last executing test programs: 15.59680111s ago: executing program 3 (id=3618): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000440)="e2040000a9c9326c7cd88e36bb70b252b32a6be6339e52aff9c03ff6171d6af5e3a6a8b2b71c7fd818f2956aafe5d1c4e0f79e93388fc7e2ab007acefbb2732a8b01e6e94bba585006da01000100000000004b93f57fc91873aff149800d25401f1b8bb1b1be8dc6e7753a964f7642ef7f2bfe0b0f86dfc6f5ca0a4c9dca6d5b073368f5b31cdb244117c1fa638fadcaa3e6", 0x92}], 0x1}}], 0x2, 0x44008090) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 15.493027912s ago: executing program 3 (id=3619): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x98, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 13.850812464s ago: executing program 3 (id=3622): syz_mount_image$btrfs(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nossd_spread}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./bus\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0\x00') fsync(r0) 13.655011309s ago: executing program 1 (id=3623): openat$dir(0xffffffffffffff9c, 0x0, 0x20041, 0x100) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) sendfile(r0, r0, 0x0, 0x800000009) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(0x0, 0x185102, 0x0) ftruncate(r1, 0x2007ffb) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 12.001617124s ago: executing program 0 (id=3627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x98, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 10.733171545s ago: executing program 0 (id=3629): openat$dir(0xffffffffffffff9c, 0x0, 0x20041, 0x100) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) sendfile(r0, r0, 0x0, 0x800000009) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(0x0, 0x185102, 0x0) ftruncate(r1, 0x2007ffb) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 9.64502965s ago: executing program 3 (id=3630): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x48, 0x52, 0x20, 0x16dc, 0x15, 0x8453, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x1, 0xf8, 0x9d, 0x1e, 0xfe, [], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0x6, 0x4, 0x4}}]}}]}}]}}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000111401000400a8000000000008004b0028000000"], 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) 9.616732497s ago: executing program 1 (id=3631): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 9.259736236s ago: executing program 1 (id=3632): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004800)={{{@in6, @in6=@initdev}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000004900)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000004d40)={0x1, 0x6, {r0}, {0xee00}, 0x800, 0x213}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r6, r8, r9) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000004ec0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004f00), 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000050c0)={0x0, &(0x7f0000000180)={0x18, 0x0, 0x7, {0x3}}, &(0x7f00000001c0)={0x18, 0xfffffffffffffff5, 0x10000, {0x7f}}, &(0x7f0000000280)={0x18, 0x0, 0x7, {0x2a}}, &(0x7f00000002c0)={0x18, 0xfffffffffffffffe, 0x8000000000000001, {0x3c37}}, &(0x7f0000000300)={0x28, 0xfffffffffffffffe, 0x3, {{0x1ff, 0xfffffffffffffff9, 0x1, r0}}}, 0x0, &(0x7f0000002400)={0x18, 0x0, 0x8, {0x6}}, &(0x7f0000002440)=ANY=[], &(0x7f0000002480)={0x20, 0xffffffffffffffda, 0xffffffffffff9edf, {0x0, 0x5}}, &(0x7f00000024c0)={0x78, 0x0, 0x9, {0x9, 0x7, 0x0, {0x3, 0x9c61, 0x10d, 0xfff, 0xffff, 0x8, 0x2, 0x6, 0x5, 0x4000, 0x7f7b, 0x0, 0x0, 0x3, 0x1000}}}, 0x0, &(0x7f0000002540)=ANY=[], 0x0, &(0x7f0000004d80)={0xa0, 0x0, 0x0, {{0x6, 0x2, 0x9, 0x2e9a121a, 0x8, 0x18f, {0x2, 0x0, 0x1, 0x6, 0x7, 0x9, 0x6, 0x10, 0xf3, 0x0, 0x80000001, r5, r9, 0x9, 0x3359}}, {0x0, 0x13}}}, &(0x7f0000004e40)={0x20, 0x0, 0x1000, {0x4, 0x0, 0x10001, 0x1}}, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 8.428223575s ago: executing program 4 (id=3633): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r5 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(r5, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=ANY=[], 0x2e) nanosleep(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.295505873s ago: executing program 1 (id=3634): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_submit(r1, 0x0, &(0x7f0000000540)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}}, 0x0) 7.502129454s ago: executing program 1 (id=3636): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) lseek(r0, 0x101, 0x1) r1 = syz_open_procfs(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r4 = fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = open(0x0, 0x108843, 0x98) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r6, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r9, 0xc01064c2, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(r0, &(0x7f0000000000)=""/48, 0x30) 7.473284108s ago: executing program 0 (id=3637): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x98, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 7.42450815s ago: executing program 2 (id=3638): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646f74732c646f74732c6e6f636173652c646f74732c636865636b3d72656c617865642c646f74732c6e6f646f74732c646f74732c0032884758edd2e7a17e3c116a014262927783807ed4e210440ddebdf7d64a629cc9e873202c6d1e1d7dbabad279cb290d8a6c81b9ee715a035afdc5af3e15b932174f56cf4f009847fbc0e187d20fe47e50595251e835b306e05bc51afba211073e289eb499be4d726e3efbbeb1eb175e92b262c4ee4cee83e529784e53c874b73bb376876e2f3b2e667330e12c337d3a8b8cacccd9d86bc4c2f3b8971a79fb8f69af7b1d19592bf6a7186f7d4322045a99eaa207c407ab52aeadaaf1d089c278fccfb2138f"], 0xb, 0x170, &(0x7f0000000780)="$eJzs2z+LE0EYB+B3Tdy70+ZqsViwsQpqZanICeKCoqTQSuG0uZMDr1mt8ims/YKCpErlSLIh0ZAQgmY3XJ6nyQs/knkn7B9mYN7d/nR2enH58eLlMA6zLLqPoohfWRzHtehEbRAAwFUySil+ppTSwSCOvkdKqe2OAIBtG+XTwvsfAPbG2vX/w5YaAwC2xv4/AOyf12/ePn9clieviuIw4seg6lf9+rPOnz4rT+4VE8fzbw2rqt+Z5ffrvPg7vx43pvmDpXked+/U+Th78qJcyG/G6fanDwAAAHuhV8wsXd/3eqvyuvpjf2Bh/d6NW93GpgEAbODyy9ez9+fnHz43UBxNRsyaHXSz4lsLf8vOFp3YiTYUa4vxJfu/f7nNpxLQhPlN33YnAAAAAAAAAAAAAADAKv94VCiPiCVRRL7uZMFB41MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmd8BAAD//27zPto=") 6.024157106s ago: executing program 2 (id=3639): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)=0x0) capget(&(0x7f0000000300)={0x20071026, r4}, &(0x7f0000000340)={0xd1, 0x15e, 0xffff, 0x8, 0x4, 0xf378}) socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000240)="245a6691580a2bf5e94180388337f07834ae96ab817bc04402d342d479d633c5c58a2dea3c4e70c10fb252b993700dc61d493febc7712422fb735e0c463d9d3510b92f0731154714f6ca53bba37d838f8e324471e4eb00bdefb5195d", 0x5c) sendmmsg$inet6(r0, &(0x7f0000000ac0), 0x0, 0xfffc) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000140)=0xfffffffd, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x390, 0x280, 0x280, 0x0, 0x280, 0x390, 0x350, 0x350, 0x390, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fb048abaa303de86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe91e59fb2978f6fc3ede666a84d0f6a748acdf95f03c3555c84f5009700"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="33030000000004000000150000b8216c11800800030007000000"], 0x20}}, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000003c0)={0x55, 0x0, 0x0, {0x0, 0x1}, {0x52, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xca, 0x7}, {0xffff, 0x5, 0x1, 0x7, 0x6, 0xfe}]}) sendmsg$key(r5, &(0x7f0000000100)={0x900, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="000afc000700000028bd7000fe"], 0x38}}, 0x40408c4) 5.938112054s ago: executing program 0 (id=3640): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open(&(0x7f0000000280)='.\x00', 0x40000, 0x43) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x48, 0x52, 0x20, 0x16dc, 0x15, 0x8453, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x1, 0xf8, 0x9d, 0x1e, 0xfe, [], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0x6, 0x4, 0x4}}]}}]}}]}}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000111401000400a8000000000008004b0028000000"], 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) 5.300506392s ago: executing program 4 (id=3641): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r0, r2, 0x6700000000000000) 4.972411391s ago: executing program 3 (id=3642): syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x3, 0x10000, 0x2f, 0x66, 0xcc7, 0xe, 0x0, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 4.414075549s ago: executing program 2 (id=3643): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) 4.20532742s ago: executing program 1 (id=3644): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)=0x0) capget(&(0x7f0000000300)={0x20071026, r4}, &(0x7f0000000340)={0xd1, 0x15e, 0xffff, 0x8, 0x4, 0xf378}) socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000240)="245a6691580a2bf5e94180388337f07834ae96ab817bc04402d342d479d633c5c58a2dea3c4e70c10fb252b993700dc61d493febc7712422fb735e0c463d9d3510b92f0731154714f6ca53bba37d838f8e324471e4eb00bdefb5195d", 0x5c) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xfffc) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000140)=0xfffffffd, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x390, 0x280, 0x280, 0x0, 0x280, 0x390, 0x350, 0x350, 0x390, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fb048abaa303de86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe91e59fb2978f6fc3ede666a84d0f6a748acdf95f03c3555c84f5009700"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="33030000000004000000150000b8216c11800800030007000000"], 0x20}}, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000003c0)={0x55, 0x0, 0x0, {0x0, 0x1}, {0x52, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xca, 0x7}, {0xffff, 0x5, 0x1, 0x7, 0x6, 0xfe}]}) sendmsg$key(r5, &(0x7f0000000100)={0x900, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="000afc000700000028bd7000fe"], 0x38}}, 0x40408c4) 3.998353065s ago: executing program 2 (id=3645): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646f74732c646f74732c6e6f636173652c646f74732c636865636b3d72656c617865642c646f74732c6e6f646f74732c646f74732c0032884758edd2e7a17e3c116a014262927783807ed4e210440ddebdf7d64a629cc9e873202c6d1e1d7dbabad279cb290d8a6c81b9ee715a035afdc5af3e15b932174f56cf4f009847fbc0e187d20fe47e50595251e835b306e05bc51afba211073e289eb499be4d726e3efbbeb1eb175e92b262c4ee4cee83e529784e53c874b73bb376876e2f3b2e667330e12c337d3a8b8cacccd9d86bc4c2f3b8971a79fb8f69af7b1d19592bf6a7186f7d4322045a99eaa207c407ab52aeadaaf1d089c278fccfb2138f"], 0xb, 0x170, &(0x7f0000000780)="$eJzs2z+LE0EYB+B3Tdy70+ZqsViwsQpqZanICeKCoqTQSuG0uZMDr1mt8ims/YKCpErlSLIh0ZAQgmY3XJ6nyQs/knkn7B9mYN7d/nR2enH58eLlMA6zLLqPoohfWRzHtehEbRAAwFUySil+ppTSwSCOvkdKqe2OAIBtG+XTwvsfAPbG2vX/w5YaAwC2xv4/AOyf12/ePn9clieviuIw4seg6lf9+rPOnz4rT+4VE8fzbw2rqt+Z5ffrvPg7vx43pvmDpXked+/U+Th78qJcyG/G6fanDwAAAHuhV8wsXd/3eqvyuvpjf2Bh/d6NW93GpgEAbODyy9ez9+fnHz43UBxNRsyaHXSz4lsLf8vOFp3YiTYUa4vxJfu/f7nNpxLQhPlN33YnAAAAAAAAAAAAAADAKv94VCiPiCVRRL7uZMFB41MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmd8BAAD//27zPto=") 3.945705119s ago: executing program 3 (id=3646): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r1) 3.928489043s ago: executing program 4 (id=3647): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_submit(r1, 0x0, &(0x7f0000000540)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}}, 0x0) 3.249878315s ago: executing program 4 (id=3648): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x501000, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, 0xffffffffffffffff) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000040)={0x5, 0x0, "a042248d2662a795a916cd5b877316210b2b4cff7c972f26", {0xa, 0xfffeffff}, 0x2590}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) 3.003899599s ago: executing program 2 (id=3649): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) gettid() socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x1083088, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400, 0x145) futimesat(r2, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x40) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/116, 0x74, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.294832735s ago: executing program 4 (id=3650): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) 1.088495104s ago: executing program 2 (id=3651): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = open(&(0x7f0000000280)='.\x00', 0x40000, 0x43) getdents(r3, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x48, 0x52, 0x20, 0x16dc, 0x15, 0x8453, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x1, 0xf8, 0x9d, 0x1e, 0xfe, [], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0x6, 0x4, 0x4}}]}}]}}]}}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000111401000400a8000000000008004b0028000000"], 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) 240.783009ms ago: executing program 0 (id=3652): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000400)={@random="ae63b2a6bea9", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x40, 0x0, @val=0x80}}}}}}}, 0x0) 113.089844ms ago: executing program 4 (id=3653): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0xb, 0x80, 0x9, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) r4 = open(0x0, 0x145142, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ftruncate(r4, 0x2007ffc) r5 = open(0x0, 0x60142, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) sendfile(r5, r6, 0x0, 0x1000000201005) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') pwrite64(r3, &(0x7f0000000240)="a9a7", 0x2, 0x400001002) 0s ago: executing program 0 (id=3654): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r5 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(r5, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000500)=ANY=[], 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): s an invalid descriptor of length 0, skipping remainder of the config [ 1050.222692][T16081] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1050.989564][T14302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1051.284483][T17100] Bluetooth: hci1: command tx timeout [ 1051.601420][T14302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.959616][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2924'. [ 1051.986930][T16081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.718466][T17102] chnl_net:caif_netlink_parms(): no params data found [ 1053.015827][T14393] hid-generic 0000:0004:0034.000F: unknown main item tag 0x0 [ 1053.068576][T16081] usb 3-1: can't set config #4, error -71 [ 1053.075885][T16081] usb 3-1: USB disconnect, device number 22 [ 1053.145574][T14393] hid-generic 0000:0004:0034.000F: unknown main item tag 0x0 [ 1053.167042][T14393] hid-generic 0000:0004:0034.000F: unknown main item tag 0x0 [ 1053.188917][T14393] hid-generic 0000:0004:0034.000F: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1054.159288][T17100] Bluetooth: hci1: command tx timeout [ 1054.193009][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.196578][T17153] block nbd3: Attempted send on invalid socket [ 1054.199491][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.628452][T17153] I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1054.664780][T17153] gfs2: error -5 reading superblock [ 1054.847433][T14302] bridge_slave_1: left allmulticast mode [ 1054.863330][T14302] bridge_slave_1: left promiscuous mode [ 1054.879086][T14302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.922335][T14302] bridge_slave_0: left allmulticast mode [ 1054.930630][T14302] bridge_slave_0: left promiscuous mode [ 1054.938360][T14302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.944380][T14393] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1055.072905][T14302] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1055.156065][T14393] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.166609][T14393] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1055.175756][T14393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.187332][T14393] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1055.232122][T14302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.265598][T14302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.289969][T14302] bond0 (unregistering): Released all slaves [ 1055.313657][T14302] bond1 (unregistering): Released all slaves [ 1055.330099][T17102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.550084][T17102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.558836][T17102] bridge_slave_0: entered allmulticast mode [ 1055.574764][T17102] bridge_slave_0: entered promiscuous mode [ 1055.657830][T17171] siw: device registration error -23 [ 1055.953402][T14302] tipc: Left network mode [ 1055.994041][T17102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.009269][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.028023][T17102] bridge_slave_1: entered allmulticast mode [ 1056.046714][T17102] bridge_slave_1: entered promiscuous mode [ 1056.137619][T17102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.210834][T17102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.244671][T17100] Bluetooth: hci1: command tx timeout [ 1056.431207][T14302] hsr_slave_0: left promiscuous mode [ 1056.445082][T14302] hsr_slave_1: left promiscuous mode [ 1056.461906][T14302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.473058][T14302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.481240][T14302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.604025][T14302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.653935][T14302] veth1_macvtap: left promiscuous mode [ 1056.683322][T14302] veth0_macvtap: left promiscuous mode [ 1056.708635][T14302] veth1_vlan: left promiscuous mode [ 1056.730768][T14302] veth0_vlan: left promiscuous mode [ 