last executing test programs: 31.588021213s ago: executing program 2 (id=2532): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000e47f00000100000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@ipv4, @ipv4={'\x00', '\xff\xff', @dev}, @mcast1={0xff, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00222200000003e6af090027f7940ef7070c00000016b8ef0883"], 0x0}, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) dup(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0x78}, @generic={0x4, 0x0, 0x5, 0x4, 0x400}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @alu={0x8, 0x1, 0xd, 0x5, 0xb, 0xffffffffffffffc0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0xd, 0xb, 0x7, 0x8000000000000017, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) (async) open(0x0, 0x0, 0xada66a977c02d739) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r9 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 30.322353488s ago: executing program 2 (id=2541): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000c0000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) userfaultfd(0x80001) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x36) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) utime(&(0x7f0000000200)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) 30.000871996s ago: executing program 2 (id=2547): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r5}, 0x10) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) statfs(0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x5, @string={0x5, 0x3, "94a46d"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0xc5, 0x40, 0x7, 0x7ff}, {0x0, 0x80, 0x8, 0x5}, {0x42c, 0x4, 0x2, 0x4}, {0x8000, 0x4, 0x3, 0x1}, {0x3, 0x0, 0x5, 0x7ff}]}) syz_usb_control_io(r6, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 26.997515366s ago: executing program 2 (id=2564): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) timer_create(0x1, 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000280)) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 26.194225533s ago: executing program 2 (id=2571): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000370000000000003800048034000180090001007866726d00000000240002809a000200000500030000000000080001400000000008000440000000000900f17faff124ba22931010140000001100010000495410b2e7304e8100000a000000"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206104724e000000000001090224000100000000090400000103000200092100000001220500090581"], 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206104724e000000000001090224000100000000090400000103000200092100000001220500090581"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000b22f847b1f223d33000000000000000000000000000001b00000000100400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="16000000d3ec66ecc053c5da2e2e"], 0x48) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000580)=[@efer={0x2, 0x800}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) 23.269343978s ago: executing program 2 (id=2589): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x40000000004) syz_open_pts(r1, 0x80001) r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r2, r0, 0x0, 0x80000004) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) 8.306268967s ago: executing program 3 (id=2667): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000006c0)={[{@lazytime}, {@noblock_validity}, {@usrquota}, {@delalloc}, {@nodioread_nolock}, {@grpjquota, 0x2e}, {@nouid32}, {@stripe={'stripe', 0x3d, 0x9065}}, {@norecovery}, {@bh}], [], 0x2c}, 0x87, 0x4c9, &(0x7f00000011c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x10001}}]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe36e}]}]}]}, 0x88}}, 0x810) (async) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe36e}]}]}]}, 0x88}}, 0x810) r8 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x70, 0x2, 0x6, 0x0, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x33}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x70, 0x2, 0x6, 0x0, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x33}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 7.251210415s ago: executing program 1 (id=2669): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='system_u:object_r:ldconfig_exec_t:s0 system_u:object_r:policy_config_t:s0 00000000000000p36475 system_u:system_r:kernel_t:s0\x00'], 0x7d) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) 7.243154675s ago: executing program 3 (id=2670): r0 = socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc70000000000010902"], 0x0) mkdir(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0xe) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000280)="cafa519aa3") ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @rand_addr=0x64010101}, {0x0, @random="ca1597489704"}, 0xc, {0x2, 0x0, @empty}, 'veth0\x00'}) 6.101281311s ago: executing program 0 (id=2672): socket$packet(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x7, 0x0, 0x0, 0x0, 0xfffffffc}]}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB='errors=remount-Ro,dots,nodots,dos1xfloppy,dots,nodots,nodots,quiet,dots,dots,nodots,nodots,dots,discard,nfs,dots,tz=UTC,errors=continue,nodots,nodots,quiet,dots,\x00'], 0xfd, 0x1bf, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) connect$pptp(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6.097431131s ago: executing program 1 (id=2673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x3) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b3fb4b4953f8c3b5700", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = dup2(r2, r1) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fd00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460054060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000080a00000000000000001312ca0c734891a263a2ef1df715fb24b0951e1020000000000000000000f53cd7d60000000213122bdd4b74a1f6aa675459bc4d7708"], 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) (async) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xffffffffffffff5a, 0x40000, 0x0, 0x27) sendmsg$tipc(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000008c0)="9168c12fbea65f385f2363648a4c561210b911462309b21c1dbb3d5c3201b8840aa798f967efca8f895c9346fe80918a94fd9c488c395306e31643139d7e4df53e5c3d5505506cb44913", 0x4a}, {&(0x7f0000000940)="bf1d5b63c35a6a06f1ba3f7765ee01bcf832b3d15c84be9f13e6a5c4fbecfad1d96e413fec9a6a2078683a03f93fffd5230dfde27c0d66cb0e91985b6d111c9fc3367d0eb8f044847718e4de69a85744bc1273f5adf41b1e61d425f08e1b317786a563b991c234c1846f083a1d", 0x6d}, {&(0x7f0000000100)="0afce10659fc8dc643147771aaaab5", 0xf}, {&(0x7f00000009c0)="86c18430b0a87ae58f1c4f0f66a0627c5a896bc09c4c8e2d6f5eb35c8f3260d9916dd04d9435b7ae5a496550b96a7fad5626f42395d14765ca3a40e188211daeaca0ba5838ba6c3b15c1efcb993c07f3fbb551e894be805315da4e6247fcb863145c9d8d8a113dbfcaedf808403718316969ec84089d471457f2405c62a1abdf051ef66991c15cddaef69694b86a95c1fbffb023e7b6ffc1b3b1ced47c43d7ae8488321a69776ad746496b79c87583a4979c7a4fd72422624f22f583da", 0xbd}], 0x4, &(0x7f0000000a80)="a3bdb8a5add337f4b55ac89c9c1623ba625557891227d65d302241654bda22044bda15f77aad3d23bcad3bb9f10b0d5562bbcf47ea7fb62d56b8aa7c27d09870c40f4f", 0x43, 0x8890}, 0xc000) (async) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x16fb}], 0x1, 0x0, 0x46, 0x407006}, 0x104) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xfb, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) 6.096623881s ago: executing program 4 (id=2674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x4002, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_win95}, {@shortname_lower}]}, 0x1, 0x227, &(0x7f0000001980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_mount_image$f2fs(&(0x7f0000005800), &(0x7f00000000c0)='./bus\x00', 0x28c0b0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$eJzs3M9rI+UbAPAn7XZ/f/dbxIO3HViEFjZh0x+L3qru4g/sUlY9eNI0SUN2k0xp0rT25MGjePA/EQVPHv0bPHj2Jh4Ub0IlM1PdqgtC08RtPx+YPPO+efPM84Zl4ZkpCeDcmk9+/bkUN+JKRMxGxPWI7LxUHJm1PLwQETcjYuaJo1TM/zFxMSKuRsSNUfI8Z6l46/Pbw1urP731yzffXbpw7Yuvv5/eroFpezEiutv5+V43j2krj4+K+dqwncXuyrCI+Rvdx8U4zeNeczPLsFc7WlfL4nIrX59u7/ZHcatTq49iq72VzW/38gv2h62jPNkHHtV2snGjuZnFdj/NYusgr2v/IP+/7aA/yPM0inwfZeljMDiK+Xxzv5nvZ/txFuu9QTGf500bzf1RHBaxuFzU004jq2PzJN/0f9vb7d7ufjJs7vTbaS9ZrVRfqlTvlqs7aaM5aK6Ua93G3ZVkodUZLSsPmrXuWitNW51mpZ52F5OFVr1erlaThXvNzXatl1SrleXKnfLqYnF2O3n9wXtJp5EsjOKr7d7uoN3pJ1vpTpJ/YjFZqiy/vJjcqibvrG8kGw/v31/feDfuvf/glfU3XysW/a2sZGHpztJSuXqnvFRdPIP7/+Ap+/+kKHqM+4cTKU27AIBnj/4fmIbT6/93HsbhYTZ/mv1/6P/HYlz97+Ek+t/z3v+fwv7hRPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1g9zX76Rnczn42vF/P+KqeeKcSkiZiLi8B/MxsVjOWeLPHNPWT/3lxq+LUWWYXSNS8VxNSLWiuO3/5/2twAAAABn11cf3/ws79bzl/lpF8Qk5TdtZq5/OKZ8pYiYm/9xTNlmRi/PjylZ9u/7QuyPKVt2A+vymJLlt9wujCvbvzJ7LFx+IpTyMDPRcgAAgIk43glMtgsBAABgkj6ddgFMRymOHmUePQvO/vL+zweCV46NAAAAgGdQadoFAAAAAKcu6//9/h8AAACcbfnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M7O/dyoDURxAH62cSD/FBTlnla4QRkpIcccIwpIE5RAWkgD1EBuKSGCFR4vWlbsaiWP7d3V90kwjAU/ZhA+zBtpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjT33q7+v3z66+uOYdjN3lmAwAAAFyzr7er5sU89d+31z+2lz63/SIiyoi4tnav4s1FZtXm1A+8v743hj8RTcLpO6bt411ELKqIRUT8/9T3rwAAAACv1269WabVenqajz0ghpSKNuWHb5nyioio5/8ypZWnvC+Zwpr/9yR+ZEprClizTGGp5DbJlfYkze1+rtrN7jRFasrHP59t7gAAwICqi2bYVQgAAABD+j72ABhHEbdbmeetwGlq2u29txc9AAAA4AUqxh4AAAAA0Ltm/f+sz/8L5/8BAABAV+n8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPq0r7er3Xqz7JpzOHaTZzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LA/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79u0ZSxQEAfzOzs/FOxTXKFhFRsNDGy+2dd14nFkqw8E8QQm7vjLcqnim84xDS2Enqa0RLEUGJ3f0PVyeQJnYptohgYbUyszPJ5Ae4/prZZD8fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXh24dxkh064zguzm3tP1jJ+u1jfebRxs5C1rI4qjPps+HF6oeo21wiAAAAzI6krO9DCLvp5lLWx528/k/La7Ka/9unx3FZzx+v+8u+rP2z9svPe88fDNQZj5Pd9NbqoH/5ZCqt/2+W0+2Zv7yilT/5/N1Lkn8h8Xvrzw3T/HlGXz9+/E47D+fqyBYA+CculX0RlL8PZX2vycQAmBmtSuFd1v9Jp9mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOowXA9PlnEUQlhoHcaZ7f0HK6f1jzZ2Fsp2/eHDjeo9s1ukIYRbq4P+5RrnMu0+v3f/zvJg0L9bf/BSCKGp0d8qpn/ngwkuDqGR5yP4j4K4+LKnJZ+zETT4QwkAgHMpLVpW1++mm0vZuWg+hNF3R+v/VytxmLD+3/vw+lZ1rGr936tthg2am+yyxbU/RqPRvfuvr368fLt/u//JG1d6b/au3rh27cZi/q5k0RsTAAAA/p120ar1fzx/cv3/YiUOE9b/n33T+7I6VjJr9f+EDhf9ms4EAABgtj378u+/Raecj9rt8MXy2trd3vh48PnK+NhAqn/bXNGq9X8y33RWAAAAQB2G69GR9f+blThMuP7/1Pcv/Fi9ZxJCuFCs/19a+XRws77pTLU6/py46TkCAADQrAtFq67/p/n+//hgy0McQnjtlXFc/BvAier/5N2vfqiOVd3/f7W+KU6luDt+HnnfDaHVbTojAAAAzrMnipYV+7+mm0sf/XTx/bb9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+zMAAP//H1NCtw==") setreuid(0xee00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700008c02df01000900006f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000005840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) dup(0xffffffffffffffff) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) syz_clone(0xf58a3180, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 4.856224565s ago: executing program 0 (id=2675): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000001000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x25) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0xd) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[], 0xfd, 0x274, &(0x7f0000000500)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000001c0)={0xb, 0x38, 0x9}) (async) r5 = userfaultfd(0x80001) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x22002, 0x0) fchmodat(r6, &(0x7f0000000300)='./file0\x00', 0x1) (async) ioctl$UFFDIO_ZEROPAGE(r5, 0xc018aa06, &(0x7f0000000100)={{&(0x7f000040a000/0x2000)=nil, 0x2000}}) r7 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r7, 0x0, 0x0, 0x10040, 0x0, 0x0) 4.850584825s ago: executing program 1 (id=2676): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010400"/18, @ANYRES32=r4, @ANYBLOB="00000000000000002000128008000100736974001400028008"], 0x40}}, 0x0) 4.848350295s ago: executing program 4 (id=2677): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) mount$incfs(&(0x7f00000004c0)='.\x00', &(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0x8000, &(0x7f0000000580)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x7}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x8}}], [{@appraise}, {@obj_role={'obj_role', 0x3d, '\xfe%\\\'+'}}, {@hash}]}) r2 = socket(0x10, 0x3, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) bpf$MAP_CREATE(0x1d, &(0x7f0000001c40)=ANY=[@ANYBLOB="001800000010000000000000001515070000000000000086"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfce3) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r10, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010008900"/20, @ANYRES32=r6, @ANYBLOB="00000094f10a7f7aa7aeaa00", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0xdb}}, 0x0) 3.506152477s ago: executing program 0 (id=2678): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sched_setscheduler(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x502020d0}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20044050}, 0x20008010) (async) pipe2$watch_queue(0x0, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) (async) keyctl$search(0xa, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0xfffffffffffffffb) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) r7 = fsopen(&(0x7f00000004c0)='exfat\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lseek(r1, 0x80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) rt_sigprocmask(0x1000000, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 3.501542618s ago: executing program 1 (id=2679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x8, 0x86, 0x7, 0x1}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='-'], 0x118) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x212, &(0x7f00000001c0)="$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") mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) getpid() 3.501033558s ago: executing program 3 (id=2680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000000a00000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) (async) sendmsg$tipc(r3, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000841}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{r0}, &(0x7f0000001440), &(0x7f0000001480)=r1}, 0x20) (async) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, &(0x7f00000032c0)=""/4096, 0x1000}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_cancel(0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 3.500327928s ago: executing program 4 (id=2681): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5, 0x3, 0x0, 0x57}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x1e, 0x0, 0x25, 0x7}]}, {0x0, [0x5f]}}, &(0x7f0000000300)=""/200, 0x2b, 0xc8, 0x1, 0x80, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180100001c00010000000000000000000701008014000300200100000000000000000000000000000c00020180000000000000000c0001"], 0x118}], 0x1}, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000100)={'wg2\x00'}) 2.052458579s ago: executing program 3 (id=2682): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='system_u:object_r:ldconfig_exec_t:s0 system_u:object_r:policy_config_t:s0 00000000000000p36475 system_u:system_r:kernel_t:s0\x00'], 0x7d) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) 2.051956139s