.061621][ T1162] usb 4-1: USB disconnect, device number 40 [ 677.376418][ T1148] usb 2-1: USB disconnect, device number 69 [ 677.432619][ T1168] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 677.441595][ T1168] usb 1-1: USB disconnect, device number 80 [ 677.522264][ T24] audit: type=1400 audit(1720942971.199:3583): avc: denied { create } for pid=14548 comm="syz.0.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 677.543699][ T1149] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 677.555052][ T24] audit: type=1326 audit(1720942971.231:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.0.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f9b5bd9 code=0x7ffc0000 [ 677.581711][ T24] audit: type=1326 audit(1720942971.231:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.0.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f9b5bd9 code=0x7ffc0000 [ 677.608497][ T24] audit: type=1326 audit(1720942971.241:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14548 comm="syz.0.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f942f9b5bd9 code=0x7ffc0000 [ 678.069537][T14563] 9pnet: Insufficient options for proto=fd [ 678.947971][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3562'. [ 679.223988][ T1149] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 679.231827][ T1149] usb 5-1: config 0 has an invalid descriptor of length 193, skipping remainder of the config [ 679.242454][ T1149] usb 5-1: config 0 has no interface number 0 [ 679.249908][ T1149] usb 5-1: too many endpoints for config 0 interface 1 altsetting 71: 50, using maximum allowed: 30 [ 679.261227][ T1149] usb 5-1: config 0 interface 1 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 50 [ 679.274419][ T1149] usb 5-1: config 0 interface 1 has no altsetting 0 [ 679.413779][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3567'. [ 679.812927][ T1149] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 679.822785][ T1149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.831032][ T1149] usb 5-1: Product: syz [ 679.835112][ T1149] usb 5-1: Manufacturer: syz [ 679.839833][ T1149] usb 5-1: SerialNumber: syz [ 679.846641][ T1149] usb 5-1: config 0 descriptor?? [ 679.889016][ T1168] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 679.930101][ T1149] usb 5-1: USB disconnect, device number 50 [ 679.943242][T12537] udevd[12537]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 680.000026][T14606] syz.4.3573[14606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 680.000107][T14606] syz.4.3573[14606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 680.013678][T14606] syz.4.3573[14606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 680.026157][T14606] syz.4.3573[14606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 680.037856][ T1162] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 680.138180][ T6827] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 680.146219][ T1168] usb 2-1: Using ep0 maxpacket: 32 [ 680.260476][ T1168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 680.272256][ C0] Illegal XDP return value 1603896156, expect packet loss! [ 680.286141][ T1168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 680.310590][ T1168] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 680.319938][ T1162] usb 1-1: Using ep0 maxpacket: 8 [ 680.325045][ T1168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.345333][ T1168] usb 2-1: config 0 descriptor?? [ 680.374948][T14584] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 680.479671][ T1162] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.518444][ T6827] usb 4-1: Using ep0 maxpacket: 16 [ 680.575167][ T1162] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 680.584432][ T1162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 680.592708][ T1162] usb 1-1: SerialNumber: syz [ 680.598550][ T1162] usb 1-1: config 0 descriptor?? [ 680.632239][ T6839] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 680.640287][ T6827] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 680.649095][ T6827] usb 4-1: config 0 has no interface number 0 [ 680.651731][ T1162] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 680.656091][ T6827] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 680.663144][ T1162] uvcvideo: No valid video chain found. [ 680.784535][ T6827] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 680.794081][ T6827] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 680.802011][ T6827] usb 4-1: Product: syz [ 680.806465][ T6827] usb 4-1: SerialNumber: syz [ 680.806650][ T1168] hid-rmi 0003:0461:4E72.00C9: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 680.811944][ T6827] usb 4-1: config 0 descriptor?? [ 