1056.764427][T14393] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1056.918853][T14393] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1056.958501][T14393] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1057.008540][T14393] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 1057.354224][T14302] team0 (unregistering): Port device team_slave_1 removed [ 1057.402160][T14302] team0 (unregistering): Port device team_slave_0 removed [ 1057.499661][T14393] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1058.164601][T10732] usb 5-1: USB disconnect, device number 13 [ 1058.189695][T14393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1058.342461][T14393] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1058.448721][T14393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.507873][T14393] usb 4-1: config 0 descriptor?? [ 1058.513705][T17186] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1058.530656][T17102] team0: Port device team_slave_0 added [ 1058.554852][T17102] team0: Port device team_slave_1 added [ 1058.692292][T17102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.712391][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.829783][T17102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.842198][T17102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.849294][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.886674][T17102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.276229][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1059.283762][T14393] usbhid 4-1:0.0: can't add hid device: -71 [ 1059.333027][T14393] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1059.346062][T17102] hsr_slave_0: entered promiscuous mode [ 1059.352172][T17102] hsr_slave_1: entered promiscuous mode [ 1059.370943][T14393] usb 4-1: USB disconnect, device number 22 [ 1059.419196][T17102] debugfs: 'hsr0' already exists in 'hsr' [ 1059.473769][T17102] Cannot create hsr debugfs directory [ 1059.504604][T14302] IPVS: stop unused estimator thread 0... [ 1060.721868][T17102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1060.755320][T17102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1060.865187][T17102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1060.877698][T17102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1061.564552][T14393] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1061.609536][T17102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.682105][T17102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.740909][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.748070][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.757732][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.764847][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.784053][T17102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1061.826280][T17102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.840772][T14393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1061.866257][T14393] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1061.916016][T14393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.940576][T14393] usb 3-1: config 0 descriptor?? [ 1061.963999][T17239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1062.317497][T17102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.148117][T14393] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1063.234010][T14393] usb 3-1: USB disconnect, device number 23 [ 1063.272317][T17102] veth0_vlan: entered promiscuous mode [ 1063.299996][T17102] veth1_vlan: entered promiscuous mode [ 1063.321969][T17275] fido_id[17275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1063.355325][T17102] veth0_macvtap: entered promiscuous mode [ 1063.390646][T17102] veth1_macvtap: entered promiscuous mode [ 1063.426950][T17102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.578492][T17102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.589474][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.608653][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.986374][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.995953][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.324148][ T6259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.602509][ T6259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.649511][ T4144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.679239][ T4144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.236415][T17315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.249362][T17315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1067.408996][ T2148] hid-generic 0000:0004:0034.0011: unknown main item tag 0x0 [ 1067.419902][ T5183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1067.427819][ T5183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1067.435349][ T5183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1067.450001][ T5183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1067.457375][ T5183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1067.488333][ T2148] hid-generic 0000:0004:0034.0011: unknown main item tag 0x0 [ 1067.568948][ T2148] hid-generic 0000:0004:0034.0011: unknown main item tag 0x0 [ 1067.587239][ T2148] hid-generic 0000:0004:0034.0011: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1069.152908][ T5870] syz_tun (unregistering): left allmulticast mode [ 1069.216427][ T979] hid-generic 0000:0004:0034.0012: unknown main item tag 0x0 [ 1069.524547][T17100] Bluetooth: hci5: command tx timeout [ 1070.171907][ T979] hid-generic 0000:0004:0034.0012: unknown main item tag 0x0 [ 1070.336656][ T979] hid-generic 0000:0004:0034.0012: unknown main item tag 0x0 [ 1070.351716][ T979] hid-generic 0000:0004:0034.0012: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1071.041462][ T4144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.063496][T17328] chnl_net:caif_netlink_parms(): no params data found [ 1071.222918][ T4144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.469431][T17100] Bluetooth: hci5: command tx timeout [ 1072.612343][T16081] hid-generic 0000:0004:0034.0013: unknown main item tag 0x0 [ 1072.619858][T16081] hid-generic 0000:0004:0034.0013: unknown main item tag 0x0 [ 1072.627889][T16081] hid-generic 0000:0004:0034.0013: unknown main item tag 0x0 [ 1072.690569][T16081] hid-generic 0000:0004:0034.0013: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1074.484435][T17100] Bluetooth: hci5: command tx timeout [ 1074.594261][T17380] fido_id[17380]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1074.675703][ T4144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.863468][ T4144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.339982][T17328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.347529][T17328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.354796][T17328] bridge_slave_0: entered allmulticast mode [ 1075.361864][T17328] bridge_slave_0: entered promiscuous mode [ 1075.369540][T17328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.376816][T17328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.384025][T17328] bridge_slave_1: entered allmulticast mode [ 1075.391296][T17328] bridge_slave_1: entered promiscuous mode [ 1075.495292][T17328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.508945][T17328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.563973][T17328] team0: Port device team_slave_0 added [ 1075.577977][T17328] team0: Port device team_slave_1 added [ 1075.595818][T14727] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1075.611919][ T4144] bridge_slave_1: left allmulticast mode [ 1075.624053][ T4144] bridge_slave_1: left promiscuous mode [ 1075.637492][ T4144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.754641][T17402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1075.767888][T17402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1075.775620][ T4144] bridge_slave_0: left allmulticast mode [ 1075.783874][ T4144] bridge_slave_0: left promiscuous mode [ 1075.789845][ T4144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.920530][T14727] usb 1-1: Using ep0 maxpacket: 16 [ 1075.932573][T14727] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 1075.942235][T14727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.998387][T14727] usb 1-1: Product: syz [ 1076.003131][T14727] usb 1-1: Manufacturer: syz [ 1076.136313][T14727] usb 1-1: SerialNumber: syz [ 1076.508074][T14727] usb 1-1: config 0 descriptor?? [ 1076.516030][T14727] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1076.568250][T17100] Bluetooth: hci5: command tx timeout [ 1076.699272][ T4144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.922036][T14727] pwc: Warning: more than 1 configuration available. [ 1077.132429][ T4144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.144977][ T4144] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1077.153513][T14727] pwc: Failed to set LED on/off time (-71) [ 1077.160052][ T4144] bond0 (unregistering): Released all slaves [ 1077.166343][T14727] pwc: send_video_command error -71 [ 1077.172027][T14727] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1078.801665][T14727] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1078.835292][ T2148] hid-generic 0000:0004:0034.0014: unknown main item tag 0x0 [ 1079.206066][T17328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.269804][ T2148] hid-generic 0000:0004:0034.0014: unknown main item tag 0x0 [ 1079.276788][T17328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.284246][ T2148] hid-generic 0000:0004:0034.0014: unknown main item tag 0x0 [ 1079.311553][ T2148] hid-generic 0000:0004:0034.0014: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1079.594363][T14727] usb 1-1: USB disconnect, device number 23 [ 1079.603503][T17328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.617316][T17328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.624567][T17328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.676745][T17328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.739328][T17420] fido_id[17420]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1079.847892][ T979] syz2: Port: 1 Link DOWN [ 1079.857203][ T4144] tipc: Left network mode [ 1080.243274][T17328] hsr_slave_0: entered promiscuous mode [ 1080.252522][T17328] hsr_slave_1: entered promiscuous mode [ 1080.258892][T17328] debugfs: 'hsr0' already exists in 'hsr' [ 1080.264747][T17328] Cannot create hsr debugfs directory [ 1080.699980][ T4144] hsr_slave_0: left promiscuous mode [ 1080.712404][ T4144] hsr_slave_1: left promiscuous mode [ 1080.725316][ T4144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.095418][ T4144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.374727][ T4144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.387761][ T4144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.401564][ T4144] team0: left allmulticast mode [ 1081.413833][ T4144] team_slave_0: left allmulticast mode [ 1081.421781][ T4144] team_slave_1: left allmulticast mode [ 1081.428516][ T4144] team0: left promiscuous mode [ 1081.437920][ T4144] team_slave_0: left promiscuous mode [ 1081.443330][ T4144] team_slave_1: left promiscuous mode [ 1081.451082][ T4144] veth0_macvtap: left promiscuous mode [ 1081.460291][ T4144] veth1_vlan: left promiscuous mode [ 1081.870185][ T4144] team0 (unregistering): Port device team_slave_1 removed [ 1081.915005][ T4144] team0 (unregistering): Port device team_slave_0 removed [ 1083.528223][T17483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1083.602040][T17484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1084.658252][T17328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1084.696307][T17328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1085.066133][ T4144] IPVS: stop unused estimator thread 0... [ 1085.072128][T17328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1085.128650][T17328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1086.017745][T17503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1086.094520][T17503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1086.298725][T17503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1086.324451][T17503] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1086.674681][T17503] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1086.696412][T17328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.730992][T17503] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1086.748929][T17503] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1086.841679][T17328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.852772][T17503] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1086.861586][ T4144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.868687][ T4144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.945042][ T4144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.952269][ T4144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.779499][T17100] Bluetooth: hci2: command 0x0406 tx timeout [ 1088.099881][T17328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.165243][T17100] Bluetooth: hci3: command 0x0406 tx timeout [ 1088.324450][T17100] Bluetooth: hci1: command 0x0c1a tx timeout [ 1088.399587][T17328] veth0_vlan: entered promiscuous mode [ 1088.458386][T17328] veth1_vlan: entered promiscuous mode [ 1088.464083][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3003'. [ 1088.547638][T17328] veth0_macvtap: entered promiscuous mode [ 1088.574832][T17328] veth1_macvtap: entered promiscuous mode [ 1088.624715][T17328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.677383][T17328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.732736][ T4144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.772109][ T4144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.804737][T17100] Bluetooth: hci5: command 0x0c1a tx timeout [ 1088.816962][ T4144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.845816][ T4144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.114594][T17573] netlink: 'syz.1.3004': attribute type 10 has an invalid length. [ 1089.280928][T17572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3004'. [ 1089.290433][T17572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3004'. [ 1089.322492][T17573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.640236][T17573] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1089.794358][T17497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.850139][T17497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.903613][ T4144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.924519][ T4144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.202174][T17596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1090.214434][T17596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1090.552742][T17100] Bluetooth: hci1: command 0x0c1a tx timeout [ 1090.887021][T17100] Bluetooth: hci5: command 0x0c1a tx timeout [ 1092.564451][T17100] Bluetooth: hci1: command 0x0c1a tx timeout [ 1092.679663][ T5863] syz_tun (unregistering): left allmulticast mode [ 1092.729444][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1092.737941][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1092.752417][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1092.763325][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1092.772727][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1092.800036][T17637] autofs: Unknown parameter './file0' [ 1092.964453][T17100] Bluetooth: hci5: command 0x0c1a tx timeout [ 1093.000801][ T4144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.021401][ T4144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.177546][T17634] chnl_net:caif_netlink_parms(): no params data found [ 1093.218370][ T4144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.234425][ T4144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.257534][T14727] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 1093.408300][ T4144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.431640][ T4144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.505589][T14727] usb 1-1: config 9 has an invalid interface number: 1 but max is 0 [ 1093.513836][T14727] usb 1-1: config 9 has no interface number 0 [ 1093.524638][T14727] usb 1-1: config 9 interface 1 has no altsetting 0 [ 1093.584545][T14727] usb 1-1: string descriptor 0 read error: -22 [ 1093.592507][T14727] usb 1-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 1093.601711][T14727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.612617][ T4144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.616212][T14727] cx231xx 1-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 1093.631584][ T4144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.632565][T14727] cx231xx 1-1:9.1: Not found matching IAD interface [ 1093.717992][T17634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.728698][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.742715][T17634] bridge_slave_0: entered allmulticast mode [ 1093.755200][T17634] bridge_slave_0: entered promiscuous mode [ 1093.772291][T17634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.790080][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.929359][T17634] bridge_slave_1: entered allmulticast mode [ 1093.940822][T17634] bridge_slave_1: entered promiscuous mode [ 1094.379141][T17634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.423767][T17634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.557603][T17634] team0: Port device team_slave_0 added [ 1094.578757][T17634] team0: Port device team_slave_1 added [ 1094.692273][ T4144] bridge_slave_1: left allmulticast mode [ 1094.698047][ T4144] bridge_slave_1: left promiscuous mode [ 1094.705932][ T4144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.723780][ T4144] bridge_slave_0: left allmulticast mode [ 1094.731054][ T4144] bridge_slave_0: left promiscuous mode [ 1094.737938][ T4144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.804803][T17100] Bluetooth: hci2: command tx timeout [ 1094.984389][T10732] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 1095.145273][ T4144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.145885][T10732] usb 2-1: config 9 has an invalid interface number: 1 but max is 0 [ 1095.164024][ T4144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.174423][T10732] usb 2-1: config 9 has no interface number 0 [ 1095.180783][T10732] usb 2-1: config 9 interface 1 has no altsetting 0 [ 1095.191913][ T4144] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1095.219311][T10732] usb 2-1: string descriptor 0 read error: -22 [ 1095.227722][ T4144] bond0 (unregistering): Released all slaves [ 1095.235461][T10732] usb 2-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 1095.249705][T10732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.280282][T10732] cx231xx 2-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 1095.290798][T17634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.302554][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.328705][T10732] cx231xx 2-1:9.1: Not found matching IAD interface [ 1095.391263][T17634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.403219][ T4144] tipc: Left network mode [ 1095.407945][T17634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.417486][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.455160][T17634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.575553][T10732] usb 1-1: USB disconnect, device number 24 [ 1096.734040][T17634] hsr_slave_0: entered promiscuous mode [ 1096.871102][T17634] hsr_slave_1: entered promiscuous mode [ 1096.885049][T17100] Bluetooth: hci2: command tx timeout [ 1096.911725][T17680] block nbd2: Attempted send on invalid socket [ 1096.918005][T17680] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1096.927679][T17680] gfs2: error -5 reading superblock [ 1097.155208][T17634] debugfs: 'hsr0' already exists in 'hsr' [ 1097.163829][T17634] Cannot create hsr debugfs directory [ 1097.255898][ T4144] hsr_slave_0: left promiscuous mode [ 1097.262481][ T4144] hsr_slave_1: left promiscuous mode [ 1097.270537][ T4144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.375378][T17666] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1097.381392][T17666] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1097.387583][T17666] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1097.393538][T17666] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1097.399611][T17666] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1097.409042][T17666] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1097.861446][ T4144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.950972][ T4144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.991553][T10732] usb 2-1: USB disconnect, device number 25 [ 1098.080122][T17693] input: syz0 as /devices/virtual/input/input53 [ 1098.420968][ T4144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.563994][ T4144] veth1_macvtap: left promiscuous mode [ 1098.580666][ T4144] veth0_macvtap: left promiscuous mode [ 1098.587993][ T4144] veth1_vlan: left promiscuous mode [ 1099.128240][ T4144] team0 (unregistering): Port device team_slave_1 removed [ 1099.149563][ T4144] team0 (unregistering): Port device team_slave_0 removed [ 1099.224341][T10732] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1099.284353][ T5183] Bluetooth: hci3: command 0x0406 tx timeout [ 1099.352035][T17712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.359425][T17712] IPv6: NLM_F_CREATE should be set when creating new route [ 1099.366700][T17712] IPv6: NLM_F_CREATE should be set when creating new route [ 1099.373914][T17712] IPv6: NLM_F_CREATE should be set when creating new route [ 1099.401743][T10732] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.446711][ T5183] Bluetooth: hci2: command 0x0419 tx timeout [ 1099.452746][ T5183] Bluetooth: hci5: command 0x0c1a tx timeout [ 1099.458789][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 1099.486661][T10732] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1099.512314][T10732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.584829][T10732] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1099.688226][T17718] tipc: Started in network mode [ 1099.693263][T17718] tipc: Node identity eab4097ba088, cluster identity 4711 [ 1099.711420][T17718] tipc: Enabled bearer , priority 0 [ 1099.731746][T17718] syzkaller0: entered promiscuous mode [ 1099.741979][T17718] syzkaller0: entered allmulticast mode [ 1100.344699][T17724] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1100.372300][T17718] tipc: Resetting bearer [ 1100.381464][ T4144] IPVS: stop unused estimator thread 0... [ 1100.444593][T17717] tipc: Resetting bearer [ 1100.482231][T17717] tipc: Disabling bearer [ 1100.614154][T17634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1100.639384][T17634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1100.669981][T17634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1100.723241][T17634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1100.911946][T17729] block nbd3: Attempted send on invalid socket [ 1100.918478][T17729] I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1100.927988][T17729] gfs2: error -5 reading superblock [ 1101.154468][T10732] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1101.165864][T10732] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 1101.202335][T17634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.274674][T10732] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1101.297239][T10732] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 1101.319479][T17634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.349627][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.356759][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.563873][ T5928] hid-generic 0000:0004:0034.0015: unknown main item tag 0x0 [ 1101.835520][ T4144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.842672][ T4144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.852704][T17100] Bluetooth: hci2: command 0x0419 tx timeout [ 1102.067730][ T5928] hid-generic 0000:0004:0034.0015: unknown main item tag 0x0 [ 1102.091442][T16081] usb 2-1: USB disconnect, device number 26 [ 1102.190070][ T5928] hid-generic 0000:0004:0034.0015: unknown main item tag 0x0 [ 1103.689962][ T5928] hid-generic 0000:0004:0034.0015: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1104.096882][T17100] Bluetooth: hci2: command 0x0419 tx timeout [ 1104.111292][T17634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1104.144480][T15101] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 1104.367507][T15101] usb 3-1: config 9 has an invalid interface number: 1 but max is 0 [ 1104.375883][T15101] usb 3-1: config 9 has no interface number 0 [ 1104.776751][T15101] usb 3-1: config 9 interface 1 has no altsetting 0 [ 1104.803609][T15101] usb 3-1: string descriptor 0 read error: -71 [ 1104.818222][T15101] usb 3-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 1104.830537][T15101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.949819][T15101] usb 3-1: can't set config #9, error -71 [ 1104.962439][T15101] usb 3-1: USB disconnect, device number 24 [ 1105.361350][T17634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.164327][T17100] Bluetooth: hci2: command 0x0419 tx timeout [ 1106.390805][T17634] veth0_vlan: entered promiscuous mode [ 1106.438906][T17634] veth1_vlan: entered promiscuous mode [ 1106.508688][T17634] veth0_macvtap: entered promiscuous mode [ 1106.536817][T17634] veth1_macvtap: entered promiscuous mode [ 1106.616093][T17634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.674404][ T2148] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1106.733295][T17634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.773663][ T6259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.804883][T14302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.813688][T14302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.830423][ T2148] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1106.845563][ T2148] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.869583][T14302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.890090][ T2148] usb 4-1: config 0 has no interface number 0 [ 1106.900382][ T2148] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1106.941120][ T2148] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1106.964391][T14302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.972845][T14302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.996310][ T2148] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.026664][ T2148] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1107.037551][ T2148] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1107.049808][ T2148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 1107.058877][ T2148] usb 4-1: SerialNumber: syz [ 1107.066301][ T6546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.075711][ T2148] usb 4-1: config 0 descriptor?? [ 1107.094566][ T6546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.937087][ T2148] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1107.982264][ T2148] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1108.088680][ T2148] usb 4-1: USB disconnect, device number 23 [ 1108.464690][T14727] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1108.637681][T14727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1108.649894][T14727] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1108.682268][T14727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.737105][T14727] usb 2-1: config 0 descriptor?? [ 1108.792132][T17854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3053'. [ 1108.844945][T17849] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1108.975926][T17857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1109.801432][T14727] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1110.433647][T17872] syz_tun: entered allmulticast mode [ 1110.441093][T15101] hid-generic 0000:0004:0034.0017: unknown main item tag 0x0 [ 1111.849845][T15101] hid-generic 0000:0004:0034.0017: unknown main item tag 0x0 [ 1113.030455][T15101] hid-generic 0000:0004:0034.0017: unknown main item tag 0x0 [ 1113.040153][T15101] hid-generic 0000:0004:0034.0017: hidraw1: HID v0.0e Device [syz0] on syz1 [ 1113.165052][T14727] usb 2-1: reset full-speed USB device number 27 using dummy_hcd [ 1113.957775][ T5944] usb 2-1: USB disconnect, device number 27 [ 1114.188809][ T5855] syz_tun (unregistering): left allmulticast mode [ 1114.217754][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1114.226981][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1114.244435][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1114.253752][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1114.263145][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1114.696327][ T6802] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.724458][ T6802] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.940954][ T6802] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.025748][ T979] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1115.042315][ T6802] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.087690][ T6802] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.098418][ T6802] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.479374][T16081] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1115.497991][ T979] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.531441][ T6802] team0: Port device netdevsim0 removed [ 1115.537380][ T979] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1115.539790][ T6802] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.546947][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.565406][ T6802] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.597979][T17887] chnl_net:caif_netlink_parms(): no params data found [ 1115.606716][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.613178][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.629233][ T979] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1115.686943][T16081] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 1115.705348][T16081] usb 5-1: config 0 has no interface number 0 [ 1115.711642][T16081] usb 5-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 1115.723178][T16081] usb 5-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 1115.736753][T16081] usb 5-1: config 0 interface 247 has no altsetting 0 [ 1115.743725][T16081] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1115.753592][T16081] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.762989][T17887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.763411][T16081] usb 5-1: config 0 descriptor?? [ 1115.825762][T17887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.833260][T17887] bridge_slave_0: entered allmulticast mode [ 1115.840485][T17887] bridge_slave_0: entered promiscuous mode [ 1115.855527][T17887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.863464][T17887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.870659][T17887] bridge_slave_1: entered allmulticast mode [ 1115.877686][T17887] bridge_slave_1: entered promiscuous mode [ 1115.910672][ T6802] bridge_slave_1: left allmulticast mode [ 1115.916476][ T6802] bridge_slave_1: left promiscuous mode [ 1115.922258][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.085984][T17909] siw: device registration error -23 [ 1116.344397][T17100] Bluetooth: hci0: command tx timeout [ 1116.460556][T17910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1116.808733][ T6802] bridge_slave_0: left allmulticast mode [ 1116.814573][ T6802] bridge_slave_0: left promiscuous mode [ 1116.824463][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.036613][T16081] usb 5-1: string descriptor 0 read error: -71 [ 1117.092087][T16081] usb 5-1: Cannot read MAC address [ 1117.103134][T16081] MOSCHIP usb-ethernet driver 5-1:0.247: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1117.128996][T16081] usb 5-1: USB disconnect, device number 14 [ 1117.230495][ T6802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.367480][ T979] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1117.466333][ T979] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1117.475555][ T6802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.475576][ T979] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1117.493035][ T979] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1117.523260][ T6802] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1117.556489][ T6802] bond0 (unregistering): Released all slaves [ 1117.607165][T17887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.644185][T17887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.726363][T17887] team0: Port device team_slave_0 added [ 1117.751819][T17887] team0: Port device team_slave_1 added [ 1117.856566][T10732] usb 4-1: USB disconnect, device number 24 [ 1117.953245][T17887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.981332][T17887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.149463][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1118.364354][T17887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.454968][T17100] Bluetooth: hci0: command tx timeout [ 1118.519028][ T6802] hsr_slave_0: left promiscuous mode [ 1118.524947][ T6802] hsr_slave_1: left promiscuous mode [ 1118.544067][ T6802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.663897][ T6802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.677203][ T6802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.687398][ T6802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.888263][ T6802] dummy0: left allmulticast mode [ 1118.912511][ T6802] veth1_macvtap: left promiscuous mode [ 1118.946714][ T6802] veth0_macvtap: left promiscuous mode [ 1118.992759][ T6802] veth1_vlan: left promiscuous mode [ 1120.484321][T17100] Bluetooth: hci0: command tx timeout [ 1120.512927][T17961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1120.971580][ T6802] team0 (unregistering): Port device team_slave_1 removed [ 1121.022229][ T6802] team0 (unregistering): Port device team_slave_0 removed [ 1124.024434][T17100] Bluetooth: hci0: command tx timeout [ 1124.035616][ T2148] hid-generic 0000:0004:0034.0018: unknown main item tag 0x0 [ 1124.043020][ T2148] hid-generic 0000:0004:0034.0018: unknown main item tag 0x0 [ 1124.103863][ T2148] hid-generic 0000:0004:0034.0018: unknown main item tag 0x0 [ 1124.129772][ T2148] hid-generic 0000:0004:0034.0018: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1124.180043][T17887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.217981][T17979] fido_id[17979]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1124.221195][T17887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.276772][T17887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.373196][T17975] syz_tun: entered allmulticast mode [ 1124.409628][T17887] hsr_slave_0: entered promiscuous mode [ 1124.792799][T17887] hsr_slave_1: entered promiscuous mode [ 1125.030001][T17987] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1126.104715][T17994] syzkaller0: entered promiscuous mode [ 1126.120734][T17994] syzkaller0: entered allmulticast mode [ 1126.200369][ T6802] IPVS: stop unused estimator thread 0... [ 1126.766605][T18018] netlink: 'syz.2.3086': attribute type 10 has an invalid length. [ 1126.792895][T18018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.830563][T18016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3086'. [ 1126.841186][T18016] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3086'. [ 