ago: executing program 0 (id=2683): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) 2.049492829s ago: executing program 1 (id=2684): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000311000000000000"], 0x48) timer_create(0xfffffffc, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085005886c4fa093f06ef6e44a2000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000240)={0x3000, 0x12000}) close(0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x1002006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 2.048074229s ago: executing program 4 (id=2685): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x10, &(0x7f00000010c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x9, 0x3, 0x4, 0x101, 0x100004}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xdd, &(0x7f0000001140)=""/221, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001240)=[{0x4, 0x5, 0x8, 0x9}, {0x5, 0x1, 0xe, 0x4}, {0x0, 0x5, 0x4, 0xc}, {0x3, 0x4, 0x4, 0x5}, {0x4, 0x4, 0xe, 0x4}, {0x3, 0x2, 0x8}], 0x10, 0x7f, @void, @value}, 0x90) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x19ac1aca404af8f8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000000200)={0x0, 0x5}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x0, 0x20, 0xff}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x5051}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000900)) socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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") 515.426887ms ago: executing program 0 (id=2686): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd63, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) capget(&(0x7f0000feaff9)={0x20071026}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 514.572268ms ago: executing program 1 (id=2687): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@noquota}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_usb_connect(0x6, 0x834, &(0x7f00000014c0)={{0x12, 0x1, 0x110, 0x64, 0xd7, 0xfc, 0x20, 0x174f, 0x8a12, 0xa6e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x822, 0x2, 0x7, 0x8, 0x60, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0xa, 0xe, 0x1, 0x0, 0x2f, [], [{{0x9, 0x5, 0x4, 0x8, 0x20, 0x7, 0x5, 0x6d}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x7, 0xf, 0x7e, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x4}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x6, 0xd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x569d}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x91, 0x8, 0x4, [@generic={0xc0, 0x24, "3c15008c5b4c1e82911fbdcd3e55975e03fc736ec6ce34d2dfce0c7febcadad621fc446c8030134065b8c01baad8a2af705da90f9897246b1d54d4f697efc850f97aadd53963fa740631a0777ddf0b2fa583568588e7de505c04c5370cdfe5315b0bed7fdf855989f98396e5c0e22b5c72febee2a82bf52101bcaf7cf22134011894a622ef56ccba1c32aee2f7e2a84f04b33e78cddd0fafb8fa1b802ebbc80d39d655db39ba82e74b9da20c960a97190088701e330c01689fe7521e190c"}, @generic={0x25, 0x22, "7a45de62b12e3fe1bbdb752e34fefbc267c4af1debc98f779da04f650a6b9c2d00c69f"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x5, 0xcd, 0x4, [@generic={0x2f, 0xb, "16c981225513506e3b973a7cd38f0ed0c2d374d732d2cfeec48d2c14c40c877857c65c8fc8d647eb6038be88b5"}]}}, {{0x9, 0x5, 0x93, 0x0, 0x400, 0x6, 0x5f, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5d, 0x10}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x1, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfe00}, @generic={0xbb, 0xb, "593ee8541f3ca18de2d61280db8de6588fff7630d99facf26412a397bb5fbb7a43eb73b042df4304fe951340a4eb9b5c6f09b554d51265ce32ffcde3a2f23434660e896f43f4386de10f7d62e682b43b3c221f2e54d404ff8d824b4ee0d0bf767ba471182851fe125ca4342aed5c8ff95032427b5782514385151c60dcb6b6244a062361eae20de92b6629405ddf3d3de0bd09f68c89492c83c6bf5f1623fea62c4eaa2ebbe595c5cfb8a86e8756884e1630bfb64a5fbc5aa8"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3df, 0x2, 0xfc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd4, 0xa}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0xd7, 0x9, 0x75, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0xedb}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x7, 0xc, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0x1000}]}}]}}, {{0x9, 0x4, 0x84, 0x2, 0xd, 0x51, 0xc2, 0xdf, 0xfb, [], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x6, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x4, 0x5}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x1, 0x3, 0x4, [@generic={0x35, 0x22, "4156454ddc434483c2d2d7142104e9fe72ef22a941a7834efa0ba64be843a3dd070f29dc5d05f70fdc1e262acaac496d118862"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xf126}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x4, 0x5, 0xb, [@generic={0x6b, 0x1, "a04a668544fa1011dd2a2fc1de77b331022edfd52b2830696bb92f66f6e826c32d5874865b15192eebe393dc200f6781ae932ff84c5e7009861bd27d9a6cdf0856d512aedb033c26bdc731c7ebae2a32e6f99a7544c0e6f439310cc3b0dea21445af1ad2d707c743c3"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x0, 0xe, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1b, 0xdbd}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x5849}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x3, 0xc7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x1, 0x2}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x0, 0x80, 0x7, [@generic={0x69, 0x5, "cfff9c30088ccf502ab442cda62c03f020639401b1b3a14ae2b60fae6565c8008d92f85327cfc8e0f4545cde04369849e03493c0a0a6775818399f0d61ac995890be060c0608c2620f846bf24e0704210a2a66ee43d7fd355cd6743713c341bcf1fb43547f37b9"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x9, 0x5, 0x9, [@generic={0xc6, 0x22, "b0b78dec8b524be47c9edc3102bd3ea86526e4358d17a59c6124c83dedb82444a8fb18a0e4ccfe1413092d13b2af06ea570c2078b5a2dbd3180293a9e23ecea24c1beb1bbbc50c0bd5713c41131ff8eaeef0eb6f4f1823a436149d2b2d82ba4475fdbc8c6856369c06bb05e8ddcd469b7b338aa95734f1594973d3ee229595673a0615f34e1e52036191dd14e3398efe2f00e06afd0f98bd20875a7d2774e0f9bf681224c89350ac936ab207baa87d5c0feda1ba4e0dbdb41c5dceffa0a9fd4d6ac715a3"}, @generic={0xe6, 0x1b, "90581dad4f2fae7cfe568733816b87bd182faaf1d0492a8a56098f6d688203a482b0a332281e74bce532c31b2b70866f339fd1d7ced07529f2a067a80eba02a3e52bd1ab58ca2f5265940c774d73a8c9fb32062edf0ef79c380a16a8059c148ca5c2df94e8efc43ccb8dabae34398fbea6e41242ebb6e46b8f8b21a6ff08010a5c1243764bd583f76ea09004c996fa452695cdb06506066a6452a09380ac5c2b8b1738ca5c88a8e98283d4d6494add8d5fac389e1c41adda0dbff6ce19beefe17767d83eb052fe63d5eaab6086802cf66e60ef87ac2e87404b4099cb8a92ff75e106dd3e"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x6, 0x2, 0x7, [@generic={0x3e, 0x3, "3e526f59dd346099c2cf8cf831a3ff645fdd13e1c65715c67abfae8ce10f9f462c272fc1ef5370a1fc43a44bfa08bb6cc72bd6687e8b53da327c8c77"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x4, 0x3, 0xc5, [@generic={0xed, 0x1, "053a22d4bc4dc525345d40e933c3f979a26fbdda6f9d44dc3a04c89abaa89c2f0a100f133cf22891d4e8fe4bda75ac7ea6eb366366b39dadc00fdb920190d77d015e8c5e57edd9ddf4bfcc2d4e85b9075d69a01acbcb3f55ff02016f52c62e9bc24d7bf88ee27523ab597928a5648568baef9682dc9f868f7adc4328a25972271c6335da9ab6f90da2e00e8a24b884345652406a261cca3e3a6bebcf05b71851a94f7ef19a54e8f43ff601d92b62687683a6a73272eb7f78827a570a3e1f8ce7e7763d7ea46fcd70fbe34e48477383816b765ed1df15ab85e7b3c566b1fd6526669c07712def40adb8399e"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xe, 0x5, 0x5}}, {{0x9, 0x5, 0x0, 0x4, 0x5ff, 0x81, 0x10, 0x0, [@generic={0x11, 0x0, "370d8b26689c9ba4df6f3a3b9d72ec"}, @generic={0x8a, 0x1, "1445e69d9cb29230ee0cfd57787069d2ef46d90b6a8cd31e4136155c4be3bb06f37bf3fee11a119fe70ab1e401d69b028c472940fa320f641237383fdbb920b2d3c40eb50a17b47e3a2a5221d414eaae57f160d790f0b6cfe640fdfd7d7eee63813548db9198e9d0b8aa04dd238beaf0a0cbc666d687a38498190a403c333829ba4d7e213cb795bf"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x9, 0x7, 0x2, [@generic={0x61, 0x23, "f51cffcfb84bb169fc97d4d568f838cb1a3ad80b5dfef21e3c5633d38cd19755f2008df90390c8c9df740f9818f61afe1c2df95b8347462b81071c415286a4644d8b458c2fde07b09a84d6dca1a785d2b05bc5dc84d7a269b3de0d2fc7645f"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0xff, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x55, 0x5}, @generic={0x1d, 0x31, "e348579baf7fdd027795dbbc2121258b3d50cd652f77c80cc84580"}]}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x5, 0xa5, 0x2, 0xcf, 0xe}, 0x30, &(0x7f0000000240)={0x5, 0xf, 0x30, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x6, 0xb4}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x400, 0xee0f, 0x0, [0xf0, 0xffffff, 0x0, 0x30, 0x1b0, 0xc187]}]}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x200a}}, {0xe5, &(0x7f0000000600)=@string={0xe5, 0x3, "b563f7441c746c98844029a3ef6d578f153b654372c551bfe08b6735af64d50ac91ff35e913a469f140881ba448f713fa8d7b8f537d16608c227efe3fe533b741f8539ae535eabb007c173136a2184671e2b6849ff4ead802270d6144ce2295c3762d486c8f840a4047f7ca992ed1b27fe128e9e2972e8077410af2764413f033564cea69f5d2eeb6e36f02262c72a5b355ab0093325352edb196fbde1e1f2964b6880dee1a019de6695bc8eeca64cb1884a17882ba8ebf030380fda626b76168073e83e5ca56e288850603c54399be99516aea245cfb950166c8413e5ab731fb8749a"}}, {0xa4, &(0x7f0000000500)=@string={0xa4, 0x3, "950f0a83ddd83dfa5caa7df75020c0e064168c0c29fff0ec9fd4b9d91e31068b07c2d55ee7305dd7ced291f09f9fbbb3c4054746e542f3fcf362c6aacfa1a359707b103e11500b5bdd7a7ab83b1512e908c7e68fea0bf3d1454ee6fe1e2ea0548a8fceb285427e3a9a09d292177129673691d2ea1decca6f1a28375ce09744b94b9e524fb14a2121e6f9586aedf8d20d874cd6175911cb1e9f94ed4ac04b977344c5"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xd8f1}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x408}}, {0xd2, &(0x7f0000000740)=@string={0xd2, 0x3, "c76bdc8c345493362eecd75c649e2800c29672db65828706c1b5ac2467f188a31e17ee147f06d03c64ee7ae73c1328f3e34227b271781bb0e652a32bcf4027eb7cad5c7718b814ac659a0dba0092667f7718b684204bdeadac6b95c22fbd38a8b97f476eb9b1c4a280f306b0c547b000eb48081d24275cc83c9e42a6c9fe84ccd829e4dd77737ab4330e3251ceb6cd1f828082d3e29b9efcbf3e7b295beb1fe11d59ad3f55d58991731573e16d82b5d9dde6194312349e914dee06840aada76034c158747bdfaa7f6caa2132572445b2"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x40f}}]}) 514.122088ms ago: executing program 3 (id=2688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010400"/18, @ANYRES32=r4, @ANYBLOB="00000000000000002000128008000100736974001400028008"], 0x40}}, 0x0) 503.346959ms ago: executing program 4 (id=2689): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nouid32}, {@sysvgroups}, {@noload}, {@data_writeback}]}, 0x1, 0x63f, &(0x7f0000000a00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0xffffffffffffffff) r5 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r5, 0xdb6972e93d360997, 0xffffffffffffffff, 0xffffffffffffffff) renameat2(r2, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000040)='./file1\x00', 0x2) 10.762199ms ago: executing program 0 (id=2690): r0 = socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc70000000000010902"], 0x0) mkdir(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0xe) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000280)="cafa519aa3") ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @rand_addr=0x64010101}, {0x0, @random="ca1597489704"}, 0xc, {0x2, 0x0, @empty}, 'veth0\x00'}) 8.952109ms ago: executing program 3 (id=2691): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40), 0xa, 0x4e4, &(0x7f0000001400)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1fa, &(0x7f0000000bc0)="$eJzsmUFr1EAUx/8zySa1iOLFgxcPFlS02SSr0kuRCh49taIeg42lddqV3QjdgmDx4sWjBz+AX0DQQ08evHnzqgcVBA/WmzdhZDKTZJrQJRWlhb4f7OSfybw3773NvsAGBEEcWr5++fX52bWZhYsAjmIKvpn/7lRruLX+04uHF57PXndefXz5bu3Yo626PwZAyvb7ewDezjnoPD6en0u503rKHBfAS30THOeNvgWGoIhVVtYpGO6Y6RVL948YIVJ2ty8W7y2LNFRDpIZYDT2gCsEFsL3JsGgqo3ZgVnzD0cb9RAADLURaiI4s9mlc2qsYV788vjmOWasE6vu6/fTJpjoPzHxo1S8CR2R0DwzzRs/ARxAEVUms/E+5lX+nkf8/SPJ/iBPTByKMpni98ltqDkY8MLf0X/tRxvueRVvB6jMqez3jD0cnt7feN62+td7iZyKY+bHse6ZaYEKH07j0YVKIG7XF0m/v2cOY26bqT6ocZ63+5MIt+0c3W33QHY42ppdXk6V0KV2L496V8FIYXo67eSPS45j+N5H3p0nLf2eXtR7zsJ5k2SBaB7JBVJ7HerQ67vyb/o/chuf9j1/FGe2DmWdW+aCswcyH50elzjm7Bk8QBEEQBEEQBEEQBEEQBLEnToPBvFxgxTuxndh/SP4JAAD//8TiZCM=") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2f, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sched_switch\x00'}, 0x10) socket$tipc(0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000003f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="38000000000000000000000007000000940400004424090100000000000000007f00000100000000e00000020000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa"], 0x58}}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="7fb664af0a000200aaaaaaaaaa0c"], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time\x00') setns(r9, 0x0) 0s ago: executing program 4 (id=2692): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x10000, 0x100) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48010}, 0x20008804) r1 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000001c0)={0x5}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x24000080) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x160, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "ee1d76c2f21d74d3596b2b8fa90edbab0644f251e4d16686"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x38, 0x3, "0dcbd035af21cbf0f520eb87695ef35ba9078d3b1c830c8c1c6f19052574a38980a69568b8412a02f53c4973825b479740c605ab"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc847}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x45b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x41}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x44091}, 0x40000) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000740)={&(0x7f0000000640)="17ed985d6411325fd1c7468ec1c91701286947997fac7bd5cf934df2b53fb2f501583942ae12472670550e2ab2f1d8de0f9ae889348a64211d0617042cdca39d8fc4beb1fda9ce3baf8ed4aff715a6f34fc8925b153459f6350b13a8ac311cfc9947b90d8be32d12d978ab8afba6bdb4e0062e6215bd0e317fb3edefbefcc72b4dacd1f171587d82193f6ceee8d3a8576f8fcb5d7ad34bc71c22278269cbbb571a379ef15818f493c2fb2f3c6fb615ca953f59c310491643e3909ab286e23894f91adcd0f5e1fea58e24da32c9df881eb24bd136dbfe535e35e9bd0e296e1174296d8ebbed4eec5a942563b03056a3678e035cae600be4840b", 0xf9}}, 0x4000005) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000800)={0x0, 0x3bd}, 0x8) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xe4, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x4, 0x1ff, 0x3e, 0x4]}, @CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_MARK_MASK={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xcab}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000a40), r3) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r9, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x1b, 0x0, r0, 0x7fffffff, '\x00', 0x0, r0, 0x1, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) fcntl$F_GET_FILE_RW_HINT(r10, 0x40d, &(0x7f0000000c00)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = getpid() sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x408c0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002200)=0x0) sendmsg$netlink(r11, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000d40)={0x1bc, 0x36, 0x901, 0x70bd2d, 0x25dfdbfd, "", [@generic="ac69383fef", @nested={0xa1, 