last executing test programs: 12.540354214s ago: executing program 4 (id=1334): mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0}) 11.489312815s ago: executing program 4 (id=1336): bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 11.488739495s ago: executing program 4 (id=1337): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f00003a4000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 10.500099967s ago: executing program 4 (id=1344): syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18000, &(0x7f0000000080)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000004f80), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000004fc0)={0x0, 0xfffffeff, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}}}) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e04001220"], 0x7) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x2, 0x4010, 0xffffffffffffffff, 0x24dd4000) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)={0x0, 0x0, '\x00', [@pad1, @pad1]}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 10.388222205s ago: executing program 3 (id=1345): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 10.291940929s ago: executing program 3 (id=1346): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x22, &(0x7f0000006040)=@framed={{}, [@map_idx, @tail_call, @tail_call, @jmp, @cb_func, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, @generic, @jmp, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x63, 0x79, 0x20, 0x5ac, 0x23f, 0xe0d8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd6, 0x2}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000003c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005e00)='./file0\x00', &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid={'resgid', 0x3d, r7}}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001680)="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", 0x2000, &(0x7f0000005fc0)={&(0x7f0000001500)={0x50, 0xffffffffffffffda, 0x2, {0x7, 0x28, 0x1, 0x840000, 0x9, 0x200, 0x8, 0x4}}, &(0x7f00000002c0)={0x18, 0xfffffffffffffffe, 0x9, {0x7ff}}, &(0x7f0000000400)={0x18, 0x2f, 0x8, {0x8}}, &(0x7f0000001580)={0x18, 0x0, 0xffffffffffff0c6e, {0x30}}, &(0x7f00000015c0)={0x18, 0x0, 0x5, {0x10000}}, &(0x7f0000003700)={0x28, 0x0, 0xffffffff, {{0x4, 0x2, 0x2}}}, &(0x7f0000003740)={0x60, 0x0, 0x2, {{0x9, 0x2, 0x5, 0x6, 0x2, 0xf2f0, 0x400, 0x4}}}, &(0x7f00000037c0)={0x18, 0x0, 0x0, {0x7}}, &(0x7f0000003800)={0x16, 0xfffffffffffffffe, 0x7, {'wlan1\x00'}}, &(0x7f0000003840)={0x20, 0xffffffffffffffda, 0x2}, &(0x7f0000003880)={0x78, 0x0, 0x1, {0x1, 0x956, 0x0, {0x6, 0x2, 0x80000000, 0x6, 0x10001, 0x9, 0x4, 0xfffffffe, 0x1, 0x4000, 0xaa, 0x0, 0x0, 0x1}}}, &(0x7f0000003a80)={0x90, 0x0, 0x8, {0x0, 0x2, 0x8, 0x81, 0x5a93, 0x8, {0x2, 0x2, 0x9, 0x80000001, 0x6, 0x6, 0x2, 0x5, 0xb5, 0x4000, 0x2, 0x0, r3, 0x5, 0x10000}}}, &(0x7f0000003b40)={0xe0, 0x0, 0x7fff, [{0x4, 0xa19, 0x11, 0x1, '/dev/vhost-vsock\x00'}, {0x3, 0x6, 0x11, 0x0, '/dev/vhost-vsock\x00'}, {0x2, 0x80, 0x1, 0x2, '@'}, {0x6, 0xb0, 0x4, 0x1, '-}.$'}, {0x0, 0x6, 0x11, 0xfffc0000, '/dev/vhost-vsock\x00'}]}, &(0x7f0000005c80)={0x148, 0x0, 0xffffffffffffff4c, [{{0x6, 0x0, 0x1, 0xffffffffffff0001, 0x2, 0x5, {0x2, 0x7fff, 0x7, 0xdc, 0x80000000, 0x100, 0x3, 0x9, 0x5, 0xc000, 0xfffffe01, 0xee00, r4, 0x8, 0x8001}}, {0x3, 0xffff, 0x6, 0x8, 'wlan1\x00'}}, {{0x5, 0x2, 0x3ff, 0x100000001, 0xe3d, 0x5, {0x5, 0xa2b6, 0x7fffffff, 0xffffffffffffffff, 0x72, 0x4, 0x7, 0x1ff, 0x8, 0x8000, 0x100000, 0x0, 0xee00, 0x2, 0x6}}, {0x3, 0xffffffffffffffff, 0x0, 0xa78}}]}, &(0x7f0000005ec0)={0xa0, 0xfffffffffffffff5, 0x3f, {{0x0, 0x3, 0x7fff, 0x9, 0x1129, 0x40, {0x2, 0x5, 0x33c6, 0x10001, 0x5, 0x4, 0x9, 0xffffffff, 0x0, 0x4000, 0xffff, r5, r7, 0xffffffa0, 0xbb}}, {0x0, 0x9}}}, &(0x7f0000005f80)={0x20, 0x0, 0x7fffffffffffffff, {0x0, 0x0, 0x4c, 0xb851}}}) 7.701339447s ago: executing program 4 (id=1354): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f00003a4000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 7.231769699s ago: executing program 4 (id=1357): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 7.072856074s ago: executing program 3 (id=1359): timer_create(0x7, &(0x7f0000000180)={0x0, 0x21}, &(0x7f0000004200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) pipe2$watch_queue(0x0, 0x80) mprotect(&(0x7f0000112000/0x2000)=nil, 0x2000, 0x2000008) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000012c0)='./file0\x00', 0x311, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x9b) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x5450, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x5452, &(0x7f0000000200)={'custom0\x00'}) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000140)=""/45) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) timer_delete(r0) 7.005736104s ago: executing program 3 (id=1360): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000240)=""/203, 0xcb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0xc04c5349, &(0x7f0000000500)) tkill(0x0, 0x7) 6.956242161s ago: executing program 2 (id=1361): syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x880) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300)={0x0, @in6={{0xa, 0x80, 0x0, @empty}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) sendto(r0, &(0x7f0000000100)="a519744ec9fa3795e6a78349af55f19dbf3b754d1baf359f7af2c60b0932de49ea336ea00e483e55d71a493e0dff991553f8b3d396f7b0d4bea511c7fd5468d1fc4a28c694acb164e6f22120e91a5b166fe91c4d6f4ec64aacde813a8be05fba2adcdddb15362c5f0816c05c5392ea0d2a2c3e0738bf5497f4256fe645f6e2da17a91a138bdd3a7349e4267f1aa353bbd42b70b842d9e57b477944e564de992e", 0xa0, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) msync(&(0x7f000057b000/0x5000)=nil, 0x5000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) socket(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 6.302650772s ago: executing program 0 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0xe80}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)='6', 0x1}], 0x8}}], 0x2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000010000406c256d0000000000000109022400010000000009041900010300000009210000000122050009058103"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$key(r5, &(0x7f0000000100)={0xa003a5b4, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYRES32=r5, @ANYRES8=r2, @ANYRES64, @ANYRES8=r3, @ANYBLOB="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", @ANYRES16=r2, @ANYRESOCT=0x0], 0x11}}, 0x4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000480)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0022050000000b741cb976"], 0x0}, 0x0) 6.11565447s ago: executing program 2 (id=1364): pipe2(&(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.041381552s ago: executing program 3 (id=1365): syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18000, &(0x7f0000000080)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000004f80), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000004fc0)={0x0, 0xfffffeff, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}}}) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e04001220"], 0x7) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x2, 0x4010, 0xffffffffffffffff, 0x24dd4000) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)={0x32, 0x0, '\x00', [@pad1]}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 5.86221349s ago: executing program 2 (id=1366): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_emit_ethernet(0x9b, &(0x7f00000000c0)={@remote, @empty, @void, {@ipv4={0x800, @dccp={{0x11, 0x4, 0x3, 0x2, 0x8d, 0x6c, 0x0, 0x1f, 0x21, 0x0, @remote, @empty, {[@generic={0x83, 0x10, "b3c6a3a260e1cdcc1d0bb8105c87"}, @generic={0x0, 0x7, "7bc787ce0b"}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x0, 0xfff, 0x3, 0x999, 0x4]}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, "d9b096", 0x3f, "eb6dd0"}, "453302b0cb7b9e6e7e277348980fe489b9f6026441d694183aae68f6f0b871975ef6d9c319e1ad2f45663b61b9f997d66d8c2978e49a5dabfc"}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 4.059176017s ago: executing program 2 (id=1369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7065326d70726f66696c50efa174dab622fd65202f70726f632f74f3b98f84876872722f63757272656e74000389764f9fda6f5238aa03000000000000000014b52ebd"], 0x46) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$getflags(r3, 0x401) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100"], 0x44}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000300)={@id, 0x40, 0x0, '\x00', @a}) 3.362257364s ago: executing program 0 (id=1370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x7}}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02000012000e00050014030a00002000000000d0ca0200"], 0x17) 3.148657806s ago: executing program 1 (id=1371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 3.100648043s ago: executing program 2 (id=1372): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty, 0x6}, 0x1c) listen(r0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041d05ad2a8c97006c9b45cc55a0ff35a729719df6d303d5d5af92f4c5b0c95a55d4c8021baa24025d07b71d788787afc6e99910a13c0bd37a835b95bab508f8f60d3738614cb884bd3c43afa12a6a3218e2a1aa2e37c05e7cd960a138db958895756cdcaefd2d873f7d9817fab46bf8fd14345c8d71d0ff1521f62180a726fcf85c357b81a90586fbef58cf432c01950c80d959f32e2ce9c93f818aed8df571f0e51f61246b2a988a92be3a4a71b822e4a661d18dcdbcf9c1d1895ca783c8bf7d"], 0x8) eventfd2(0x4db, 0x80000) add_key(&(0x7f00000014c0)='ceph\x00', 0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_usbip_server_init(0x4) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0xf) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x90) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000380)={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f00000000c0)={@broadcast, @empty, @multicast1}, 0xc) syz_usbip_server_init(0x1) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socket$netlink(0x10, 0x3, 0x5) openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) ioctl$BLKDISCARD(r4, 0x1277, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x2000, 0x0) 3.092926395s ago: executing program 1 (id=1373): socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 3.041949543s ago: executing program 0 (id=1374): syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x880) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300)={0x0, @in6={{0xa, 0x80, 0x0, @empty}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) sendto(r0, &(0x7f0000000100)="a519744ec9fa3795e6a78349af55f19dbf3b754d1baf359f7af2c60b0932de49ea336ea00e483e55d71a493e0dff991553f8b3d396f7b0d4bea511c7fd5468d1fc4a28c694acb164e6f22120e91a5b166fe91c4d6f4ec64aacde813a8be05fba2adcdddb15362c5f0816c05c5392ea0d2a2c3e0738bf5497f4256fe645f6e2da17a91a138bdd3a7349e4267f1aa353bbd42b70b842d9e57b477944e564de992e", 0xa0, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) msync(&(0x7f000057b000/0x5000)=nil, 0x5000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) socket(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2.858630041s ago: executing program 1 (id=1375): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000440)={[{@ssd}, {@commit={'commit', 0x3d, 0x2}}, {@commit}, {@nobarrier}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x7}}]}, 0x1, 0x5124, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac895ztz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVG7V/eUB6x0/eLuo5v2NjceP9yuX7109mT5pbNgYqUnsFLy8+rC4rnU7PweSfYo2l2nXq3nFM36pyfcv/IiAIAlmWp1FsXH0fwjbtHen9aTdjNpt5N2/ITQ7m4sRzbuqn7z3JDWV2iezSwqjPedZ1LP3/+i3Ur7J+0kaixhnr275pFmot8855L6Ss0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4E7yyNujD1XVT12bPnNuprnzwJaZy/um150OodHZXsvKtdXvH27+9e3WYwd+3PzV8QvPP1bP+8XlaNfO4be48sRkCG90VS7EYS+uDaHVW+g0w5flwludlediAQAAgLvJ/Z3fI0U7i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLyi3Vj8qXUF4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6Pd044bf40T3jUZwtSgqQMAAAB9xP93X/xqIeb17JuDNK8/9ejBc1XjlfJ/c7j8P3ZLXxUAAABwM458sf3hqnop/7eGy//jt3XWAAAAwFK88+HEB1X1Uv6fHS7/r86X+ZUPWaef4l8hHJoMYWJhZS4r/BzaTxcFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/12F7K5/T7oxAAAAAPei8vX88fb42ZML+j1/f9jr/x/438FXq45fyv/7h8v/9e7lwPv/F5Md/Pw/AAAAWIb/2vP/tpfGqTbo/v/3ffTuL1X9S/m/PVz+j8s13S/vRHx/3psMYf3CSn43wW/i4XYlhfmxrkJHK+mxLfbIC/PjXYWOuaTH5skQHlxY2d+4nssK/4+FdtLjytq8cCQpnI6F/HwoCseSwol4pn2+Np9uWvg+FvILLObjFRRriksikh5X+/VYKNywx9ni4AAAAPeUGJ7zLDvW2wxplJ2vDdph9aAdRgbtUB+0w2iyQ7pjv+1htrcQt7fPbFza8/+PDJf/41uxKlv0u/4/xOv/8+caFtf/z8ZCIynMx0IrvWNAKx4jC7sfx2M0WnmPK+uLAgAAANzV4vcC9RWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD/s3XuMXFd9OPAz+xrvw7ubwE+E/BAsUMe44PXaDg+1qVinqYpCKeuSElWIYmOvw+INNrZTcATIsUEpiqChRII/iuIIIZw/klokCGhAcSNhFDUkKFUjkigRaZ0gotA0gEIhEq5m7z2zd87deaztdbzh85G8c2a+53nn4Tn33jkXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3w/HPvOxv28Vv/d3lz3y+JWTHz646cpnPnnZ+Q+EMDX3eCULVwau/8rkL2679PaDd224+c4Tl7+xLy+Xx8Ng7U9XfufTsdYTK0P4ViWEnjSwdigL9Ob3h2J9rxoK4bwwH6iXmB7ISqQNh+/3h3A4zAfqVX2nP4ShQuCKB++5+3O1xE39IawKIVTTNh6rZm30p4GL+rLAQBrY1ZMFfn0yUw98uysLwGmLb4b6i/7oVGOG0YXLNXn99Z6xjr240uF1x8Ro83w/37TEnSroSx+YOq2nrVQdS6L09jjm3bYM3m2l7Xyjp634RSr/hnJyPlQNXdund2y9ZnZffKQrjI93N6tpiZ7nh5/7xLbFpJfN6zB2YPSMvA4/f/+q27rXvOuHd65d9dSRNx16+nS7+ePCJi2ml1o15K+5ZfM8RpM+T5bB26/0LWnMl64Qwo4P/cG7W8VL8//R1vP/+HKOt10NuWOtLwxnc/P4yFBMPDuczc0BAABg2VgOe013jX/vba3qK83/xzo7/h8P+eeT+Wy0x0KYnEscGgnhgrnHs8CtsbkPjoTw2rnUVGNgUxI4FsIrv/D1PJhVlZRYEUuMJYGfDueBySRwPAamksDXYuDGJPDpGDiaBLbFwLEkcGkMhJn6OOYSfzicj6PjQH8MbMk24tF4FsIvh2NrU40lHq1XBQAAcIbks8PexruFcx1ON0OcXh7tb5chnoHdNEM1qSGdwdanVU1r6GlXQ1chQ6Uw1a9nqI/7QOvhl2qutOtb6TSMSmOGr/zq794TWijN/ydaz/+rC3SkUjr+H8Lmub8xd1cema3Ht0w1ZAAAAABOw+D/PvHVVvHS/H+ys/P/4z6R7kLmcF/cDbFzJISJxkBW7R+XA9lR78E8AAAAAMtB/Xh8/Vj4TH6bnaKdzqfL+acWmT8e+J9cMH/fse9uadXf0vx/qrPz/wcab7NOHI+9+OJICCsKgR/EXtYCc8Zi4Cdvbwzk4z8eN8ANsar8xIR6VTfEEltiYCIJHG5W4kf1Ehc0BvInq974ofo4ZvIShQAAAACcdXF3QDwuH8//f91vN3ysVbnS/H/L4s7/n5sHl07vnx0MYV1PCN3pDwPuG8gWBoyBoUqe+N5AVld3WtV1AyFcUhtYWtUT+fr/Pekagw/2Z1XFwAWvO/LcRbXEV/tDWFcMPPS+W95cS+xLAvXG/7o/hNfURps2/s0VWeO9aeNfWhHCqwuBelUfXBFCrbG+tKp7qvl1DNKq/rkawssKgXpVb6mGsD8AsEzF/0q3Fx/cu//anVtnZ6f3LGEi7sPvDztmZqfHt+2a3V5t0qftSZ8bljG6rjymTq9882i+RNF779g81Em6/jvBiWJb+X780omD+f34Xah3bpwbehvubkyH/IbXl5sIhW9SzYbctcRDHihWMv8kluqP+fvCYFhxzd7pPeMf37pv35712d9Os2/I/sbDTNm2Wp9uq4GF+tbBy6PpalmJU91Wq4uVrNt39e51e/dfu3bm6q1XTV81/ZH1b9kwcfHExom3XryuNqqJ7G+boa5eqOpkqCdv6XBcZ3CoF/YUKjkbnxoSEhLLLbFrcHXL/5NL8//dref/8VMnfvLn6zM0O/4/Gg/zZ4/PH+bfEgOHy8f/G/6XqB//H212NL9+YsBYEjgQAwcc5gcAAOClIU7y49w57pX+2ZpvPtWqXGn+f6Cz3/+fofX/60vXXz7SZJn/NbHERLP1/9Nl/uvr/x9otv5/usx/ff3/wy/C+v/X1APJJvml9f8BAICXgrO3/n/b5f3TCwSUMnS1y5BeIKCUoe0y/p1eIGDR6/8/9p9/89+hhdL8/8bO5v8W7gcAAIBzx6f+4mP/r1W8NP8/3Nn8/+yv/xeanf8/1iww1WxhQOv/AQAAsEw1W/9v9PqBD7QqV5r/H+1s/h9Pu+hqyB1rfWE4W9MupGvaPTtc/8kAAAAALA9dYXy8t8O8DSujbjr1Nh/OlwJtlS564s9OLO78/2Odzf8bfpfx+ftX3da95l0/fOHOtaueOvKmQ0/PH/8HAAAAlk6n+yUAAAAAAAAAAAAAAIAX3xP/cXBjq3jp9/9h89zjzX7/H6/7F39f8PKG3LHW9uv/5feveOft++eWLLxvOITXFwM7D+48L+TX5l9dDNz9/jWvqCUOpiW++/ilT9YSH0gD71h7/vO1xCVJYEtcJPGVaSBeVfH5lUkgLq/472kgbo+jaaAvD3x2ZTaOSrqtfjaUbatKuq0eGQphpBCob6tvDWVtVNIB3pQE6gP8aBqIA/zLPNCV9ur2waxXMTAUi948mPUKAIBzVvwW2Bt2zMxOT8Sv8PH2wp7G26hhybLrytVWOmz+0XxpsvfesXmok3R3+l10/lrjvaFaG8L60tfVYpbK3CjPTC1tNt3Lmwy53WpvXU3KpRa76fqaj6g/G9H4tl2z23vbDnxj+ywbetpmWV+a7BSzdM1t0g5q6aAvHYyow23TQZfj/a4wPt6d5PqjGBwNDdq9Ijr9vX5xnb9mr4Jino+cOPTrVvWV5v+jnc3/q8VxPZ9fDOBAvLLeP4xY5h8AAACW1mc3/ebL8d97rr/3oVZ5S/P/sc7m/3EPVn4oONvbcSxe///QSAhzl9YfzQK3xuY+OBLCa+dSU7FEdkH9y2OJiSxwa9xhsiaW2DLVWNWKGDiaBH46nAeOJYHjMZDvpTgS8l05XxgO4c1zqc2NJXbHEqNJ4N0xMJYExmNgIgmsjIHJJPDMyjwwlQT+LQbCTOO2umNlvq0AAAAWI59n9TbeDek872hPuwyVdhkG2mXoapeh2i5Ds1HE+9+IGXqTk1cqhUy9aa39SS2lDPFi+IvuVylD+FFjzrRgqel4/kH9fINKY4a73tZTDS2U5v8Tnc3/syfzZGPrx+P8f/76f1ngB7F7X4ynjo/FwE/e3hjIdwwcj5PdG+pVTeUl8kn7DbHEZAyMJYHdMTCZBLZszgOHX9EYyGfa9cYP1RufyUsUAgAAAHDWxR0EcTdNnP/fvPczg63Kleb/k53N/2N7g8XGPh1rPbEyhG9V5ntTD6wdygJxP8ZQ/Hn8q4ZCOK+wg6NeYnogK9GXNBy+35/9Qr0vreo7/dmPD+L9Kx685+7P1RI39YewqrD3pd7GY9Wsjf40cFFfFhhIA7t6skDc81MPfLsrC8Bpq+8VjC+o/FSXutGFyzV5/b1UrgmaDq+0D3SBfAv95mqplHa45vtU6xb3tLXcf8sZU3p7HPNuW47vtlHvtuIXqfwbysn5UDV0bZ/esfWa2X3xkeIvWUuW6Hku/kq1k/QZeB0eOPXetldNOzCRfHxMLFxu4ddhJVb3+ftX3da95l0/vHPtqqeOvOnQ0x13o4n4Q+F7PvmvQz8ubN6lVg35a27ZfZ5M+TxZjv8NjHnaQgibn/nSDa3ipfn/VGfz/57kds5v4sbcOxLCGwob9764+f90JPscLASyT8mXlQPZIff/Gm76yQkAAABnWn13R31/wUx+m50Qns6Ty/mnFpk/7q+YXDB/p/0e+Nv3r2oVL83/t7Se/69Iuun4v+P/LBHH/xd0ru+KXpE+cOC0dkWXqmNJOP6/oHP93eb4/4Ic/3f8fyGO/7fh+P+CzvWnrfQtabcvXSGEp/7ke4+0ipfm/7s7m/9b/2/hRfvq6/9tabb+3+5m6/8dsP4fAACwpJosNJfO80qr95UypKv3lTK0XSCw7RKD1v9b9Pp/T1742G/DQvKaSvP/A53N/+PLYbDY+nJZ/29sc5OqboyB3RYGBAAA4FzUbAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL667/vF/treK3/u7yx55/MrJDx/cdOUzn7zs/AdCmJl7vJKFKwPXf2XyF7ddevvBuzbcfOeJy99Yzcv15rf/vyF3rPWF4RAOFx4Ziolnh2t35gNXvPP2/T21xH3DIby+GNh5cOd5tcTXhkNYXQzc/f41r6glDqYlvvv4pU/WEh9IA+9Ye/7ztcQlW7uybqbd/aeVWXcraXc/tzKEkUKg3t0Pr8zaqKRt/Hke6Erb+PpQ1kYMDMWiXx7K2oiB2VhiZkUI63pC6E6rureaVdWdVvUv1ayq7rSqT1VDuCSE0JNW9XhfVlVPOvIH+rKqYuCC1x157qJa4nBfCOuKgYfed8uba4mPJoF643/VF8Jrai+ZtPFv9GaN96aN39QbwqtDCH1piV/1ZCX60hJP9ITwskKg3viHekLYH3hJiB8+DZ9oe/dfu3Pr7Oz0niVM9OVt9YcdM7PT49t2zW6vJn1qplJIn7zu1Mf+6HOf2Fa7fe8dm4c6Sffk5Xrnuryht+HuxnO997FfA8VK5p+PUv0xf18YDCuu2Tu9Z/zjW/ft27M++9tp9g3Z3+48mm2r9S22VXfxzou9rVYXK1m37+rd6/buv3btzNVbr5q+avoj69+yYeLiiY0Tb714XW1UE9nfzocamg71llMa5ZW3ZrenNNQLewo1nY0PgMUl4uY5V/ojIfH7mOhq+HSbONf/0yt90Z/vaG+ozn1Al6YVxSyVuVGeiUFvOsURn8r3lLYjWl+aOJSybGifZWNpMjGfpT/LMve9rjQ5LNbUNbdJ4/2uMD7e3Ww7jDbeLW7en5/G5n0433SdpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VuH0bMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcCgAA//8aXSYE") chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x498582, 0x0) write$sndseq(r2, &(0x7f0000001380)=[{0x0, 0x0, 0x0, 0x0, @time={0x7ff}, {}, {}, @connect}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f00000012c0)={&(0x7f0000000d80), 0xc, &(0x7f0000001280)={&(0x7f0000000e00)={0x124, 0x36, 0x800, 0x70bd29, 0x0, {0x14}, [@nested={0x8d, 0xe1, 0x0, 0x1, [@generic="ef7a7ca972512db6a7b21253efab34af0155c6da7c8a224eda0610287d193dcf48ec06e493169ede2994b5542ee8786c86d49097d8eb8571eb9c3d894baa8a93d61ee2a2874b0c7974d1b74dfe1fd0dd060f816087b6b81c6e20adcff21a3ddd1de1a68658535dfbad33177f1592d9509944be2129", @typed={0x8, 0x128, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x100, 0x0, 0x0, @uid=0xee01}, @typed={0x4, 0xa4}]}, @typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @generic, @nested={0x40, 0x8e, 0x0, 0x1, [@typed={0xe, 0x0, 0x0, 0x0, @binary="315aae65bf65b53cb6ed"}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x4, 0x123}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0xc, 0x3d, 0x0, 0x0, @u64=0x2}]}, @typed={0x8, 0x104, 0x0, 0x0, @uid}, @typed={0x8, 0x145, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x11, 0x0, 0x0, @ipv6=@empty}, @generic="d936765eb93ba7fe0ee43d5285fc5c1332bce0"]}, 0x124}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x100}, 0x10}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat(r2, 0x0, 0x60d43, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$snddsp(r3, &(0x7f00000000c0)="8e", 0x1) 1.978732256s ago: executing program 1 (id=1376): syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000"], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x40}}}, 0x7) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000001c0), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', '', [{0x20, 'V}\\*#'}, {0x20, '{![/]:@'}]}, 0x12) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0xf) readahead(r0, 0x0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x100000000a, &(0x7f00000003c0), 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) 1.770461588s ago: executing program 0 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r5, 0x80044323, &(0x7f0000000900)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000003c0)={r6, 0x6}, &(0x7f0000000400)=0x8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r7, 0x40046210, 0x0) 1.664882264s ago: executing program 3 (id=1378): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0xba6, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x23, 0x95, 0x3a, 0x8, 0x1bc7, 0x1207, 0x2233, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb94, 0x2, 0x20, 0x92, 0x40, 0x7f, [{{0x9, 0x4, 0x4d, 0x40, 0xc, 0xa5, 0xfa, 0x26, 0x9e, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0e99"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5dd5, 0x2, 0x81}, [@obex={0x5}, @mdlm={0x15, 0x24, 0x12, 0x4d35}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x8, 0x2, 0x1}]}], [{{0x9, 0x5, 0xd, 0x4, 0x200, 0x40, 0x7d, 0x1f, [@generic={0xe, 0x24, "2006701111d062a981f3bfa2"}, @generic={0xb5, 0x9, "e64f00b3ca0c28e566d09e3b0d1522c1333f222f8e5fb275af51dfd593dd1a461b74edfb618bb102c2c43a1ce4ec2a0fbbc2cca6009c6dae6c8d0d158826bc2838296063c924874b65e7be368a259379a5fb8c678934a0a1e4d4fae02397533bb82daa4e73d08a96f5cdb5d3569bc6ad8d10bfb66308d9859f6e773b98887d97179c748700c9197056524c7f00d66e66b0f5e90b3ded8018d408e2845afb2bdb7d1d2f8e12684e8415a11f7c14b908f75aa722"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7c, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc6, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x6, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x56, 0x6, 0x1f, [@generic={0xd1, 0xd, "716614785f29ea9897fcaab240d09400f95b8fabdb8f1edf0b12c8086aae12ac9c068ed46293264a7abef59f3393ea4ba7fcc8962901ec2f7b48cf6e500aacd558364458cafbbb737cbc816fd6ca14dcb5b91803e0aa8b3af1a4bbebd00b4ab5043df85fb4eb0e418ffa3452c5ed81a55cb486291e338178952f80d705eec3f97d5fe1aadd3999f143862ffb74e9b531aa332510f39a2541bb97b7688af68d0f2e244859f3dc9d6d15b5b8452e1ed51184bae7d79308c7bfa467cf9c579ea87bfa64ca6fcf1353853e5d6edba0c83d"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x0, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x4f, 0x6, [@generic={0x7f, 0x30, "29dec15f4a179c3401cd46072a9a3d725f12b6dfb437260365c1da6a8d2ef476fca9bf8dd146e6d9598b04923af70a494206a2d166e083e12fa4f4abcf3a933964001e00c11734b0cd6a4ab67838947f55a522cc5a950fa694cab262fd14615130f3a953def18a1d3e42bc9196bb52cbd303ff4f2219d2216fdb9dcc70"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x3, 0x1, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x72, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xd5, 0x8, 0x3, [@generic={0x37, 0x6, "2e0ae1adbc76145206118fb7b1edab298dc9c0da115f4f739a39e4aa7e0ad9c328aa64a33c5431450b5affa7d298e78a5a63bdbad1"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x1, 0x40, 0x81, [@generic={0x16, 0x21, "e0f63fc39573b4658be53186e37a845f80df8a65"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0xc9, 0xf7, 0x5}}, {{0x9, 0x5, 0x6, 0xc, 0x0, 0x9, 0x4, 0x9, [@generic={0x102, 0x2, "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"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7, 0x2, 0x4, [@generic={0xf, 0x6, "9cab973e0cd63797de3ba50061"}, @generic={0x4c, 0x23, "0c5643084eb23871007146acb54626f7149445dc4e32cabd6bc8eecc6377b610a69be1b963a59edca7de4cc08db41e7998fad0798bd443806ad8eb048ad4232210d72c50401a4c888999"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x8, 0xff, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6}]}}]}}, {{0x9, 0x4, 0x5, 0x20, 0xc, 0x66, 0x30, 0x9c, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "187ee9b75330"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xffffff49, 0x7fff, 0x5, 0x40}, {0x6, 0x24, 0x1a, 0x8, 0x38}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}], [{{0x9, 0x5, 0x0, 0x1, 0x8, 0x94, 0x81, 0x81, [@generic={0xa0, 0x31, "ef221049d04039f0fcbd9fb8cfb4359898b5240d0649ac4d62704a19c6359067e6b98c8578ec289bfcf23b137adba0dc174a39a98564f2bc20436000bdbac70e8e7cd3b75db760b2c957af1e2208c5edb1b9f521adfaa0aa80daded9463a82f41bb63053568222a035336a8f20f04c480e3f7d22d848cc071f3bf353d555e2a8523c62fd69f5dc88edc158164293ecc0e6e61bac623cd7437866d0ea599b"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x2, 0x9, 0x4, [@generic={0xe2, 0x8, "0e7ac1df4787193b05682197ccf0411088c7dfa2126889c9817ddd667591801cdbe713f53348281c87bca73a22ab1c4489fb0f6bad42c4b37646a63823a0fe533e41c207aa298e34d34661b0351ce422e3f671be4a5ab186cfb6f12b79c3516c84cbc26826f779b035e2a869cd5eac066d4f2a90c7799710d53109868998cf8616aa98e6e540c470c9f4b8229ca5bd1cf738a55e5679c5026d080d5ffdd15a79c65ff765ab68d3f1b53ec5b72c0b10f8eebd0a8293ca0d93c93b17edce34becdf3265a000bd7f7c26502efb57e2719d64d803d40ecd18d17ed5f1a1198318e1b"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xfa, 0x9, 0xff, [@generic={0x97, 0x7, "9cf5500decc67ceb49280b67d7b5f340302647683ed1fba8895f37fd2dfa82ff5f03cc4bbf556736fa3f1813439a165b4c062453f0443b2905fcdd2c5cbc9f033d49d3560fd7abb134d1e2c61b655fabb20a2a1f5bdc5c464f4e78827e2ed836b3d3cb8b97a6ef1165cfd51548e673be79649c6939d7e7296a75829a8dd3255762bf2332243390ba706a4300c131cd23bc4233f994"}, @generic={0xc8, 0xc, "2e97b3b6ff2aa8c52fb206f3117b83056bf51421542589df7d619c78dea7498ffb7ff2a98fbb772a67a9d59be53e6003866fcab4e3a862ef7239ee2764c953f59da3313fe1440e3934a0f77ccd2f4faf4d3faeaad024afa195069c186adbbfe24d14038189afca895b6ed81804c1ea80e7547b03bb314360c11c5f939b646d6441abcfc81ee79f7f8065e8686f4652a990365a43d76a9c3619f1e90922f408c437d0e135ed9082bc43776bad542088af9e1fbed9afec3b0317c6d6bfaf93c20ea27e9bb11a2b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0x3, 0x7, [@generic={0xc7, 0x6, "8ce4f32bb36685ee47cf97d8cda8655b56c531e3f9b22c4aabeabf02f703a4e32fb1debc23177dd99248e01d826cf0552188801f8abed4e4aafce5a54903fc8f563e2a6709c709381109928fc8da984201c3372feb467d2545444adf93a89ccbfe943055e65f0a27aa6e63a59e47eea40c0a8e19bddcc594fa17213164e995dcdbada5fe8ad5755e53ad5aa8cdbda09c98be1a3ccc3f5fc1f558df17e006aae7c288dbf2ac13d9a55935cec3bc2838f937b00f815ec3fde697b89086a414a0b968503d400f"}, @generic={0xf0, 0x3, "95e7cb0048136eed1ab22f935e9bbbb429bcd90280020fffca166a7701e3afc1f8836a93e8f4a6cd05155c1618e617a5837c7087685f214b056026655fec5a966a89fc1bc70ef9279093e1abe7d3d522a1fe7533027666b5db7947af0b96710c2223ffbf8bf72e0b9c9afb086b7f93f04ef888fc1199e6ee60d41cca1dba5e0ae56d35673e6794dd8c62960b3660f44feb0dbc75917da8992f473e5613680722c6a230c599d5506101a8f856412119a4c9f0b3d3bf10822b3960ca00f02c42858a72755a3d491edd321f045ad29f03378835cb044194b5220a9f6347642293fa8968995afb7602577566ce42fc67"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x13e43f4e801cf167, 0x73, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8001}, @generic={0x2e, 0x15, "ef0f20b289785269443f0d255d3541214826ed463f9233bc4d47194280cba5ac840fdc028cf9d93615499d87"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x3f, 0x6, 0x20, [@generic={0x45, 0xa, "15bdf91a5a691afb637ba965a20f2e9db5466482a775775bc67af22916155f0bc7a9d1e1a355f968deda3a41365fa486951f113b54de9b41ff1d0ac6e59576468119c9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x1, 0x5, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfff7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x8, 0x18, 0x20, 0x75, 0xda, 0x7f}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x92, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x340}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x2, 0x3, 0x8, [@generic={0x26, 0x37, "f1e218779c7e679a500ee73d833fd12a35089c0e70a52e26afa9bf56fd439138459b29b1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0xb0, 0x6, 0x6, [@generic={0xdf, 0x11, "df4ba362c5909a76eab17b78dbca9f208ef22f1ddd1d354ff38b99c1efdce0418784cea9da1684a1c20c636847849604cdf7b1ec69555210d358099eea463fd5bd82943761200d7202fa0ff0cc3747ca57da1ee84eb1b1a8c688eaf8bdacd4149100efd030558b63f6633a167b7fd44285cd1f5c73ad5b45f4a36c14bba14e7273e17891bb3d2a8b22477c19314f2805e4c5370b4725fcdd3753c81c6c72301c7a857965b2ce047cdbdf85a9e70298b6b063f618ecf8c7f16dfa2f01e2a32a82821b90a96c1b9214b707f468d613df5433c72430f2d3f68f0d8391b793"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x2, 0x6, 0x7, 0x40}, 0xa3, &(0x7f0000001780)={0x5, 0xf, 0xa3, 0x3, [@generic={0x83, 0x10, 0xa, "e6249272ecb276ee2263af5180cab760b8ba033f791c5bfe7078837ffb1fad1193a93a81af8f41ecf76eff4b984ed897f57df8346b0c8e7c6fdc349d1e7377f2dc8994576e62a9775928814f210fb3b6f06e02db6fb719af3227a35ae67f9f62d40b389cfbde26078a5074a2a422dfe397d4db08ef9d76d1ff9bae88866b2f57"}, @ssp_cap={0x14, 0x10, 0xa, 0x20, 0x2, 0x99f6, 0xf00, 0x99, [0xff0030, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x1}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_ep_write(r0, 0x6, 0x3c, &(0x7f00000018c0)="23a851e17829be9f5481f3683dc84cbab3774e4ac80466d0a826e8de3e98cbd767b1eac8328ea15b3ef0fa38b3fbf1c9380a881f6a554bf7618a3905") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x50}}, 0x0) r8 = dup2(r3, r3) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000140)=ANY=[@ANYBLOB="bc0800600c90297f0000000000000000ac080080a508000038a9d0720cc84514dccdfb1fd2efd73cdcda4463c756f9a639539313b2a2567370b4516a4ae84340116ab0964ca1fad1866f5a0dc87b47f9fb0802c74f68f804fb7670225dc1d6f5ee38f4fc8455668647558e8e6789622a6510c6fcc33c480b8453e6dda9a288d486a66f0494a24352be9c703050188ff8488c5212178aea5f5bb413ce42928cd3f1369243dd93cdbd811493eb646df8799855577411b6d91dc1c67d41a00ee5c9cda43c0bc5b5ee6c8d8cc000b073bc2fb1e27661678696573d23758e21a861dfe1c261b9ab378eca2d43331ccc5fdc5cadc974cb9ef6215faf9d71047cf558eefff1ece60e4b044e40923df6f3c15ed64b84ce8b1e9cf07e5d58031a9827f0589181e9027ee1d11d9a3d62d879e4358ad0b52d8899a34db7bf4d0429498c3a86faead2ee642ff59ac436737bc4185bc1b230c22c8e2be516e5bb2075810415f6d57ad9d419e7da1ccf9663564ed97655b06fcef467eb23593b8041553837253e7bd5f28ece82cf202f90d6d3e2fbd6eec550fd18ce0317f65af14ff56955e436aaa75e938b2e968bc1638bedfd352a3f0dd0c2a9d6d96e6f546993190334e145d2420f23b40dd79a80531364157648fb77a03ccb032a919e6d26318e00fffd1f87dbfee5121846508e86881d75fc2f5607379b3918cbeb15ec4e7f217ac85a140b0d607f1483ef959c2b28ff446ff1fcb810b47aaac1e4cc6b9215fbceabd517efc1a776dac240f1b97d2bdaf3b1e22481aa757fc2d7afd62ad539586fc92990261af89c5e01506ae8775622f3d8ae9537f107fb1b4cbc48108f800a8cba72d2576c8830152ea95cf0238146e8a030832d40603fc1489913c6a009701f93ee5222ac8ea0e43e28ff3380e309ab31de5f910fe9a53124f640d480fa21bc263be75875e64abac9d49d65b4ff1871b14ee03ead6faefb833392023286e9aed32a197801cc46fe3d5fb6c4e2f7faa2655f4655983fd25ffd185ced6631bc079e4bcea2e6a4d16d467c4f3bdd5782a690f745acd9ed156ffd77a105a254cab001cf218d9a7b78cde5896c2a803ae48e7241f36962817136eea0b15c196cc80d2a38bfa1f41c792f982d72592b92c66e8bdb86fa66220ffc71197e152e0b4c825491c3e7e26321b651a2dd195df105b74c25d6599ae597927f600008597bd3174cc6ad8724d715471f9afddb4e8574cceb90bd5625f8a7cd05ac07b4f33e1a6ed9f8c1051643df219365345029798355541ebf085035284331f6e74c37aa2d95e6b8d84a64fe4ed527beba7648fcbe3a17e7ee181aa174769fe0ba588529801d86a8235a18818996d5a003286588d4c32429db8846f6333222969b3606372f32c8a4db1c48270d552f1d47ecc43a13b8dd8c101e9ffe73d4843cd7418bd3c0d78bc6a1ed0b6c794405893804918f5200da41dcf14f4452523b54ddd5bd993d1870b713367985367e0d882104707e813f5625af5fddc01fa4c0379a988bb993c56cab6261f84b352742c2a7049e4c8048b2ab98fb821c7ceca1668f2b997f6cce126031e4b919fa1a8215fc2b3059bf4209487ebe3b9e82d62bec068ff04a541fa102807ffe9bd2690ef76584e0ce32cc51fd7a6b7a9606b6d069900a8a81e84d7ee444d901ed9329949cde5fa3599d06447befca5160199a916fcf49f6528978ace93e5aa04bb6a21ffcd0dddacc12214d09d564ba5843d12fe867a332d6a867b2774b8716e7da725a21c91c1a0fe361102736ea06ee59324b6ff1c8e6e6f73af4c5e48605eab83ca822a18b40a44471266b044e5cb967fd77978b6a8b7b3d262af3badebd96428fb2f219bfccb83ba378b60dac754be533976a7688352d86208b24c79604ae2d6620107378ef0d6023bdb2573c4f0eba329ee4c84a5969fc8218d4393377fbe961750e910f657d0edf0f06ca93662b50e8ba33721698f867ea7ac8e973dbb5cd1b049d453122b7b9e0fb27fde6a20d050000000000000051865d14e45ccf9c4d5759ad83eefc8f393472553edebf987f128a95a438da7770e9ccf20213a266a738358f4b1ecf6a1e74086a4064524719bc4f26b1c41cf53beb1a0e0feca79979d6376339901db52bfc86717f9cbc3f2b0c68426e01c647a5c919e9719ae854c380f106e53ac4a4200e21e2ddff287a60b4c1c1ca194ac61dd0e54f3d9e7bc0f1f35f3e624f067b00d5f1c965254e2820f7fcea034753d356d383a11550df563bc249e664ac9b4367947782b2a3f852fe4cb0e5ecea5f9f62a9c952c0bbd7e959d9ac69d6c3f4c58977c94e25b652e44fa8a3967e96233c43199daa5d71db38e2951a37bd0f2a27c733fb598d529e36d1ebb67d258b5e89f631d734da072a91abe011750332f61067784b88efbee8d81c6d685e4c95a33af8f8b9b3022887c1d4929ab97a314bb03eb2243dd3243b1f3c68238ac07788e93eff25b028b4b4ab91924ec18ce9947a8a82ae504940c86dc4110603aae1ca4a81895069c0a846a2125b634de94409b3c2fb02ef55f0c050dc8c4e1dccf7603c7e4bdf1c8054ed4056f4c6e30ed4efaf817513b77f26051ff3c79bc7f0da9b8d92e8af632486ef6a422fda5dfb2b7d3ed9442cb6ed8442a83d21ba84da29912248524db42bd5458393a290220c57eeaefb1c11c6ca58464274d417d294ca7dd3831fba590117d012b107e4460e35a4d0b28ffed042c7e7636e101c3ac3e2d7c02c7561617a9ec51726de4cda3ad7e29ad904ec0ad3becf74eb15dc938dd76c29876362acfdfe50f73e9a7b476d526037a12448a26d359a9e59cdf98434421bbf8cf37f3f42706a6d41f3210485e7746f8b4b976a33b5c1483bbee3d51ea1cef04926d005aaf6c3b669544b3a75ff20a90a190963f3564d7f7d89cc4c1adb471d5629a23b25e43bdf1f46abc2263637c48fc5649c6ca705b25c4b2fb2fd1de3db561beeeaeee260953ca9f3984d625a374ad214bbcb67f5f0308ad4a477e49c18272e08ada7f36a7c6de241c8a5bc07914ac2b3a6d18e516c3854635b3b561e0c7ee16c4f6446193836d3137a219a467ea874e91f7e4f40f00aadf1e88e6208faa436301421221e2326b7f680e65f263e55a4f8140572f0c463000000859bc155eddb3d8fad8c6d091527a2c2ca21a5e53f9d1b48e56599262c75da201821a0999947afdbaaa04307e32f567ac4f31883188c0fb5f27c7995646263fb3d738a72b74ed8e92f3261dc344d23054562337d908cc94f7629832c9c875565fe5724f28f102fff374972bf81cdd0ddcacf36238b6184"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB]) 1.587398346s ago: executing program 2 (id=1379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0xe80}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)='6', 0x1}], 0x8}}], 0x2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000010000406c256d0000000000000109022400010000000009041900010300000009210000000122050009058103"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$key(r5, &(0x7f0000000100)={0xa003a5b4, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYRES32=r5, @ANYRES8=r2, @ANYRES64, @ANYRES8=r3, @ANYBLOB="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", @ANYRES16=r2, @ANYRESOCT=0x0], 0x11}}, 0x4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000480)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0022050000000b741cb976"], 0x0}, 0x0) 776.430661ms ago: executing program 0 (id=1380): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 724.111309ms ago: executing program 1 (id=1381): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000500)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[], 0x2000011a) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000250000000003000000eba6ce84807c5da511de207fec9608f026e728326236f2da7b2721b6f45e7dcbe655dc322fd4cb79bdc3"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) sendto$packet(r0, &(0x7f0000000000)="003400000081003400000081f360705eb6710f1d4d38a830440488fb", 0x1c, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYBLOB="00000000000000001c0016801800018014000b000000e7ffffffffffffff00000000000008000d"], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799de"], 0x398}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x9, 0xfc, 0xbe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x8000, 0x80000001, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x2, 0x2, {{0x18, 0x4, 0x2, 0x19, 0x60, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x2b, 0xc9, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @loopback, @local]}, @ssrr={0x89, 0xf, 0xb2, [@empty, @private=0xa010101, @multicast2]}, @cipso={0x86, 0x6, 0x1}, @noop, @timestamp={0x44, 0x8, 0x10, 0x0, 0x9, [0xfffffffc]}]}}}}}) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x4) 14.886347ms ago: executing program 0 (id=1382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7065326d70726f66696c50efa174dab622fd65202f70726f632f74f3b98f84876872722f63757272656e74000389764f9fda6f5238aa03000000000000000014b52ebd"], 0x46) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$getflags(r3, 0x401) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100"], 0x44}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000300)={@id, 0x40, 0x0, '\x00', @a}) 0s ago: executing program 1 (id=1383): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000040)={0x1}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 0 [ 213.667442][ T48] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 213.673347][ T5290] usb 5-1: USB disconnect, device number 15 [ 213.676896][ T5073] usb 3-1: SerialNumber: syz [ 213.700604][ T5290] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 213.710637][ T5290] cp210x 5-1:0.0: device disconnected [ 213.954498][ T4158] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 214.035195][ T5073] option 3-1:32.77: GSM modem (1-port) converter detected [ 214.048791][ T5073] usb 3-1: USB disconnect, device number 10 [ 214.057040][ T5073] option 3-1:32.77: device disconnected [ 214.366464][ T6861] loop4: detected capacity change from 0 to 32768 [ 214.379024][ T6861] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.848 (6861) [ 214.393026][ T6861] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.403574][ T6861] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 214.412380][ T6861] BTRFS info (device loop4): enabling ssd optimizations [ 214.419397][ T6861] BTRFS info (device loop4): using default commit interval 30s [ 214.426975][ T6861] BTRFS info (device loop4): turning off barriers [ 214.433396][ T6861] BTRFS info (device loop4): metadata ratio 7 [ 214.439481][ T6861] BTRFS info (device loop4): using free space tree [ 214.485877][ T4158] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 214.497212][ T4158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.509698][ T4158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.519969][ T4158] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 214.650433][ T6883] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 214.681128][ T6883] team0: Port device netdevsim0 added [ 214.760516][ T4158] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 214.773206][ T4158] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 214.782147][ T4158] usb 2-1: Manufacturer: syz [ 214.913648][ T4158] usb 2-1: config 0 descriptor?? [ 215.075195][ T6886] netlink: 'syz.3.850': attribute type 33 has an invalid length. [ 215.094794][ T5290] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 215.316964][ T5073] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 215.334937][ T5290] usb 3-1: Using ep0 maxpacket: 