1126.852119][T18018] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1127.129600][T17887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1127.520154][T17887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1127.787824][T17887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1127.798496][T17887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1129.816821][T17887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.857999][T17887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.886449][T17497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.893542][T17497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.928853][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.935952][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.303039][T18061] block nbd1: Attempted send on invalid socket [ 1130.313237][T18061] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1130.759719][T18061] block nbd1: Attempted send on invalid socket [ 1130.766177][T18061] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1130.777074][T18061] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1130.787895][T18061] block nbd1: Attempted send on invalid socket [ 1130.794065][T18061] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1130.806614][T18061] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1130.819902][T18061] block nbd1: Attempted send on invalid socket [ 1130.975440][T18061] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1131.393769][T18061] block nbd1: Attempted send on invalid socket [ 1131.460853][T18061] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1131.511810][T18061] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1131.521623][T18061] block nbd1: Attempted send on invalid socket [ 1131.527918][T18061] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1131.553062][T18061] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1131.590740][T18061] block nbd1: Attempted send on invalid socket [ 1131.623314][T17887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.655733][T18061] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1131.690760][T17887] veth0_vlan: entered promiscuous mode [ 1131.776749][T18061] block nbd1: Attempted send on invalid socket [ 1131.782945][T18061] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1131.796680][T17887] veth1_vlan: entered promiscuous mode [ 1131.828534][T17887] veth0_macvtap: entered promiscuous mode [ 1131.988406][T18061] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1132.005844][T17887] veth1_macvtap: entered promiscuous mode [ 1132.035259][T18061] block nbd1: Attempted send on invalid socket [ 1132.041514][T18061] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1132.052158][T18061] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1132.062863][T18061] block nbd1: Attempted send on invalid socket [ 1132.069270][T18061] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1132.079790][T18061] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1132.119881][T17887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.132062][T18061] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1132.149085][T17887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.349212][ T4144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.388749][T18061] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1132.525839][ T4144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.538211][ T4144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.571281][T17839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.606497][T17839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.667775][ T4144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.796332][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.844396][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.044500][T18098] netlink: 'syz.1.3097': attribute type 10 has an invalid length. [ 1133.333069][T18094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3097'. [ 1133.342081][T18094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3097'. [ 1133.529769][T15101] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1133.740645][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1133.922387][T15101] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.942878][T15101] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1133.969141][T15101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.682490][ T2148] hid-generic 0000:0004:0034.0019: unknown main item tag 0x0 [ 1135.822416][ T2148] hid-generic 0000:0004:0034.0019: unknown main item tag 0x0 [ 1135.911850][ T2148] hid-generic 0000:0004:0034.0019: unknown main item tag 0x0 [ 1136.173224][T15101] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1136.241233][ T2148] hid-generic 0000:0004:0034.0019: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1137.341899][T15101] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1137.582861][T15101] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1137.609020][T15101] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1137.622028][T15101] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 1137.805159][T15101] usb 1-1: USB disconnect, device number 25 [ 1137.816276][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3104'. [ 1138.204033][T18136] usb usb8: usbfs: process 18136 (syz.4.3104) did not claim interface 0 before use [ 1141.834396][T16081] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1142.286393][T16081] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.622197][T16081] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1142.713517][T16081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.757986][T16081] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1144.387507][T16081] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1144.396052][T16081] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 1144.402583][T16081] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1144.411297][T16081] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 1144.454314][ T979] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1144.611247][ T979] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.623818][ T979] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1144.634112][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.917594][ T979] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1145.471706][T15101] usb 2-1: USB disconnect, device number 28 [ 1146.016934][ T979] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1146.614903][ T979] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1146.621532][ T979] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1146.640084][ T979] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1146.664490][ T979] usb 4-1: USB disconnect, device number 25 [ 1146.694372][T14393] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1146.856056][T14393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1148.052025][T18224] binder: BINDER_SET_CONTEXT_MGR already set [ 1148.058252][T18224] binder: 18223:18224 ioctl 4018620d 200000000040 returned -16 [ 1148.755311][T14393] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1148.766170][T14393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.834057][T14393] usb 3-1: config 0 descriptor?? [ 1148.886182][T18217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1149.442923][T14393] elan 0003:04F3:0755.001A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1149.548487][T14727] hid-generic 0000:0004:0034.001B: unknown main item tag 0x0 [ 1149.563872][T14727] hid-generic 0000:0004:0034.001B: unknown main item tag 0x0 [ 1149.582565][T14727] hid-generic 0000:0004:0034.001B: unknown main item tag 0x0 [ 1149.600869][T14727] hid-generic 0000:0004:0034.001B: hidraw1: HID v0.0e Device [syz0] on syz1 [ 1149.986872][T18236] fido_id[18236]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1150.124788][T14727] usb 3-1: USB disconnect, device number 25 [ 1151.194658][ T5866] syz_tun (unregistering): left allmulticast mode [ 1151.264304][T14727] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1151.405346][T17839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.452757][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3136'. [ 1151.560836][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1151.581282][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1151.589652][T17839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.602452][T14727] usb 4-1: Using ep0 maxpacket: 16 [ 1151.602530][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1151.617586][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1151.625448][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1151.649641][T14727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.707157][T14727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.471324][T17839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.481802][T14727] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1152.890281][T14727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.911701][T14727] usb 4-1: config 0 descriptor?? [ 1152.946294][T17839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.189584][T17839] bridge_slave_1: left allmulticast mode [ 1153.196650][T17839] bridge_slave_1: left promiscuous mode [ 1153.204761][T17839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.262789][T17839] bridge_slave_0: left allmulticast mode [ 1153.268586][T17839] bridge_slave_0: left promiscuous mode [ 1153.274391][T17839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.413931][T14727] usbhid 4-1:0.0: can't add hid device: -71 [ 1153.420001][T14727] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1153.429836][T14727] usb 4-1: USB disconnect, device number 26 [ 1153.867468][T17100] Bluetooth: hci3: command tx timeout [ 1154.496982][T18289] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3143'. [ 1154.804046][T17839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1154.817498][T17839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1154.837602][T17839] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1154.865385][T17839] bond0 (unregistering): Released all slaves [ 1156.624620][T17839] tipc: Left network mode [ 1156.635236][T14727] hid-generic 0000:0004:0034.001C: unknown main item tag 0x0 [ 1156.642731][T14727] hid-generic 0000:0004:0034.001C: unknown main item tag 0x0 [ 1156.665034][ T5183] Bluetooth: hci3: command tx timeout [ 1156.672701][T14727] hid-generic 0000:0004:0034.001C: unknown main item tag 0x0 [ 1156.773723][T18261] chnl_net:caif_netlink_parms(): no params data found [ 1156.784947][T14727] hid-generic 0000:0004:0034.001C: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1156.901402][T18301] fido_id[18301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1157.076145][T18303] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3147'. [ 1157.168702][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3147'. [ 1157.399040][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3149'. [ 1158.724329][ T5183] Bluetooth: hci3: command tx timeout [ 1159.066031][T10732] hid-generic 0000:0004:0034.001D: unknown main item tag 0x0 [ 1159.182976][T10732] hid-generic 0000:0004:0034.001D: unknown main item tag 0x0 [ 1159.262053][T10732] hid-generic 0000:0004:0034.001D: unknown main item tag 0x0 [ 1159.359308][T10732] hid-generic 0000:0004:0034.001D: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1159.424359][T18312] syz_tun: entered allmulticast mode [ 1159.450866][T18261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.494121][T18261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.501675][T18261] bridge_slave_0: entered allmulticast mode [ 1159.518120][T18261] bridge_slave_0: entered promiscuous mode [ 1159.547088][T18321] fido_id[18321]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1159.561320][T17839] hsr_slave_0: left promiscuous mode [ 1159.664429][T17839] hsr_slave_1: left promiscuous mode [ 1159.680998][T17839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.689110][T17839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.708959][T17839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.718774][T17839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.913641][ T5183] Bluetooth: hci3: command tx timeout [ 1160.952872][T17839] team0: left allmulticast mode [ 1160.974280][T17839] team_slave_0: left allmulticast mode [ 1160.984632][T17839] team_slave_1: left allmulticast mode [ 1160.990531][T17839] team0: left promiscuous mode [ 1160.995789][T17839] team_slave_0: left promiscuous mode [ 1161.001205][T17839] team_slave_1: left promiscuous mode [ 1161.014391][T17839] veth1_macvtap: left promiscuous mode [ 1161.019963][T17839] veth0_macvtap: left promiscuous mode [ 1161.037764][T17839] veth1_vlan: left promiscuous mode [ 1161.043136][T17839] veth0_vlan: left promiscuous mode [ 1161.113030][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3151'. [ 1163.461629][T14727] hid-generic 0000:0004:0034.001E: unknown main item tag 0x0 [ 1163.689348][T14727] hid-generic 0000:0004:0034.001E: unknown main item tag 0x0 [ 1163.860742][T14727] hid-generic 0000:0004:0034.001E: unknown main item tag 0x0 [ 1164.447113][T14727] hid-generic 0000:0004:0034.001E: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1164.951100][T18356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3156'. [ 1165.049764][T18355] fido_id[18355]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1165.421289][T17839] team0 (unregistering): Port device team_slave_1 removed [ 1165.438402][T17839] team0 (unregistering): Port device team_slave_0 removed [ 1165.512455][T18261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.525851][T18261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.474491][T18261] bridge_slave_1: entered allmulticast mode [ 1166.532287][T18261] bridge_slave_1: entered promiscuous mode [ 1166.548121][T18345] syz_tun: entered allmulticast mode [ 1166.578785][T18261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.602145][T18261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.686986][T18261] team0: Port device team_slave_0 added [ 1166.806614][T18261] team0: Port device team_slave_1 added [ 1167.007976][T18261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.030054][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.086310][T18261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.100280][T18261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.108629][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.138155][T18261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.420180][T17839] IPVS: stop unused estimator thread 0... [ 1169.548288][T18261] hsr_slave_0: entered promiscuous mode [ 1169.555333][T18261] hsr_slave_1: entered promiscuous mode [ 1169.561421][T18261] debugfs: 'hsr0' already exists in 'hsr' [ 1169.620218][T18261] Cannot create hsr debugfs directory [ 1171.730121][T15101] hid-generic 0000:0004:0034.001F: unknown main item tag 0x0 [ 1171.798530][T15101] hid-generic 0000:0004:0034.001F: unknown main item tag 0x0 [ 1173.292040][T15101] hid-generic 0000:0004:0034.001F: unknown main item tag 0x0 [ 1173.474635][T15101] hid-generic 0000:0004:0034.001F: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1173.719843][T18423] fido_id[18423]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1173.896621][T18261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1173.998133][T18261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1174.100174][T18261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1174.215773][T18261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1175.863783][T18261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.882103][T18261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.918032][T14302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.925193][T14302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.291660][T14302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.298775][T14302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.864622][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.870898][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.386766][T18261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.463842][T18261] veth0_vlan: entered promiscuous mode [ 1178.475419][T18261] veth1_vlan: entered promiscuous mode [ 1178.544936][T18261] veth0_macvtap: entered promiscuous mode [ 1178.555008][T18261] veth1_macvtap: entered promiscuous mode [ 1178.568164][T18261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.580492][T18261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.611848][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.662634][ T6259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.036015][ T6259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.057758][ T6259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.131028][ T4908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.274254][ T4908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.719672][ T4908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.746763][ T4908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.229681][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1180.844349][ T5928] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1182.171385][ T5928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.382304][ T5928] usb 5-1: config 0 has no interfaces? [ 1182.388525][ T5928] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1182.397776][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.455403][ T5928] usb 5-1: config 0 descriptor?? [ 1182.504702][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.518464][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.546565][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1182.818327][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1183.310676][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.605539][T18539] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1184.212529][ T43] usb 2-1: config 0 descriptor?? [ 1184.326459][ T5928] usb 5-1: USB disconnect, device number 15 [ 1184.336067][ T43] usb 2-1: can't set config #0, error -71 [ 1185.181956][ T43] usb 2-1: USB disconnect, device number 29 [ 1185.458144][T18558] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3199'. [ 1185.736055][ T5928] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1186.314928][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 1186.335603][T18566] fuse: Bad value for 'fd' [ 1186.416369][ T5928] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1186.444628][ T5928] usb 1-1: config 0 has no interface number 0 [ 1186.453282][ T5928] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1186.462678][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.470907][ T5928] usb 1-1: Product: syz [ 1186.475302][ T5928] usb 1-1: Manufacturer: syz [ 1186.485380][ T5928] usb 1-1: SerialNumber: syz [ 1186.557607][ T5928] usb 1-1: config 0 descriptor?? [ 1186.610984][ T5928] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1186.651760][ T5928] usb 1-1: selecting invalid altsetting 1 [ 1186.659159][ T5928] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1186.866951][ T5928] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1186.878271][ T5928] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1186.949524][ T5928] usb 1-1: media controller created [ 1186.974095][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1187.067362][T18570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3203'. [ 1187.368600][ T2148] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1187.372643][T16081] hid-generic 0000:0004:0034.0020: unknown main item tag 0x0 [ 1187.513738][T16081] hid-generic 0000:0004:0034.0020: unknown main item tag 0x0 [ 1187.576712][ T5928] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1187.622918][T16081] hid-generic 0000:0004:0034.0020: unknown main item tag 0x0 [ 1187.704103][ T5928] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1187.823537][T16081] hid-generic 0000:0004:0034.0020: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1187.868101][ T5928] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1188.463099][T18586] fido_id[18586]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1188.600688][ T5928] usb 1-1: USB disconnect, device number 26 [ 1188.655068][ T2148] usb 2-1: Using ep0 maxpacket: 16 [ 1188.664698][ T2148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.680176][ T2148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.964349][ T2148] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1189.008140][ T2148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.099870][ T2148] usb 2-1: config 0 descriptor?? [ 1189.126872][T18594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3209'. [ 1189.538224][ T2148] hid (null): invalid report_size 13067 [ 1189.579916][ T2148] mcp2221 0003:04D8:00DD.0021: invalid report_size 13067 [ 1189.602263][ T2148] mcp2221 0003:04D8:00DD.0021: item 0 2 1 7 parsing failed [ 1189.628171][ T2148] mcp2221 0003:04D8:00DD.0021: can't parse reports [ 1189.646800][ T2148] mcp2221 0003:04D8:00DD.0021: probe with driver mcp2221 failed with error -22 [ 1189.726068][ T5928] usb 2-1: USB disconnect, device number 30 [ 1190.955644][T18611] input: syz0 as /devices/virtual/input/input55 [ 1193.116725][T18634] netlink: 'syz.0.3221': attribute type 3 has an invalid length. [ 1193.124646][T18634] netlink: 'syz.0.3221': attribute type 3 has an invalid length. [ 1193.135204][T18634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3221'. [ 1193.778883][T18639] netlink: 'syz.3.3222': attribute type 3 has an invalid length. [ 1193.786858][T18639] netlink: 'syz.3.3222': attribute type 3 has an invalid length. [ 1193.797530][T18639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3222'. [ 1193.832118][T18640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3222'. [ 1195.589747][T18658] input: syz0 as /devices/virtual/input/input56 [ 1195.634241][T18659] nbd_handle_cmd: 2 callbacks suppressed [ 1195.634413][T18659] block nbd4: Attempted send on invalid socket [ 1195.891990][T18659] blk_print_req_error: 2 callbacks suppressed [ 1195.892007][T18659] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1195.914711][ T5928] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1195.922728][T18659] block nbd4: Attempted send on invalid socket [ 1196.215738][ T5928] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.874157][ T5928] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1196.934291][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.943032][T18659] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1196.952878][T18659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1196.993211][ T5928] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1197.002386][T18659] block nbd4: Attempted send on invalid socket [ 1197.121996][T18659] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1197.131816][T18659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1197.144910][T18659] block nbd4: Attempted send on invalid socket [ 1197.157982][T18659] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1197.192708][T18659] block nbd4: Attempted send on invalid socket [ 1198.951839][T18659] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1199.444802][ T5928] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1199.453213][ T5928] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 1199.469262][T18659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1199.824291][ T5928] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1199.826321][T18659] block nbd4: Attempted send on invalid socket [ 1199.832476][ T5928] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 1199.869578][T18678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3232'. [ 1199.878729][T18659] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1199.917905][T18659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1200.752118][ T43] usb 2-1: USB disconnect, device number 31 [ 1200.887311][T18659] block nbd4: Attempted send on invalid socket [ 1201.222535][T18659] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1201.538221][T18659] block nbd4: Attempted send on invalid socket [ 1201.544578][T18659] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1201.553976][T18659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1201.563722][T18659] block nbd4: Attempted send on invalid socket [ 1201.570086][T18659] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1201.579516][T18659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1201.589769][T18659] block nbd4: Attempted send on invalid socket [ 1201.595974][T18659] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1201.605439][T18659] block nbd4: Attempted send on invalid socket [ 1201.611610][T18659] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1201.621082][T18659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1201.630930][T18659] block nbd4: Attempted send on invalid socket [ 1201.637175][T18659] I/O error, dev nbd4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1201.646545][T18659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1201.656079][T18659] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1203.507210][T18711] input: syz0 as /devices/virtual/input/input57 [ 1204.842322][T18729] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1208.862584][T18728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1212.694047][ T43] hid-generic 0000:0004:0034.0022: unknown main item tag 0x0 [ 1214.358639][ T43] hid-generic 0000:0004:0034.0022: unknown main item tag 0x0 [ 1214.408327][ T43] hid-generic 0000:0004:0034.0022: unknown main item tag 0x0 [ 1214.778402][ T43] hid-generic 0000:0004:0034.0022: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1215.311178][T18803] fido_id[18803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1218.274300][T15101] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1218.434357][T15101] usb 3-1: Using ep0 maxpacket: 16 [ 1218.461120][T15101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.491489][T15101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.512314][T15101] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1218.522331][T15101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.534133][T18839] tipc: Failed to remove unknown binding: 66,1,1/0:2360537386/2360537388 [ 1218.553588][T15101] usb 3-1: config 0 descriptor?? [ 1218.573156][T18839] tipc: Failed to remove unknown binding: 66,1,1/0:2360537386/2360537388 [ 1218.582357][T18839] tipc: Failed to remove unknown binding: 66,1,1/0:2360537386/2360537388 [ 1218.791101][T18843] IPVS: Error joining to the multicast group [ 1219.318896][T15101] usbhid 3-1:0.0: can't add hid device: -71 [ 1219.329787][T15101] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1219.384979][T15101] usb 3-1: USB disconnect, device number 26 [ 1219.475945][T18846] netlink: 'syz.0.3279': attribute type 10 has an invalid length. [ 1219.546095][T18846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.563385][T18846] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1219.789875][T16081] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1219.933346][T18854] netlink: 'syz.0.3281': attribute type 3 has an invalid length. [ 1219.941565][T18854] netlink: 'syz.0.3281': attribute type 3 has an invalid length. [ 1219.951977][T18854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3281'. [ 1219.986032][T18855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3281'. [ 1220.204998][T16081] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.218738][T16081] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1220.228482][T16081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.463092][T16081] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1222.204430][T16081] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1223.744287][T16081] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 1223.750844][T16081] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1223.766950][T16081] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 1228.720024][ T5928] usb 2-1: USB disconnect, device number 32 [ 1229.290523][T18918] IPVS: Error joining to the multicast group [ 1230.284409][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1230.379593][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1230.785945][T18931] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1231.424264][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1231.485447][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1234.947249][ T5928] hid-generic 0000:0004:0034.0023: unknown main item tag 0x0 [ 1234.989592][ T5928] hid-generic 0000:0004:0034.0023: unknown main item tag 0x0 [ 1235.009057][ T5928] hid-generic 0000:0004:0034.0023: unknown main item tag 0x0 [ 1235.204582][ T5928] hid-generic 0000:0004:0034.0023: hidraw0: HID v0.0e Device [syz0] on syz1 [ 1235.506147][T18964] fido_id[18964]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1236.842607][T18961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1236.942991][T18954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1238.499148][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.505897][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.249800][T19008] overlayfs: missing 'lowerdir' [ 1240.574580][T17100] Bluetooth: hci0: command 0x0406 tx timeout [ 1243.360257][T19026] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1246.596406][T19063] IPVS: Error joining to the multicast group [ 1250.331108][T19097] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1251.877576][T19112] netlink: 'syz.1.3349': attribute type 3 has an invalid length. [ 1251.885445][T19112] netlink: 'syz.1.3349': attribute type 3 has an invalid length. [ 1251.893548][T19112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3349'. [ 1251.929108][T19116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3349'. [ 1251.944620][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1252.315618][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.315647][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1252.315662][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.326687][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1253.360226][T19126] siw: device registration error -23 [ 1254.118429][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1254.477876][ T9] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1254.484725][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1254.493377][ T9] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1254.915322][T14393] usb 4-1: USB disconnect, device number 27 [ 1255.618962][T19143] netlink: 'syz.4.3358': attribute type 3 has an invalid length. [ 1255.626920][T19143] netlink: 'syz.4.3358': attribute type 3 has an invalid length. [ 1255.637659][T19143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3358'. [ 1255.673377][T19144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3358'. [ 1259.022572][T19185] input: syz0 as /devices/virtual/input/input58 [ 1261.694628][T19206] netlink: 'syz.1.3377': attribute type 3 has an invalid length. [ 1261.702673][T19206] netlink: 'syz.1.3377': attribute type 3 has an invalid length. [ 1261.717304][T19206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1261.748028][T19207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1264.008065][T19224] lo speed is unknown, defaulting to 1000 [ 1264.014065][T19224] lo speed is unknown, defaulting to 1000 [ 1264.022480][T19224] lo speed is unknown, defaulting to 1000 [ 1264.069650][T19224] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1264.285651][T19224] lo speed is unknown, defaulting to 1000 [ 1264.292208][T19224] lo speed is unknown, defaulting to 1000 [ 1264.300151][T19224] lo speed is unknown, defaulting to 1000 [ 1264.307299][T19224] lo speed is unknown, defaulting to 1000 [ 1264.313526][T19224] lo speed is unknown, defaulting to 1000 [ 1264.612558][ T2148] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1264.904413][ T2148] usb 1-1: Using ep0 maxpacket: 8 [ 1264.947612][ T2148] usb 1-1: device descriptor read/all, error -71 [ 1265.178213][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'. [ 1265.336426][T19240] evm: overlay not supported [ 1270.124411][ T2148] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1270.220994][ T979] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1270.274339][ T2148] usb 5-1: Using ep0 maxpacket: 8 [ 1270.392497][ T2148] usb 5-1: config 0 has no interfaces? [ 1270.473527][ T2148] usb 5-1: New USB device found, idVendor=12ee, idProduct=fae2, bcdDevice=70.8b [ 1270.483814][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.492419][ T2148] usb 5-1: Product: syz [ 1270.497010][ T2148] usb 5-1: Manufacturer: syz [ 1270.501682][ T2148] usb 5-1: SerialNumber: syz [ 1270.514121][ T2148] usb 5-1: config 0 descriptor?? [ 1270.523442][ T979] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.535128][ T979] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1270.544828][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.570577][ T979] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1270.736979][ T2148] usb 5-1: USB disconnect, device number 16 [ 1271.655464][ T979] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1271.667335][ T979] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 1271.816712][T19313] syzkaller0: entered promiscuous mode [ 1271.822419][T19313] syzkaller0: entered allmulticast mode [ 1272.116345][T19319] netlink: 'syz.2.3410': attribute type 3 has an invalid length. [ 1272.124154][T19319] netlink: 'syz.2.3410': attribute type 3 has an invalid length. [ 1272.133917][T19319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3410'. [ 1272.169905][T19320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3410'. [ 1272.432240][ T979] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 1272.440815][ T979] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 1273.300914][T19329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3411'. [ 1273.359366][ T2148] usb 2-1: USB disconnect, device number 33 [ 1273.383591][T19329] tipc: Started in network mode [ 1273.394275][T19329] tipc: Node identity 7f000001, cluster identity 4711 [ 1273.746520][T19329] tipc: Enabling of bearer rejected, failed to enable media [ 1275.366182][T19358] netlink: 'syz.4.3422': attribute type 3 has an invalid length. [ 1275.374015][T19358] netlink: 'syz.4.3422': attribute type 3 has an invalid length. [ 1275.384595][T19358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3422'. [ 1275.414223][T19359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3422'. [ 1276.414517][ T5183] Bluetooth: hci3: command 0x0406 tx timeout [ 1284.912058][T19442] netlink: 'syz.3.3445': attribute type 10 has an invalid length. [ 1284.922153][T19442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.930786][T19442] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1285.558465][T19458] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1288.677216][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3454'. [ 1288.901338][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3454'. [ 1289.167540][ T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1289.335633][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 1289.420015][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1289.434237][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.502382][T19490] input: syz0 as /devices/virtual/input/input59 [ 1289.864225][ T9] usb 4-1: Product: syz [ 1289.875945][ T9] usb 4-1: Manufacturer: syz [ 1289.887943][ T9] usb 4-1: SerialNumber: syz [ 1289.903944][ T9] usb 4-1: config 0 descriptor?? [ 1291.223790][ T9] usb 4-1: USB disconnect, device number 28 [ 1291.886518][T19516] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.3461'. [ 1299.459452][T19593] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1299.472139][T19593] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=#' already exists in 'ieee80211' [ 1299.866356][ T30] audit: type=1326 audit(1755851613.630:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.1.