680.841868][T14602] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 680.844754][ T6818] usb 1-1: USB disconnect, device number 81 [ 680.994454][ T6839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.997388][ T1168] usb 2-1: USB disconnect, device number 70 [ 681.007611][ T6839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.022174][ T6839] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 681.032454][ T6839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.073124][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'. [ 681.084147][T14602] tipc: Started in network mode [ 681.090097][ T6839] usb 3-1: config 0 descriptor?? [ 681.095579][T14602] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 681.107050][T14602] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 681.149240][T14602] tipc: Enabled bearer , priority 0 [ 681.158043][T14623] udc-core: couldn't find an available UDC or it's busy [ 681.165695][T14623] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 681.226036][ T6827] usb 4-1: invalid MIDI in EP 0 [ 681.233749][ T6827] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 681.257655][ T6827] usb 4-1: USB disconnect, device number 41 [ 681.604920][ T6839] lg-g15 0003:046D:C222.00CA: unknown main item tag 0x0 [ 681.616254][ T6839] lg-g15 0003:046D:C222.00CA: unbalanced collection at end of report description [ 681.627309][ T6839] lg-g15: probe of 0003:046D:C222.00CA failed with error -22 [ 681.657235][T14630] binder: Bad value for 'stats' [ 681.680958][ T7] tipc: Disabling bearer [ 681.686345][ T7] tipc: Left network mode [ 681.784797][T14637] fuse: Bad value for 'fd' [ 681.796803][ T6827] usb 3-1: USB disconnect, device number 68 [ 681.821102][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.828310][T14633] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.836106][T14633] device bridge_slave_0 entered promiscuous mode [ 681.846321][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.854309][T14633] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.861961][T14633] device bridge_slave_1 entered promiscuous mode [ 681.917887][ T6839] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 681.919079][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.932446][T14633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.939543][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.946475][T14633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.973354][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 681.981256][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.988802][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.008506][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 682.017127][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.024257][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.031687][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 682.040490][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.047625][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.070318][ T6818] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 682.079281][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 682.088224][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 682.097310][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 682.106072][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 682.113637][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 682.121768][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 682.132413][T14633] device veth0_vlan entered promiscuous mode [ 682.143085][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.154700][T14633] device veth1_macvtap entered promiscuous mode [ 682.160863][ T6839] usb 2-1: Using ep0 maxpacket: 32 [ 682.166035][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 682.176654][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 682.224386][ T7] device bridge_slave_1 left promiscuous mode [ 682.230648][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.238149][ T7] device bridge_slave_0 left promiscuous mode [ 682.244279][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.253238][ T7] device veth1_macvtap left promiscuous mode [ 682.259181][ T7] device veth0_vlan left promiscuous mode [ 682.309536][ T6818] usb 5-1: Using ep0 maxpacket: 16 [ 682.325383][T14648] syz.0.3584[14648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.325454][T14648] syz.0.3584[14648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.339521][T14648] syz.0.3584[14648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.351408][T14648] syz.0.3584[14648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.451835][ T6839] usb 2-1: unable to get BOS descriptor or descriptor too short [ 682.471570][ T6818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.482784][ T6818] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 682.498624][ T6839] usb 2-1: too many configurations: 58, using maximum allowed: 8 [ 682.508610][ T6818] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 682.518934][ T6818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.575483][ T6839] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 682.591014][ T6839] usb 2-1: can't read configurations, error -71 [ 682.615175][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3585'. [ 682.630449][ T6818] usb 5-1: config 0 descriptor?? [ 683.127082][ T6818] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00CB/input/input70 [ 683.221497][T14682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=14682 comm=syz.2.3592 [ 683.235317][ T6818] microsoft 0003:045E:07DA.00CB: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 683.254024][ T6818] usb 5-1: USB disconnect, device number 51 [ 683.301173][T14684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14684 comm=syz.1.3593 [ 683.316790][T14684] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns [ 683.379145][T14684] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 683.432473][ T1157] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 683.694774][T14695] syz.4.3597[14695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.694821][T14695] syz.4.3597[14695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.833144][ T1157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.856227][ T1148] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 683.864133][ T1157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.878729][ T1157] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 683.889212][ T1157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.899651][ T1157] usb 4-1: config 0 descriptor?? [ 683.926193][T14709] EXT4-fs (loop2): Unrecognized mount option "subj_type=[-." or missing value [ 684.185100][ T6839] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 684.242224][ T1148] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 684.253775][ T1148] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 684.265304][ T1148] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 684.274942][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.299350][T14690] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 684.451780][ T6839] usb 2-1: too many configurations: 14, using maximum allowed: 8 [ 684.604019][ T6839] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 684.611631][ T6839] usb 2-1: can't read configurations, error -61 [ 684.749387][T14733] 9pnet: Insufficient options for proto=fd [ 684.892407][ T6839] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 684.956842][ T1148] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 684.965467][ T1148] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input71 [ 684.977860][ T1148] usb 1-1: USB disconnect, device number 82 [ 685.204368][ T1157] uclogic 0003:256C:006D.00CC: failed retrieving Huion firmware version: -71 [ 685.213250][ T1157] uclogic 0003:256C:006D.00CC: failed probing parameters: -71 [ 685.221051][ T1157] uclogic: probe of 0003:256C:006D.00CC failed with error -71 [ 685.230299][ T1157] usb 4-1: USB disconnect, device number 42 [ 685.232839][ T6839] usb 2-1: too many configurations: 14, using maximum allowed: 8 [ 685.395431][T14741] IPv6: addrconf: prefix option has invalid lifetime [ 685.402408][ T6839] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 685.410651][ T6839] usb 2-1: can't read configurations, error -61 [ 685.416984][ T6839] usb usb2-port1: attempt power cycle [ 685.656020][T14747] bpf_get_probe_write_proto: 4 callbacks suppressed [ 685.656031][T14747] syz.3.3611[14747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 685.662725][T14747] syz.3.3611[14747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 685.737768][ T6817] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 685.823476][ T6839] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 685.833125][T14762] EXT4-fs (loop2): orphan cleanup on readonly fs [ 685.840084][T14762] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3617: bg 0: block 248: padding at end of block bitmap is not set [ 685.855652][T14762] __quota_error: 20 callbacks suppressed [ 685.855662][T14762] Quota error (device loop2): write_blk: dquota write failed [ 685.869743][T14762] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 685.880102][T14762] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.3617: Failed to acquire dquot type 1 [ 685.891964][T14762] EXT4-fs (loop2): 1 truncate cleaned up [ 685.898159][T14762] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue [ 685.966516][ T6839] usb 2-1: too many configurations: 14, using maximum allowed: 8 [ 685.976900][T14766] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 685.985767][ T6819] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 685.990052][T14766] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 686.007841][ T1157] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 686.141060][ T6839] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 686.149040][ T6817] usb 5-1: config 0 has an invalid descriptor of length 240, skipping remainder of the config [ 686.159967][ T6839] usb 2-1: can't read configurations, error -61 [ 686.166682][ T6817] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 686.180132][ T6817] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 686.189402][ T6817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.198997][ T6817] usb 5-1: config 0 descriptor?? [ 686.282611][T14772] 9pnet: Insufficient options for proto=fd [ 686.435267][ T6839] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 686.469531][ T1157] usb 4-1: device descriptor read/64, error -71 [ 686.595173][ T6839] usb 2-1: too many configurations: 14, using maximum allowed: 8 [ 686.718448][ T6817] usb 5-1: string descriptor 0 read error: -71 [ 686.726323][ T6817] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 686.734180][ T6817] usb 5-1: USB disconnect, device number 52 [ 686.757476][ T6819] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 686.766949][ T6839] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 686.774605][ T6839] usb 2-1: can't read configurations, error -61 [ 686.780915][ T6819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.793498][ T6839] usb usb2-port1: unable to enumerate USB device [ 686.800207][ T6819] usb 1-1: Product: syz [ 686.805180][ T6819] usb 1-1: Manufacturer: syz [ 686.809815][ T6819] usb 1-1: SerialNumber: syz [ 686.821551][T14780] device veth0_vlan left promiscuous mode [ 686.828067][T14780] device veth0_vlan entered promiscuous mode [ 686.842700][ T1157] usb 4-1: device descriptor read/64, error -71 [ 686.933254][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3622'. [ 686.983322][ T24] audit: type=1326 audit(1720942981.130:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.1.3625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c2091bbd9 code=0x0 [ 687.099935][ T1157] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 687.357112][ T1157] usb 4-1: device descriptor read/64, error -71 [ 687.795234][ T1157] usb 4-1: device descriptor read/64, error -71 [ 687.866031][T14807] syz.2.3630[14807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 687.866121][T14807] syz.2.3630[14807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 687.879460][T14807] syz.2.3630[14807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 687.892789][T14807] syz.2.3630[14807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 687.910240][ T1157] usb usb4-port1: attempt power cycle [ 687.936959][ T24] audit: type=1326 audit(1720942982.128:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0695f5bd9 code=0x7ffc0000 [ 687.962147][ T24] audit: type=1326 audit(1720942982.128:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ff0695f5bd9 code=0x7ffc0000 [ 687.986550][ T6839] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 687.994841][ T24] audit: type=1326 audit(1720942982.128:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0695f5bd9 code=0x7ffc0000 [ 688.021914][ T24] audit: type=1326 audit(1720942982.128:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.2.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0695f5bd9 code=0x7ffc0000 [ 688.072342][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3633'. [ 688.294970][T14825] 9pnet: Insufficient options for proto=fd [ 688.580512][ T6819] usb 1-1: USB disconnect, device number 83 [ 688.586447][ T6839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.604763][ T1157] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 688.608974][ T6839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.634807][ T6839] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 688.645006][ T6839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.659176][ T6839] usb 5-1: config 0 descriptor?? [ 688.851840][T14844] fuse: Unknown parameter '0x0000000000000004' [ 688.971984][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3644'. [ 689.032220][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3643'. [ 689.071672][ T1157] usb 4-1: device not accepting address 45, error -71 [ 689.100241][ T6818] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 689.157650][ T6839] hid (null): bogus close delimiter [ 689.252598][ T6813] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 