16 [ 215.347995][ T5927] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.494584][ T4158] usbhid 2-1:0.0: can't add hid device: -71 [ 215.495926][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 215.500627][ T5290] usb 3-1: unable to read config index 0 descriptor/all [ 215.516634][ T4158] usbhid: probe of 2-1:0.0 failed with error -71 [ 215.525230][ T4158] usb 2-1: USB disconnect, device number 11 [ 215.531873][ T5290] usb 3-1: can't read configurations, error -71 [ 215.542271][ T6895] device team0 entered promiscuous mode [ 215.554518][ T6895] device team_slave_0 entered promiscuous mode [ 215.561275][ T6895] device team_slave_1 entered promiscuous mode [ 215.567885][ T6895] device netdevsim0 entered promiscuous mode [ 215.576105][ T6894] device team0 left promiscuous mode [ 215.581514][ T6894] device team_slave_0 left promiscuous mode [ 215.593093][ T5073] usb 1-1: Using ep0 maxpacket: 32 [ 215.598512][ T6894] device team_slave_1 left promiscuous mode [ 215.609943][ T6894] device netdevsim0 left promiscuous mode [ 215.644736][ T48] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 215.653528][ T48] Bluetooth: hci1: Injecting HCI hardware error event [ 215.664573][ T3555] Bluetooth: hci1: hardware error 0x00 [ 215.714697][ T5073] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 215.734468][ T5073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.767711][ T5073] usb 1-1: config 0 descriptor?? [ 215.806977][ T5073] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 215.846202][ T48] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 215.901292][ T48] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 216.016164][ T6863] loop0: detected capacity change from 0 to 512 [ 216.016653][ T26] audit: type=1326 audit(1719469432.296:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.1.862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb050f75ae9 code=0x0 [ 216.053097][ T6863] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 216.070792][ T6863] EXT4-fs (loop0): orphan cleanup on readonly fs [ 216.079244][ T6863] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3845: comm syz.0.847: Allocating blocks 41-42 which overlap fs metadata [ 216.096938][ T6863] EXT4-fs (loop0): Remounting filesystem read-only [ 216.104046][ T6863] Quota error (device loop0): write_blk: dquota write failed [ 216.112084][ T6863] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 216.123931][ T6863] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.847: Failed to acquire dquot type 0 [ 216.138097][ T6863] EXT4-fs (loop0): 1 truncate cleaned up [ 216.146957][ T6863] EXT4-fs (loop0): pa ffff88805b604e00: logic 1, phys. 41, len 23 [ 216.154979][ T6863] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 216.192688][ T6863] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.320115][ T2987] bcm5974 1-1:0.0: could not read from device [ 216.330898][ T5073] usb 1-1: USB disconnect, device number 19 [ 216.345034][ T2987] bcm5974 1-1:0.0: could not read from device [ 216.552052][ T6924] loop2: detected capacity change from 0 to 32768 [ 216.567323][ T6924] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.864 (6924) [ 216.581346][ T6924] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.591561][ T6924] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 216.600280][ T6924] BTRFS info (device loop2): enabling ssd optimizations [ 216.607297][ T6924] BTRFS info (device loop2): using default commit interval 30s [ 216.614847][ T6924] BTRFS info (device loop2): turning off barriers [ 216.621278][ T6924] BTRFS info (device loop2): metadata ratio 7 [ 216.627365][ T6924] BTRFS info (device loop2): using free space tree [ 216.742209][ T6916] loop4: detected capacity change from 0 to 40427 [ 216.760756][ T6916] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 216.778646][ T6916] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 216.801479][ T6942] tipc: Started in network mode [ 216.806064][ T6916] F2FS-fs (loop4): invalid crc value [ 216.812236][ T6942] tipc: Node identity f7, cluster identity 4711 [ 216.818686][ T6942] tipc: Node number set to 247 [ 216.834242][ T6916] F2FS-fs (loop4): Found nat_bits in checkpoint [ 216.972496][ T3545] EXT4-fs (loop0): unmounting filesystem. [ 217.396236][ T6916] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 217.418504][ T6916] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 217.571139][ T48] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 217.613901][ T6584] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.724657][ T48] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 217.735487][ T48] Bluetooth: hci3: Injecting HCI hardware error event [ 217.752936][ T3557] Bluetooth: hci3: hardware error 0x00 [ 217.763380][ T3555] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 217.803079][ T6970] loop0: detected capacity change from 0 to 1024 [ 217.894720][ T3594] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 218.036616][ T38] hfsplus: b-tree write err: -5, ino 4 [ 218.265712][ T3594] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 218.293601][ T3594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.339341][ T3594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.376415][ T3594] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 218.495768][ T3594] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 218.538970][ T3594] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 218.546936][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 218.612514][ T3594] usb 2-1: Manufacturer: syz [ 218.645330][ T3594] usb 2-1: config 0 descriptor?? [ 218.663027][ T26] audit: type=1326 audit(1719469434.936:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.4.879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8545775ae9 code=0x0 [ 219.016276][ T6981] loop0: detected capacity change from 0 to 32768 [ 219.043216][ T6981] XFS: attr2 mount option is deprecated. [ 219.064292][ T6981] XFS: noikeep mount option is deprecated. [ 219.161908][ T6981] XFS (loop0): Mounting V5 Filesystem [ 219.238991][ T3594] appleir 0003:05AC:8243.0009: item fetching failed at offset 0/1 [ 219.261196][ T6981] XFS (loop0): Ending clean mount [ 219.269364][ T6981] XFS (loop0): Quotacheck needed: Please wait. [ 219.286136][ T3594] appleir 0003:05AC:8243.0009: parse failed [ 219.305390][ T3594] appleir: probe of 0003:05AC:8243.0009 failed with error -22 [ 219.350524][ T6981] XFS (loop0): Quotacheck: Done. [ 219.439730][ T5073] usb 2-1: USB disconnect, device number 12 [ 219.804750][ T3557] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 219.912250][ T7026] loop3: detected capacity change from 0 to 1024 [ 220.247502][ T3781] hfsplus: b-tree write err: -5, ino 4 [ 220.391081][ T7044] device team0 entered promiscuous mode [ 220.419081][ T7044] device team_slave_0 entered promiscuous mode [ 220.447721][ T7044] device team_slave_1 entered promiscuous mode [ 220.463192][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 220.483569][ T7041] device team0 left promiscuous mode [ 220.493058][ T7041] device team_slave_0 left promiscuous mode [ 220.501691][ T7041] device team_slave_1 left promiscuous mode [ 220.709321][ T7057] loop4: detected capacity change from 0 to 32768 [ 220.735199][ T7057] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.898 (7057) [ 220.749885][ T7057] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.760370][ T7057] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 220.769165][ T7057] BTRFS info (device loop4): enabling ssd optimizations [ 220.776158][ T7057] BTRFS info (device loop4): using default commit interval 30s [ 220.783704][ T7057] BTRFS info (device loop4): turning off barriers [ 220.790169][ T7057] BTRFS info (device loop4): metadata ratio 7 [ 220.796257][ T7057] BTRFS info (device loop4): using free space tree [ 220.864501][ T5073] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 220.974124][ T7081] netlink: 'syz.2.902': attribute type 10 has an invalid length. [ 221.134628][ T5073] usb 4-1: Using ep0 maxpacket: 8 [ 221.143036][ T7081] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 221.434767][ T5073] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 221.468300][ T5073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.489960][ T5073] usb 4-1: config 0 descriptor?? [ 221.694679][ T5073] viperboard 4-1:0.0: version 0.00 found at bus 004 address 010 [ 221.745646][ T5073] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 221.754565][ T5073] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 221.772576][ T3545] XFS (loop0): Unmounting Filesystem [ 221.784000][ T5073] usb 4-1: USB disconnect, device number 10 [ 221.814000][ T5927] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.822318][ T7090] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 221.830713][ T7090] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 221.852491][ T7090] vhci_hcd vhci_hcd.0: Device attached [ 221.920511][ T7090] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 221.927087][ T7090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 221.941597][ T7090] vhci_hcd vhci_hcd.0: Device attached [ 222.054644][ T4158] vhci_hcd: vhci_device speed not set [ 222.124600][ T4158] usb 11-1: new full-speed USB device number 3 using vhci_hcd [ 222.139153][ T7105] device team0 entered promiscuous mode [ 222.145055][ T7105] device team_slave_0 entered promiscuous mode [ 222.151587][ T7105] device team_slave_1 entered promiscuous mode [ 222.159754][ T7104] device team0 left promiscuous mode [ 222.166193][ T7104] device team_slave_0 left promiscuous mode [ 222.172397][ T7104] device team_slave_1 left promiscuous mode [ 222.179242][ T36] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 222.349722][ T7117] loop0: detected capacity change from 0 to 1024 [ 222.437586][ T3781] hfsplus: b-tree write err: -5, ino 4 [ 222.544527][ T36] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.560346][ T36] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.602825][ T7098] vhci_hcd: connection closed [ 222.603024][ T7091] vhci_hcd: connection reset by peer [ 222.614090][ T38] vhci_hcd: stop threads [ 222.618726][ T38] vhci_hcd: release socket [ 222.626569][ T38] vhci_hcd: disconnect device [ 222.631476][ T38] vhci_hcd: stop threads [ 222.639268][ T38] vhci_hcd: release socket [ 222.643768][ T38] vhci_hcd: disconnect device [ 222.649429][ T36] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 222.658639][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.671432][ T5292] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 222.680387][ T36] usb 3-1: SerialNumber: syz [ 222.684464][ T4638] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 222.700573][ T7124] loop0: detected capacity change from 0 to 32768 [ 222.708339][ T7124] XFS: attr2 mount option is deprecated. [ 222.713997][ T7124] XFS: noikeep mount option is deprecated. [ 222.723933][ T7124] XFS (loop0): Mounting V5 Filesystem [ 222.759670][ T7124] XFS (loop0): Ending clean mount [ 222.771474][ T7124] XFS (loop0): Quotacheck needed: Please wait. [ 222.801486][ T7124] XFS (loop0): Quotacheck: Done. [ 222.944490][ T4638] usb 5-1: Using ep0 maxpacket: 16 [ 223.034736][ T5292] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 223.051551][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.066777][ T5292] usb 4-1: config 0 descriptor?? [ 223.100057][ T4638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 223.112237][ T4638] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 223.115334][ T5292] cp210x 4-1:0.0: cp210x converter detected [ 223.127532][ T4638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.129281][ T36] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 223.141063][ T4638] usb 5-1: config 0 descriptor?? [ 223.183358][ T36] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 223.200970][ T36] usb 3-1: USB disconnect, device number 13 [ 223.494522][ T5292] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 223.494622][ T4638] usbhid 5-1:0.0: can't add hid device: -71 [ 223.502013][ T5292] cp210x 4-1:0.0: querying part number failed [ 223.514687][ T5292] usb 4-1: cp210x converter now attached to ttyUSB0 [ 223.519896][ T4638] usbhid: probe of 5-1:0.0 failed with error -71 [ 223.528422][ T5292] usb 4-1: USB disconnect, device number 11 [ 223.529991][ T4638] usb 5-1: USB disconnect, device number 16 [ 223.554675][ T5292] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 223.562567][ T5292] cp210x 4-1:0.0: device disconnected [ 223.639377][ T3545] XFS (loop0): Unmounting Filesystem [ 223.976854][ T7151] loop0: detected capacity change from 0 to 32768 [ 223.989991][ T7151] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.916 (7151) [ 224.004280][ T7151] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.014553][ T7151] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 224.023262][ T7151] BTRFS info (device loop0): enabling ssd optimizations [ 224.030522][ T7151] BTRFS info (device loop0): using default commit interval 30s [ 224.038110][ T7151] BTRFS info (device loop0): turning off barriers [ 224.044548][ T7151] BTRFS info (device loop0): metadata ratio 7 [ 224.050617][ T7151] BTRFS info (device loop0): using free space tree [ 224.220619][ T26] audit: type=1326 audit(1719469440.496:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5bbd75ae9 code=0x0 [ 225.123229][ T3545] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.597576][ T7200] infiniband syz0: set down [ 225.632409][ T5292] lo speed is unknown, defaulting to 1000 [ 225.640715][ T5292] lo speed is unknown, defaulting to 1000 [ 225.724574][ T6736] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 225.780596][ T7189] loop4: detected capacity change from 0 to 32768 [ 225.802352][ T7189] XFS: attr2 mount option is deprecated. [ 225.808215][ T7189] XFS: noikeep mount option is deprecated. [ 225.896835][ T7221] binder: 7212:7221 ioctl 40046210 0 returned -14 [ 226.049795][ T7189] XFS (loop4): Mounting V5 Filesystem [ 226.136956][ T7189] XFS (loop4): Ending clean mount [ 226.167434][ T7189] XFS (loop4): Quotacheck needed: Please wait. [ 226.253961][ T7189] XFS (loop4): Quotacheck: Done. [ 226.327258][ T7209] loop1: detected capacity change from 0 to 32768 [ 226.348738][ T6736] usb 4-1: Using ep0 maxpacket: 16 [ 226.375205][ T7209] Dev loop1 SGI disklabel: csum bad, label corrupted [ 226.464680][ T6736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 226.482792][ T6736] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 226.504616][ T6736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.524993][ T6736] usb 4-1: config 0 descriptor?? [ 226.864548][ T6736] usbhid 4-1:0.0: can't add hid device: -71 [ 226.871023][ T6736] usbhid: probe of 4-1:0.0 failed with error -71 [ 226.886123][ T6736] usb 4-1: USB disconnect, device number 12 [ 227.078058][ T5927] XFS (loop4): Unmounting Filesystem [ 227.214709][ T4638] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 227.244901][ T4158] vhci_hcd: vhci_device speed not set [ 227.484776][ T4638] usb 3-1: Using ep0 maxpacket: 32 [ 227.614829][ T4638] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 227.628258][ T4638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.650677][ T4638] usb 3-1: config 0 descriptor?? [ 227.699668][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 227.727192][ T4638] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 227.934986][ T7274] loop3: detected capacity change from 0 to 32768 [ 227.937437][ T7247] loop2: detected capacity change from 0 to 512 [ 227.942463][ T7274] XFS: attr2 mount option is deprecated. [ 227.953582][ T6736] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 227.953855][ T7247] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.961261][ T7274] XFS: noikeep mount option is deprecated. [ 227.979497][ T7247] EXT4-fs (loop2): orphan cleanup on readonly fs [ 227.981850][ T7274] XFS (loop3): Mounting V5 Filesystem [ 227.993080][ T7247] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3845: comm syz.2.946: Allocating blocks 41-42 which overlap fs metadata [ 228.007686][ T7247] EXT4-fs (loop2): Remounting filesystem read-only [ 228.017747][ T7247] Quota error (device loop2): write_blk: dquota write failed [ 228.025788][ T7247] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 228.031068][ T7274] XFS (loop3): Ending clean mount [ 228.035827][ T7247] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.946: Failed to acquire dquot type 0 [ 228.052297][ T7274] XFS (loop3): Quotacheck needed: Please wait. [ 228.061879][ T7247] EXT4-fs (loop2): 1 truncate cleaned up [ 228.092902][ T7247] EXT4-fs (loop2): pa ffff8880751e0000: logic 1, phys. 41, len 23 [ 228.101096][ T7247] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 228.115380][ T7247] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.123050][ T7274] XFS (loop3): Quotacheck: Done. [ 228.154598][ T3594] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 228.314658][ T6736] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 228.336455][ T6736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.368714][ T6736] usb 2-1: config 0 descriptor?? [ 228.430483][ T6736] cp210x 2-1:0.0: cp210x converter detected [ 228.534616][ T3594] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.552628][ T3594] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.674569][ T3594] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.698495][ T3594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.724263][ T3594] usb 5-1: SerialNumber: syz [ 228.894625][ T6736] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 228.911555][ T6736] cp210x 2-1:0.0: querying part number failed [ 228.944659][ T2987] bcm5974 3-1:0.0: could not read from device [ 228.961810][ T6736] usb 2-1: cp210x converter now attached to ttyUSB0 [ 228.963793][ T4638] usb 3-1: USB disconnect, device number 14 [ 228.986538][ T6736] usb 2-1: USB disconnect, device number 13 [ 229.001072][ T6736] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 229.029481][ T6736] cp210x 2-1:0.0: device disconnected [ 229.266545][ T3594] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 229.287741][ T3594] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 229.296126][ T3594] usb 5-1: USB disconnect, device number 17 [ 229.449294][ T5145] XFS (loop3): Unmounting Filesystem [ 229.546466][ T6584] EXT4-fs (loop2): unmounting filesystem. [ 229.908303][ T7340] loop4: detected capacity change from 0 to 1024 [ 230.083106][ T3810] hfsplus: b-tree write err: -5, ino 4 [ 230.240275][ T26] audit: type=1800 audit(1719469446.516:39): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.982" name="bus" dev="sda1" ino=1997 res=0 errno=0 [ 230.289721][ T7329] loop2: detected capacity change from 0 to 32768 [ 230.308907][ T7329] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.976 (7329) [ 230.333288][ T7329] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 230.347962][ T7329] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 230.365073][ T7329] BTRFS info (device loop2): using free space tree [ 230.384574][ T6736] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 