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1300.890891][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.897268][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.324290][ T30] audit: type=1326 audit(1755851613.630:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.1.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1301.514341][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1301.524375][ T30] audit: type=1326 audit(1755851613.630:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.1.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1301.572653][ T30] audit: type=1326 audit(1755851613.630:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.1.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1301.615159][ T30] audit: type=1326 audit(1755851613.630:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.1.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1301.641779][ T30] audit: type=1326 audit(1755851613.630:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.1.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1301.668410][ T30] audit: type=1326 audit(1755851613.630:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.1.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1301.715895][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1301.738769][ T9] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 1301.754236][ T30] audit: type=1326 audit(1755851613.630:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.1.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1301.784269][ T9] usb 2-1: config 0 has no interface number 0 [ 1301.816498][ T9] usb 2-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1301.836671][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.852956][ T9] usb 2-1: Product: syz [ 1301.857917][ T30] audit: type=1326 audit(1755851613.630:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.1.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1301.940050][ T9] usb 2-1: Manufacturer: syz [ 1301.956625][ T9] usb 2-1: SerialNumber: syz [ 1301.967398][ T9] usb 2-1: config 0 descriptor?? [ 1301.986135][ T30] audit: type=1326 audit(1755851613.640:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.1.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1304.762723][ T9] cp210x 2-1:0.79: cp210x converter detected [ 1304.782126][ T9] cp210x 2-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1304.799410][ T9] cp210x 2-1:0.79: querying part number failed [ 1304.808560][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1304.999377][ T9] usb 2-1: USB disconnect, device number 34 [ 1305.175115][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1305.183406][ T9] cp210x 2-1:0.79: device disconnected [ 1311.685298][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1311.874351][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1311.891279][ T9] usb 5-1: config 0 has no interfaces? [ 1311.900548][ T9] usb 5-1: New USB device found, idVendor=12ee, idProduct=fae2, bcdDevice=70.8b [ 1311.914241][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.369328][ T9] usb 5-1: Product: syz [ 1312.373663][ T9] usb 5-1: Manufacturer: syz [ 1312.378752][ T9] usb 5-1: SerialNumber: syz [ 1312.495155][ T9] usb 5-1: config 0 descriptor?? [ 1313.241909][ T9] usb 5-1: can't set config #0, error -71 [ 1313.299371][ T9] usb 5-1: USB disconnect, device number 17 [ 1314.376030][T19702] tipc: Started in network mode [ 1314.380923][T19702] tipc: Node identity be811f46e099, cluster identity 4711 [ 1314.484449][T19702] tipc: Enabled bearer , priority 0 [ 1314.569784][T19702] tipc: Resetting bearer [ 1314.605296][T19701] tipc: Disabling bearer [ 1314.859871][T19716] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1314.886712][T19716] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=#' [ 1314.898606][T19716] CPU: 0 UID: 0 PID: 19716 Comm: syz.4.3518 Not tainted syzkaller #0 PREEMPT(full) [ 1314.898638][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1314.898653][T19716] Call Trace: [ 1314.898662][T19716] [ 1314.898672][T19716] dump_stack_lvl+0x189/0x250 [ 1314.898721][T19716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1314.898764][T19716] ? __pfx__printk+0x10/0x10 [ 1314.898793][T19716] ? kernfs_root+0x1c/0x230 [ 1314.898823][T19716] ? kernfs_path_from_node+0x2f/0x290 [ 1314.898847][T19716] ? kernfs_path_from_node+0x250/0x290 [ 1314.898875][T19716] ? kernfs_path_from_node+0x2f/0x290 [ 1314.898896][T19716] sysfs_warn_dup+0x8e/0xa0 [ 1314.898924][T19716] sysfs_do_create_link_sd+0xc0/0x110 [ 1314.898952][T19716] device_add_class_symlinks+0x1cf/0x240 [ 1314.898974][T19716] device_add+0x475/0xb50 [ 1314.898993][T19716] wiphy_register+0x1ba6/0x28d0 [ 1314.899019][T19716] ? __pfx_wiphy_register+0x10/0x10 [ 1314.899036][T19716] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1314.899063][T19716] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1314.899088][T19716] ieee80211_register_hw+0x3425/0x4080 [ 1314.899119][T19716] ? ieee80211_register_hw+0x14c1/0x4080 [ 1314.899147][T19716] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1314.899173][T19716] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1314.899195][T19716] ? __hrtimer_setup+0x187/0x210 [ 1314.899218][T19716] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1314.899247][T19716] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1314.899301][T19716] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1314.899335][T19716] ? trace_kmalloc+0x1f/0xd0 [ 1314.899359][T19716] ? __kmalloc_node_track_caller_noprof+0x27a/0x4a0 [ 1314.899380][T19716] ? kstrndup+0xbf/0x160 [ 1314.899398][T19716] hwsim_new_radio_nl+0xea4/0x1b10 [ 1314.899423][T19716] ? __pfx___nla_validate_parse+0x10/0x10 [ 1314.899456][T19716] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1314.899485][T19716] ? __nla_parse+0x40/0x60 [ 1314.899512][T19716] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1314.899543][T19716] genl_family_rcv_msg_doit+0x215/0x300 [ 1314.899571][T19716] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1314.899605][T19716] ? bpf_lsm_capable+0x9/0x20 [ 1314.899626][T19716] ? security_capable+0x7e/0x2e0 [ 1314.899650][T19716] genl_rcv_msg+0x60e/0x790 [ 1314.899676][T19716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1314.899705][T19716] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1314.899729][T19716] ? __asan_memcpy+0x40/0x70 [ 1314.899745][T19716] ? __pfx_ref_tracker_free+0x10/0x10 [ 1314.899771][T19716] netlink_rcv_skb+0x205/0x470 [ 1314.899792][T19716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1314.899816][T19716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1314.899838][T19716] ? lock_release+0x4b/0x3e0 [ 1314.899862][T19716] ? down_read+0x1ad/0x2e0 [ 1314.899885][T19716] genl_rcv+0x28/0x40 [ 1314.899907][T19716] netlink_unicast+0x82f/0x9e0 [ 1314.899926][T19716] ? __pfx_netlink_unicast+0x10/0x10 [ 1314.899943][T19716] ? netlink_sendmsg+0x642/0xb30 [ 1314.899961][T19716] ? skb_put+0x11b/0x210 [ 1314.899983][T19716] netlink_sendmsg+0x805/0xb30 [ 1314.900005][T19716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1314.900037][T19716] ? futex_unqueue+0x22/0x240 [ 1314.900052][T19716] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1314.900076][T19716] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1314.900091][T19716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1314.900110][T19716] __sock_sendmsg+0x21c/0x270 [ 1314.900126][T19716] ____sys_sendmsg+0x505/0x830 [ 1314.900149][T19716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1314.900173][T19716] ? import_iovec+0x74/0xa0 [ 1314.900192][T19716] ___sys_sendmsg+0x21f/0x2a0 [ 1314.900213][T19716] ? __pfx____sys_sendmsg+0x10/0x10 [ 1314.900237][T19716] ? futex_wait+0x285/0x360 [ 1314.900268][T19716] ? __fget_files+0x2a/0x420 [ 1314.900289][T19716] ? __fget_files+0x3a0/0x420 [ 1314.900314][T19716] __x64_sys_sendmsg+0x19b/0x260 [ 1314.900336][T19716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1314.900364][T19716] ? rcu_is_watching+0x15/0xb0 [ 1314.900389][T19716] do_syscall_64+0xfa/0xfa0 [ 1314.900410][T19716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.900426][T19716] ? clear_bhb_loop+0x60/0xb0 [ 1314.900445][T19716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.900462][T19716] RIP: 0033:0x7fb6d5b8ebe9 [ 1314.900477][T19716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1314.900493][T19716] RSP: 002b:00007fb6d69ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1314.900512][T19716] RAX: ffffffffffffffda RBX: 00007fb6d5db6270 RCX: 00007fb6d5b8ebe9 [ 1314.900525][T19716] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 000000000000000b [ 1314.900536][T19716] RBP: 00007fb6d5c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1314.900548][T19716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.900558][T19716] R13: 00007fb6d5db6308 R14: 00007fb6d5db6270 R15: 00007ffc88164998 [ 1314.900578][T19716] [ 1317.390734][T19737] overlayfs: overlapping lowerdir path [ 1319.798796][T19739] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.3527'. [ 1320.303649][T19739] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=#' already exists in 'ieee80211' [ 1320.740737][T16081] IPVS: starting estimator thread 0... [ 1321.412145][T19769] IPVS: using max 43 ests per chain, 103200 per kthread [ 1324.099048][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1324.099067][ T30] audit: type=1326 audit(1755851637.890:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d5b8ebe9 code=0x7ffc0000 [ 1324.358778][ T30] audit: type=1326 audit(1755851638.090:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb6d5b8ebe9 code=0x7ffc0000 [ 1324.387595][ T30] audit: type=1326 audit(1755851638.090:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d5b8ebe9 code=0x7ffc0000 [ 1324.993460][ T30] audit: type=1326 audit(1755851638.090:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fb6d5b8ebe9 code=0x7ffc0000 [ 1325.104518][ T30] audit: type=1326 audit(1755851638.090:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d5b8ebe9 code=0x7ffc0000 [ 1325.174617][ T30] audit: type=1326 audit(1755851638.090:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6d5b8ebe9 code=0x7ffc0000 [ 1325.396018][ T30] audit: type=1326 audit(1755851638.090:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d5b8ebe9 code=0x7ffc0000 [ 1326.432240][ T30] audit: type=1326 audit(1755851638.090:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6d5b8ebe9 code=0x7ffc0000 [ 1326.455110][T19096] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1326.965917][ T30] audit: type=1326 audit(1755851638.850:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d5b8ebe9 code=0x7ffc0000 [ 1326.988854][ T30] audit: type=1326 audit(1755851638.850:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d5b8ebe9 code=0x7ffc0000 [ 1327.011228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.158180][T19096] usb 1-1: Using ep0 maxpacket: 32 [ 1328.447179][T19096] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1328.461979][T19096] usb 1-1: can't read configurations, error -71 [ 1330.160206][T19838] process 'syz.3.3552' launched './file0' with NULL argv: empty string added [ 1330.505176][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1330.505191][ T30] audit: type=1326 audit(1755851644.130:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1330.533797][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.544592][ T30] audit: type=1326 audit(1755851644.140:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1330.567159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.577911][ T30] audit: type=1326 audit(1755851644.140:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1330.600087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.610709][ T30] audit: type=1326 audit(1755851644.200:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1330.633126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1331.684252][T19096] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1332.136423][ T30] audit: type=1326 audit(1755851644.200:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1332.168976][ T30] audit: type=1326 audit(1755851644.200:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1332.516493][ T30] audit: type=1326 audit(1755851644.200:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1332.554339][T19096] usb 2-1: Using ep0 maxpacket: 32 [ 1332.574335][ T30] audit: type=1326 audit(1755851644.200:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1332.610688][T19096] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 1332.625756][T19096] usb 2-1: config 0 has no interface number 0 [ 1332.727956][ T30] audit: type=1326 audit(1755851644.200:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1332.750333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.757090][ T30] audit: type=1326 audit(1755851644.200:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ed8ebe9 code=0x7ffc0000 [ 1333.193963][T19866] overlayfs: missing 'lowerdir' [ 1334.524281][ T2148] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1334.651084][T19096] usb 2-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1334.730707][T19096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.753166][ T2148] usb 1-1: Using ep0 maxpacket: 32 [ 1334.774922][ T2148] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 1334.793332][ T2148] usb 1-1: config 0 has no interface number 0 [ 1334.823185][T19096] usb 2-1: Product: syz [ 1334.828715][T19096] usb 2-1: Manufacturer: syz [ 1334.844701][T19096] usb 2-1: config 0 descriptor?? [ 1334.872371][T19096] usb 2-1: can't set config #0, error -71 [ 1334.882729][T19096] usb 2-1: USB disconnect, device number 35 [ 1335.084943][ T2148] usb 1-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1335.133448][ T2148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.236773][ T2148] usb 1-1: Product: syz [ 1335.260751][ T2148] usb 1-1: Manufacturer: syz [ 1335.272182][ T2148] usb 1-1: SerialNumber: syz [ 1335.285684][ T2148] usb 1-1: config 0 descriptor?? [ 1335.546160][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 1335.546180][ T30] audit: type=1326 audit(1755851649.330:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19864 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1335.773201][ T30] audit: type=1326 audit(1755851649.440:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19864 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1335.815423][ T30] audit: type=1326 audit(1755851649.440:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19864 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1335.881936][ T30] audit: type=1326 audit(1755851649.540:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19864 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1335.927290][ T30] audit: type=1326 audit(1755851649.540:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19864 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1335.949654][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.052849][ T30] audit: type=1326 audit(1755851649.550:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19864 comm="syz.0.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1337.109179][T19912] overlayfs: missing 'lowerdir' [ 1337.579541][ T2148] cp210x 1-1:0.79: cp210x converter detected [ 1337.597713][ T2148] cp210x 1-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1337.613789][ T2148] cp210x 1-1:0.79: querying part number failed [ 1337.639697][ T2148] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1337.787047][ T2148] usb 1-1: USB disconnect, device number 31 [ 1337.809500][ T2148] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1337.825538][ T2148] cp210x 1-1:0.79: device disconnected [ 1338.370375][T19932] input: syz0 as /devices/virtual/input/input63 [ 1343.342906][ T9] IPVS: starting estimator thread 0... [ 1343.705437][T19970] IPVS: using max 53 ests per chain, 127200 per kthread [ 1343.994323][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1344.184254][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1344.190769][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.210055][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1344.270332][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1344.301398][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.339242][ T9] usb 5-1: config 0 descriptor?? [ 1344.380305][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1344.629619][ T30] audit: type=1326 audit(1755851658.400:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1344.679983][ T30] audit: type=1326 audit(1755851658.400:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1344.764571][ T30] audit: type=1326 audit(1755851658.400:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1344.929014][ T30] audit: type=1326 audit(1755851658.400:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1344.964339][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1344.969429][ T30] audit: type=1326 audit(1755851658.400:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1345.052080][T19988] input: syz0 as /devices/virtual/input/input64 [ 1345.392775][ T30] audit: type=1326 audit(1755851658.400:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1345.417349][ T30] audit: type=1326 audit(1755851658.400:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1345.439823][ T30] audit: type=1326 audit(1755851658.410:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1345.463283][ T30] audit: type=1326 audit(1755851658.500:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1345.485826][ T30] audit: type=1326 audit(1755851658.500:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19976 comm="syz.0.