0xc0, 0x0, 0x1, [@generic="4a8c43a1261e9922b663380c6d1467431eeb7a1f799db336fb887939da349872183a4278c5cc52b142a990d4e05a4860e1fcf7fedea441e7b6c114c5408065750139dafd7c840c5bd13bf789bfb342043e11a6fd3b912268c124cae8c739aed870c2bc0671b85bac0a799a0e27f24c80384690a85bb93ef6f0fa8f056e67fbac8fe028e636667f59bf35cc3b0c225279a6", @typed={0xc, 0x8d, 0x0, 0x0, @u64=0x1}]}, @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x88, 0xeb, 0x0, 0x1, [@generic='9', @typed={0x8, 0x113, 0x0, 0x0, @u32=0x6}, @generic="51dfe787f56b212fe3906b2bf28f7b2cb94856bc30bddb0c7fa214adcb8a124594fedf7b86a2dbfeb7c55a451be509b397808a9ac73aa2ae8663976ca320339e8a94e5e68b97c17d3540382717b855b6d0018aab12a6ce532c0cd44429f0ee7a", @generic="c8b8db", @typed={0x4, 0xad}, @typed={0x8, 0x12c, 0x0, 0x0, @pid=r12}, @typed={0xc, 0x22, 0x0, 0x0, @u64=0xe}]}, @typed={0xc, 0x79, 0x0, 0x0, @u64=0x6}, @generic="f849fa357e2afc196287e96c2fed995cf0eac3ea4e611d82a70fece5edcc15e68b85d2154d7344f86537a6832b142f38fc7be611125db35f51b4e33ffc38f5b26dc3d85d37490e3dbda9af7038f075eaa0da9744330aa42c4712a5c274c2044d87c90778005d"]}, 0x1bc}, {&(0x7f0000000f00)={0x12d0, 0x23, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x4, 0xfc}, @nested={0x100c, 0xe9, 0x0, 0x1, [@generic="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", @typed={0x8, 0xf9, 0x0, 0x0, @fd=r0}]}, @generic, @generic="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", @generic="5388", @nested={0xb2, 0x61, 0x0, 0x1, [@generic="a04eb33ff7171fd3138dd681784849cf8d", @generic="e319b69c0fe09c2b7d55feba1cab80537146cf06962a9559b166febee1ff7103e890dc674f622eb3ed185f9f1b852cd78a41526ffb464232f3bd704599b2a67839da82ca022cdda1dec6a275f6e8d51b404697909cff13b878943e22aa87470da5ab13ec7bea24053af3dbb2131b021c15edab488e2cca80ad0c946f1194df2319faebe4fbc577a987c9da9836a92ec0baf4762256275bf141f5caf0e2"]}, @nested={0xfd, 0x41, 0x0, 0x1, [@generic="b957db63e2df38461e703f4f30613fbd41d869aba4335b446a52a4fe50af1cdcbadd0beb0f8ceeaba2a3241d7c20030d843ce5f385d4763d26e9f0794be6fd77632cc15e08b084f7f97816086203460e14cae196815fd497789095b796731fecd07cd8595484c50e56350711d7d343d2d0a6042b69030c402b64c2cec132714b63472cdf9e1eb127f1485e9e26b5dc15614c58d2f3acf5add85d230ee7586dee66167138611bbbdcdc58fa76fbb0552417f9097dd1fd65df2f09b23647b935a3a4669e1033e1f0d3e854bac166cb2baacee26bce7ea47071e1d5be9ce2a892729b9dfb46a18120a9a020fb94e08306d536", @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @generic]}]}, 0x12d0}, {&(0x7f0000002240)={0x254, 0x3c, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@typed={0xc, 0x149, 0x0, 0x0, @u64=0x2}, @nested={0x21b, 0x5f, 0x0, 0x1, [@generic="d762b2f678b7e9ba59e8c2b5b517ba36043615051f8ecff65993ec79af71facc68cd38e6a05edde16a8deba5dd6bfaaab19961c758dc1ce063619a3b833a57834a4a3b5cefe5e07bbd19691585f66ede448b4db6d0c925ad8c3999ec876ce738552ac9a1436ff1c6c0838359d66b58b7e62e3c03f98aeefe2a9c7907d65075b6cc01a56a6b4f4dd7938f7488ba", @generic="9b3415a74e", @generic="3153019c41d22106e7b1d7a56cac20eea0b7b413c87c0c2742451813d6d5c86c844c8742fec236567aefaa516705e5f2f464ed7be30874cc2bcf24c4086e18f25a8763e81039e3124ca0e6f8731d0ec6cdf9d1b301264b6d4ec1d2e350bafbe89e5ef2d986081b98d76cdaab9b375ff906916086055cdf2d7016db4d0f24b59b59661e598c45c47628bd8df169016e083d78042cc8e0d23a8aaa", @typed={0x8, 0x90, 0x0, 0x0, @uid=r13}, @typed={0xb5, 0x5b, 0x0, 0x0, @binary="b0f5e9702e466af5ab37c5cfc55e391319116ddf77a4b6ab155d4e0fb40c80d18119ad23b9899ca7aa96d4525a18bef437577b4ba650fe7c4287ed4c9dc1229b603a6887fd1c48fd30775f59169b7815d722b0d47a15a85b894b38f0844860a581b8fa728c7a91e8b4cf38034ad1236d9fb22ac2aa6fcf35c2d43b4f09c643db1eaa77050fbd1b8251c7f1c27e38afce9050e3cfdedfea5ecd29f13c1c923f7fee6e678c216d0e949afafd8fc3d3cafbd4"}, @typed={0x4, 0x126}, @generic="be54e7413c0f71cc1ee3c61dff2c4be165b295e72ab355d41fcfa4", @typed={0xc, 0xdc, 0x0, 0x0, @u64=0x2}]}, @nested={0x14, 0x83, 0x0, 0x1, [@typed={0x8, 0x130, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x57, 0x0, 0x0, @fd=r7}]}, @typed={0x6, 0xcf, 0x0, 0x0, @str='!\x00'}]}, 0x254}], 0x3, 0x0, 0x0, 0x800}, 0x4000000) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000007b40)={0x0, 0x0}) recvmmsg(r14, &(0x7f0000007900)=[{{&(0x7f0000002540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/229, 0xe5}], 0x2, &(0x7f0000003700)=""/104, 0x68}, 0x1}, {{&(0x7f0000003780)=@phonet, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003800)=""/172, 0xac}], 0x1, &(0x7f0000003900)=""/54, 0x36}, 0x7}, {{&(0x7f0000003940)=@nfc, 0x80, &(0x7f0000003c40)=[{&(0x7f00000039c0)=""/252, 0xfc}, {&(0x7f0000003ac0)=""/29, 0x1d}, {&(0x7f0000003b00)=""/218, 0xda}, {&(0x7f0000003c00)=""/39, 0x27}], 0x4, &(0x7f0000003c80)=""/93, 0x5d}, 0x800}, {{&(0x7f0000003d00)=@sco={0x1f, @none}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000003d80)=""/4096, 0x1000}], 0x1, &(0x7f0000004dc0)=""/239, 0xef}, 0x3}, {{&(0x7f0000004ec0)=@ax25={{0x3, @bcast}, [@default, @netrom, @null, @bcast, @default, @default, @bcast]}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004f40)=""/25, 0x19}], 0x1, &(0x7f0000004fc0)=""/165, 0xa5}, 0x4}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000005080)=""/131, 0x83}], 0x1}, 0x5}, {{&(0x7f0000005180), 0x80, &(0x7f0000006400)=[{&(0x7f0000005200)=""/106, 0x6a}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/76, 0x4c}, {&(0x7f0000006300)=""/255, 0xff}], 0x4, &(0x7f0000006440)=""/253, 0xfd}, 0xd01}, {{&(0x7f0000006540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000006600)=[{&(0x7f00000065c0)=""/47, 0x2f}], 0x1, &(0x7f0000006640)=""/125, 0x7d}, 0x9}, {{0x0, 0x0, &(0x7f0000007800)=[{&(0x7f00000066c0)=""/74, 0x4a}, {&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000007740)=""/131, 0x83}], 0x3, &(0x7f0000007840)=""/166, 0xa6}, 0xf735}], 0x9, 0x2000, &(0x7f0000007b80)={r15, r16+60000000}) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) kernel console output (not intermixed with test programs): 5771][ T9863] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 531.603701][ T9863] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 532.024965][ T9863] udc-core: couldn't find an available UDC or it's busy [ 532.031812][ T9863] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 532.073749][ T9863] binder: 9862:9863 ioctl 4c80 2 returned -22 [ 532.128999][ T5587] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 532.284682][ T8211] usb 5-1: USB disconnect, device number 81 [ 532.290923][ T9896] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 532.298484][ T9896] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 532.500558][ T5587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.510182][ T8230] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 532.511346][ T5587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.528238][ T5587] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 532.537025][ T5587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.545599][ T5587] usb 2-1: config 0 descriptor?? [ 532.853018][ T8230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.856469][ T5587] logitech-djreceiver 0003:046D:C71B.0054: unknown main item tag 0x0 [ 532.869376][ T8230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.881343][ T8230] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 532.890637][ T8230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.900680][ T8230] usb 4-1: config 0 descriptor?? [ 533.044484][ T1360] usb 2-1: USB disconnect, device number 77 [ 533.132254][ T24] audit: type=1400 audit(1729421106.378:5706): avc: denied { append } for pid=9894 comm="syz.3.2214" name="event1" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 533.156712][ T9895] udc-core: couldn't find an available UDC or it's busy [ 533.164106][ T9895] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 533.454656][ T8230] usbhid 4-1:0.0: can't add hid device: -71 [ 533.460516][ T8230] usbhid: probe of 4-1:0.0 failed with error -71 [ 533.485780][ T8230] usb 4-1: USB disconnect, device number 89 [ 533.509923][ T9912] syz.4.2218[9912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.509987][ T9912] syz.4.2218[9912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.558731][ T24] audit: type=1400 audit(1729421106.819:5707): avc: denied { append } for pid=9917 comm="syz.1.2221" name="hwrng" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 534.072196][ T5587] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 534.238734][ T24] audit: type=1326 audit(1729421107.543:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 534.268697][ T24] audit: type=1326 audit(1729421107.575:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 534.292825][ T24] audit: type=1326 audit(1729421107.575:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 534.310370][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.318404][ T24] audit: type=1326 audit(1729421107.575:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 534.323550][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.353731][ T5587] usb 2-1: Invalid ep0 maxpacket: 64 [ 534.359956][ T24] audit: type=1326 audit(1729421107.575:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 534.383801][ T24] audit: type=1326 audit(1729421107.575:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 534.390745][ T9937] device bridge_slave_0 entered promiscuous mode [ 534.414388][ T24] audit: type=1326 audit(1729421107.575:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 534.438324][ T24] audit: type=1326 audit(1729421107.575:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 534.462249][ T24] audit: type=1326 audit(1729421107.575:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.0.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 534.485883][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.493032][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.500362][ T9937] device bridge_slave_1 entered promiscuous mode [ 534.500862][ T5587] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 534.519907][ T1361] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 534.555415][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.562305][ T9937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.569423][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.576265][ T9937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.608435][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.615705][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.623091][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.631020][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.646836][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 534.655114][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.661977][ T913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.669636][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.678028][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.684938][ T913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.726478][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 534.734761][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 534.742791][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 534.750454][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 534.757773][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 534.765723][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 534.767635][ T5587] usb 2-1: Invalid ep0 maxpacket: 64 [ 534.779197][ T9937] device veth0_vlan entered promiscuous mode [ 534.848874][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 534.894141][ T9937] device veth1_macvtap entered promiscuous mode [ 535.111581][ T5587] usb usb2-port1: attempt power cycle [ 535.136259][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 535.157574][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 535.187035][ T1361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.198789][ T1361] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 535.225692][ T1361] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 535.234549][ T1361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.246875][ T1361] usb 1-1: config 0 descriptor?? [ 535.501054][ T5587] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 535.586905][ T5587] usb 2-1: Invalid ep0 maxpacket: 64 [ 535.615373][ T1360] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 535.663518][ T9] device bridge_slave_1 left promiscuous mode [ 535.669462][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.676953][ T9] device bridge_slave_0 left promiscuous mode [ 535.683671][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.691195][ T9] device veth0_vlan left promiscuous mode [ 535.729679][ T5587] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 535.758321][ T1361] usbhid 1-1:0.0: can't add hid device: -71 [ 535.764103][ T1361] usbhid: probe of 1-1:0.0 failed with error -71 [ 535.771025][ T1361] usb 1-1: USB disconnect, device number 88 [ 535.815597][ T5587] usb 2-1: Invalid ep0 maxpacket: 64 [ 535.820998][ T5587] usb usb2-port1: unable to enumerate USB device [ 535.843997][ T1360] usb 5-1: Using ep0 maxpacket: 16 [ 535.985503][ T1360] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.999980][ T1360] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 536.009940][ T1360] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 536.026227][ T1360] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.035482][ T1360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.063769][ T9953] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 536.084050][ T1360] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 536.102020][ T1360] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 536.301914][ T1360] usb 5-1: USB disconnect, device number 82 [ 536.615520][ T9978] xt_SECMARK: invalid mode: 0 [ 537.320447][ T1361] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 537.396636][ T8181] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 537.672966][ T1361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 537.682612][ T1197] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 537.690209][ T1361] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 537.844407][ T1361] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 537.853320][ T1361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.861166][ T1361] usb 4-1: Product: syz [ 537.865148][ T1361] usb 4-1: Manufacturer: syz [ 537.869523][ T1361] usb 4-1: SerialNumber: syz [ 537.875068][ T1361] usb 4-1: config 0 descriptor?? [ 537.882807][ T8181] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 537.890726][ T8181] usb 1-1: config 0 has no interface number 0 [ 537.896809][ T8181] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.909367][ T8181] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.918934][ T8181] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 537.927754][ T8181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.936404][ T8181] usb 1-1: config 0 descriptor?? [ 538.006453][ T8211] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 538.187364][ T1197] usb 3-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 538.196319][ T1197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.204200][ T1197] usb 3-1: Product: syz [ 538.208164][ T1197] usb 3-1: Manufacturer: syz [ 538.212545][ T1197] usb 3-1: SerialNumber: syz [ 538.217849][ T1197] usb 3-1: config 0 descriptor?? [ 538.282528][ T8211] usb 2-1: Using ep0 maxpacket: 16 [ 538.407068][ T8181] prodikeys 0003:041E:2801.0055: unknown main item tag 0x0 [ 538.414255][ T8181] prodikeys 0003:041E:2801.0055: unknown main item tag 0x0 [ 538.421303][ T8181] prodikeys 0003:041E:2801.0055: unknown main item tag 0x0 [ 538.428310][ T8211] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 538.436108][ T8181] prodikeys 0003:041E:2801.0055: unknown main item tag 0x0 [ 538.443086][ T8181] prodikeys 0003:041E:2801.0055: unknown main item tag 0x0 [ 538.450188][ T8211] usb 2-1: config 0 has no interface number 0 [ 538.456242][ T8211] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 538.465855][ T8181] prodikeys 0003:041E:2801.0055: unknown main item tag 0x0 [ 538.466353][ T24] kauditd_printk_skb: 62 callbacks suppressed [ 538.466366][ T24] audit: type=1326 audit(1729421111.984:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 538.472873][ T8181] prodikeys 0003:041E:2801.0055: unknown main item tag 0x0 [ 538.473341][ T8211] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 538.485588][T10004] udc-core: couldn't find an available UDC or it's busy [ 538.502792][ T24] audit: type=1326 audit(1729421112.005:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 538.510370][T10004] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 538.519307][ T8181] prodikeys 0003:041E:2801.0055: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 538.534524][ T1197] usb 3-1: USB disconnect, device number 78 [ 538.549567][ T24] audit: type=1326 audit(1729421112.005:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 538.597809][ T8181] hid_prodikeys: hid-prodikeys: failed to find output report [ 538.597809][ T8181] [ 538.607897][ T24] audit: type=1326 audit(1729421112.005:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 538.631720][ T24] audit: type=1326 audit(1729421112.005:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 538.637073][ T8181] usb 1-1: USB disconnect, device number 89 [ 538.661178][ T24] audit: type=1326 audit(1729421112.005:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 538.684843][ T24] audit: type=1326 audit(1729421112.005:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 538.708927][ T8211] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 538.718053][ T24] audit: type=1326 audit(1729421112.005:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 538.718172][ T8211] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 538.741515][ T24] audit: type=1326 audit(1729421112.005:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 538.750055][ T8211] usb 2-1: Product: syz [ 538.772752][ T24] audit: type=1326 audit(1729421112.005:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42110c4990 code=0x7ffc0000 [ 538.776978][ T8211] usb 2-1: SerialNumber: syz [ 538.805765][ T8211] usb 2-1: config 0 descriptor?? [ 539.292748][ T1361] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 539.308247][ T1361] usb 4-1: USB disconnect, device number 90 [ 539.467485][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2255'. [ 540.998136][T10050] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 541.078063][ T8211] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 541.088617][ T8211] usb 2-1: USB disconnect, device number 82 [ 541.212074][T10058] Unknown ioctl 35123 [ 541.216229][T10058] Unknown ioctl 21521 [ 541.825016][T10060] overlayfs: './file0' not a directory [ 542.293261][ T1197] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 542.311887][ T8227] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 542.797703][ T1197] usb 4-1: Using ep0 maxpacket: 8 [ 542.902629][ T8227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.912151][ T1197] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.914990][ T8227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.933044][ T8227] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 542.942097][ T8227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.951747][ T8227] usb 2-1: config 0 descriptor?? [ 542.997821][ T1197] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 543.013707][ T1197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 543.022561][ T1197] usb 4-1: SerialNumber: syz [ 543.074578][ T1197] usb 4-1: config 0 descriptor?? [ 543.104206][T10127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58128 sclass=netlink_route_socket pid=10127 comm=syz.2.2280 [ 543.117534][ T1197] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 543.124671][ T1197] uvcvideo: Failed to create links for entity 255 [ 543.131227][ T1197] uvcvideo: Failed to register entities (-22). [ 543.302892][ T8227] usbhid 2-1:0.0: can't add hid device: -71 [ 543.325389][T10075] 9pnet: Insufficient options for proto=fd [ 543.331790][ T8227] usbhid: probe of 2-1:0.0 failed with error -71 [ 543.347343][T10075] 9pnet: Insufficient options for proto=fd [ 543.358876][ T8227] usb 2-1: USB disconnect, device number 83 [ 543.371421][T10075] 9pnet: Insufficient options for proto=fd [ 543.378314][T10075] 9pnet: Insufficient options for proto=fd [ 543.384354][ T8228] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 543.496181][ T8211] usb 4-1: USB disconnect, device number 91 [ 543.595691][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 543.595705][ T24] audit: type=1400 audit(1729421117.359:5815): avc: denied { append } for pid=10144 comm="syz.0.2284" name="usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 543.855041][ T8228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.942689][ T8211] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 543.954993][ T8228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.965057][ T8228] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 543.974077][ T8228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.033085][ T8228] usb 3-1: config 0 descriptor?? [ 545.208188][ T8211] usb 4-1: Using ep0 maxpacket: 32 [ 545.379372][ T8211] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 545.390058][ T8211] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.440995][ T8211] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 545.451216][ T8211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.544525][ T8211] hub 4-1:4.0: bad descriptor, ignoring hub [ 545.560590][ T8228] usbhid 3-1:0.0: can't add hid device: -71 [ 545.566769][ T8228] usbhid: probe of 3-1:0.0 failed with error -71 [ 545.597858][ T8211] hub: probe of 4-1:4.0 failed with error -5 [ 545.603095][ T5587] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 545.610758][ T8228] usb 3-1: USB disconnect, device number 79 [ 545.617596][ T8211] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 545.714816][T10143] input: syz0 as /devices/virtual/input/input41 [ 546.320230][ T5587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.481909][ T5587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.492517][ T5587] usb 5-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 546.502415][ T5587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.626978][ T8181] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 546.630691][ T5587] usb 5-1: config 0 descriptor?? [ 546.870909][T10184] overlayfs: failed to resolve './file0': -2 [ 547.017758][ T8181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.029187][ T8181] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.039679][ T8181] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.052624][ T8181] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 547.061599][ T8181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.069855][ T8181] usb 3-1: config 0 descriptor?? [ 547.427151][ T5587] usbhid 5-1:0.0: can't add hid device: -71 [ 547.432968][ T5587] usbhid: probe of 5-1:0.0 failed with error -71 [ 547.440537][ T5587] usb 5-1: USB disconnect, device number 83 [ 548.446797][ T1360] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 548.646513][ T8228] Bluetooth: hci0: command 0x1003 tx timeout [ 548.652840][ T40] Bluetooth: hci0: sending frame failed (-49) [ 548.674999][ T1360] usb 5-1: Using ep0 maxpacket: 16 [ 548.770479][ T8227] usb 4-1: USB disconnect, device number 92 [ 548.789339][ T1360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.800181][ T1360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 548.813357][ T1360] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 548.822397][ T1360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.837722][ T1360] usb 5-1: config 0 descriptor?? [ 549.306729][ T24] audit: type=1326 audit(1729421123.343:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.0.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 549.332013][ T24] audit: type=1326 audit(1729421123.343:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.0.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 549.355790][ T8181] usbhid 3-1:0.0: can't add hid device: -71 [ 549.363161][ T8181] usbhid: probe of 3-1:0.0 failed with error -71 [ 549.365847][ T1360] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0056/input/input42 [ 549.369952][ T24] audit: type=1326 audit(1729421123.343:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.0.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 549.404362][ T8181] usb 3-1: USB disconnect, device number 80 [ 549.417983][ T24] audit: type=1326 audit(1729421123.343:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.0.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 549.446092][ T24] audit: type=1326 audit(1729421123.343:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.0.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 549.499265][ T24] audit: type=1326 audit(1729421123.343:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.0.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 549.523652][ T24] audit: type=1326 audit(1729421123.343:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.0.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 549.578178][ T24] audit: type=1326 audit(1729421123.343:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.0.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 549.616754][ T24] audit: type=1326 audit(1729421123.343:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.0.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 549.642417][ T24] audit: type=1326 audit(1729421123.343:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.0.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3820726ff9 code=0x7ffc0000 [ 549.769558][T10196] udc-core: couldn't find an available UDC or it's busy [ 549.786360][T10196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 549.925065][T10224] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2304'. [ 550.280405][ T1360] microsoft 0003:045E:07DA.0056: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 550.294205][ T1360] usb 5-1: USB disconnect, device number 84 [ 550.422054][T10239] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.429077][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.436587][T10239] device bridge_slave_0 entered promiscuous mode [ 550.444039][T10239] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.451258][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.459089][T10239] device bridge_slave_1 entered promiscuous mode [ 550.517485][T10239] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.524396][T10239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.531657][T10239] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.538442][T10239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.592935][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.601356][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.611653][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.621698][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 550.635565][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 550.653066][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 550.662011][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 550.670415][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 550.678731][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 550.681415][ T8181] Bluetooth: hci0: command 0x1001 tx timeout [ 550.691672][T10239] device veth0_vlan entered promiscuous mode [ 550.692078][ T40] Bluetooth: hci0: sending frame failed (-49) [ 550.709647][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 550.719641][T10239] device veth1_macvtap entered promiscuous mode [ 550.728669][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 550.752160][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.375403][T10250] syz.0.2309[10250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.375463][T10250] syz.0.2309[10250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.562005][ T409] device bridge_slave_1 left promiscuous mode [ 551.579610][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.587426][ T409] device bridge_slave_0 left promiscuous mode [ 551.594124][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.602464][ T409] device veth1_macvtap left promiscuous mode [ 551.608401][ T409] device veth0_vlan left promiscuous mode [ 551.647284][ T1197] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 551.885404][ T1197] usb 3-1: Using ep0 maxpacket: 16 [ 551.932829][ T8201] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 551.999481][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.010396][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.020282][ T1197] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 552.029388][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.037934][ T1197] usb 3-1: config 0 descriptor?? [ 552.275752][ T8201] usb 1-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 552.285777][ T8201] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.361778][ T8201] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 552.370709][ T8201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 552.378480][ T8201] usb 1-1: SerialNumber: syz [ 552.638377][ T8201] usb 1-1: 0:2 : does not exist [ 552.643117][ T8201] usb 1-1: unit 5 not found! [ 552.650754][ T8201] usb 1-1: USB disconnect, device number 90 [ 552.664424][ T406] udevd[406]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 552.680828][ T8200] Bluetooth: hci0: command 0x1009 tx timeout [ 552.980915][ T1197] usbhid 3-1:0.0: can't add hid device: -71 [ 552.986675][ T1197] usbhid: probe of 3-1:0.0 failed with error -71 [ 552.993683][ T1197] usb 3-1: USB disconnect, device number 81 [ 553.536031][ T409] tipc: Left network mode [ 553.545830][T10286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2321'. [ 553.584682][T10287] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.591606][T10287] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.598613][T10287] device bridge_slave_0 entered promiscuous mode [ 553.607701][T10287] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.614563][T10287] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.621877][T10287] device bridge_slave_1 entered promiscuous mode [ 553.647332][ T1197] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 