230.637317][ T7329] BTRFS info (device loop2): enabling ssd optimizations [ 230.710492][ T6584] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 230.758692][ T6736] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 230.775025][ T6736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.800246][ T6736] usb 4-1: config 0 descriptor?? [ 230.872024][ T6736] cp210x 4-1:0.0: cp210x converter detected [ 231.324558][ T6736] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 231.337456][ T6736] cp210x 4-1:0.0: querying part number failed [ 231.363962][ T6736] usb 4-1: cp210x converter now attached to ttyUSB0 [ 231.396406][ T7391] loop1: detected capacity change from 0 to 4096 [ 231.415130][ T6736] usb 4-1: USB disconnect, device number 13 [ 231.459754][ T6736] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 231.477444][ T6736] cp210x 4-1:0.0: device disconnected [ 231.511636][ T7391] NILFS (loop1): invalid segment: Checksum error in segment payload [ 231.521541][ T7391] NILFS (loop1): trying rollback from an earlier position [ 231.634218][ T7391] NILFS (loop1): recovery complete [ 231.662620][ T7413] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.584483][ T6736] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 232.815473][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 232.834541][ T6736] usb 4-1: Using ep0 maxpacket: 8 [ 232.932391][ T26] audit: type=1326 audit(1719469449.206:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.1.1008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb050f75ae9 code=0x0 [ 232.959512][ T6736] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 232.977160][ T6736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.002243][ T6736] usb 4-1: config 0 descriptor?? [ 233.174457][ T3918] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 233.184550][ T6736] viperboard 4-1:0.0: version 0.00 found at bus 004 address 014 [ 233.214719][ T6736] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 233.223449][ T6736] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 233.255120][ T6736] usb 4-1: USB disconnect, device number 14 [ 233.457990][ T7448] binder: 7446:7448 ioctl 40046210 0 returned -14 [ 233.544676][ T3918] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 233.560001][ T3918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.582152][ T3918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.592886][ T3918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 233.639256][ T7454] loop2: detected capacity change from 0 to 512 [ 233.656096][ T7454] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 233.678801][ T7454] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1013: iget: bad i_size value: -67835469387268086 [ 233.692088][ T3918] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 233.701497][ T3918] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 233.704852][ T7454] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1013: couldn't read orphan inode 15 (err -117) [ 233.710059][ T3918] usb 1-1: Manufacturer: syz [ 233.723685][ T7454] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 233.738423][ T7454] ext2 filesystem being mounted at /root/syzkaller.JVOYh6/40/file0 supports timestamps until 2038 (0x7fffffff) [ 233.738852][ T3918] usb 1-1: config 0 descriptor?? [ 234.051623][ T7462] loop3: detected capacity change from 0 to 4096 [ 234.096719][ T7462] NILFS (loop3): invalid segment: Checksum error in segment payload [ 234.109132][ T7462] NILFS (loop3): trying rollback from an earlier position [ 234.153200][ T7462] NILFS (loop3): recovery complete [ 234.161040][ T7463] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.310589][ T6584] EXT4-fs (loop2): unmounting filesystem. [ 234.316008][ T3918] appleir 0003:05AC:8243.000A: item fetching failed at offset 0/1 [ 234.329976][ T3918] appleir 0003:05AC:8243.000A: parse failed [ 234.347358][ T3918] appleir: probe of 0003:05AC:8243.000A failed with error -22 [ 234.430120][ T7473] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 234.521777][ T3918] usb 1-1: USB disconnect, device number 20 [ 235.239829][ T7508] netlink: 'syz.0.1032': attribute type 10 has an invalid length. [ 235.294516][ T3918] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 235.525033][ T7514] loop0: detected capacity change from 0 to 32768 [ 235.532527][ T7514] XFS: attr2 mount option is deprecated. [ 235.538314][ T7514] XFS: noikeep mount option is deprecated. [ 235.542427][ T7518] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 235.550629][ T7518] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.569322][ T7518] vhci_hcd vhci_hcd.0: Device attached [ 235.578746][ T7523] loop1: detected capacity change from 0 to 2048 [ 235.591552][ T7514] XFS (loop0): Mounting V5 Filesystem [ 235.604166][ T7523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 235.612959][ T7523] ext4 filesystem being mounted at /root/syzkaller.A4MN9E/232/bus supports timestamps until 2038 (0x7fffffff) [ 235.636628][ T7514] XFS (loop0): Ending clean mount [ 235.646728][ T7514] XFS (loop0): Quotacheck needed: Please wait. [ 235.652548][ T7523] fs-verity: sha512 using implementation "sha512-avx2" [ 235.671704][ T7533] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 235.678344][ T7533] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.688522][ T7533] vhci_hcd vhci_hcd.0: Device attached [ 235.703441][ T7514] XFS (loop0): Quotacheck: Done. [ 235.746800][ T3543] EXT4-fs (loop1): unmounting filesystem. [ 235.779225][ T5073] vhci_hcd: vhci_device speed not set [ 235.854456][ T3918] usb 4-1: Using ep0 maxpacket: 8 [ 235.855676][ T5073] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 236.003159][ T3918] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 236.023419][ T3918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.216204][ T3918] usb 4-1: config 0 descriptor?? [ 236.362004][ T7534] vhci_hcd: connection closed [ 236.362353][ T3810] vhci_hcd: stop threads [ 236.372487][ T3810] vhci_hcd: release socket [ 236.394594][ T3918] viperboard 4-1:0.0: version 0.00 found at bus 004 address 015 [ 236.402521][ T3810] vhci_hcd: disconnect device [ 236.407587][ T7519] vhci_hcd: connection reset by peer [ 236.438560][ T3810] vhci_hcd: stop threads [ 236.442854][ T3810] vhci_hcd: release socket [ 236.450667][ T3545] XFS (loop0): Unmounting Filesystem [ 236.458506][ T3918] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 236.460462][ T3810] vhci_hcd: disconnect device [ 236.482510][ T3918] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 236.520921][ T3918] usb 4-1: USB disconnect, device number 15 [ 237.223852][ T7589] binder: 7583:7589 ioctl 40046210 0 returned -14 [ 237.340803][ T26] audit: type=1326 audit(1719469453.616:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.3.1059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaab975ae9 code=0x0 [ 237.534671][ T2904] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 237.620333][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 237.904528][ T2904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.914465][ T2904] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.924192][ T2904] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.014582][ T4638] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 238.094645][ T2904] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 238.103904][ T2904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.112446][ T2904] usb 3-1: Product: syz [ 238.117040][ T2904] usb 3-1: Manufacturer: syz [ 238.126946][ T2904] usb 3-1: SerialNumber: syz [ 238.180625][ T2904] hub 3-1:1.0: bad descriptor, ignoring hub [ 238.199937][ T2904] hub: probe of 3-1:1.0 failed with error -5 [ 238.385889][ T2904] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 238.409055][ T4638] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.440969][ T4638] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.547874][ T4638] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.564549][ T4638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.573305][ T4638] usb 2-1: SerialNumber: syz [ 238.738656][ T3594] usb 3-1: USB disconnect, device number 15 [ 238.755470][ T3594] usblp0: removed [ 238.791202][ T26] audit: type=1326 audit(1719469455.066:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.3.1079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaab975ae9 code=0x0 [ 239.112023][ T4638] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 239.131836][ T4638] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 239.153869][ T4638] usb 2-1: USB disconnect, device number 14 [ 239.512052][ T7665] loop4: detected capacity change from 0 to 32768 [ 239.519745][ T7665] XFS: attr2 mount option is deprecated. [ 239.525496][ T7665] XFS: noikeep mount option is deprecated. [ 239.573417][ T7665] XFS (loop4): Mounting V5 Filesystem [ 239.652416][ T7665] XFS (loop4): Ending clean mount [ 239.685627][ T7665] XFS (loop4): Quotacheck needed: Please wait. [ 239.733391][ T7665] XFS (loop4): Quotacheck: Done. [ 239.886488][ T7676] loop1: detected capacity change from 0 to 32768 [ 239.899678][ T7676] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1087 (7676) [ 240.055804][ T7676] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.066625][ T7676] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 240.075421][ T7676] BTRFS info (device loop1): enabling ssd optimizations [ 240.082510][ T7676] BTRFS info (device loop1): using default commit interval 30s [ 240.090076][ T7676] BTRFS info (device loop1): turning off barriers [ 240.096537][ T7676] BTRFS info (device loop1): metadata ratio 7 [ 240.102837][ T7676] BTRFS info (device loop1): using free space tree [ 240.113087][ T7685] device syz_tun entered promiscuous mode [ 240.809288][ T5927] XFS (loop4): Unmounting Filesystem [ 240.869581][ T2904] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 240.974575][ T4638] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 241.004983][ T5073] vhci_hcd: vhci_device speed not set [ 241.019993][ T7702] loop2: detected capacity change from 0 to 40427 [ 241.046646][ T7702] F2FS-fs (loop2): invalid crc value [ 241.088801][ T7702] F2FS-fs (loop2): Found nat_bits in checkpoint [ 241.124576][ T2904] usb 4-1: Using ep0 maxpacket: 32 [ 241.181186][ T7702] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 241.385694][ T4638] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 241.409983][ T4638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.438790][ T2904] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 241.442166][ T4638] usb 1-1: config 0 descriptor?? [ 241.447956][ T2904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.449373][ T2904] usb 4-1: config 0 descriptor?? [ 241.465318][ T6584] syz-executor: attempt to access beyond end of device [ 241.465318][ T6584] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 241.499326][ T3594] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 241.506693][ T2904] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 241.525715][ T4638] cp210x 1-1:0.0: cp210x converter detected [ 241.661948][ T3543] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.779684][ T7684] loop3: detected capacity change from 0 to 512 [ 241.815278][ T7684] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.867620][ T7684] EXT4-fs (loop3): orphan cleanup on readonly fs [ 241.877017][ T7684] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3845: comm syz.3.1090: Allocating blocks 41-42 which overlap fs metadata [ 241.905097][ T7684] EXT4-fs (loop3): Remounting filesystem read-only [ 241.911720][ T7684] Quota error (device loop3): write_blk: dquota write failed [ 241.924484][ T3594] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.944559][ T3594] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.963478][ T7684] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 241.979451][ T3594] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.993866][ T7684] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.1090: Failed to acquire dquot type 0 [ 242.030613][ T7684] EXT4-fs (loop3): 1 truncate cleaned up [ 242.041527][ T7684] EXT4-fs (loop3): pa ffff88807410ad20: logic 1, phys. 41, len 23 [ 242.050102][ T7684] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 242.054456][ T4158] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 242.066311][ T7684] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 242.097904][ T4638] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 242.107868][ T4638] cp210x 1-1:0.0: querying part number failed [ 242.122078][ T4638] usb 1-1: cp210x converter now attached to ttyUSB0 [ 242.137581][ T4638] usb 1-1: USB disconnect, device number 21 [ 242.149447][ T4638] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.160912][ T4638] cp210x 1-1:0.0: device disconnected [ 242.200743][ T7743] device syz_tun entered promiscuous mode [ 242.204743][ T3594] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.227252][ T3594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.236894][ T2987] bcm5974 4-1:0.0: could not read from device [ 242.248848][ T3594] usb 5-1: Product: syz [ 242.253193][ T3594] usb 5-1: Manufacturer: syz [ 242.258204][ T3594] usb 5-1: SerialNumber: syz [ 242.264868][ T5073] usb 4-1: USB disconnect, device number 16 [ 242.275444][ T2987] bcm5974 4-1:0.0: could not read from device [ 242.325581][ T3594] hub 5-1:1.0: bad descriptor, ignoring hub [ 242.331543][ T3594] hub: probe of 5-1:1.0 failed with error -5 [ 242.424551][ T4158] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.435238][ T4158] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.514702][ T4158] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.526130][ T4158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.534234][ T4158] usb 3-1: SerialNumber: syz [ 242.546150][ T3594] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 242.812021][ T5145] EXT4-fs (loop3): unmounting filesystem. [ 242.837590][ T5073] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 242.902449][ T6736] usb 5-1: USB disconnect, device number 18 [ 242.919948][ T6736] usblp0: removed [ 243.016534][ T4158] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 243.039813][ T4158] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 243.059263][ T4158] usb 3-1: USB disconnect, device number 16 [ 243.068524][ T7782] loop0: detected capacity change from 0 to 1024 [ 243.094482][ T5073] usb 2-1: Using ep0 maxpacket: 8 [ 243.119768][ T9] hfsplus: b-tree write err: -5, ino 4 [ 243.304578][ T5073] usb 2-1: config 32 has an invalid interface number: 77 but max is 1 [ 243.316691][ T5073] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 243.327018][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 243.336287][ T5073] usb 2-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 243.347609][ T5073] usb 2-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 243.360361][ T5073] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 243.369682][ T5073] usb 2-1: config 32 has no interface number 0 [ 243.376303][ T5073] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 243.387780][ T5073] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 243.399368][ T5073] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 243.411327][ T5073] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 243.422685][ T5073] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 243.433881][ T5073] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 243.445191][ T5073] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 243.457395][ T5073] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 243.475699][ T5073] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 243.500403][ T5073] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 243.513841][ T5073] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 243.533201][ T5073] usb 2-1: config 32 interface 77 has no altsetting 0 [ 243.614630][ T6736] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 243.735220][ T5073] usb 2-1: Dual-Role OTG device on HNP port [ 243.764515][ T5073] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 243.784628][ T5073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.792915][ T5073] usb 2-1: Product: syz [ 243.814567][ T5073] usb 2-1: Manufacturer: syz [ 243.819215][ T5073] usb 2-1: SerialNumber: syz [ 243.985651][ T6736] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 244.006342][ T6736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.033199][ T6736] usb 5-1: config 0 descriptor?? [ 244.061477][ T7816] syz.3.1130[7816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.061586][ T7816] syz.3.1130[7816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.076593][ T6736] cp210x 5-1:0.0: cp210x converter detected [ 244.094151][ T3918] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 244.205439][ T5073] option 2-1:32.77: GSM modem (1-port) converter detected [ 244.222679][ T5073] usb 2-1: USB disconnect, device number 15 [ 244.230941][ T5073] option 2-1:32.77: device disconnected [ 244.289574][ T3918] usb 3-1: device descriptor read/64, error -71 [ 244.484510][ T4158] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 244.494568][ T6736] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 244.502057][ T6736] cp210x 5-1:0.0: querying part number failed [ 244.511633][ T6736] usb 5-1: cp210x converter now attached to ttyUSB0 [ 244.520074][ T6736] usb 5-1: USB disconnect, device number 19 [ 244.540410][ T6736] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 244.553175][ T6736] cp210x 5-1:0.0: device disconnected [ 244.574780][ T3918] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 244.629261][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 244.744582][ T4158] usb 1-1: Using ep0 maxpacket: 8 [ 244.768722][ T3918] usb 3-1: device descriptor read/64, error -71 [ 244.865792][ T4158] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 244.875061][ T4158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.888143][ T4158] usb 1-1: config 0 descriptor?? [ 244.895099][ T3918] usb usb3-port1: attempt power cycle [ 245.005197][ T3595] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 245.055606][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1142'. [ 245.064647][ T4158] viperboard 1-1:0.0: version 0.00 found at bus 001 address 022 [ 245.075900][ T7850] device team0 entered promiscuous mode [ 245.081485][ T7850] device team_slave_1 entered promiscuous mode [ 245.084733][ T4158] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 245.095612][ T7849] device team0 left promiscuous mode [ 245.101049][ T4158] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 245.106514][ T7849] device team_slave_1 left promiscuous mode [ 245.142965][ T4158] usb 1-1: USB disconnect, device number 22 [ 245.304695][ T3918] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 245.386158][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 245.395462][ T3595] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 245.406499][ T3918] usb 3-1: device descriptor read/8, error -71 [ 