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1345.664957][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1345.715728][ T9] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 1345.742030][ T9] usb 1-1: config 0 has no interface number 0 [ 1345.803426][ T9] usb 1-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1345.812680][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.822261][ T9] usb 1-1: Product: syz [ 1345.826714][ T9] usb 1-1: Manufacturer: syz [ 1345.837885][ T9] usb 1-1: SerialNumber: syz [ 1345.844905][ T9] usb 1-1: config 0 descriptor?? [ 1345.861070][T19992] overlayfs: missing 'lowerdir' [ 1346.797957][ T2148] usb 5-1: USB disconnect, device number 18 [ 1346.804317][T15101] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1347.044257][T15101] usb 2-1: Using ep0 maxpacket: 32 [ 1347.248718][T15101] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 1347.257111][T15101] usb 2-1: config 0 has no interface number 0 [ 1347.272123][T15101] usb 2-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1347.281533][T15101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.292328][T15101] usb 2-1: Product: syz [ 1347.299053][T15101] usb 2-1: Manufacturer: syz [ 1347.313782][T15101] usb 2-1: SerialNumber: syz [ 1347.463201][T15101] usb 2-1: config 0 descriptor?? [ 1347.645527][ T9] cp210x 1-1:0.79: cp210x converter detected [ 1347.658546][ T9] cp210x 1-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1347.699671][ T9] cp210x 1-1:0.79: querying part number failed [ 1347.767118][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1347.789043][ T9] usb 1-1: USB disconnect, device number 32 [ 1347.851144][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1348.735160][ T9] cp210x 1-1:0.79: device disconnected [ 1349.444538][T15101] cp210x 2-1:0.79: cp210x converter detected [ 1349.484693][T15101] cp210x 2-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1349.662078][T15101] cp210x 2-1:0.79: querying part number failed [ 1349.664084][T15101] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1349.665838][T15101] usb 2-1: USB disconnect, device number 36 [ 1349.678158][T15101] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1349.678419][T15101] cp210x 2-1:0.79: device disconnected [ 1349.786055][T20030] input: syz0 as /devices/virtual/input/input65 [ 1350.291751][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 1350.291766][ T30] audit: type=1326 audit(1755851664.080:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1350.372074][ T30] audit: type=1326 audit(1755851664.090:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1350.372133][ T30] audit: type=1326 audit(1755851664.090:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1350.372170][ T30] audit: type=1326 audit(1755851664.090:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1350.372203][ T30] audit: type=1326 audit(1755851664.090:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1350.372236][ T30] audit: type=1326 audit(1755851664.090:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1350.372270][ T30] audit: type=1326 audit(1755851664.090:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1350.372313][ T30] audit: type=1326 audit(1755851664.090:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1350.372346][ T30] audit: type=1326 audit(1755851664.090:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1350.372378][ T30] audit: type=1326 audit(1755851664.090:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.3.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1350.624933][ T2148] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1350.659910][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.774217][ T2148] usb 4-1: Using ep0 maxpacket: 32 [ 1350.850683][ T2148] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 1350.850713][ T2148] usb 4-1: config 0 has no interface number 0 [ 1350.951482][ T2148] usb 4-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1350.951506][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.951521][ T2148] usb 4-1: Product: syz [ 1350.951532][ T2148] usb 4-1: Manufacturer: syz [ 1350.951543][ T2148] usb 4-1: SerialNumber: syz [ 1350.953135][ T2148] usb 4-1: config 0 descriptor?? [ 1353.723178][ T2148] cp210x 4-1:0.79: cp210x converter detected [ 1353.741523][ T2148] cp210x 4-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1353.799608][ T2148] cp210x 4-1:0.79: querying part number failed [ 1353.838600][ T2148] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1353.872536][ T2148] usb 4-1: USB disconnect, device number 29 [ 1353.907584][ T2148] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1353.951162][ T2148] cp210x 4-1:0.79: device disconnected [ 1354.264707][T20057] input: syz0 as /devices/virtual/input/input67 [ 1355.200747][ T2148] IPVS: starting estimator thread 0... [ 1355.373009][T20061] IPVS: using max 47 ests per chain, 112800 per kthread [ 1356.243701][T20062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.880168][T20075] input: syz0 as /devices/virtual/input/input68 [ 1357.880764][T20088] binder: 20087:20088 ioctl c0306201 200000000080 returned -14 [ 1358.940192][T20008] Set syz1 is full, maxelem 65536 reached [ 1359.201234][T20095] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3621'. [ 1360.337769][T20096] Set syz1 is full, maxelem 65536 reached [ 1361.357167][T20114] binder: 20113:20114 ioctl c0306201 200000000080 returned -14 [ 1361.370285][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.376650][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.628236][ T2148] IPVS: starting estimator thread 0... [ 1362.994773][T20106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.004310][T20122] IPVS: using max 42 ests per chain, 100800 per kthread [ 1364.292702][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1364.292738][ T30] audit: type=1326 audit(1755851678.070:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1364.794294][ T30] audit: type=1326 audit(1755851678.070:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1364.822209][ T30] audit: type=1326 audit(1755851678.070:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1364.863374][ T30] audit: type=1326 audit(1755851678.070:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1364.955651][ T30] audit: type=1326 audit(1755851678.070:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1365.034738][T19245] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1365.058576][ T30] audit: type=1326 audit(1755851678.070:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1365.101601][ T30] audit: type=1326 audit(1755851678.710:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1365.156366][ T30] audit: type=1326 audit(1755851678.710:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20126 comm="syz.3.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacad8ebe9 code=0x7ffc0000 [ 1365.454241][T19245] usb 4-1: Using ep0 maxpacket: 32 [ 1365.715982][T19245] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 1365.724252][T19245] usb 4-1: config 0 has no interface number 0 [ 1365.795777][T19245] usb 4-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1365.815034][T19245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.871260][T19245] usb 4-1: Product: syz [ 1365.880523][T20142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.914794][T19245] usb 4-1: Manufacturer: syz [ 1365.919448][T19245] usb 4-1: SerialNumber: syz [ 1365.953275][T19245] usb 4-1: config 0 descriptor?? [ 1366.218276][T20160] binder: 20156:20160 ioctl c0306201 200000000080 returned -14 [ 1366.328888][T20163] binder_alloc: 20156: binder_alloc_buf, no vma [ 1368.373517][T19245] cp210x 4-1:0.79: cp210x converter detected [ 1368.379749][ T30] audit: type=1326 audit(1755851681.990:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.0.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1368.526472][T19245] cp210x 4-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1368.544249][T10732] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1368.663392][T19245] cp210x 4-1:0.79: querying part number failed [ 1368.679812][ T30] audit: type=1326 audit(1755851682.000:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.0.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1c3e78ebe9 code=0x7ffc0000 [ 1368.711451][T19245] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1368.723186][T19245] usb 4-1: USB disconnect, device number 30 [ 1368.734217][T10732] usb 1-1: Using ep0 maxpacket: 32 [ 1368.748276][T10732] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 1368.760993][T19245] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1368.769262][T10732] usb 1-1: config 0 has no interface number 0 [ 1368.793733][T10732] usb 1-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1368.803024][T10732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.813086][T10732] usb 1-1: Product: syz [ 1368.818566][T19245] cp210x 4-1:0.79: device disconnected [ 1368.826320][T10732] usb 1-1: Manufacturer: syz [ 1368.838244][T10732] usb 1-1: SerialNumber: syz [ 1368.851225][T10732] usb 1-1: config 0 descriptor?? [ 1369.303362][T20194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3644'. [ 1371.907754][T20212] lo speed is unknown, defaulting to 1000 [ 1372.774797][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1372.778188][ T30] audit: type=1326 audit(1755851686.560:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1372.807010][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.854667][ T30] audit: type=1326 audit(1755851686.560:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1373.024735][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1373.103830][T10732] cp210x 1-1:0.79: cp210x converter detected [ 1373.141413][ T30] audit: type=1326 audit(1755851686.560:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1373.234392][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1373.242925][T10732] cp210x 1-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1373.287358][ T9] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 1373.342657][ T9] usb 3-1: config 0 has no interface number 0 [ 1373.360481][ T30] audit: type=1326 audit(1755851686.560:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1373.394253][T10732] cp210x 1-1:0.79: querying part number failed [ 1373.432705][T10732] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1373.473732][T10732] usb 1-1: USB disconnect, device number 33 [ 1373.624881][T10732] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1373.667489][T10732] cp210x 1-1:0.79: device disconnected [ 1373.689147][ T30] audit: type=1326 audit(1755851686.560:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1373.742614][ T30] audit: type=1326 audit(1755851686.560:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1373.775544][ T9] usb 3-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1379.499816][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.694169][ C0] sched: DL replenish lagged too much [ 1381.147690][ T9] usb 3-1: Product: syz [ 1381.151862][ T9] usb 3-1: Manufacturer: syz [ 1381.206805][ T9] usb 3-1: SerialNumber: syz [ 1398.063460][ T30] audit: type=1326 audit(1755851686.560:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1414.590933][ T30] audit: type=1326 audit(1755851686.560:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1422.966699][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.986200][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.417320][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.436065][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1523.064115][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1523.071115][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5232/1:b..l P26/1:b..l P17102/1:b..l [ 1523.081258][ C0] rcu: (detected by 0, t=10503 jiffies, g=84721, q=1183136 ncpus=2) [ 1523.089365][ C0] task:syz-executor state:R running task stack:21248 pid:17102 tgid:17102 ppid:1 task_flags:0x40054c flags:0x00004004 [ 1523.103073][ C0] Call Trace: [ 1523.106384][ C0] [ 1523.109347][ C0] __schedule+0x1798/0x4cc0 [ 1523.113905][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1523.119838][ C0] ? __pfx___schedule+0x10/0x10 [ 1523.124805][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1523.129874][ C0] ? preempt_schedule+0xae/0xc0 [ 1523.134772][ C0] preempt_schedule_common+0x83/0xd0 [ 1523.140123][ C0] preempt_schedule+0xae/0xc0 [ 1523.144844][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1523.150378][ C0] ? rcu_is_watching+0x15/0xb0 [ 1523.155190][ C0] preempt_schedule_thunk+0x16/0x30 [ 1523.160423][ C0] _raw_spin_unlock+0x3f/0x50 [ 1523.165133][ C0] unmap_page_range+0x3a7f/0x4370 [ 1523.170222][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1523.175650][ C0] ? mas_find+0xb0e/0xd30 [ 1523.180198][ C0] unmap_vmas+0x399/0x580 [ 1523.184582][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1523.189489][ C0] exit_mmap+0x248/0xb50 [ 1523.194305][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1523.199333][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1523.205108][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1523.209845][ C0] ? uprobe_clear_state+0x274/0x290 [ 1523.215095][ C0] __mmput+0x118/0x420 [ 1523.219220][ C0] exit_mm+0x1da/0x2c0 [ 1523.223331][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1523.228040][ C0] ? rcu_is_watching+0x15/0xb0 [ 1523.232871][ C0] do_exit+0x648/0x2300 [ 1523.237084][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1523.242472][ C0] ? __pfx_do_exit+0x10/0x10 [ 1523.247192][ C0] ? rcu_is_watching+0x15/0xb0 [ 1523.252215][ C0] do_group_exit+0x21c/0x2d0 [ 1523.256928][ C0] get_signal+0x1286/0x1340 [ 1523.261479][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 1523.267147][ C0] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1523.272470][ C0] ? fput_close_sync+0x119/0x200 [ 1523.277445][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1523.283643][ C0] ? rcu_is_watching+0x15/0xb0 [ 1523.288458][ C0] exit_to_user_mode_loop+0x75/0x130 [ 1523.293799][ C0] do_syscall_64+0x2bd/0xfa0 [ 1523.298430][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.304552][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1523.309268][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.315193][ C0] RIP: 0033:0x7f1a4ed84e57 [ 1523.319628][ C0] RSP: 002b:00007ffdab752bb0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 1523.328053][ C0] RAX: 0000000000000219 RBX: 0000000000000219 RCX: 00007f1a4ed84e57 [ 1523.336059][ C0] RDX: 0000000040000000 RSI: 00007ffdab752c1c RDI: 00000000ffffffff [ 1523.344066][ C0] RBP: 00007ffdab752c1c R08: 0000000000000000 R09: 0000000000000000 [ 1523.352075][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000096 [ 1523.360077][ C0] R13: 00005555892d2590 R14: 000000000014e85d R15: 00007ffdab752c70 [ 1523.368192][ C0] [ 1523.371303][ C0] task:kdevtmpfs state:R running task stack:24904 pid:26 tgid:26 ppid:2 task_flags:0x208140 flags:0x00004000 [ 1523.384923][ C0] Call Trace: [ 1523.388230][ C0] [ 1523.391195][ C0] __schedule+0x1798/0x4cc0 [ 1523.395750][ C0] ? __pfx___schedule+0x10/0x10 [ 1523.400642][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1523.405793][ C0] ? ret_from_fork+0x47c/0x820 [ 1523.410605][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1523.416797][ C0] ? arch_stack_walk+0x10d/0x150 [ 1523.421783][ C0] ? rcu_is_watching+0x15/0xb0 [ 1523.426679][ C0] preempt_schedule_irq+0xb5/0x150 [ 1523.431838][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1523.437595][ C0] ? stack_trace_save+0x9c/0xe0 [ 1523.442486][ C0] ? rcu_is_watching+0x15/0xb0 [ 1523.447320][ C0] ? rcu_irq_exit_check_preempt+0xd6/0x210 [ 1523.453179][ C0] irqentry_exit+0x6f/0x90 [ 1523.457649][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1523.463672][ C0] RIP: 0010:page_ext_lookup+0x5/0x180 [ 1523.469117][ C0] Code: 90 90 90 90 90 66 0f 1f 00 e8 f7 4a 91 ff e9 c2 41 52 09 cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 55 41 54 53 48 89 fb e8 ca 4a 91 ff 49 89 dc 49 c1 [ 1523.488844][ C0] RSP: 0018:ffffc90000a176d8 EFLAGS: 00000206 [ 1523.494965][ C0] RAX: 1ffffffff1bbb8a3 RBX: dffffc0000000000 RCX: ffff88801daf0000 [ 1523.502968][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000041cbe [ 1523.511076][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1523.519074][ C0] R10: 0000000000000010 R11: ffffffff81ad2180 R12: 0000000000041cbe [ 1523.527087][ C0] R13: 0000000000000000 R14: ffffffff822d88ae R15: 00000149cda0d06a [ 1523.535116][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 1523.541494][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1523.547818][ C0] __update_page_owner_free_handle+0x103/0x470 [ 1523.554033][ C0] __reset_page_owner+0x85/0x1f0 [ 1523.559054][ C0] __free_frozen_pages+0xbc4/0xd30 [ 1523.564229][ C0] __slab_free+0x2e7/0x390 [ 1523.568871][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1523.575217][ C0] ? fs_reclaim_acquire+0x7d/0x100 [ 1523.580371][ C0] ? __phys_addr+0xd3/0x180 [ 1523.584915][ C0] qlist_free_all+0x97/0x140 [ 1523.589550][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1523.595044][ C0] __kasan_slab_alloc+0x22/0x80 [ 1523.599945][ C0] kmem_cache_alloc_lru_noprof+0x1b2/0x390 [ 1523.605797][ C0] ? shmem_alloc_inode+0x28/0x40 [ 1523.610791][ C0] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1523.616411][ C0] shmem_alloc_inode+0x28/0x40 [ 1523.621308][ C0] alloc_inode+0x67/0x1b0 [ 1523.625699][ C0] new_inode+0x22/0x170 [ 1523.629907][ C0] shmem_get_inode+0x346/0xe90 [ 1523.634729][ C0] shmem_mknod+0x18c/0x3e0 [ 1523.639206][ C0] vfs_mknod+0x37c/0x3c0 [ 1523.643577][ C0] devtmpfs_work_loop+0x98b/0xd20 [ 1523.648628][ C0] ? __pfx_devtmpfs_work_loop+0x10/0x10 [ 1523.654231][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1523.660608][ C0] devtmpfsd+0x4d/0x50 [ 1523.664715][ C0] kthread+0x711/0x8a0 [ 1523.668819][ C0] ? __pfx_devtmpfsd+0x10/0x10 [ 1523.673634][ C0] ? __pfx_kthread+0x10/0x10 [ 1523.678353][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1523.684025][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1523.689344][ C0] ? __pfx_kthread+0x10/0x10 [ 1523.694008][ C0] ret_from_fork+0x47c/0x820 [ 1523.698655][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1523.703906][ C0] ? __switch_to_asm+0x39/0x70 [ 1523.708803][ C0] ? __switch_to_asm+0x33/0x70 [ 1523.713625][ C0] ? __pfx_kthread+0x10/0x10 [ 1523.718607][ C0] ret_from_fork_asm+0x1a/0x30 [ 1523.723438][ C0] [ 1523.726487][ C0] task:udevd state:R running task stack:22920 pid:5232 tgid:5232 ppid:1 task_flags:0x400140 flags:0x00004002 [ 1523.740016][ C0] Call Trace: [ 1523.743321][ C0] [ 1523.746284][ C0] __schedule+0x1798/0x4cc0 [ 1523.750868][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1523.756015][ C0] ? __pfx___schedule+0x10/0x10 [ 1523.760907][ C0] ? do_syscall_64+0xfa/0xfa0 [ 1523.765629][ C0] ? rcu_is_watching+0x15/0xb0 [ 1523.770441][ C0] preempt_schedule_irq+0xb5/0x150 [ 1523.775763][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1523.781539][ C0] ? rcu_is_watching+0x15/0xb0 [ 1523.786439][ C0] ? rcu_irq_exit_check_preempt+0xd6/0x210 [ 1523.792561][ C0] irqentry_exit+0x6f/0x90 [ 1523.797225][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1523.803419][ C0] RIP: 0010:__reset_page_owner+0x55/0x1f0 [ 1523.809180][ C0] Code: 0f 84 52 01 00 00 48 8b 0d 28 df 19 0c 48 8d 1c 08 48 83 c3 08 48 89 d9 48 c1 e9 03 48 ba 00 00 00 00 00 fc ff df 0f b6 0c 11 <84> c9 0f 85 49 01 00 00 8b 1b 48 89 c7 e8 99 c3 01 00 bf 00 20 00 [ 1523.828825][ C0] RSP: 0018:ffffc90003367608 EFLAGS: 00000a02 [ 1523.835091][ C0] RAX: ffff88801cd5d600 RBX: ffff88801cd5d610 RCX: 0000000000000000 [ 1523.843073][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1523.851153][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1523.859232][ C0] R10: dffffc0000000000 R11: fffff94000222f07 R12: 0000000000000000 [ 1523.867216][ C0] R13: 0000000000000000 R14: ffffea0001117800 R15: 0000014860d930bb [ 1523.875307][ C0] ? __reset_page_owner+0x28/0x1f0 [ 1523.880446][ C0] __free_frozen_pages+0xbc4/0xd30 [ 1523.885764][ C0] __put_partials+0x146/0x170 [ 1523.890655][ C0] put_cpu_partial+0x17c/0x250 [ 1523.895481][ C0] ? put_cpu_partial+0x6d/0x250 [ 1523.900381][ C0] __slab_free+0x2b9/0x390 [ 1523.904918][ C0] ? __phys_addr+0xd3/0x180 [ 1523.909877][ C0] qlist_free_all+0x97/0x140 [ 1523.914574][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1523.920134][ C0] __kasan_slab_alloc+0x22/0x80 [ 1523.925210][ C0] __kmalloc_noprof+0x210/0x4b0 [ 1523.930120][ C0] ? tomoyo_encode+0x28b/0x550 [ 1523.934921][ C0] tomoyo_encode+0x28b/0x550 [ 1523.939525][ C0] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1523.945173][ C0] tomoyo_path_perm+0x213/0x4b0 [ 1523.950067][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 1523.955129][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1523.960542][ C0] ? __might_fault+0xb0/0x130 [ 1523.965240][ C0] security_inode_getattr+0x12f/0x330 [ 1523.970630][ C0] vfs_statx+0x18e/0x550 [ 1523.974890][ C0] ? __might_fault+0xb0/0x130 [ 1523.979661][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 1523.984431][ C0] ? strncpy_from_user+0x150/0x290 [ 1523.989574][ C0] ? getname_flags+0x1e5/0x540 [ 1523.994347][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1523.999806][ C0] vfs_fstatat+0x118/0x170 [ 1524.004339][ C0] __x64_sys_newfstatat+0x116/0x190 [ 1524.009562][ C0] ? __might_fault+0xb0/0x130 [ 1524.014258][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1524.020077][ C0] ? rcu_is_watching+0x15/0xb0 [ 1524.024884][ C0] ? rcu_is_watching+0x15/0xb0 [ 1524.029675][ C0] ? rcu_is_watching+0x15/0xb0 [ 1524.034451][ C0] do_syscall_64+0xfa/0xfa0 [ 1524.038961][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.045042][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1524.049743][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.055646][ C0] RIP: 0033:0x7fa1f4911b0a [ 1524.060060][ C0] RSP: 002b:00007ffd31d10568 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1524.068547][ C0] RAX: ffffffffffffffda RBX: 000055b0ef176420 RCX: 00007fa1f4911b0a [ 1524.076535][ C0] RDX: 00007ffd31d10570 RSI: 000055b0ef164ef3 RDI: 00000000ffffff9c [ 1524.084519][ C0] RBP: 000055b113889148 R08: 00063478c1c69200 R09: 7fffffffffffffff [ 1524.092519][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.100499][ C0] R13: 00007ffd31d10570 R14: 0000000000000000 R15: 00063478c1c69200 [ 1524.108486][ C0] [ 1524.111527][ C0] rcu: rcu_preempt kthread starved for 6337 jiffies! g84721 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1524.123103][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1524.133115][ C0] rcu: RCU grace-period kthread stack dump: [ 1524.139034][ C0] task:rcu_preempt state:I stack:26464 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1524.151136][ C0] Call Trace: [ 1524.154467][ C0] [ 1524.157435][ C0] __schedule+0x1798/0x4cc0 [ 1524.162032][ C0] ? rcu_is_watching+0x15/0xb0 [ 1524.166853][ C0] ? __pfx___schedule+0x10/0x10 [ 1524.171746][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1524.177680][ C0] ? schedule+0x91/0x360 [ 1524.181959][ C0] ? rcu_is_watching+0x15/0xb0 [ 1524.186780][ C0] ? lock_release+0x4b/0x3e0 [ 1524.191411][ C0] schedule+0x165/0x360 [ 1524.195611][ C0] schedule_timeout+0x12b/0x270 [ 1524.200639][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1524.206050][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1524.211392][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1524.216985][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1524.221897][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1524.228134][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1524.233470][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1524.238720][ C0] rcu_gp_kthread+0x99/0x390 [ 1524.243371][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1524.248607][ C0] ? __kthread_parkme+0x7b/0x200 [ 1524.253589][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1524.258665][ C0] kthread+0x711/0x8a0 [ 1524.262782][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1524.268036][ C0] ? __pfx_kthread+0x10/0x10 [ 1524.272666][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1524.277937][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1524.283180][ C0] ? __pfx_kthread+0x10/0x10 [ 1524.287833][ C0] ret_from_fork+0x47c/0x820 [ 1524.292473][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1524.297720][ C0] ? __switch_to_asm+0x39/0x70 [ 1524.302534][ C0] ? __switch_to_asm+0x33/0x70 [ 1524.307332][ C0] ? __pfx_kthread+0x10/0x10 [ 1524.311960][ C0] ret_from_fork_asm+0x1a/0x30 [ 1524.316781][ C0] [ 1524.319827][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1524.326176][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1524.331418][ C1] NMI backtrace for cpu 1 [ 1524.331439][ C1] CPU: 1 UID: 0 PID: 1299 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1524.331468][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1524.331486][ C1] RIP: 0010:__hrtimer_next_event_base+0xa0/0x2d0 [ 1524.331519][ C1] Code: 09 00 00 00 44 89 fe e8 5e 0c 12 00 41 83 ff 09 0f 83 00 02 00 00 e8 0f 08 12 00 48 c1 e5 07 48 03 6c 24 18 0f 84 fa 01 00 00 <4c> 8d 7d 58 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 1524.331534][ C1] RSP: 0018:ffffc90000a079c0 EFLAGS: 00000086 [ 1524.331551][ C1] RAX: ffffffff81ae86c1 RBX: 0000000000000000 RCX: ffff888027738000 [ 1524.331564][ C1] RDX: 0000000000010100 RSI: 0000000000000000 RDI: 0000000000000009 [ 1524.331575][ C1] RBP: ffff8880b8727b00 R08: 0000000000000003 R09: 0000000000000004 [ 1524.331586][ C1] R10: dffffc0000000000 R11: fffff52000140ef4 R12: 7fffffffffffffff [ 1524.331600][ C1] R13: 00000162e86d6e76 R14: 0000000000000000 R15: 0000000000000000 [ 1524.331611][ C1] FS: 0000000000000000(0000) GS:ffff888125aff000(0000) knlGS:0000000000000000 [ 1524.331626][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1524.331638][ C1] CR2: 00007f4a6e3f02ec CR3: 000000007b332000 CR4: 00000000003526f0 [ 1524.331654][ C1] Call Trace: [ 1524.331660][ C1] [ 1524.331672][ C1] hrtimer_interrupt+0x568/0xaa0 [ 1524.331709][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1524.331735][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1524.331757][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1524.331776][ C1] RIP: 0010:lock_release+0x2ad/0x3e0 [ 1524.331799][ C1] Code: 59 f9 23 11 83 f8 01 75 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb <65> 48 8b 05 1b b9 23 11 48 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 [ 1524.331813][ C1] RSP: 0018:ffffc90000a07c30 EFLAGS: 00000246 [ 1524.331828][ C1] RAX: 0000000000000001 RBX: ffffffff90e07c01 RCX: adb7227343033600 [ 1524.331840][ C1] RDX: ffffc90000a07d01 RSI: ffffffff8c035860 RDI: ffffffff8c035820 [ 1524.331854][ C1] RBP: dffffc0000000000 R08: ffffc90000a086f0 R09: 0000000000000000 [ 1524.331866][ C1] R10: ffffc90000a07db8 R11: fffff52000140fb9 R12: ffffc90000a08700 [ 1524.331879][ C1] R13: ffffffff8173a1d5 R14: ffffffff8e33bfe0 R15: ffffffff8173a1d5 [ 1524.331893][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1524.331909][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1524.331930][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 1524.331945][ C1] ? deref_stack_reg+0x19f/0x230 [ 1524.331963][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1524.331978][ C1] unwind_next_frame+0x19a9/0x2390 [ 1524.331998][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1524.332013][ C1] ? nft_do_chain+0x40c/0x1920 [ 1524.332039][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1524.332058][ C1] arch_stack_walk+0x11c/0x150 [ 1524.332078][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 1524.332103][ C1] stack_trace_save+0x9c/0xe0 [ 1524.332120][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1524.332137][ C1] ? __asan_memset+0x22/0x50 [ 1524.332154][ C1] ? ipv4_synproxy_hook+0x25b/0xcd0 [ 1524.332178][ C1] kasan_save_stack+0x3e/0x60 [ 1524.332196][ C1] ? kasan_save_stack+0x3e/0x60 [ 1524.332212][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1524.332237][ C1] ? call_rcu+0x157/0x9c0 [ 1524.332262][ C1] ? skb_release_head_state+0x71/0x250 [ 1524.332283][ C1] ? consume_skb+0x60/0xf0 [ 1524.332303][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 1524.332327][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 1524.332351][ C1] ? nft_do_chain+0x40c/0x1920 [ 1524.332393][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 1524.332418][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1524.332449][ C1] call_rcu+0x157/0x9c0 [ 1524.332474][ C1] ? ip_output+0x33e/0x3c0 [ 1524.332497][ C1] ? ip_output+0x60/0x3c0 [ 1524.332521][ C1] ? rcuref_put+0x1b7/0x210 [ 1524.332545][ C1] ? __pfx_call_rcu+0x10/0x10 [ 1524.332570][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 1524.332594][ C1] ? dst_release+0x126/0x1b0 [ 1524.332620][ C1] skb_release_head_state+0x71/0x250 [ 1524.332643][ C1] consume_skb+0x60/0xf0 [ 1524.332663][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 1524.332691][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1524.332718][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1524.332751][ C1] nft_synproxy_do_eval+0x345/0x570 [ 1524.332778][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1524.332803][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1524.332822][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1524.332843][ C1] nft_do_chain+0x40c/0x1920 [ 1524.332867][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1524.332886][ C1] ? rcu_is_watching+0x15/0xb0 [ 1524.332912][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1524.332933][ C1] ? rcu_is_watching+0x15/0xb0 [ 1524.332960][ C1] ? lock_release+0x4b/0x3e0 [ 1524.332989][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1524.333011][ C1] nft_do_chain_inet+0x25d/0x340 [ 1524.333034][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1524.333062][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1524.333078][ C1] ? rcu_is_watching+0x15/0xb0 [ 1524.333103][ C1] ? lock_acquire+0x5f/0x360 [ 1524.333123][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1524.333147][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1524.333171][ C1] nf_hook_slow+0xc5/0x220 [ 1524.333193][ C1] NF_HOOK+0x206/0x3a0 [ 1524.333211][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1524.333231][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1524.333248][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1524.333271][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1524.333292][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1524.333312][ C1] ? skb_dst+0x4f/0xd0 [ 1524.333330][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1524.333350][ C1] NF_HOOK+0x30c/0x3a0 [ 1524.333369][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1524.333388][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1524.333405][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1524.333422][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 1524.333441][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1524.333463][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1524.333481][ C1] __netif_receive_skb+0x143/0x380 [ 1524.333499][ C1] ? process_backlog+0x2d5/0x14f0 [ 1524.333519][ C1] process_backlog+0x60e/0x14f0 [ 1524.333544][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1524.333564][ C1] ? get_jiffies_update+0x44/0x140 [ 1524.333593][ C1] __napi_poll+0xc4/0x360 [ 1524.333609][ C1] ? rcu_is_watching+0x15/0xb0 [ 1524.333634][ C1] net_rx_action+0x707/0xe30 [ 1524.333652][ C1] ? rcu_is_watching+0x15/0xb0 [ 1524.333684][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1524.333717][ C1] handle_softirqs+0x283/0x870 [ 1524.333755][ C1] ? do_softirq+0xec/0x180 [ 1524.333781][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1524.333808][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 1524.333833][ C1] do_softirq+0xec/0x180 [ 1524.333856][ C1] [ 1524.333862][ C1] [ 1524.333869][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1524.333892][ C1] ? kmem_cache_free+0x18f/0x400 [ 1524.333915][ C1] ? rcu_is_watching+0x15/0xb0 [ 1524.333946][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1524.333971][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1524.333996][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 1524.334020][ C1] ? lock_release+0x4b/0x3e0 [ 1524.334042][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1524.334059][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 1524.334082][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 1524.334107][ C1] __dev_queue_xmit+0x1d79/0x3b50 [ 1524.334136][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 1524.334163][ C1] ? rcu_is_watching+0x15/0xb0 [ 1524.334187][ C1] ? trace_sched_exit_tp+0x36/0x110 [ 1524.334206][ C1] ? __schedule+0x17ae/0x4cc0 [ 1524.334225][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1524.334253][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1524.334271][ C1] ? rcu_is_watching+0x15/0xb0 [ 1524.334302][ C1] ? rcu_is_watching+0x15/0xb0 [ 1524.334328][ C1] ? rcu_is_watching+0x15/0xb0 [ 1524.334354][ C1] tx+0x6b/0x190 [ 1524.334375][ C1] ? __pfx_tx+0x10/0x10 [ 1524.334395][ C1] kthread+0x1cd/0x3e0 [ 1524.334417][ C1] ? __pfx_kthread+0x10/0x10 [ 1524.334435][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 1524.334457][ C1] ? __kthread_parkme+0x7b/0x200 [ 1524.334483][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1524.334512][ C1] kthread+0x711/0x8a0 [ 1524.334531][ C1] ? __pfx_kthread+0x10/0x10 [ 1524.334549][ C1] ? __pfx_kthread+0x10/0x10 [ 1524.334567][ C1] ? rcu_is_watching+0x15/0xb0 [ 1524.334591][ C1] ? __pfx_kthread+0x10/0x10 [ 1524.334609][ C1] ret_from_fork+0x47c/0x820 [ 1524.334635][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1524.334663][ C1] ? __switch_to_asm+0x39/0x70 [ 1524.334686][ C1] ? __switch_to_asm+0x33/0x70 [ 1524.334708][ C1] ? __pfx_kthread+0x10/0x10 [ 1524.334733][ C1] ret_from_fork_asm+0x1a/0x30 [ 1524.334764][ C1] [ 1527.273883][ T30] audit: type=1326 audit(1755851686.560:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1527.308655][ T30] audit: type=1326 audit(1755851686.560:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1527.343246][ T30] audit: type=1326 audit(1755851686.560:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1527.378309][ T30] audit: type=1326 audit(1755851686.570:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1527.412694][ T30] audit: type=1326 audit(1755851686.570:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb818ebe9 code=0x7ffc0000 [ 1527.446643][ T30] audit: type=1326 audit(1755851686.570:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9eb818d550 code=0x7ffc0000 [ 1527.482026][ T30] audit: type=1326 audit(1755851686.570:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9eb818e7eb code=0x7ffc0000 [ 1527.518009][ T30] audit: type=1326 audit(1755851686.570:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9eb818e7eb code=0x7ffc0000 [ 1527.555881][ T30] audit: type=1326 audit(1755851686.570:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9eb818e7eb code=0x7ffc0000 [ 1527.602817][ T30] audit: type=1326 audit(1755851686.570:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.2.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9eb818e7eb code=0x7ffc0000