553.692528][T10287] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.699376][T10287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.706483][T10287] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.713250][T10287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.729648][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.737353][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.744965][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.756293][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.764345][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.771216][ T913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.779744][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.788030][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.795096][ T913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.807944][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.816924][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.831193][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 553.842024][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 553.850483][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 553.857899][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 553.866654][ T409] bridge0: port 3(erspan0) entered disabled state [ 553.873687][ T409] device erspan0 left promiscuous mode [ 553.879245][ T409] bridge0: port 3(erspan0) entered disabled state [ 553.887146][T10287] device veth0_vlan entered promiscuous mode [ 553.897458][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 553.908893][T10287] device veth1_macvtap entered promiscuous mode [ 553.923381][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 553.936674][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 553.944726][ T1197] usb 3-1: device descriptor read/64, error -71 [ 554.048519][ T409] device bridge_slave_1 left promiscuous mode [ 554.054438][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.061872][ T409] device bridge_slave_0 left promiscuous mode [ 554.067919][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.075480][ T409] device veth1_macvtap left promiscuous mode [ 554.081387][ T409] device veth0_vlan left promiscuous mode [ 554.457087][T10301] fuse: Unknown parameter 'uid>00000000000000000000' [ 555.019185][ T1197] usb 3-1: device descriptor read/64, error -71 [ 555.285822][ T1197] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 555.358800][T10319] syz.0.2327[10319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.358843][T10319] syz.0.2327[10319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.372541][ T24] kauditd_printk_skb: 61 callbacks suppressed [ 555.372552][ T24] audit: type=1326 audit(1729421129.736:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05041b6ff9 code=0x7ffc0000 [ 555.414298][ T24] audit: type=1326 audit(1729421129.736:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05041b6ff9 code=0x7ffc0000 [ 555.440071][ T24] audit: type=1326 audit(1729421129.736:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f05041b6ff9 code=0x7ffc0000 [ 555.463610][ T8200] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 555.471556][ T24] audit: type=1326 audit(1729421129.736:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05041b6ff9 code=0x7ffc0000 [ 555.495870][ T24] audit: type=1326 audit(1729421129.736:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05041b6ff9 code=0x7ffc0000 [ 555.519792][ T24] audit: type=1326 audit(1729421129.883:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05041b6ff9 code=0x7ffc0000 [ 555.543430][ T24] audit: type=1326 audit(1729421129.883:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05041b6ff9 code=0x7ffc0000 [ 555.572923][ T24] audit: type=1326 audit(1729421129.883:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05041b6ff9 code=0x7ffc0000 [ 555.596775][ T1197] usb 3-1: device descriptor read/64, error -71 [ 555.609043][ T24] audit: type=1326 audit(1729421129.883:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05041b6ff9 code=0x7ffc0000 [ 555.641789][ T24] audit: type=1326 audit(1729421129.883:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05041b6ff9 code=0x7ffc0000 [ 555.762370][ T8200] usb 5-1: Using ep0 maxpacket: 16 [ 556.191206][ T8200] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 556.200064][ T8200] usb 5-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 556.229231][ T8200] usb 5-1: Product: syz [ 556.233230][ T8200] usb 5-1: Manufacturer: syz [ 556.237643][ T8200] usb 5-1: SerialNumber: syz [ 556.249565][ T8200] usb 5-1: config 0 descriptor?? [ 556.286971][ T8200] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 556.294735][ T8200] usb 5-1: Detected FT-X [ 556.305173][ T1197] usb usb3-port1: attempt power cycle [ 556.343213][ T424] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 556.486548][ T8200] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 556.604391][T10344] syz.3.2335[10344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.604457][T10344] syz.3.2335[10344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.616115][ T424] usb 1-1: too many configurations: 115, using maximum allowed: 8 [ 556.716432][ T1197] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 556.741714][T10346] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.772212][ T424] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 556.779873][T10346] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.789148][ T424] usb 1-1: can't read configurations, error -61 [ 556.820304][T10346] device bridge_slave_0 entered promiscuous mode [ 556.862940][T10346] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.886605][T10346] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.893958][T10346] device bridge_slave_1 entered promiscuous mode [ 556.934205][ T1197] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.943603][ T8200] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 556.953499][ T8200] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 556.961367][ T1197] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.981877][ T424] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 556.991948][ T8200] usb 5-1: USB disconnect, device number 85 [ 556.998471][ T8200] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 557.020042][ T1197] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 557.038687][ T8200] ftdi_sio 5-1:0.0: device disconnected [ 557.057960][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.128766][T10346] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.135635][T10346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.142721][T10346] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.149710][T10346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.238956][ T5587] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 557.267654][ T424] usb 1-1: too many configurations: 115, using maximum allowed: 8 [ 557.283010][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 557.305558][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.343305][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.384332][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 557.401608][ T424] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 557.409065][ T424] usb 1-1: can't read configurations, error -61 [ 557.420085][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.427307][ T913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.434641][ T424] usb usb1-port1: attempt power cycle [ 557.471567][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 557.508989][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.516153][ T913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.554790][ T1197] logitech-hidpp-device 0003:046D:C086.0057: item fetching failed at offset 2/5 [ 557.581904][ T5587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.598745][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.606872][ T1197] logitech-hidpp-device 0003:046D:C086.0057: hidpp_probe:parse failed [ 557.615950][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.626863][ T5587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.656918][ T1197] logitech-hidpp-device: probe of 0003:046D:C086.0057 failed with error -22 [ 557.687091][ T5587] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 557.695940][ T5587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.743392][ T5587] usb 4-1: config 0 descriptor?? [ 557.794687][T10346] device veth0_vlan entered promiscuous mode [ 557.811321][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.821306][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.850537][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 558.011291][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 558.067834][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 558.082644][ T424] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 558.090616][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.090796][ T8201] usb 3-1: USB disconnect, device number 84 [ 558.112462][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.144206][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 558.163871][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 558.173506][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 558.204909][T10346] device veth1_macvtap entered promiscuous mode [ 558.220294][ T424] usb 1-1: too many configurations: 115, using maximum allowed: 8 [ 558.232011][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 558.250231][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 558.269198][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 558.297620][ T5587] dragonrise 0003:0079:0006.0058: item fetching failed at offset 1/5 [ 558.315373][ T5587] dragonrise 0003:0079:0006.0058: parse failed [ 558.331222][ T5587] dragonrise: probe of 0003:0079:0006.0058 failed with error -22 [ 558.358860][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 558.367014][ T424] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 558.386303][ T424] usb 1-1: can't read configurations, error -61 [ 558.393141][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 558.423194][ T409] device bridge_slave_1 left promiscuous mode [ 558.429171][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.457425][ T409] device bridge_slave_0 left promiscuous mode [ 558.487077][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.494301][ T8203] usb 4-1: USB disconnect, device number 93 [ 558.501403][ T409] device veth1_macvtap left promiscuous mode [ 558.517617][ T409] device veth0_vlan left promiscuous mode [ 558.572683][ T424] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 558.715280][ T424] usb 1-1: too many configurations: 115, using maximum allowed: 8 [ 558.790874][T10363] xt_CT: No such helper "syz1" [ 558.796413][T10363] syz.2.2338[10363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.796476][T10363] syz.2.2338[10363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.953161][ T424] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 559.011254][ T424] usb 1-1: can't read configurations, error -71 [ 559.116842][ T424] usb usb1-port1: unable to enumerate USB device [ 560.414069][ T8202] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 560.453417][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2354'. [ 560.462541][T10427] device bridge_slave_1 left promiscuous mode [ 560.462618][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.468754][ T5587] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 560.468942][T10427] device bridge_slave_0 left promiscuous mode [ 560.489368][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.534968][ T5] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 560.554057][ T24] kauditd_printk_skb: 72 callbacks suppressed [ 560.554068][ T24] audit: type=1326 audit(1729421391.171:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f209bbe0bfb code=0x7ffc0000 [ 560.583712][ T24] audit: type=1326 audit(1729421391.202:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f209bbe0bfb code=0x7ffc0000 [ 560.677550][ T8202] usb 3-1: device descriptor read/64, error -71 [ 560.705854][ T5587] usb 1-1: Using ep0 maxpacket: 16 [ 560.763522][ T424] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 560.770924][ T472] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 560.782242][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 560.801330][ T24] audit: type=1326 audit(1729421391.433:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f209bbe0bfb code=0x7ffc0000 [ 560.824688][ T24] audit: type=1326 audit(1729421391.454:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f209bbe0bfb code=0x7ffc0000 [ 560.849214][ T5587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.849239][ T24] audit: type=1326 audit(1729421391.485:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f209bbe0bfb code=0x7ffc0000 [ 560.860207][ T5587] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 560.884016][ T24] audit: type=1326 audit(1729421391.517:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f209bbe0bfb code=0x7ffc0000 [ 560.897519][ T5587] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 560.920214][ T24] audit: type=1326 audit(1729421391.559:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f209bbe0bfb code=0x7ffc0000 [ 560.928872][ T5587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.960147][ T24] audit: type=1326 audit(1729421391.590:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f209bbe0bfb code=0x7ffc0000 [ 560.964076][ T5587] usb 1-1: config 0 descriptor?? [ 560.992145][ T24] audit: type=1326 audit(1729421391.632:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f209bbe0bfb code=0x7ffc0000 [ 561.020731][ T24] audit: type=1326 audit(1729421391.664:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f209bbe0bfb code=0x7ffc0000 [ 561.049382][ T424] usb 2-1: Using ep0 maxpacket: 8 [ 561.054540][ T472] usb 4-1: Using ep0 maxpacket: 16 [ 561.124952][ T8202] usb 3-1: device descriptor read/64, error -71 [ 561.154102][ T5] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 561.162962][ T5] usb 5-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 561.171089][ T5] usb 5-1: Product: syz [ 561.175098][ T5] usb 5-1: Manufacturer: syz [ 561.179476][ T5] usb 5-1: SerialNumber: syz [ 561.184872][ T5] usb 5-1: config 0 descriptor?? [ 561.201726][ T472] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.211805][ T472] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.221643][ T5] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 561.229177][ T5] usb 5-1: Detected FT-X [ 561.249326][ T424] usb 2-1: unable to get BOS descriptor or descriptor too short [ 561.325380][ T5587] usbhid 1-1:0.0: can't add hid device: -71 [ 561.331233][ T5587] usbhid: probe of 1-1:0.0 failed with error -71 [ 561.337309][ T424] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 561.345870][ T472] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=ff.40 [ 561.357842][ T5587] usb 1-1: USB disconnect, device number 95 [ 561.363772][ T424] usb 2-1: config 1 has an invalid descriptor of length 204, skipping remainder of the config [ 561.373954][ T472] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 561.381744][ T472] usb 4-1: Product: syz [ 561.382261][ T8202] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 561.387208][ T424] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 561.401958][ T472] usb 4-1: SerialNumber: syz [ 561.406510][ T424] usb 2-1: config 1 has no interface number 1 [ 561.413326][ T424] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 561.426003][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 561.432721][ T424] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 97, changing to 7 [ 561.443556][ T424] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 561.468066][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 561.497069][ T5] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 561.503853][ T5] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 561.512422][ T5] usb 5-1: USB disconnect, device number 86 [ 561.518892][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 561.528436][ T5] ftdi_sio 5-1:0.0: device disconnected [ 561.620731][ T424] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 561.629585][ T424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.637464][ T424] usb 2-1: Product: syz [ 561.641379][ T424] usb 2-1: Manufacturer: syz [ 561.645796][ T424] usb 2-1: SerialNumber: syz [ 561.649119][ T8202] usb 3-1: device descriptor read/64, error -71 [ 561.678143][ T472] usb 4-1: 0:2 : does not exist [ 561.717045][ T472] usb 4-1: USB disconnect, device number 94 [ 561.963354][ T424] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 561.971061][ T424] usb 2-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 561.981429][ T424] usb 2-1: found format II with max.bitrate = 0, frame size=39301 [ 561.989415][ T424] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 561.997256][ T424] usb 2-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 562.007305][ T424] usb 2-1: found format II with max.bitrate = 0, frame size=39301 [ 562.031085][ T8200] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 562.038679][ T8202] usb 3-1: device descriptor read/64, error -71 [ 562.071835][ T424] usb 2-1: USB disconnect, device number 84 [ 562.092970][ T406] udevd[406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 562.154105][ T8202] usb usb3-port1: attempt power cycle [ 562.439503][ T472] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 562.458640][ T8200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.468238][ T8200] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 562.477012][ T8200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.485713][ T8200] usb 1-1: config 0 descriptor?? [ 562.611261][ T8202] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 562.630054][ T8203] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 562.668092][ T472] usb 4-1: Using ep0 maxpacket: 32 [ 562.772992][ T8202] usb 3-1: device descriptor read/8, error -71 [ 562.782721][ T472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.793802][ T472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.804003][ T472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 562.815775][ T472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 562.825713][ T472] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 562.839250][ T472] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 562.848876][ T472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.860983][ T472] usb 4-1: config 0 descriptor?? [ 562.867799][T10447] overlayfs: unrecognized mount option "./file0" or missing value [ 562.913686][ T8203] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 562.937222][ T8200] lenovo 0003:17EF:6047.0059: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 563.039937][ T8202] usb 3-1: device descriptor read/8, error -71 [ 563.344586][ T8200] lenovo 0003:17EF:6047.0059: Failed to switch middle button: -71 [ 563.368796][ T8200] lenovo 0003:17EF:6047.0059: Fn-lock setting failed: -71 [ 563.392386][ T8200] lenovo 0003:17EF:6047.0059: Sensitivity setting failed: -71 [ 563.400637][ T8200] usb 1-1: USB disconnect, device number 96 [ 563.430189][ T472] usbhid 4-1:0.0: can't add hid device: -71 [ 563.436012][ T472] usbhid: probe of 4-1:0.0 failed with error -71 [ 563.445308][ T472] usb 4-1: USB disconnect, device number 95 [ 563.582698][ T8203] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 563.591596][ T8203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.977049][T10475] syz.0.2369[10475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.977096][T10475] syz.0.2369[10475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 564.049451][ T8203] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 564.067599][ T8203] uvcvideo: No valid video chain found. [ 564.321799][ T8203] usb 2-1: USB disconnect, device number 85 [ 565.032206][T10500] udc-core: couldn't find an available UDC or it's busy [ 565.039072][T10500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 565.440553][ T8203] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 565.545279][ T8205] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 565.552826][ T8204] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 565.669088][ T8203] usb 4-1: Using ep0 maxpacket: 16 [ 565.716718][ T8202] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 565.812224][ T8205] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 565.888100][ T8203] usb 4-1: config 9 has an invalid interface number: 242 but max is 1 [ 565.896146][ T8203] usb 4-1: config 9 has an invalid interface number: 6 but max is 1 [ 565.904031][ T8203] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 565.912665][ T8203] usb 4-1: config 9 has no interface number 0 [ 565.918596][ T8203] usb 4-1: config 9 has no interface number 1 [ 565.924442][ T8203] usb 4-1: config 9 interface 6 altsetting 7 endpoint 0x5 has invalid maxpacket 49733, setting to 1024 [ 565.935741][ T8204] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 565.945464][ T8202] usb 1-1: Using ep0 maxpacket: 32 [ 565.950329][ T8203] usb 4-1: config 9 interface 6 altsetting 7 has an invalid endpoint with address 0x5C, skipping [ 565.960746][ T8204] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 565.970343][ T8203] usb 4-1: config 9 interface 6 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 565.980950][ T8203] usb 4-1: config 9 interface 6 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 565.991775][ T8203] usb 4-1: config 9 interface 6 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 566.002436][ T8203] usb 4-1: config 9 interface 6 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 566.012801][ T8203] usb 4-1: config 9 interface 6 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 566.023323][ T8203] usb 4-1: config 9 interface 6 altsetting 7 has an invalid endpoint with address 0x60, skipping [ 566.033656][ T8203] usb 4-1: config 9 interface 242 has no altsetting 0 [ 566.040316][ T8203] usb 4-1: config 9 interface 6 has no altsetting 0 [ 566.059788][ T8202] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.070609][ T8202] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.080289][ T8202] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 566.089225][ T8202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.136255][ T8202] hub 1-1:4.0: USB hub found [ 566.145222][ T8204] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 566.154191][ T8204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.162240][ T8204] usb 3-1: Product: syz [ 566.166319][ T8204] usb 3-1: Manufacturer: syz [ 566.170823][ T8204] usb 3-1: SerialNumber: syz [ 566.175970][ T8204] usb 3-1: config 0 descriptor?? [ 566.193147][T10496] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 566.199924][T10496] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 566.206876][ T8203] usb 4-1: New USB device found, idVendor=07d1, idProduct=3c0d, bcdDevice= f.cb [ 566.216008][ T8203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.223839][ T8203] usb 4-1: Product: Ⰹ [ 566.227950][ T8203] usb 4-1: Manufacturer: Ќ [ 566.232329][ T8203] usb 4-1: SerialNumber: င [ 566.335682][ T8202] hub 1-1:4.0: 2 ports detected [ 566.406776][T10496] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 566.413600][T10496] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 566.498072][ T8205] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 566.506990][ T8205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.535782][ T8202] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 566.542019][ T8202] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 566.573852][ T8202] usb 1-1: USB disconnect, device number 97 [ 566.594063][ T8203] usb 4-1: USB disconnect, device number 96 [ 566.659867][ T8201] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 566.742237][T10523] udc-core: couldn't find an available UDC or it's busy [ 566.749183][T10523] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 566.873108][ T8204] Error reading MAC address [ 567.012927][T10530] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.088223][ T8201] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.099627][ T8201] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 567.202652][ T8205] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 567.209637][ T8205] uvcvideo: No valid video chain found. [ 567.288076][ T8201] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 567.296987][ T8201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.304776][ T8201] usb 2-1: Product: syz [ 567.308754][ T8201] usb 2-1: Manufacturer: syz [ 567.313149][ T8201] usb 2-1: SerialNumber: syz [ 567.400319][ T8205] usb 5-1: USB disconnect, device number 87 [ 568.291880][ T8205] usb 3-1: USB disconnect, device number 89 [ 568.593332][ T8201] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 568.606021][ T8201] cdc_ncm 2-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 568.628860][T10568] xt_hashlimit: size too large, truncated to 1048576 [ 568.631558][ T8201] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 568.823241][ T8201] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 569.318405][ T8201] usb 2-1: USB disconnect, device number 86 [ 569.324554][ T8201] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 569.634797][T10614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=10614 comm=syz.2.2400 [ 569.648168][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 570.433595][T10621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2403'. [ 570.519608][ T24] kauditd_printk_skb: 83 callbacks suppressed [ 570.519622][ T24] audit: type=1326 audit(1729421401.627:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92b2163ff9 code=0x7ffc0000 [ 570.593848][ T8200] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 570.596586][ T24] audit: type=1326 audit(1729421401.669:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92b2163ff9 code=0x7ffc0000 [ 570.624970][ T24] audit: type=1326 audit(1729421401.669:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92b2163ff9 code=0x7ffc0000 [ 570.649308][ T24] audit: type=1326 audit(1729421401.669:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92b2163ff9 code=0x7ffc0000 [ 570.673095][ T24] audit: type=1326 audit(1729421401.669:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92b2163ff9 code=0x7ffc0000 [ 570.716591][ T24] audit: type=1326 audit(1729421401.669:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92b2163ff9 code=0x7ffc0000 [ 570.759121][ T24] audit: type=1326 audit(1729421401.669:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92b2163ff9 code=0x7ffc0000 [ 570.783251][ T24] audit: type=1326 audit(1729421401.669:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92b2163ff9 code=0x7ffc0000 [ 570.810261][ T24] audit: type=1326 audit(1729421401.669:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92b2163ff9 code=0x7ffc0000 [ 570.834560][ T24] audit: type=1326 audit(1729421401.669:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92b2163ff9 code=0x7ffc0000 [ 570.917644][ T8200] usb 5-1: Using ep0 maxpacket: 8 [ 571.041405][ T424] Bluetooth: hci0: command 0x1003 tx timeout [ 571.047336][ T40] Bluetooth: hci0: sending frame failed (-49) [ 571.077724][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2408'. [ 571.098321][ T8200] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 571.107281][ T8200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.119322][ T8200] usb 5-1: config 0 descriptor?? [ 571.365240][ T8200] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 571.565063][ T8200] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 571.575068][ T8200] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 571.726515][ T8200] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 571.761883][T10685] overlayfs: failed to resolve './file0': -2 [ 572.340580][T10692] udc-core: couldn't find an available UDC or it's busy [ 572.347445][T10692] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 572.593795][ T424] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 572.660534][ T8200] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 572.670556][ T8200] asix: probe of 5-1:0.0 failed with error -71 [ 572.677931][ T8200] usb 5-1: USB disconnect, device number 88 [ 572.850968][ T424] usb 2-1: device descriptor read/64, error -71 [ 573.022472][ T1361] Bluetooth: hci0: command 0x1001 tx timeout [ 573.028325][ T40] Bluetooth: hci0: sending frame failed (-49) [ 573.222476][ T424] usb 2-1: device descriptor read/64, error -71 [ 573.376406][T10702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10702 comm=syz.2.2420 [ 573.388943][T10702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=10702 comm=syz.2.2420 [ 573.403553][ T1361] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 573.480271][ T424] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 573.736903][ T424] usb 2-1: device descriptor read/64, error -71 [ 573.746545][ T1361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.757629][ T1361] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 573.770621][ T1361] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 573.779657][ T1361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.800783][ T1361] usb 5-1: config 0 descriptor?? [ 573.899878][T10720] device pim6reg1 entered promiscuous mode [ 573.929212][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2425'. [ 574.108403][ T424] usb 2-1: device descriptor read/64, error -71 [ 574.185993][T10728] tipc: Started in network mode [ 574.190887][T10728] tipc: Own node identity b0cc, cluster identity 4096 [ 574.197425][T10728] tipc: 32-bit node address hash set to b0cc [ 574.357834][ T1361] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0 [ 574.365504][ T1361] plantronics 0003:047F:FFFF.005A: No inputs registered, leaving [ 574.373326][ T424] usb usb2-port1: attempt power cycle [ 574.382783][ T1361] plantronics 0003:047F:FFFF.005A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 574.576480][T10700] udc-core: couldn't find an available UDC or it's busy [ 574.583299][T10700] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 574.765682][ T424] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 574.794648][ T8205] usb 5-1: USB disconnect, device number 89 [ 574.952083][T10735] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.959563][T10735] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.967155][T10735] device bridge_slave_0 entered promiscuous mode [ 574.974297][T10735] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.981486][T10735] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.988794][ T424] usb 2-1: device descriptor read/8, error -71 [ 574.988963][T10735] device bridge_slave_1 entered promiscuous mode [ 575.003829][ T5] Bluetooth: hci0: command 0x1009 tx timeout [ 575.028390][T10735] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.035557][T10735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.042677][T10735] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.049438][T10735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.385032][ T424] usb 2-1: device descriptor read/8, error -71 [ 575.452583][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 575.460752][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.468576][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.494418][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 575.502637][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.509512][ T913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.517648][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 575.526153][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.533054][ T913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.545708][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 575.562400][T10735] device veth0_vlan entered promiscuous mode [ 575.570955][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 575.580795][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 576.125688][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 576.140410][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 576.148272][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 576.170415][ T24] kauditd_printk_skb: 66 callbacks suppressed [ 576.170428][ T24] audit: type=1326 audit(1729421407.558:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.2.