689.338371][ T6818] usb 2-1: Using ep0 maxpacket: 16 [ 689.462545][ T6818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.474053][ T6818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.483942][ T6818] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.497329][ T6818] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 689.506961][ T6818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.515075][ T6813] usb 3-1: Using ep0 maxpacket: 32 [ 689.521266][ T6818] usb 2-1: config 0 descriptor?? [ 689.643348][ T6839] usb 5-1: string descriptor 0 read error: -71 [ 689.662636][ T6813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 689.674159][ T6839] uclogic 0003:256C:006D.00CD: failed retrieving string descriptor #200: -71 [ 689.683327][ T6813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 689.695063][ T6839] uclogic 0003:256C:006D.00CD: failed retrieving pen parameters: -71 [ 689.702982][ T6813] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 689.712396][ T6839] uclogic 0003:256C:006D.00CD: failed probing pen v2 parameters: -71 [ 689.720997][ T6839] uclogic 0003:256C:006D.00CD: failed probing parameters: -71 [ 689.728495][ T6839] uclogic: probe of 0003:256C:006D.00CD failed with error -71 [ 689.736376][ T6813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.745646][ T6813] usb 3-1: config 0 descriptor?? [ 689.751622][ T6839] usb 5-1: USB disconnect, device number 53 [ 689.767126][T14854] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 690.026177][ T6818] ryos 0003:1E7D:31CE.00CE: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 690.222870][ T6819] usb 2-1: USB disconnect, device number 77 [ 690.229840][ T6813] hid-rmi 0003:0461:4E72.00CF: hidraw1: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 690.240973][ T24] audit: type=1400 audit(1720942984.553:3612): avc: denied { mounton } for pid=14873 comm="syz.3.3652" path="/7/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 690.406762][ T6818] usb 3-1: USB disconnect, device number 69 [ 690.415295][ T6813] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 690.529403][ T1157] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 690.605325][ T24] audit: type=1326 audit(1720942984.931:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f9b5bd9 code=0x7ffc0000 [ 690.630194][ T24] audit: type=1326 audit(1720942984.931:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f9b5bd9 code=0x7ffc0000 [ 690.655872][ T24] audit: type=1326 audit(1720942984.941:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f942f9b5bd9 code=0x7ffc0000 [ 690.679869][ T24] audit: type=1326 audit(1720942984.941:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f9b5bd9 code=0x7ffc0000 [ 690.705169][ T24] audit: type=1326 audit(1720942984.941:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f942f9b5bd9 code=0x7ffc0000 [ 690.738228][ T6813] usb 5-1: Using ep0 maxpacket: 32 [ 690.744988][ T24] audit: type=1326 audit(1720942984.941:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f9b5bd9 code=0x7ffc0000 [ 690.777274][ T1157] usb 4-1: Using ep0 maxpacket: 16 [ 690.792180][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3655'. [ 690.821240][T14890] overlayfs: conflicting lowerdir path [ 690.871291][ T6813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.900688][ T1157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 690.911865][ T1157] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 690.920978][ T1157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.062850][ T6813] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a4.72 [ 691.073542][ T6813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.085504][ T6813] usb 5-1: Product: syz [ 691.089693][ T6813] usb 5-1: Manufacturer: syz [ 691.095642][ T6813] usb 5-1: SerialNumber: syz [ 691.129813][ T6813] usb 5-1: config 0 descriptor?? [ 691.177522][ T1157] usb 4-1: config 0 descriptor?? [ 691.291122][ T6818] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 691.319711][ T1162] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 691.368595][ T24] audit: type=1400 audit(1720942985.739:3619): avc: denied { mounton } for pid=14869 comm="syz.4.3650" path="/34/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 691.406441][T14874] udc-core: couldn't find an available UDC or it's busy [ 691.413798][T14874] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.472127][ T6813] usb 5-1: unknown interface protocol 0xf, assuming v1 [ 691.480412][ T6813] usb 5-1: USB disconnect, device number 54 [ 691.538809][ T6818] usb 3-1: Using ep0 maxpacket: 16 [ 691.586410][ T1162] usb 2-1: device descriptor read/64, error -71 [ 691.805610][ T6818] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 