245.413500][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.424745][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.435078][ T3595] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 245.476391][ T7869] device team0 entered promiscuous mode [ 245.481988][ T7869] device team_slave_0 entered promiscuous mode [ 245.488457][ T7869] device team_slave_1 entered promiscuous mode [ 245.496608][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1149'. [ 245.506286][ T7868] device team0 left promiscuous mode [ 245.511638][ T7868] device team_slave_0 left promiscuous mode [ 245.517935][ T7868] device team_slave_1 left promiscuous mode [ 245.534682][ T3595] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 245.543818][ T3595] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 245.552297][ T3595] usb 4-1: Manufacturer: syz [ 245.572418][ T3595] usb 4-1: config 0 descriptor?? [ 245.674505][ T3918] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 245.764639][ T3918] usb 3-1: device descriptor read/8, error -71 [ 245.894604][ T3918] usb usb3-port1: unable to enumerate USB device [ 246.036203][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1155'. [ 246.062945][ T7886] device team0 entered promiscuous mode [ 246.069414][ T7886] device team_slave_0 entered promiscuous mode [ 246.079292][ T7886] device team_slave_1 entered promiscuous mode [ 246.098167][ T7885] device team0 left promiscuous mode [ 246.104337][ T7885] device team_slave_0 left promiscuous mode [ 246.111046][ T7885] device team_slave_1 left promiscuous mode [ 246.139984][ T3595] appleir 0003:05AC:8243.000B: item fetching failed at offset 0/1 [ 246.154089][ T3595] appleir 0003:05AC:8243.000B: parse failed [ 246.164264][ T3595] appleir: probe of 0003:05AC:8243.000B failed with error -22 [ 246.338100][ T3595] usb 4-1: USB disconnect, device number 17 [ 246.603591][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 246.877720][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 246.914105][ T7920] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 246.930300][ T7920] batman_adv: batadv1: Adding interface: netdevsim0 [ 246.944600][ T7920] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.956508][ T3595] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 247.012736][ T7920] batman_adv: batadv1: Interface activated: netdevsim0 [ 247.245003][ T3595] usb 5-1: Using ep0 maxpacket: 8 [ 247.358875][ T7928] loop3: detected capacity change from 0 to 32768 [ 247.365658][ T3595] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 247.366485][ T7928] XFS: attr2 mount option is deprecated. [ 247.380609][ T7928] XFS: noikeep mount option is deprecated. [ 247.383562][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 247.395984][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.415655][ T3595] usb 5-1: config 0 descriptor?? [ 247.447775][ T7928] XFS (loop3): Mounting V5 Filesystem [ 247.540727][ T7928] XFS (loop3): Ending clean mount [ 247.546489][ T5073] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 247.554636][ T7944] loop1: detected capacity change from 0 to 1024 [ 247.563706][ T7928] XFS (loop3): Quotacheck needed: Please wait. [ 247.594743][ T3595] viperboard 5-1:0.0: version 0.00 found at bus 005 address 020 [ 247.610440][ T3810] hfsplus: b-tree write err: -5, ino 4 [ 247.624850][ T7928] XFS (loop3): Quotacheck: Done. [ 247.646099][ T3595] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 247.659242][ T3595] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 247.735139][ T3595] usb 5-1: USB disconnect, device number 20 [ 248.079061][ T5073] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.092326][ T5073] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.134636][ T3594] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 248.194599][ T5073] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 248.207523][ T5073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 248.219584][ T5073] usb 3-1: SerialNumber: syz [ 248.254608][ T4638] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 248.295387][ T5145] XFS (loop3): Unmounting Filesystem [ 248.328717][ T7962] syz.4.1183[7962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.328816][ T7962] syz.4.1183[7962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.530996][ T4638] usb 2-1: Using ep0 maxpacket: 32 [ 248.548273][ T3594] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 248.559627][ T3594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.571624][ T3594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.582024][ T3594] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 248.684999][ T3594] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 248.694088][ T3594] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 248.705195][ T4638] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 248.714286][ T4638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.725270][ T5073] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 248.746707][ T5073] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 248.755872][ T3594] usb 1-1: Manufacturer: syz [ 248.762046][ T4638] usb 2-1: config 0 descriptor?? [ 248.768447][ T3594] usb 1-1: config 0 descriptor?? [ 248.773901][ T5073] usb 3-1: USB disconnect, device number 21 [ 248.809337][ T4638] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 249.016756][ T7960] loop1: detected capacity change from 0 to 512 [ 249.025965][ T7960] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 249.038929][ T7960] EXT4-fs (loop1): orphan cleanup on readonly fs [ 249.049190][ T7960] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3845: comm syz.1.1178: Allocating blocks 41-42 which overlap fs metadata [ 249.070086][ T7960] EXT4-fs (loop1): Remounting filesystem read-only [ 249.076890][ T7960] Quota error (device loop1): write_blk: dquota write failed [ 249.084473][ T7960] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 249.104665][ T7960] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.1178: Failed to acquire dquot type 0 [ 249.118320][ T7960] EXT4-fs (loop1): 1 truncate cleaned up [ 249.149319][ T7960] EXT4-fs (loop1): pa ffff8880475a8460: logic 1, phys. 41, len 23 [ 249.157330][ T7960] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 249.177854][ T7960] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 249.309649][ T8005] binder: 8003:8005 ioctl 40046210 0 returned -14 [ 249.346381][ T3594] appleir 0003:05AC:8243.000C: item fetching failed at offset 0/1 [ 249.354910][ T3594] appleir 0003:05AC:8243.000C: parse failed [ 249.360956][ T3594] appleir: probe of 0003:05AC:8243.000C failed with error -22 [ 249.547501][ T5073] usb 1-1: USB disconnect, device number 23 [ 249.894630][ T2987] bcm5974 2-1:0.0: could not read from device [ 249.907679][ T4638] usb 2-1: USB disconnect, device number 16 [ 250.200960][ T8010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.250585][ T26] audit: type=1800 audit(1719469466.526:43): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1201" name="file0" dev="sda1" ino=1997 res=0 errno=0 [ 250.319483][ T8010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.441333][ T8010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.459686][ T3543] EXT4-fs (loop1): unmounting filesystem. [ 250.464700][ T4638] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 250.484255][ T8022] loop4: detected capacity change from 0 to 512 [ 250.509475][ T8022] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz.4.1201: inode #0: comm syz.4.1201: iget: illegal inode # [ 250.527341][ T8010] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 250.538389][ T8022] EXT4-fs (loop4): Remounting filesystem read-only [ 250.546068][ T8022] EXT4-fs (loop4): get orphan inode failed [ 250.622686][ T8010] batman_adv: batadv1: Removing interface: netdevsim0 [ 250.625684][ T8022] EXT4-fs (loop4): mount failed [ 250.645423][ T8010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.724560][ T4638] usb 1-1: Using ep0 maxpacket: 16 [ 250.770945][ T8010] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.812461][ T8010] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.815639][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 250.842127][ T8010] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.860146][ T8010] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.872459][ T8039] device team0 entered promiscuous mode [ 250.884751][ T8039] device team_slave_0 entered promiscuous mode [ 250.891385][ T8039] device team_slave_1 entered promiscuous mode [ 250.897897][ T8039] device netdevsim0 entered promiscuous mode [ 250.905380][ T4638] usb 1-1: unable to get BOS descriptor or descriptor too short [ 250.906286][ T8038] device team0 left promiscuous mode [ 250.919181][ T8038] device team_slave_0 left promiscuous mode [ 250.925337][ T8038] device team_slave_1 left promiscuous mode [ 250.932209][ T8038] device netdevsim0 left promiscuous mode [ 250.985527][ T8046] binder: 8042:8046 ioctl 40046210 0 returned -14 [ 251.004747][ T4638] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 251.024510][ T4638] usb 1-1: config 1 interface 0 has no altsetting 0 [ 251.138392][ T3594] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 251.204846][ T4638] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.40 [ 251.218291][ T4638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.226985][ T4638] usb 1-1: Product: ь [ 251.231208][ T4638] usb 1-1: SerialNumber: syz [ 251.241248][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 251.544854][ T3594] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 251.556264][ T3594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.567743][ T3594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.579738][ T4638] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 251.590844][ T4638] usb 1-1: USB disconnect, device number 24 [ 251.599926][ T3594] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 251.714688][ T3594] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 251.730856][ T3594] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 251.738246][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 251.739781][ T3594] usb 2-1: Manufacturer: syz [ 251.751425][ T8072] device team0 entered promiscuous mode [ 251.759159][ T8072] device team_slave_0 entered promiscuous mode [ 251.766982][ T8072] device team_slave_1 entered promiscuous mode [ 251.776709][ T8071] device team0 left promiscuous mode [ 251.782155][ T8071] device team_slave_0 left promiscuous mode [ 251.788473][ T8071] device team_slave_1 left promiscuous mode [ 251.797322][ T3594] usb 2-1: config 0 descriptor?? [ 252.049856][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 252.113474][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 252.337732][ T8102] binder: 8099:8102 ioctl 40046210 0 returned -14 [ 252.342567][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 252.359972][ T8109] device team0 entered promiscuous mode [ 252.372664][ T8109] device team_slave_0 entered promiscuous mode [ 252.380638][ T8109] device team_slave_1 entered promiscuous mode [ 252.397319][ T8108] device team0 left promiscuous mode [ 252.402747][ T8108] device team_slave_0 left promiscuous mode [ 252.413107][ T3594] appleir 0003:05AC:8243.000D: item fetching failed at offset 0/1 [ 252.426775][ T8108] device team_slave_1 left promiscuous mode [ 252.433275][ T3594] appleir 0003:05AC:8243.000D: parse failed [ 252.444856][ T3594] appleir: probe of 0003:05AC:8243.000D failed with error -22 [ 252.613603][ T3594] usb 2-1: USB disconnect, device number 17 [ 252.660410][ T8115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.689647][ T8098] loop0: detected capacity change from 0 to 40427 [ 252.700742][ T8098] F2FS-fs (loop0): invalid crc value [ 252.711226][ T8098] F2FS-fs (loop0): Found nat_bits in checkpoint [ 252.759608][ T8098] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 252.790412][ T8115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.805728][ T3545] syz-executor: attempt to access beyond end of device [ 252.805728][ T3545] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.859697][ T8115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.914646][ T3918] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 252.947128][ T8115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.092149][ T8115] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.140240][ T8115] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.164670][ T3918] usb 3-1: Using ep0 maxpacket: 16 [ 253.197344][ T8115] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.243022][ T8115] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.283852][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 253.324872][ T3918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 253.365741][ T8139] loop1: detected capacity change from 0 to 1024 [ 253.402157][ T8139] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 253.411797][ T8139] EXT4-fs (loop1): orphan cleanup on readonly fs [ 253.419257][ T3918] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 253.432521][ T3918] usb 3-1: config 1 interface 0 has no altsetting 0 [ 253.448417][ T8139] EXT4-fs error (device loop1): ext4_free_blocks:6213: comm syz.1.1246: Freeing blocks not in datazone - block = 0, count = 4096 [ 253.486948][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 253.510213][ T8139] EXT4-fs (loop1): 1 orphan inode deleted [ 253.520245][ T8139] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 253.523749][ T8142] device team0 entered promiscuous mode [ 253.546870][ T8142] device team_slave_1 entered promiscuous mode [ 253.562353][ T8141] device team0 left promiscuous mode [ 253.578584][ T8141] device team_slave_1 left promiscuous mode [ 253.604716][ T3918] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.40 [ 253.614521][ T3918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.623087][ T3918] usb 3-1: Product: ь [ 253.627627][ T3918] usb 3-1: SerialNumber: syz [ 253.742631][ T8153] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 253.749175][ T8153] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 253.760535][ T8153] vhci_hcd vhci_hcd.0: Device attached [ 253.828772][ T8156] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 253.834563][ T4534] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 253.835374][ T8156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.860619][ T8156] vhci_hcd vhci_hcd.0: Device attached [ 253.934645][ T4158] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 253.964650][ T3594] vhci_hcd: vhci_device speed not set [ 253.966217][ T3918] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 253.986382][ T3918] usb 3-1: USB disconnect, device number 22 [ 254.045001][ T3594] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 254.100290][ T3543] EXT4-fs (loop1): unmounting filesystem. [ 254.184685][ T4158] usb 4-1: Using ep0 maxpacket: 8 [ 254.224812][ T4534] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.239574][ T4534] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.249580][ T4534] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.384569][ T4158] usb 4-1: config 32 has an invalid interface number: 77 but max is 1 [ 254.392892][ T4158] usb 4-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 254.405852][ T4158] usb 4-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 254.417871][ T4158] usb 4-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 254.424569][ T4638] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 254.431271][ T4158] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 254.451956][ T4158] usb 4-1: config 32 has no interface number 0 [ 254.458275][ T4158] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 254.464961][ T4534] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 254.475145][ T4158] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 254.487415][ T4534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.494153][ T4158] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 254.499000][ T4534] usb 5-1: Product: syz [ 254.513316][ T4534] usb 5-1: Manufacturer: syz [ 254.518369][ T4534] usb 5-1: SerialNumber: syz [ 254.529254][ T4158] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 254.551936][ T4158] usb 4-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 254.563421][ T4158] usb 4-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 254.575150][ T4534] hub 5-1:1.0: bad descriptor, ignoring hub [ 254.582718][ T8154] vhci_hcd: connection reset by peer [ 254.585313][ T8157] vhci_hcd: connection closed [ 254.589012][ T9] vhci_hcd: stop threads [ 254.591376][ T4534] hub: probe of 5-1:1.0 failed with error -5 [ 254.593788][ T9] vhci_hcd: release socket [ 254.614605][ T4158] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 254.615037][ T9] vhci_hcd: disconnect device [ 254.634471][ T4158] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 254.638627][ T9] vhci_hcd: stop threads [ 254.658399][ T9] vhci_hcd: release socket [ 254.660988][ T4158] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 254.673320][ T9] vhci_hcd: disconnect device [ 254.684612][ T4158] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 254.703995][ T4158] usb 4-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 254.724569][ T4158] usb 4-1: config 32 interface 77 has no altsetting 0 [ 254.807160][ T4534] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 254.856253][ T4638] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 254.875546][ T4638] usb 2-1: config 0 has no interface number 0 [ 254.881723][ T4638] usb 2-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.884682][ T4158] usb 4-1: Dual-Role OTG device on HNP port [ 254.910735][ T4638] usb 2-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.924876][ T4158] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 254.931231][ T4638] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.937773][ T4158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.944792][ T4638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.962163][ T4158] usb 4-1: Product: syz [ 254.969808][ T4158] usb 4-1: Manufacturer: syz [ 254.977761][ T4638] usb 2-1: config 0 descriptor?? [ 254.978547][ T4158] usb 4-1: SerialNumber: syz [ 255.174952][ T3918] usb 5-1: USB disconnect, device number 21 [ 255.183520][ T3918] usblp0: removed [ 255.355483][ T4158] option 4-1:32.77: GSM modem (1-port) converter detected [ 255.377445][ T4158] usb 4-1: USB disconnect, device number 18 [ 255.396365][ T4158] option 4-1:32.77: device disconnected [ 255.463200][ T4638] uclogic 0003:256C:006D.000E: interface is invalid, ignoring [ 255.574712][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.581076][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.660321][ T4158] usb 2-1: USB disconnect, device number 18 [ 255.793437][ T26] audit: type=1326 audit(1719469472.066:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.4.1265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8545775ae9 code=0x0 [ 256.226544][ T8195] loop0: detected capacity change from 0 to 32768 [ 256.234081][ T8195] XFS: attr2 mount