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 576.171077][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 576.178507][ T24] audit: type=1326 audit(1729421407.568:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.2.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 576.204678][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 576.323405][ T24] audit: type=1326 audit(1729421407.568:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.2.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 576.347388][ T24] audit: type=1326 audit(1729421407.568:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.2.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 576.347636][T10735] device veth1_macvtap entered promiscuous mode [ 576.378571][ T24] audit: type=1326 audit(1729421407.673:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.2.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 576.402463][ T24] audit: type=1326 audit(1729421407.673:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.2.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 576.430930][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 576.439010][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 576.447453][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 576.471305][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 576.487217][ T24] audit: type=1326 audit(1729421407.894:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.2.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 576.503200][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 576.519867][ T24] audit: type=1326 audit(1729421407.936:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.2.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 576.571718][ T24] audit: type=1326 audit(1729421407.936:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.2.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 576.601131][ T24] audit: type=1326 audit(1729421407.936:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.2.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42110c5ff9 code=0x7ffc0000 [ 576.624784][ T8205] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 576.718458][ T424] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 576.786131][ T9] device bridge_slave_1 left promiscuous mode [ 576.793375][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.809540][ T9] device bridge_slave_0 left promiscuous mode [ 576.821950][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.840640][ T9] device veth1_macvtap left promiscuous mode [ 576.854049][ T9] device veth0_vlan left promiscuous mode [ 576.861595][ T8205] usb 5-1: Using ep0 maxpacket: 8 [ 576.928023][ T424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.952391][ T424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.982701][ T424] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.004719][ T8205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.012926][ T424] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 577.026686][ T8205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.030423][ T424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.045745][ T424] usb 2-1: config 0 descriptor?? [ 577.061421][ T8205] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 577.080482][ T8205] usb 5-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 577.109046][ T8205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.131412][ T8205] usb 5-1: config 0 descriptor?? [ 577.272692][T10756] syz.1.2435[10756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 577.272758][T10756] syz.1.2435[10756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 577.591263][T10771] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2437'. [ 578.123046][ T8205] ntrig 0003:1B96:0010.005B: unknown main item tag 0x0 [ 578.143255][ T8205] ntrig 0003:1B96:0010.005B: unknown main item tag 0x0 [ 578.284242][ T8205] ntrig 0003:1B96:0010.005B: unknown main item tag 0x0 [ 578.296336][ T8205] ntrig 0003:1B96:0010.005B: unknown main item tag 0x0 [ 578.304372][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 578.313256][ T8205] ntrig 0003:1B96:0010.005B: unknown main item tag 0x0 [ 578.321768][ T8205] ntrig 0003:1B96:0010.005B: unknown main item tag 0x0 [ 578.328769][ T8205] ntrig 0003:1B96:0010.005B: unknown main item tag 0x0 [ 578.341760][ T8205] ntrig 0003:1B96:0010.005B: hidraw0: USB HID v0.00 Device [HID 1b96:0010] on usb-dummy_hcd.4-1/input0 [ 578.404420][ T1361] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 578.439186][ T8205] ntrig 0003:1B96:0010.005B: Firmware version: 1.10.3.62.2 (e8d3 c277) [ 578.487895][T10778] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.494911][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.507693][T10778] device bridge_slave_0 entered promiscuous mode [ 578.522518][T10778] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.529853][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.537322][T10778] device bridge_slave_1 entered promiscuous mode [ 578.595096][T10778] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.601968][T10778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.609138][T10778] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.616001][T10778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.628982][ T8201] usb 5-1: USB disconnect, device number 90 [ 578.662545][ T1361] usb 3-1: Using ep0 maxpacket: 16 [ 578.668891][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.682061][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.689718][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 578.699320][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 578.717459][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.725944][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.732805][ T913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.742349][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 578.752834][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.759721][ T913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.789750][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 578.808021][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 578.816607][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 578.830700][T10778] device veth0_vlan entered promiscuous mode [ 578.837292][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 578.846030][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 578.853965][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 578.870341][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 578.883950][T10778] device veth1_macvtap entered promiscuous mode [ 578.895812][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 578.908805][ T913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 579.266314][ T1361] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 579.306939][ T1361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.315108][ T1361] usb 3-1: Product: syz [ 579.319518][ T1361] usb 3-1: Manufacturer: syz [ 579.324088][ T1361] usb 3-1: SerialNumber: syz [ 579.341259][ T1361] usb 3-1: config 0 descriptor?? [ 579.357139][ T424] usbhid 2-1:0.0: can't add hid device: -71 [ 579.363224][ T424] usbhid: probe of 2-1:0.0 failed with error -71 [ 579.371956][ T424] usb 2-1: USB disconnect, device number 90 [ 579.655834][ T1361] r8152 3-1:0.0: Unknown version 0x0000 [ 579.920750][ T424] usb 3-1: USB disconnect, device number 90 [ 580.405427][ T9] device veth1_macvtap left promiscuous mode [ 580.411259][ T9] device veth0_vlan left promiscuous mode [ 580.816059][T10838] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 581.151650][T10853] incfs: Can't find or create .index dir in ./file0 [ 581.158589][T10853] incfs: mount failed -14 [ 581.186181][ T8201] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 581.429669][T10862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2461'. [ 581.500397][ T8200] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 581.595707][ T8201] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.748142][ T8200] usb 5-1: Using ep0 maxpacket: 16 [ 581.776706][ T8201] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 581.796062][ T8201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.803861][ T8201] usb 4-1: Product: syz [ 581.808279][ T8201] usb 4-1: Manufacturer: syz [ 581.812774][ T8201] usb 4-1: SerialNumber: syz [ 581.831610][ T8201] usb 4-1: config 0 descriptor?? [ 581.872051][ T8200] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 581.986082][ T8205] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 582.043314][ T8200] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 582.052510][ T8200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.060601][ T8200] usb 5-1: Product: syz [ 582.064813][ T8200] usb 5-1: Manufacturer: syz [ 582.069276][ T8200] usb 5-1: SerialNumber: syz [ 582.091266][ T8201] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 582.098857][ T8200] usb 5-1: config 0 descriptor?? [ 582.107294][ T8201] usb 4-1: USB disconnect, device number 97 [ 582.158454][ T8200] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 582.177677][ T8200] usb 5-1: Detected FT232RL [ 582.350561][ T8205] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.389134][ T8200] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 582.396502][ T8205] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.407203][ T8205] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.417881][ T8205] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 42037, setting to 1024 [ 582.428825][ T8205] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.701195][ T8200] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5 [ 582.731114][ T8200] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 582.757939][ T8205] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.767638][ T8205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.778238][ T8205] usb 3-1: Product: syz [ 582.782892][ T8205] usb 3-1: Manufacturer: syz [ 582.789138][ T8205] usb 3-1: SerialNumber: syz [ 582.956776][ T424] usb 5-1: USB disconnect, device number 91 [ 582.972508][ T424] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 582.989015][ T424] ftdi_sio 5-1:0.0: device disconnected [ 583.024827][T10876] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 583.065496][T10904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2472'. [ 583.338745][ T8200] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 583.729362][ T8200] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 583.740091][ T8200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.750805][ T8200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.760562][ T8200] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 583.773475][ T8200] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 583.782371][ T8200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.807337][ T8200] usb 4-1: config 0 descriptor?? [ 584.015152][ T8205] cdc_ncm 3-1:1.0: bind() failure [ 584.034178][ T8205] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 584.053249][ T8205] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 584.062752][ T8205] usb 3-1: USB disconnect, device number 91 [ 584.457589][ T8200] hid-picolcd 0003:04D8:C002.005C: unbalanced collection at end of report description [ 584.576773][ T8200] hid-picolcd 0003:04D8:C002.005C: device report parse failed [ 584.598596][ T8200] hid-picolcd: probe of 0003:04D8:C002.005C failed with error -22 [ 584.642852][ T24] kauditd_printk_skb: 23 callbacks suppressed [ 584.642866][ T24] audit: type=1400 audit(1729421416.450:6171): avc: denied { shutdown } for pid=10939 comm="syz.4.