691.815031][ T6818] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 691.822994][ T6818] usb 3-1: Product: syz [ 691.827094][ T6818] usb 3-1: Manufacturer: syz [ 691.832349][ T6818] usb 3-1: config 0 descriptor?? [ 691.902219][ T1175] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 691.950220][ T24] audit: type=1326 audit(1720942986.348:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.3.3664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f5c302c1bd9 code=0x0 [ 691.973793][ T1162] usb 2-1: device descriptor read/64, error -71 [ 692.005644][ T1157] usbhid 4-1:0.0: can't add hid device: -71 [ 692.011810][ T1157] usbhid: probe of 4-1:0.0 failed with error -71 [ 692.022303][ T1157] usb 4-1: USB disconnect, device number 47 [ 692.167842][ T1175] usb 1-1: device descriptor read/64, error -71 [ 692.234198][ T1162] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 692.283133][ T6818] usb 3-1: USB disconnect, device number 70 [ 692.415166][ T1157] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 692.491555][ T1162] usb 2-1: device descriptor read/64, error -71 [ 692.539032][ T1175] usb 1-1: device descriptor read/64, error -71 [ 692.681844][ T1157] usb 4-1: device descriptor read/64, error -71 [ 692.814110][T14310] ------------[ cut here ]------------ [ 692.819643][ T1175] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 692.819707][T14310] WARNING: CPU: 1 PID: 14310 at fs/inode.c:304 drop_nlink+0xc1/0x110 [ 692.835226][T14310] Modules linked in: [ 692.838946][T14310] CPU: 0 PID: 14310 Comm: syz-executor Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 692.852056][T14310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 692.863474][T14310] RIP: 0010:drop_nlink+0xc1/0x110 [ 692.869078][T14310] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 77 ce f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 af 38 b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 692.889620][T14310] RSP: 0018:ffffc90000b87cc0 EFLAGS: 00010293 [ 692.895610][ T1162] usb 2-1: device descriptor read/64, error -71 [ 692.895909][T14310] RAX: ffffffff81b771d1 RBX: 0000000000000000 RCX: ffff88811509cf00 [ 692.909703][T14310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.917989][T14310] RBP: ffffc90000b87ce8 R08: ffffffff81b77154 R09: 0000000000000003 [ 692.926043][T14310] R10: fffff52000170f88 R11: dffffc0000000001 R12: dffffc0000000000 [ 692.933912][T14310] R13: 1ffff11022b36d11 R14: ffff8881159b6840 R15: ffff8881159b6888 [ 692.942476][T14310] FS: 0000555555d31500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 692.951913][T14310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.958327][T14310] CR2: 0000555555d544e8 CR3: 0000000130446000 CR4: 00000000003506b0 [ 692.967110][T14310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 692.975210][T14310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 692.983018][T14310] Call Trace: [ 692.986094][T14310] ? show_regs+0x58/0x60 [ 692.991283][T14310] ? __warn+0x160/0x2f0 [ 692.995394][T14310] ? drop_nlink+0xc1/0x110 [ 692.999662][T14310] ? report_bug+0x3d9/0x5b0 [ 693.004052][T14310] ? drop_nlink+0xc1/0x110 [ 693.008486][T14310] ? handle_bug+0x41/0x70 [ 693.012650][T14310] ? exc_invalid_op+0x1b/0x50 [ 693.017312][T14310] ? asm_exc_invalid_op+0x12/0x20 [ 693.022717][T14310] ? drop_nlink+0x44/0x110 [ 693.025082][ T1162] usb usb2-port1: attempt power cycle [ 693.027054][ T6818] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 693.033078][T14310] ? drop_nlink+0xc1/0x110 [ 693.045012][T14310] ? drop_nlink+0xc1/0x110 [ 693.049460][T14310] shmem_rmdir+0x59/0x90 [ 693.053871][T14310] vfs_rmdir+0x2b7/0x3f0 [ 693.058249][T14310] incfs_kill_sb+0x108/0x220 [ 693.062875][T14310] deactivate_locked_super+0xad/0x110 [ 693.068563][T14310] deactivate_super+0xbe/0xf0 [ 693.073435][T14310] cleanup_mnt+0x45c/0x510 [ 693.077819][T14310] __cleanup_mnt+0x19/0x20 [ 693.082803][T14310] task_work_run+0x129/0x190 [ 693.087539][T14310] exit_to_user_mode_loop+0xbf/0xd0 [ 693.092625][T14310] syscall_exit_to_user_mode+0xa2/0x1a0 [ 693.098764][T14310] do_syscall_64+0x40/0x70 [ 693.103139][T14310] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 693.110485][T14310] RIP: 0033:0x7f356114cf07 [ 693.114949][T14310] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 693.120414][ T1157] usb 4-1: device descriptor read/64, error -71 [ 693.135332][T14310] RSP: 002b:00007ffdffe212a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 693.141491][ T1175] usb 1-1: device descriptor read/64, error -71 [ 693.150553][T14310] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f356114cf07 [ 693.165338][T14310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdffe21360 [ 693.174225][T14310] RBP: 00007ffdffe21360 