option is deprecated. [ 256.239863][ T8195] XFS: noikeep mount option is deprecated. [ 256.353701][ T8195] XFS (loop0): Mounting V5 Filesystem [ 256.551166][ T8195] XFS (loop0): Ending clean mount [ 256.565233][ T8195] XFS (loop0): Quotacheck needed: Please wait. [ 256.699573][ T8195] XFS (loop0): Quotacheck: Done. [ 256.980728][ T3555] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.999767][ T3555] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.009665][ T3555] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.019755][ T3555] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.034664][ T3555] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 257.042079][ T3555] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.105742][ T3545] XFS (loop0): Unmounting Filesystem [ 257.279892][ T8217] loop4: detected capacity change from 0 to 32768 [ 257.300511][ T8217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1269 (8217) [ 257.316007][ T8217] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.326312][ T8217] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 257.335067][ T8217] BTRFS info (device loop4): enabling ssd optimizations [ 257.342046][ T8217] BTRFS info (device loop4): using default commit interval 30s [ 257.349635][ T8217] BTRFS info (device loop4): turning off barriers [ 257.356124][ T8217] BTRFS info (device loop4): metadata ratio 7 [ 257.362172][ T8217] BTRFS info (device loop4): using free space tree [ 257.374443][ T8214] lo speed is unknown, defaulting to 1000 [ 257.909397][ T8245] loop1: detected capacity change from 0 to 1024 [ 257.950540][ T8214] chnl_net:caif_netlink_parms(): no params data found [ 257.972416][ T5927] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.242694][ T3796] hfsplus: b-tree write err: -5, ino 4 [ 258.302463][ T8250] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.470147][ T8250] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.480195][ T3918] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 258.497307][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.516775][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.526435][ T8214] device bridge_slave_0 entered promiscuous mode [ 258.547943][ T8250] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.570642][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.586663][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.595851][ T8214] device bridge_slave_1 entered promiscuous mode [ 258.644723][ T8250] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.695315][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.727592][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.744660][ T3918] usb 1-1: Using ep0 maxpacket: 16 [ 258.814469][ T7] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 258.865725][ T8250] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.890230][ T8214] team0: Port device team_slave_0 added [ 258.906994][ T8214] team0: Port device team_slave_1 added [ 258.925910][ T3918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 258.956401][ T8250] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.990751][ T8250] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.015261][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.022242][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.061945][ T8214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.074723][ T3918] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 259.089101][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.097293][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.114279][ T3918] usb 1-1: config 1 interface 0 has no altsetting 0 [ 259.130681][ T8214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.164758][ T3555] Bluetooth: hci3: command tx timeout [ 259.169895][ T8250] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.179069][ T3594] vhci_hcd: vhci_device speed not set [ 259.329820][ T8281] loop1: detected capacity change from 0 to 32768 [ 259.343095][ T8281] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1283 (8281) [ 259.355857][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.374533][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.385224][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.408108][ T8214] device hsr_slave_0 entered promiscuous mode [ 259.417402][ T8281] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 259.427672][ T8281] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 259.436462][ T8281] BTRFS info (device loop1): enabling ssd optimizations [ 259.443409][ T8281] BTRFS info (device loop1): using default commit interval 30s [ 259.451019][ T8281] BTRFS info (device loop1): turning off barriers [ 259.457584][ T8281] BTRFS info (device loop1): metadata ratio 7 [ 259.463731][ T8281] BTRFS info (device loop1): using free space tree [ 259.478862][ T8214] device hsr_slave_1 entered promiscuous mode [ 259.514659][ T3918] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.40 [ 259.524098][ T3918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.533603][ T3918] usb 1-1: Product: ь [ 259.591875][ T8292] syz.2.1284 (pid 8292) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 259.612231][ T8292] ubi0: attaching mtd0 [ 259.626394][ T8292] ubi0: scanning is finished [ 259.631078][ T8292] ubi0: empty MTD device detected [ 259.661228][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 259.723785][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.766348][ T7] usb 5-1: Product: syz [ 259.798671][ T7] usb 5-1: Manufacturer: syz [ 259.848105][ T7] usb 5-1: SerialNumber: syz [ 259.959064][ T7] hub 5-1:1.0: bad descriptor, ignoring hub [ 260.037945][ T7] hub: probe of 5-1:1.0 failed with error -5 [ 260.185478][ T7] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 260.250234][ T3918] usb 1-1: SerialNumber: syz [ 260.288221][ T8292] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 260.559158][ T8214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.584748][ T5625] usb 5-1: USB disconnect, device number 22 [ 260.593443][ T5625] usblp0: removed [ 260.696490][ T3918] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 260.720466][ T3543] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.732927][ T3918] usb 1-1: USB disconnect, device number 25 [ 260.775883][ T8214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.950926][ T8214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.073662][ T8214] team0: Port device netdevsim0 removed [ 261.080000][ T26] audit: type=1326 audit(1719469477.356:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.4.1289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8545775ae9 code=0x0 [ 261.113934][ T8214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.244688][ T3555] Bluetooth: hci3: command tx timeout [ 261.414717][ T8328] loop0: detected capacity change from 0 to 128 [ 261.455027][ T8328] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 261.481010][ T8214] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.525299][ T8214] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.574943][ T8214] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.607463][ T8214] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.854249][ T8214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.903340][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.913601][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.936959][ T8214] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.958203][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.971893][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.007212][ T4158] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.014445][ T4158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.089195][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.102423][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.132906][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.151925][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.159126][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.186450][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.278686][ T8342] binder: 8338:8342 ioctl 40046210 0 returned -14 [ 263.032034][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.041577][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.051075][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.079147][ T8214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.104540][ T4639] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 263.170623][ T8214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.214940][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.239010][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.271992][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.315189][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.323712][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.324773][ T3555] Bluetooth: hci3: command tx timeout [ 263.398800][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.440670][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.464648][ T4639] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 263.484699][ T4639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.525534][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.545247][ T4639] usb 3-1: config 0 descriptor?? [ 263.585823][ T4639] cp210x 3-1:0.0: cp210x converter detected [ 263.664001][ T8351] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 263.670571][ T8351] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 263.706869][ T8351] vhci_hcd vhci_hcd.0: Device attached [ 263.784817][ T8355] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 263.791468][ T8355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.825867][ T8355] vhci_hcd vhci_hcd.0: Device attached [ 263.924649][ T6736] vhci_hcd: vhci_device speed not set [ 263.994498][ T6736] usb 17-1: new full-speed USB device number 4 using vhci_hcd [ 264.072161][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.084831][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.118302][ T8214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.125674][ T4639] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 264.133207][ T4639] cp210x 3-1:0.0: querying part number failed [ 264.154776][ T4639] usb 3-1: cp210x converter now attached to ttyUSB0 [ 264.205771][ T4639] usb 3-1: USB disconnect, device number 23 [ 264.242825][ T4639] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 264.257125][ T4639] cp210x 3-1:0.0: device disconnected [ 264.280253][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.300275][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.325055][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.333330][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.373793][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.388798][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.412540][ T8214] device veth0_vlan entered promiscuous mode [ 264.442421][ T8214] device veth1_vlan entered promiscuous mode [ 264.455837][ T8356] vhci_hcd: connection closed [ 264.456264][ T8352] vhci_hcd: connection reset by peer [ 264.456712][ T3810] vhci_hcd: stop threads [ 264.495779][ T3810] vhci_hcd: release socket [ 264.500176][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.511029][ T3810] vhci_hcd: disconnect device [ 264.511461][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.538229][ T8214] device veth0_macvtap entered promiscuous mode [ 264.544753][ T3810] vhci_hcd: stop threads [ 264.549029][ T3810] vhci_hcd: release socket [ 264.557748][ T8214] device veth1_macvtap entered promiscuous mode [ 264.564793][ T3810] vhci_hcd: disconnect device [ 264.581306][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.594646][ T2904] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 264.602434][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.613532][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.624509][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.644530][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.674715][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.694627][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.714582][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.749077][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.313852][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.335307][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.354319][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.367052][ T3545] UDF-fs: error (device loop0): udf_read_inode: (ino 114) failed !bh [ 265.374600][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.376950][ T3545] UDF-fs: error (device loop0): udf_read_inode: (ino 114) failed !bh [ 265.391162][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.404067][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.414047][ T3557] Bluetooth: hci3: command tx timeout [ 265.429995][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.441098][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.451337][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.461945][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.471845][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.482353][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.493603][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.504922][ T2904] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 265.507263][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.525854][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.534009][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.534656][ T2904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.542935][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.561257][ T2904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.561286][ T2904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 265.591405][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.600374][ T8312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.635774][ T8214] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.645153][ T8214] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.653872][ T8214] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.663167][ T8214] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.664684][ T2904] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 265.709794][ T2904] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 265.721538][ T2904] usb 2-1: Manufacturer: syz [ 265.763080][ T8377] loop2: detected capacity change from 0 to 1024 [ 265.772598][ T2904] usb 2-1: config 0 descriptor?? [ 265.848181][ T8376] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.992132][ T3796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.003771][ T3798] hfsplus: b-tree write err: -5, ino 4 [ 266.011662][ T8376] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.012149][ T3796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.074655][ T5290] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 266.088113][ T3810] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.151606][ T8376] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.176531][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.194155][ T3781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.221182][ T3810] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.231643][ T3781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.265706][ T8376] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.281496][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.315165][ T3810] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.329556][ T2904] appleir 0003:05AC:8243.000F: item fetching failed at offset 0/1 [ 266.337463][ T5290] usb 5-1: Using ep0 maxpacket: 16 [ 266.343410][ T2904] appleir 0003:05AC:8243.000F: parse failed [ 266.351582][ T2904] appleir: probe of 0003:05AC:8243.000F failed with error -22 [ 266.420551][ T3810] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.462912][ T8376] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.491168][ T8376] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.497581][ T8388] ipt_CLUSTERIP: Please specify destination IP [ 266.506025][ T5290] usb 5-1: unable to get BOS descriptor or descriptor too short [ 266.514128][ T3557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.530652][ T3557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.539857][ T3557] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.548208][ T3557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.557201][ T4638] usb 2-1: USB disconnect, device number 19 [ 266.565222][ T3557] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.572517][ T3557] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.602669][ T8376] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.644693][ T5290] usb 5-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 266.668545][ T5290] usb 5-1: config 1 interface 0 has no altsetting 0 [ 266.675615][ T8376] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.702910][ T8387] lo speed is unknown, defaulting to 1000 [ 266.773393][ T8390] xt_bpf: check failed: parse error [ 266.855141][ T5290] usb 5-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.40 [ 266.870091][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.891819][ T5290] usb 5-1: Product: ь [ 266.908732][ T5290] usb 5-1: SerialNumber: syz [ 267.123536][ T8387] chnl_net:caif_netlink_parms(): no params data found [ 267.306453][ T5290] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 267.333342][ T5290] usb 5-1: USB disconnect, device number 23 [ 267.398279][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 267.407761][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.407869][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.438355][ T8387] device bridge_slave_0 entered promiscuous mode [ 267.463328][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.471918][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.480455][ T8387] device bridge_slave_1 entered promiscuous mode [ 267.507236][ T3810] bond0: (slave wlan1): Releasing backup interface [ 267.537563][ T8387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.550389][ T8387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.623202][ T8387] team0: Port device team_slave_0 added [ 267.642479][ T8387] team0: Port device team_slave_1 added [ 267.728507][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.743268][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.772791][ T8387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.772864][ T8410] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 267.789827][ T8410] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.808143][ T8410] vhci_hcd vhci_hcd.0: Device attached [ 267.814004][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.824118][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.881062][ T8410] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 267.887630][ T8410] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 267.891166][ T8387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.948543][ T8410] vhci_hcd vhci_hcd.0: Device attached [ 268.004325][ T3810] device hsr_slave_0 left promiscuous mode [ 268.010371][ T8312] vhci_hcd: vhci_device speed not set [ 268.039416][ T3810] device hsr_slave_1 left promiscuous mode [ 268.046735][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.054307][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.064224][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.072685][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.082424][ T3810] device bridge_slave_1 left promiscuous mode [ 268.088752][ T8312] usb 11-1: new full-speed USB device number 4 using vhci_hcd [ 268.096512][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.107308][ T3810] device bridge_slave_0 left promiscuous mode [ 268.123893][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.139024][ T3810] device veth1_macvtap left promiscuous mode [ 268.145485][ T3810] device veth0_macvtap left promiscuous mode [ 268.154723][ T3810] device veth1_vlan left promiscuous mode [ 268.161640][ T3810] device veth0_vlan left promiscuous mode [ 268.343635][ T3810] team0 (unregistering): Port device team_slave_1 removed [ 268.372816][ T3810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.386600][ T3810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.444330][ T3810] bond0 (unregistering): Released all slaves [ 268.498555][ T8387] device hsr_slave_0 entered promiscuous mode [ 268.505693][ T8387] device hsr_slave_1 entered promiscuous mode [ 268.512404][ T8387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.534451][ T8387] Cannot create hsr debugfs directory [ 268.548962][ T8416] vhci_hcd: connection closed [ 268.549404][ T8411] vhci_hcd: connection reset by peer [ 268.560529][ T3791] vhci_hcd: stop threads [ 268.565959][ T3791] vhci_hcd: release socket [ 268.572424][ T3791] vhci_hcd: disconnect device [ 268.587672][ T3791] vhci_hcd: stop threads [ 268.591952][ T3791] vhci_hcd: release socket [ 268.599501][ T3791] vhci_hcd: disconnect device [ 268.605303][ T3555] Bluetooth: hci2: command tx timeout [ 268.834650][ T4639] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 268.909571][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1321'. [ 269.101189][ T8387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.119323][ T8387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.141500][ T8387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.165154][ T6736] vhci_hcd: vhci_device speed not set [ 269.182352][ T8387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.204830][ T4639] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.227277][ T4639] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.312340][ T8387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.328118][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.337212][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.338017][ T4639] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 269.349342][ T8387] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.365909][ T6735] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 269.374075][ T4639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 269.381472][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.390233][ T4639] usb 4-1: SerialNumber: syz [ 269.404246][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.413871][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.421113][ T5290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.443997][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.458353][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.471046][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.483586][ T5290] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.490797][ T5290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.512685][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.548214][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.554591][ T4638] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 269.557684][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.575841][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.585558][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.606374][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.617736][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.635266][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.647199][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.656653][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.674501][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.701361][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.744799][ T6735] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 269.759710][ T6735] usb 3-1: config 0 has no interface number 0 [ 269.779644][ T6735] usb 3-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.815271][ T6735] usb 3-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.841393][ T6735] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 269.868845][ T6735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.879487][ T6735] usb 3-1: config 0 descriptor?? [ 269.939863][ T4639] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 269.948476][ T4638] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 269.967981][ T4638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.002397][ T4639] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 270.015369][ T4638] usb 5-1: config 0 descriptor?? [ 270.035131][ T4639] usb 4-1: USB disconnect, device number 19 [ 270.055471][ T4638] cp210x 5-1:0.0: cp210x converter detected [ 270.220091][ T8462] loop1: detected capacity change from 0 to 32768 [ 270.236741][ T8462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1328 (8462) [ 270.253544][ T8462] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 270.263819][ T8462] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 270.272589][ T8462] BTRFS info (device loop1): enabling ssd optimizations [ 270.279611][ T8462] BTRFS info (device loop1): using default commit interval 30s [ 270.287666][ T8462] BTRFS info (device loop1): turning off barriers [ 270.294093][ T8462] BTRFS info (device loop1): metadata ratio 7 [ 270.300216][ T8462] BTRFS info (device loop1): using free space tree [ 270.318424][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.334147][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.352880][ T8387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.391554][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.408177][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.506139][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.527152][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.543977][ T6735] uclogic 0003:256C:006D.0010: interface is invalid, ignoring [ 270.586269][ T8387] device veth0_vlan entered promiscuous mode [ 270.703751][ T3557] Bluetooth: hci2: command tx timeout [ 270.715698][ T8387] device veth1_vlan entered promiscuous mode [ 270.743677][ T3595] usb 3-1: USB disconnect, device number 24 [ 270.885566][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.899652][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.930601][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.965343][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.984640][ T26] audit: type=1326 audit(1719469487.206:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8486 comm="syz.3.1331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c41575ae9 code=0x0 [ 271.163680][ T4638] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 271.173982][ T4638] cp210x 5-1:0.0: querying part number failed [ 271.185373][ T4638] usb 5-1: cp210x converter now attached to ttyUSB0 [ 271.193626][ T4638] usb 5-1: USB disconnect, device number 24 [ 271.202717][ T4638] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 271.210803][ T4638] cp210x 5-1:0.0: device disconnected [ 271.211581][ T3543] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 271.234128][ T8387] device veth0_macvtap entered promiscuous mode [ 271.244655][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.290169][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.321387][ T8387] device veth1_macvtap entered promiscuous mode [ 271.364099][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.406364][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.450744][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.481736][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.509124][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.528122][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.543799][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.561032][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.574025][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.585011][ T8497] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 271.591554][ T8497] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.599094][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.612046][ T8497] vhci_hcd vhci_hcd.0: Device attached [ 271.619354][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.630325][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.658190][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.687908][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.703873][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.714905][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.752865][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.782826][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.826074][ T5290] vhci_hcd: vhci_device speed not set [ 271.843169][ T8497] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 271.849732][ T8497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.874325][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.904811][ T5290] usb 13-1: new full-speed USB device number 4 using vhci_hcd [ 271.937758][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.939038][ T8502] loop1: detected capacity change from 0 to 32768 [ 271.952249][ T8497] vhci_hcd vhci_hcd.0: Device attached [ 271.955888][ T8502] XFS: attr2 mount option is deprecated. [ 271.966137][ T8502] XFS: noikeep mount option is deprecated. [ 271.973571][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.983778][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.994540][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.004408][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.015277][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.026813][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.037776][ T8387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.046712][ T8387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.055771][ T8387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.064532][ T8387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.074252][ T8502] XFS (loop1): Mounting V5 Filesystem [ 272.081590][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.093197][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.168813][ T3791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.200550][ T3791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.214133][ T3798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.218362][ T8502] XFS (loop1): Ending clean mount [ 272.229363][ T8502] XFS (loop1): Quotacheck needed: Please wait. [ 272.243425][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.257931][ T3798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.270553][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.309089][ T8502] XFS (loop1): Quotacheck: Done. [ 272.503817][ T8503] vhci_hcd: connection closed [ 272.503997][ T8498] vhci_hcd: connection reset by peer [ 272.532125][ T9] vhci_hcd: stop threads [ 272.536809][ T9] vhci_hcd: release socket [ 272.541402][ T9] vhci_hcd: disconnect device [ 272.552448][ T9] vhci_hcd: stop threads [ 272.557899][ T9] vhci_hcd: release socket [ 272.563393][ T9] vhci_hcd: disconnect device [ 272.764551][ T3557] Bluetooth: hci2: command tx timeout [ 272.812076][ T3543] XFS (loop1): Unmounting Filesystem [ 272.905741][ T14] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 272.920356][ T8535] loop3: detected capacity change from 0 to 1024 [ 273.108334][ T9] hfsplus: b-tree write err: -5, ino 4 [ 273.317468][ T8540] loop2: detected capacity change from 0 to 32768 [ 273.335195][ T8540] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1342 (8540) [ 273.349044][ T8312] vhci_hcd: vhci_device speed not set [ 273.360195][ T8540] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.370894][ T8540] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 273.379613][ T8540] BTRFS info (device loop2): enabling ssd optimizations [ 273.386860][ T8540] BTRFS info (device loop2): using default commit interval 30s [ 273.394448][ T8540] BTRFS info (device loop2): turning off barriers [ 273.400882][ T8540] BTRFS info (device loop2): metadata ratio 7 [ 273.407203][ T8540] BTRFS info (device loop2): using free space tree [ 273.480076][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.504076][ T8556] loop4: detected capacity change from 0 to 128 [ 273.518195][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.541498][ T8556] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 273.705934][ T14] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 273.724322][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.742551][ T14] usb 1-1: SerialNumber: syz [ 273.943163][ T5625] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 274.048961][ T6584] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 274.234649][ T6735] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 274.314818][ T5625] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 274.334638][ T5625] usb 2-1: config 0 has no interface number 0 [ 274.362502][ T5625] usb 2-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.389717][ T5625] usb 2-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.400440][ T5625] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 274.434870][ T5625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.450601][ T5625] usb 2-1: config 0 descriptor?? [ 274.457965][ T14] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 274.474756][ T6735] usb 4-1: Using ep0 maxpacket: 32 [ 274.505751][ T14] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 274.533486][ T14] usb 1-1: USB disconnect, device number 26 [ 274.612209][ T6735] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 274.634552][ T6735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.664021][ T6735] usb 4-1: config 0 descriptor?? [ 274.717020][ T6735] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 274.844997][ T3555] Bluetooth: hci2: command tx timeout [ 274.929450][ T8571] loop3: detected capacity change from 0 to 512 [ 274.949098][ T8571] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 274.960400][ T5625] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 274.970358][ T8571] EXT4-fs (loop3): orphan cleanup on readonly fs [ 274.980028][ T8571] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3845: comm syz.3.1346: Allocating blocks 41-42 which overlap fs metadata [ 275.015100][ T8571] EXT4-fs (loop3): Remounting filesystem read-only [ 275.022062][ T8571] Quota error (device loop3): write_blk: dquota write failed [ 275.040378][ T8571] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 275.162757][ T14] usb 2-1: USB disconnect, device number 20 [ 275.183800][ T8571] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.1346: Failed to acquire dquot type 0 [ 275.236764][ T8571] EXT4-fs (loop3): 1 truncate cleaned up [ 275.272233][ T8571] EXT4-fs (loop3): pa ffff88805b5edee0: logic 1, phys. 41, len 23 [ 275.280188][ T8571] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 275.303360][ T26] audit: type=1800 audit(1719469491.576:47): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1351" name="bus" dev="sda1" ino=2007 res=0 errno=0 [ 275.324229][ T8571] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 275.814515][ T2987] bcm5974 4-1:0.0: could not read from device [ 276.175502][ T5927] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh [ 276.183769][ T5927] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh [ 276.208037][ T6735] usb 4-1: USB disconnect, device number 20 [ 276.224555][ T2987] bcm5974 4-1:0.0: could not read from device [ 276.235607][ T8599] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 276.242170][ T8599] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 276.263788][ T8599] vhci_hcd vhci_hcd.0: Device attached [ 276.331523][ T8608] loop1: detected capacity change from 0 to 1024 [ 276.416636][ T8605] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 276.423543][ T8605] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.456219][ T14] vhci_hcd: vhci_device speed not set [ 276.478920][ T8605] vhci_hcd vhci_hcd.0: Device attached [ 276.534538][ T14] usb 9-1: new full-speed USB device number 4 using vhci_hcd [ 276.560426][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 276.572862][ T3798] hfsplus: b-tree write err: -5, ino 4 [ 276.611097][ T3810] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.667692][ T8214] EXT4-fs (loop3): unmounting filesystem. [ 276.740951][ T3810] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.836217][ T3810] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.888683][ T3810] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.008313][ T5290] vhci_hcd: vhci_device speed not set [ 277.029043][ T8612] vhci_hcd: connection closed [ 277.029254][ T8600] vhci_hcd: connection reset by peer [ 277.029543][ T3791] vhci_hcd: stop threads [ 277.059654][ T3791] vhci_hcd: release socket [ 277.074875][ T3791] vhci_hcd: disconnect device [ 277.094523][ T3791] vhci_hcd: stop threads [ 277.108148][ T3791] vhci_hcd: release socket [ 277.129898][ T3791] vhci_hcd: disconnect device [ 277.191336][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.209340][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.221183][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.229873][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.237629][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.245293][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.290068][ T8640] lo speed is unknown, defaulting to 1000 [ 277.457021][ T8640] chnl_net:caif_netlink_parms(): no params data found [ 277.517231][ T8640] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.524497][ T8640] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.543278][ T8640] device bridge_slave_0 entered promiscuous mode [ 277.566095][ T8640] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.573382][ T8640] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.582802][ T8640] device bridge_slave_1 entered promiscuous mode [ 277.622913][ T8640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.636976][ T8640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.673677][ T8640] team0: Port device team_slave_0 added [ 277.681721][ T8640] team0: Port device team_slave_1 added [ 277.709167][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.716627][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.743761][ T8640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.757097][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.764057][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.791722][ T8640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.864091][ T8640] device hsr_slave_0 entered promiscuous mode [ 277.865992][ T3557] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 277.879142][ T8640] device hsr_slave_1 entered promiscuous mode [ 277.894508][ T4152] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 277.902388][ T8640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.926657][ T8640] Cannot create hsr debugfs directory [ 277.946887][ T8658] loop3: detected capacity change from 0 to 128 [ 277.971152][ T8658] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 278.080257][ T26] audit: type=1326 audit(1719469494.356:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.2.1366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5bbd75ae9 code=0x0 [ 278.298669][ T4152] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 278.324575][ T4152] usb 1-1: config 0 has no interface number 0 [ 278.344024][ T4152] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.380775][ T4152] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.400634][ T4152] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 278.431727][ T4152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.467948][ T3810] device hsr_slave_0 left promiscuous mode [ 278.475222][ T4152] usb 1-1: config 0 descriptor?? [ 278.489511][ T3810] device hsr_slave_1 left promiscuous mode [ 278.501211][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.509863][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.522659][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.587097][ T8668] binder: 8665:8668 ioctl 40046210 0 returned -14 [ 279.260466][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.304921][ T3810] device bridge_slave_1 left promiscuous mode [ 279.328987][ T3557] Bluetooth: hci4: command tx timeout [ 279.335975][ T3555] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 279.346690][ T3555] Bluetooth: hci2: Injecting HCI hardware error event [ 279.356846][ T3555] Bluetooth: hci2: hardware error 0x00 [ 279.384931][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.393336][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 279.414462][ T3810] device bridge_slave_0 left promiscuous mode [ 279.420718][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.492186][ T3810] device veth1_macvtap left promiscuous mode [ 279.508211][ T4152] uclogic 0003:256C:006D.0012: interface is invalid, ignoring [ 279.527709][ T3810] device veth0_macvtap left promiscuous mode [ 279.533792][ T3810] device veth1_vlan left promiscuous mode [ 279.576799][ T3810] device veth0_vlan left promiscuous mode [ 279.715286][ T8312] usb 1-1: USB disconnect, device number 27 [ 280.222924][ T3810] team0 (unregistering): Port device team_slave_1 removed [ 280.248504][ T3810] team0 (unregistering): Port device team_slave_0 removed [ 280.282610][ T3810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.317948][ T3810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.470019][ T3810] bond0 (unregistering): Released all slaves [ 280.597826][ T8671] device team0 entered promiscuous mode [ 280.603466][ T8671] device team_slave_1 entered promiscuous mode [ 280.620562][ T8671] device team0 left promiscuous mode [ 280.631561][ T8671] device team_slave_1 left promiscuous mode [ 280.852565][ T8684] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 280.859123][ T8684] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 280.879718][ T8684] vhci_hcd vhci_hcd.0: Device attached [ 280.968158][ T8692] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 280.974784][ T8692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 281.034539][ T8692] vhci_hcd vhci_hcd.0: Device attached [ 281.058002][ T8640] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.074704][ T5290] vhci_hcd: vhci_device speed not set [ 281.123328][ T8640] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.145159][ T5290] usb 13-1: new full-speed USB device number 5 using vhci_hcd [ 281.304439][ T8702] loop1: detected capacity change from 0 to 32768 [ 281.315199][ T8702] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1375 (8702) [ 281.331338][ T8702] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.341556][ T8702] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 281.350398][ T8702] BTRFS info (device loop1): enabling ssd optimizations [ 281.357386][ T8702] BTRFS info (device loop1): using default commit interval 30s [ 281.364955][ T8702] BTRFS info (device loop1): turning off barriers [ 281.371635][ T8702] BTRFS info (device loop1): metadata ratio 7 [ 281.377722][ T8702] BTRFS info (device loop1): using free space tree [ 281.404560][ T3557] Bluetooth: hci4: command tx timeout [ 281.413323][ T8640] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.448150][ T8640] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.487986][ T3555] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 281.568408][ T8640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.613931][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.625621][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.646399][ T8640] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.654801][ T14] vhci_hcd: vhci_device speed not set [ 281.660556][ T8695] vhci_hcd: connection closed [ 281.660949][ T8686] vhci_hcd: connection reset by peer [ 281.665882][ T3791] vhci_hcd: stop threads [ 281.693276][ T3791] vhci_hcd: release socket [ 281.791954][ T3791] vhci_hcd: disconnect device [ 281.812416][ T3791] vhci_hcd: stop threads [ 281.817162][ T3791] vhci_hcd: release socket [ 281.821654][ T3791] vhci_hcd: disconnect device [ 281.829692][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.839049][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.887988][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.888107][ T3543] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.895162][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.943652][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.965310][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.989477][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.015293][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.022488][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.060473][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.125655][ T3555] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 282.134257][ T3555] Bluetooth: hci3: Injecting HCI hardware error event [ 282.135500][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.143748][ T3557] Bluetooth: hci3: hardware error 0x00 [ 282.233567][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.243134][ T8214] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh [ 282.329649][ T8727] binder: 8721:8727 ioctl 40046210 0 returned -14 [ 282.361539][ T8214] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh [ 282.864520][ T3918] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 283.038144][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.073571][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.082986][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.514639][ T3555] Bluetooth: hci4: command tx timeout [ 283.544793][ T8640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.584977][ T8640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.594562][ T3918] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 283.608203][ T3918] usb 3-1: config 0 has no interface number 0 [ 283.623354][ T3918] usb 3-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.644172][ T3918] usb 3-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.669664][ T3918] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 283.682470][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'. [ 283.685133][ T3918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.719489][ T3918] usb 3-1: config 0 descriptor?? [ 283.808696][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.825260][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.859778][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.910003][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.929927][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.204501][ T3557] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 284.211173][ T4152] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 284.226771][ T3557] [ 284.229128][ T3557] ============================================ [ 284.235271][ T3557] WARNING: possible recursive locking detected [ 284.241418][ T3557] 6.1.94-syzkaller #0 Not tainted [ 284.246437][ T3557] -------------------------------------------- [ 284.252576][ T3557] kworker/u5:5/3557 is trying to acquire lock: [ 284.258724][ T3557] ffff88805e05a938 ((wq_completion)hci3){+.+.}-{0:0}, at: __flush_workqueue+0x157/0x1610 [ 284.268568][ T3557] [ 284.268568][ T3557] but task is already holding lock: [ 284.275925][ T3557] ffff88805e05a938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 284.285678][ T3557] [ 284.285678][ T3557] other info that might help us debug this: [ 284.293733][ T3557] Possible unsafe locking scenario: [ 284.293733][ T3557] [ 284.301176][ T3557] CPU0 [ 284.304450][ T3557] ---- [ 284.307726][ T3557] lock((wq_completion)hci3); [ 284.312491][ T3557] lock((wq_completion)hci3); [ 284.317253][ T3557] [ 284.317253][ T3557] *** DEADLOCK *** [ 284.317253][ T3557] [ 284.325397][ T3557] May be due to missing lock nesting notation [ 284.325397][ T3557] [ 284.333718][ T3557] 2 locks held by kworker/u5:5/3557: [ 284.339008][ T3557] #0: ffff88805e05a938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 284.349215][ T3557] #1: ffffc9000423fd20 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 284.360986][ T3557] [ 284.360986][ T3557] stack backtrace: [ 284.366881][ T3557] CPU: 1 PID: 3557 Comm: kworker/u5:5 Not tainted 6.1.94-syzkaller #0 [ 284.375038][ T3557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 284.385103][ T3557] Workqueue: hci3 hci_error_reset [ 284.390142][ T3557] Call Trace: [ 284.393424][ T3557] [ 284.396360][ T3557] dump_stack_lvl+0x1e3/0x2cb [ 284.401060][ T3557] ? nf_tcp_handle_invalid+0x642/0x642 [ 284.406536][ T3557] ? panic+0x764/0x764 [ 284.410629][ T3557] validate_chain+0x4711/0x5950 [ 284.415508][ T3557] ? mark_lock+0x9a/0x340 [ 284.419855][ T3557] ? reacquire_held_locks+0x660/0x660 [ 284.425242][ T3557] ? __lock_acquire+0x125b/0x1f80 [ 284.430287][ T3557] ? reacquire_held_locks+0x660/0x660 [ 284.435675][ T3557] ? mark_lock+0x9a/0x340 [ 284.440018][ T3557] ? __lock_acquire+0x125b/0x1f80 [ 284.445061][ T3557] ? mark_lock+0x9a/0x340 [ 284.449404][ T3557] __lock_acquire+0x125b/0x1f80 [ 284.454267][ T3557] lock_acquire+0x1f8/0x5a0 [ 284.458775][ T3557] ? __flush_workqueue+0x157/0x1610 [ 284.463971][ T3557] ? read_lock_is_recursive+0x10/0x10 [ 284.469328][ T3557] ? lockdep_softirqs_off+0x420/0x420 [ 284.474686][ T3557] ? __init_swait_queue_head+0xaa/0x140 [ 284.480219][ T3557] ? __flush_workqueue+0x157/0x1610 [ 284.485407][ T3557] __flush_workqueue+0x170/0x1610 [ 284.490430][ T3557] ? __flush_workqueue+0x157/0x1610 [ 284.495627][ T3557] ? trace_contention_end+0x61/0x170 [ 284.500904][ T3557] ? rcu_work_rcufn+0x140/0x140 [ 284.505822][ T3557] ? preempt_schedule_common+0xa6/0xd0 [ 284.511257][ T3557] ? preempt_schedule+0xd9/0xe0 [ 284.516086][ T3557] ? schedule_preempt_disabled+0x20/0x20 [ 284.521699][ T3557] drain_workqueue+0xc5/0x390 [ 284.526367][ T3557] destroy_workqueue+0x7b/0xae0 [ 284.531199][ T3557] hci_release_dev+0x165/0x16b0 [ 284.536043][ T3557] ? devres_release_all+0x1e1/0x240 [ 284.541243][ T3557] ? _raw_spin_unlock+0x40/0x40 [ 284.546079][ T3557] ? hci_unregister_suspend_notifier+0x90/0x90 [ 284.552240][ T3557] ? devres_release+0x90/0x90 [ 284.556917][ T3557] ? hci_sock_dev_event+0x2ee/0x5e0 [ 284.562097][ T3557] bt_host_release+0x7f/0x90 [ 284.566666][ T3557] ? bt_link_release+0x20/0x20 [ 284.571410][ T3557] device_release+0x91/0x1c0 [ 284.575981][ T3557] kobject_put+0x224/0x460 [ 284.580381][ T3557] ? process_one_work+0x7a9/0x11d0 [ 284.585488][ T3557] process_one_work+0x8a9/0x11d0 [ 284.590430][ T3557] ? worker_detach_from_pool+0x260/0x260 [ 284.596050][ T3557] ? _raw_spin_lock_irqsave+0x120/0x120 [ 284.601585][ T3557] ? kthread_data+0x4e/0xc0 [ 284.606075][ T3557] ? wq_worker_running+0x97/0x190 [ 284.611086][ T3557] worker_thread+0xa47/0x1200 [ 284.615745][ T3557] ? __sched_text_start+0x8/0x8 [ 284.620587][ T3557] kthread+0x28d/0x320 [ 284.624636][ T3557] ? worker_clr_flags+0x190/0x190 [ 284.629639][ T3557] ? kthread_blkcg+0xd0/0xd0 [ 284.634211][ T3557] ret_from_fork+0x1f/0x30 [ 284.638617][ T3557] [ 284.647015][ T3918] uclogic 0003:256C:006D.0013: interface is invalid, ignoring [ 284.659782][ T4529] usb 3-1: USB disconnect, device number 25 [ 284.680746][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.695945][ T8640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.703458][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.712100][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.859837][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.870152][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.886726][ T8640] device veth0_vlan entered promiscuous mode [ 284.905592][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.923878][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.940456][ T3810] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.953477][ T8640] device veth1_vlan entered promiscuous mode [ 284.966716][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.975214][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.982980][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 285.002016][ T3810] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.017400][ T4152] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 285.028455][ T4152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.043477][ T4152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.053493][ T4152] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 285.072947][ T8640] device veth0_macvtap entered promiscuous mode [ 285.086587][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 285.104961][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.113309][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.138995][ T3810] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.149647][ T4152] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 285.159262][ T4152] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 285.168930][ T4152] usb 2-1: Manufacturer: syz [ 285.175383][ T8640] device veth1_macvtap entered promiscuous mode [ 285.184073][ T4152] usb 2-1: config 0 descriptor?? [ 285.185289][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 285.204906][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.228896][ T3810] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.243616][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.257076][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.268068][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.280659][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.290619][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.303130][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.313110][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.327057][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.337389][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.349543][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.361052][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.371502][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.380918][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.392971][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.408488][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.419892][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.433456][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.445404][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.456027][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.466390][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.478556][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.488557][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.499245][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.510372][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.521594][ T8640] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.530482][ T8640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.539364][ T8640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.550116][ T8640] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.564103][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.574512][ T3555] Bluetooth: hci4: command tx timeout [ 285.581030][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.630967][ T8640] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 285.653822][ T3781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.654552][ T8640] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 285.669402][ T3781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.680723][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.732371][ T3791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.741658][ T3791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.750559][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.935592][ T4152] appleir 0003:05AC:8243.0014: item fetching failed at offset 0/1 [ 285.943788][ T4152] appleir 0003:05AC:8243.0014: parse failed [ 285.949852][ T4152] appleir: probe of 0003:05AC:8243.0014 failed with error -22 [ 286.138125][ T5625] usb 2-1: USB disconnect, device number 21 [ 286.284951][ T5290] vhci_hcd: vhci_device speed not set [ 286.361405][ T3810] device hsr_slave_0 left promiscuous mode [ 286.368236][ T3810] device hsr_slave_1 left promiscuous mode [ 286.376734][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.384150][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.393127][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.402648][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.411081][ T3810] device bridge_slave_1 left promiscuous mode [ 286.419359][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.427828][ T3810] device bridge_slave_0 left promiscuous mode [ 286.434023][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.448351][ T3810] device veth1_macvtap left promiscuous mode [ 286.454555][ T3810] device veth0_macvtap left promiscuous mode [ 286.460628][ T3810] device veth1_vlan left promiscuous mode [ 286.466730][ T3810] device veth0_vlan left promiscuous mode [ 286.603961][ T3810] team0 (unregistering): Port device team_slave_1 removed [ 286.618709][ T3810] team0 (unregistering): Port device team_slave_0 removed [ 286.629734][ T3810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.645876][ T3810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.713478][ T3810] bond0 (unregistering): Released all slaves