R08: 0000000000000000 R09: 0000000000000000 [ 693.182707][T14310] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdffe22420 [ 693.191952][T14310] R13: 00007f35611b9515 R14: 00000000000abfdd R15: 00000000000abfd2 [ 693.199977][T14310] ---[ end trace 3d8d1d1179b1e3ac ]--- [ 693.205393][T14310] ------------[ cut here ]------------ [ 693.211093][T14310] WARNING: CPU: 1 PID: 14310 at fs/inode.c:304 drop_nlink+0xc1/0x110 [ 693.219466][T14310] Modules linked in: [ 693.223277][T14310] CPU: 1 PID: 14310 Comm: syz-executor Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 693.236180][T14310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 693.247008][T14310] RIP: 0010:drop_nlink+0xc1/0x110 [ 693.251744][T14310] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 77 ce f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 af 38 b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 693.271812][T14310] RSP: 0018:ffffc90000b87cc0 EFLAGS: 00010293 [ 693.278211][T14310] RAX: ffffffff81b771d1 RBX: 0000000000000000 RCX: ffff88811509cf00 [ 693.286229][T14310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 693.294620][T14310] RBP: ffffc90000b87ce8 R08: ffffffff81b77154 R09: 0000000000000003 [ 693.302624][T14310] R10: fffff52000170f88 R11: dffffc0000000001 R12: dffffc0000000000 [ 693.310446][T14310] R13: 1ffff11022b36acd R14: ffff8881159b5620 R15: ffff8881159b5668 [ 693.318372][T14310] FS: 0000555555d31500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 693.327735][T14310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 693.334999][T14310] CR2: 0000000020002000 CR3: 0000000130446000 CR4: 00000000003506a0 [ 693.343219][T14310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 693.351333][T14310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 693.359958][T14310] Call Trace: [ 693.363171][T14310] ? show_regs+0x58/0x60 [ 693.367202][T14310] ? __warn+0x160/0x2f0 [ 693.371746][T14310] ? drop_nlink+0xc1/0x110 [ 693.376131][T14310] ? report_bug+0x3d9/0x5b0 [ 693.380529][T14310] ? drop_nlink+0xc1/0x110 [ 693.384700][T14310] ? handle_bug+0x41/0x70 [ 693.389129][T14310] ? exc_invalid_op+0x1b/0x50 [ 693.393708][T14310] ? asm_exc_invalid_op+0x12/0x20 [ 693.398929][T14310] ? drop_nlink+0x44/0x110 [ 693.403352][T14310] ? drop_nlink+0xc1/0x110 [ 693.407790][ T6818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.408051][T14310] ? drop_nlink+0xc1/0x110 [ 693.418333][ T6818] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.432147][ T1157] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 693.434715][T14310] shmem_rmdir+0x59/0x90 [ 693.439496][ T1162] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 693.443662][T14310] vfs_rmdir+0x2b7/0x3f0 [ 693.455602][T14310] incfs_kill_sb+0x1a2/0x220 [ 693.460443][T14310] deactivate_locked_super+0xad/0x110 [ 693.466874][T14310] deactivate_super+0xbe/0xf0 [ 693.471652][T14310] cleanup_mnt+0x45c/0x510 [ 693.476367][T14310] __cleanup_mnt+0x19/0x20 [ 693.480623][T14310] task_work_run+0x129/0x190 [ 693.485353][T14310] exit_to_user_mode_loop+0xbf/0xd0 [ 693.490952][T14310] syscall_exit_to_user_mode+0xa2/0x1a0 [ 693.497532][ T6818] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 693.497669][T14310] do_syscall_64+0x40/0x70 [ 693.506524][ T6818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 693.506536][ T6818] usb 3-1: SerialNumber: syz [ 693.524156][T14310] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 693.530220][T14310] RIP: 0033:0x7f356114cf07 [ 693.534740][T14310] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 693.554807][ T1175] usb 1-1: device descriptor read/64, error -71 [ 693.555385][T14310] RSP: 002b:00007ffdffe212a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 693.570441][T14310] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f356114cf07 [ 693.578856][T14310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdffe21360 [ 693.587210][T14310] RBP: 00007ffdffe21360 R08: 0000000000000000 R09: 0000000000000000 [ 693.595262][T14310] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdffe22420 [ 693.603319][T14310] R13: 00007f35611b9515 R14: 00000000000abfdd R15: 00000000000abfd2 [ 693.611215][T14310] ---[ end trace 3d8d1d1179b1e3ad ]--- [ 693.617054][T14310] list_del corruption. prev->next should be ffff888121a4b6f0, but was ffff8881105676f0 [ 693.626682][T14310] ------------[ cut here ]------------ [ 693.631865][T14310] kernel BUG at lib/list_debug.c:61! [ 693.637238][T14310] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 693.643193][T14310] CPU: 1 PID: 14310 Comm: syz-executor Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 693.655152][T14310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 693.665902][T14310] RIP: 0010:__list_del_entry_valid+0x10c/0x120 [ 693.672052][T14310] Code: 4c 89 f6 e8 7c 3e 55 02 0f 0b 48 c7 c7 40 22 60 85 4c 89 f6 e8 6b 3e 55 02 0f 0b 48 c7 c7 a0 22 60 85 4c 89 f6 e8 5a 3e 55 02 <0f> 0b 48 c7 c7 00 23 60 85 4c 89 f6 e8 49 3e 55 02 0f 0b cc 55 48 [ 693.692039][ T1175] usb usb1-port1: attempt power cycle [ 693.692072][T14310] RSP: 0018:ffffc90000b87c50 EFLAGS: 00010246 [ 693.703412][T14310] RAX: 0000000000000054 RBX: ffff8881105676f0 RCX: 6d3e1474ef942000 [ 693.711370][T14310] RDX: 0000000000000000 RSI: 0000000080000002 RDI: 0000000000000000 [ 693.719272][T14310] RBP: ffffc90000b87c70 R08: ffffffff81521de8 R09: ffffed103ee2a5f8 [ 693.727165][T14310] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 693.735236][T14310] R13: ffff888121a4b6b8 R14: ffff888121a4b6f0 R15: ffff8881105246f0 [ 693.743485][T14310] FS: 0000555555d31500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 693.752263][T14310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 693.759027][T14310] CR2: 0000000020002000 CR3: 0000000130446000 CR4: 00000000003506a0 [ 693.766837][T14310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 693.774634][T14310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 693.782451][T14310] Call Trace: [ 693.785593][T14310] ? __die_body+0x62/0xb0 [ 693.789742][T14310] ? die+0x88/0xb0 [ 693.793300][T14310] ? do_trap+0x1a4/0x310 [ 693.797382][T14310] ? __list_del_entry_valid+0x10c/0x120 [ 693.802763][T14310] ? handle_invalid_op+0x95/0xc0 [ 693.807535][T14310] ? __list_del_entry_valid+0x10c/0x120 [ 693.813023][T14310] ? exc_invalid_op+0x32/0x50 [ 693.817528][T14310] ? asm_exc_invalid_op+0x12/0x20 [ 693.822474][T14310] ? wake_up_klogd+0xb8/0xf0 [ 693.827163][T14310] ? __list_del_entry_valid+0x10c/0x120 [ 693.832538][T14310] __dentry_kill+0x250/0x650 [ 693.837229][T14310] ? lockref_put_or_lock+0x104/0x170 [ 693.843312][T14310] dentry_kill+0xc0/0x2a0 [ 693.847817][T14310] dput+0x40/0x80 [ 693.851373][T14310] incfs_free_mount_info+0x60/0x210 [ 693.856939][T14310] incfs_kill_sb+0x1c2/0x220 [ 693.861442][T14310] deactivate_locked_super+0xad/0x110 [ 693.867352][T14310] deactivate_super+0xbe/0xf0 [ 693.871867][T14310] cleanup_mnt+0x45c/0x510 [ 693.876116][T14310] __cleanup_mnt+0x19/0x20 [ 693.880513][T14310] task_work_run+0x129/0x190 [ 693.884926][T14310] exit_to_user_mode_loop+0xbf/0xd0 [ 693.889955][T14310] syscall_exit_to_user_mode+0xa2/0x1a0 [ 693.895416][T14310] do_syscall_64+0x40/0x70 [ 693.899667][T14310] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 693.905711][T14310] RIP: 0033:0x7f356114cf07 [ 693.909944][T14310] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 693.930983][T14310] RSP: 002b:00007ffdffe212a8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 693.939472][T14310] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f356114cf07 [ 693.947285][T14310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdffe21360 [ 693.955239][T14310] RBP: 00007ffdffe21360 R08: 0000000000000000 R09: 0000000000000000 [ 693.963077][T14310] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffdffe22420 [ 693.971063][T14310] R13: 00007f35611b9515 R14: 00000000000abfdd R15: 00000000000abfd2 [ 693.978970][T14310] Modules linked in: [ 693.983059][ T1162] usb 2-1: device descriptor read/8, error -71 [ 693.983226][T14310] ---[ end trace 3d8d1d1179b1e3ae ]--- [ 693.989364][ T1157] usb 4-1: device descriptor read/64, error -71 [ 694.001406][T14310] RIP: 0010:__list_del_entry_valid+0x10c/0x120 [ 694.007470][T14310] Code: 4c 89 f6 e8 7c 3e 55 02 0f 0b 48 c7 c7 40 22 60 85 4c 89 f6 e8 6b 3e 55 02 0f 0b 48 c7 c7 a0 22 60 85 4c 89 f6 e8 5a 3e 55 02 <0f> 0b 48 c7 c7 00 23 60 85 4c 89 f6 e8 49 3e 55 02 0f 0b cc 55 48 [ 694.028055][T14310] RSP: 0018:ffffc90000b87c50 EFLAGS: 00010246 [ 694.033906][T14310] RAX: 0000000000000054 RBX: ffff8881105676f0 RCX: 6d3e1474ef942000 [ 694.042043][T14310] RDX: 0000000000000000 RSI: 0000000080000002 RDI: 0000000000000000 [ 694.049939][T14310] RBP: ffffc90000b87c70 R08: ffffffff81521de8 R09: ffffed103ee2a5f8 [ 694.058046][T14310] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 694.066285][T14310] R13: ffff888121a4b6b8 R14: ffff888121a4b6f0 R15: ffff8881105246f0 [ 694.075475][T14310] FS: 0000555555d31500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 694.084278][T14310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.091203][T14310] CR2: 0000000020002000 CR3: 0000000130446000 CR4: 00000000003506a0 [ 694.099775][T14310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 694.107557][T14310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 694.115673][T14310] Kernel panic - not syncing: Fatal exception [ 694.122015][T14310] Kernel Offset: disabled [ 694.127545][T14310] Rebooting in 86400 seconds..