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 584.671989][ T8201] usb 4-1: USB disconnect, device number 98 [ 584.808759][ T24] audit: type=1326 audit(1729421416.628:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10944 comm="syz.1.2482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92b2163ff9 code=0x0 [ 584.946033][ T8200] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 585.064938][T10948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2483'. [ 585.177134][ T8200] usb 5-1: Using ep0 maxpacket: 8 [ 585.208640][T10951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2484'. [ 585.291525][ T8200] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 585.300514][ T8200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.308935][ T8200] usb 5-1: config 0 descriptor?? [ 585.490395][ T5] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 585.558316][ T8200] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 585.749909][T10940] udc-core: couldn't find an available UDC or it's busy [ 585.756801][T10940] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 585.777448][ T8200] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: 01 [ 585.986979][ T8200] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 586.015612][ T8200] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 586.025953][ T8200] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 586.094839][ T8200] asix: probe of 5-1:0.0 failed with error -71 [ 586.105691][ T8200] usb 5-1: USB disconnect, device number 92 [ 586.271569][T10967] irq bypass consumer (token ffff888115eec600) registration fails: -16 [ 586.310820][ T5] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 586.319200][ T5] usb 4-1: config 0 has no interface number 0 [ 586.325222][ T5] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.336226][ T5] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.425126][ T5] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 586.434084][ T5] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 586.442219][ T5] usb 4-1: Manufacturer: syz [ 586.447374][ T5] usb 4-1: config 0 descriptor?? [ 587.653985][ T5] usbhid 4-1:0.18: can't add hid device: -71 [ 587.660213][ T5] usbhid: probe of 4-1:0.18 failed with error -71 [ 587.667652][ T5] usb 4-1: USB disconnect, device number 99 [ 589.376151][T11021] syz.3.2504[11021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.376217][T11021] syz.3.2504[11021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.797215][ T1197] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 590.130835][ T8205] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 590.350088][ T1197] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 590.578354][ T8205] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.650926][ T8205] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.755746][ T8205] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 590.773954][ T8205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.791613][T11061] udc-core: couldn't find an available UDC or it's busy [ 590.798716][T11061] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 590.810308][ T8205] usb 3-1: config 0 descriptor?? [ 590.854904][ T8205] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 591.044960][ T472] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 591.815454][ T1197] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 591.825435][ T1197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.921384][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.932175][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.941901][ T472] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 591.950782][ T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.959479][ T472] usb 1-1: config 0 descriptor?? [ 592.506741][ T1197] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 592.535543][ T1197] uvcvideo: No valid video chain found. [ 592.755019][ T8204] usb 3-1: USB disconnect, device number 92 [ 592.788277][ T472] usbhid 1-1:0.0: can't add hid device: -71 [ 592.794343][ T472] usbhid: probe of 1-1:0.0 failed with error -71 [ 592.809143][ T472] usb 1-1: USB disconnect, device number 98 [ 592.815003][T11093] device syzkaller0 entered promiscuous mode [ 593.264425][ T472] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 593.918248][ T8204] usb 2-1: USB disconnect, device number 91 [ 593.931247][ T472] usb 1-1: unable to get BOS descriptor or descriptor too short [ 594.017080][ T472] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 594.024761][ T472] usb 1-1: can't read configurations, error -71 [ 594.104461][T11118] overlayfs: failed to resolve './file2': -2 [ 594.864346][ T1197] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 595.051876][ T24] audit: type=1326 audit(1729421427.378:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.4.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 595.075438][ T24] audit: type=1326 audit(1729421427.378:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.4.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 595.099224][ T24] audit: type=1326 audit(1729421427.378:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.4.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 595.122688][ T24] audit: type=1326 audit(1729421427.378:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.4.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 595.141581][ T1197] usb 3-1: Using ep0 maxpacket: 16 [ 595.146187][ T24] audit: type=1326 audit(1729421427.378:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.4.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 595.174571][ T24] audit: type=1326 audit(1729421427.378:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.4.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 595.198834][ T24] audit: type=1326 audit(1729421427.378:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.4.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 595.223255][ T24] audit: type=1326 audit(1729421427.378:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.4.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 595.246979][ T24] audit: type=1326 audit(1729421427.378:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.4.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 595.253773][T11147] syz.3.2536[11147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.272765][T11147] syz.3.2536[11147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.285560][ T24] audit: type=1326 audit(1729421427.378:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.4.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 595.320910][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.331985][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.344300][ T1197] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 595.365002][ T1197] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 595.374229][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.426790][ T1197] usb 3-1: config 0 descriptor?? [ 595.779820][ T1197] usbhid 3-1:0.0: can't add hid device: -71 [ 595.791537][ T1197] usbhid: probe of 3-1:0.0 failed with error -71 [ 595.811706][ T1197] usb 3-1: USB disconnect, device number 93 [ 595.828264][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2540'. [ 596.466022][T11189] netlink: 'syz.4.2545': attribute type 3 has an invalid length. [ 596.473878][T11189] netlink: 'syz.4.2545': attribute type 3 has an invalid length. [ 596.589274][ T8202] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 596.921551][ T472] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 596.995658][T11207] overlayfs: unrecognized mount option "verity=on" or missing value [ 597.079004][T11219] syz.0.2553[11219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 597.079046][T11219] syz.0.2553[11219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 597.160410][ T472] usb 2-1: Using ep0 maxpacket: 32 [ 597.189023][ T8202] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 597.205572][ T8202] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 597.423362][ T8202] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 597.435367][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.443496][ T8202] usb 3-1: Product: syz [ 597.447555][ T8202] usb 3-1: Manufacturer: syz [ 597.452079][ T8202] usb 3-1: SerialNumber: syz [ 597.457557][ T8202] usb 3-1: config 0 descriptor?? [ 597.475161][T11190] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 597.482224][T11190] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 597.494428][ T472] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 597.503298][ T472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.511454][ T472] usb 2-1: Product: syz [ 597.523735][ T472] usb 2-1: Manufacturer: syz [ 597.528782][ T472] usb 2-1: SerialNumber: syz [ 597.541968][ T472] usb 2-1: config 0 descriptor?? [ 597.685254][T11187] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 597.692045][T11187] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 598.141666][ T8202] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 598.295709][ T472] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 598.379723][ T8202] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 598.389617][ T8202] usb 3-1: USB disconnect, device number 94 [ 598.449053][T11260] usb usb8: usbfs: process 11260 (syz.4.2561) did not claim interface 0 before use [ 598.589601][ T8209] usb 2-1: USB disconnect, device number 92 [ 599.857539][T11306] udc-core: couldn't find an available UDC or it's busy [ 599.864455][T11306] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 600.113320][ T8209] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 600.128962][T11315] input: syz1 as /devices/virtual/input/input44 [ 600.178601][T11320] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 600.380452][ T8209] usb 3-1: device descriptor read/64, error -71 [ 600.437613][ T472] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 600.761097][ T8209] usb 3-1: device descriptor read/64, error -71 [ 600.837497][ T5] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 601.027859][ T8209] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 601.075476][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 601.113582][ T472] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 601.121484][ T472] usb 5-1: config 0 has no interface number 0 [ 601.123018][ T8202] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 601.127530][ T472] usb 5-1: config 0 interface 4 altsetting 112 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 601.145586][ T472] usb 5-1: config 0 interface 4 altsetting 112 endpoint 0x6 has an invalid bInterval 128, changing to 11 [ 601.156731][ T472] usb 5-1: config 0 interface 4 altsetting 112 has an invalid endpoint with address 0x40, skipping [ 601.167397][ T472] usb 5-1: config 0 interface 4 altsetting 112 has a duplicate endpoint with address 0x3, skipping [ 601.177957][ T472] usb 5-1: config 0 interface 4 has no altsetting 0 [ 601.199358][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.210309][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.220030][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.232744][ T5] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 601.241579][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.250225][ T5] usb 4-1: config 0 descriptor?? [ 601.284987][ T8209] usb 3-1: device descriptor read/64, error -71 [ 601.342270][ T472] usb 5-1: New USB device found, idVendor=05c6, idProduct=9084, bcdDevice=d2.d4 [ 601.351889][ T472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.360072][ T472] usb 5-1: Product: syz [ 601.364355][ T472] usb 5-1: Manufacturer: syz [ 601.368837][ T472] usb 5-1: SerialNumber: syz [ 601.375703][ T472] usb 5-1: config 0 descriptor?? [ 601.399604][ T8202] usb 1-1: Using ep0 maxpacket: 8 [ 601.513869][ T8202] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 601.522771][ T8202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.531396][ T8202] usb 1-1: config 0 descriptor?? [ 601.656546][ T8209] usb 3-1: device descriptor read/64, error -71 [ 601.658770][ T472] usb 5-1: USB disconnect, device number 93 [ 601.724812][ T5] koneplus 0003:1E7D:2E22.005D: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 601.771084][ T8209] usb usb3-port1: attempt power cycle [ 601.942371][ T5] koneplus 0003:1E7D:2E22.005D: couldn't init struct koneplus_device [ 601.950903][ T5] koneplus 0003:1E7D:2E22.005D: couldn't install mouse [ 601.958321][ T5] koneplus: probe of 0003:1E7D:2E22.005D failed with error -71 [ 601.966736][ T5] usb 4-1: USB disconnect, device number 100 [ 602.161409][ T8209] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 602.465477][T11342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2581'. [ 602.595366][T11342] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2581'. [ 602.679099][ T8201] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 602.876524][ T8209] usb 3-1: device descriptor read/8, error -71 [ 603.095580][ T8201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 603.127084][ T8209] usb 3-1: device descriptor read/8, error -71 [ 603.133442][ T8201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 603.295002][ T8201] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 603.303930][ T8201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.312089][ T8201] usb 2-1: Product: syz [ 603.316232][ T8201] usb 2-1: Manufacturer: syz [ 603.320643][ T8201] usb 2-1: SerialNumber: syz [ 603.325937][ T8201] usb 2-1: config 0 descriptor?? [ 603.342590][T11354] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 603.809289][ T8202] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 603.819186][ T8202] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 603.829334][ T8202] asix: probe of 1-1:0.0 failed with error -71 [ 603.837697][ T8202] usb 1-1: USB disconnect, device number 101 [ 604.449234][T11394] netlink: 'syz.3.2597': attribute type 3 has an invalid length. [ 604.457072][T11394] netlink: 'syz.3.2597': attribute type 3 has an invalid length. [ 604.733273][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 604.739252][ T40] Bluetooth: hci0: sending frame failed (-49) [ 604.788689][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'. [ 604.797556][T11397] device bridge_slave_1 left promiscuous mode [ 604.803627][T11397] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.811003][T11397] device bridge_slave_0 left promiscuous mode [ 604.817002][T11397] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.021407][ T8201] usb 2-1: USB disconnect, device number 93 [ 606.063714][T11426] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2606'. [ 606.243840][T11430] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 606.637952][T11435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2608'. [ 606.717414][ T1361] Bluetooth: hci0: command 0x1001 tx timeout [ 606.770242][ T40] Bluetooth: hci0: sending frame failed (-49) [ 606.883301][T11456] netlink: 'syz.1.2615': attribute type 3 has an invalid length. [ 606.891262][T11456] netlink: 'syz.1.2615': attribute type 3 has an invalid length. [ 606.923767][T11458] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2613'. [ 606.973854][ T1361] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 607.401081][ T1361] usb 4-1: Using ep0 maxpacket: 8 [ 607.514849][ T1361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.525632][ T1361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.535719][ T1361] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 607.544889][ T1361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.553764][ T1361] usb 4-1: config 0 descriptor?? [ 607.619346][T11464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2617'. [ 607.739699][ T8201] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 607.768877][T11475] udc-core: couldn't find an available UDC or it's busy [ 607.776525][T11475] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 607.784782][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2620'. [ 607.794264][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2620'. [ 607.833800][T11475] udc-core: couldn't find an available UDC or it's busy [ 607.841563][T11476] udc-core: couldn't find an available UDC or it's busy [ 607.848547][T11475] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 607.848651][T11476] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 607.981888][ T8201] usb 5-1: Using ep0 maxpacket: 8 [ 608.010124][ T5587] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 608.032098][ T1361] kone 0003:1E7D:2CED.005E: collection stack underflow [ 608.042468][ T1361] kone 0003:1E7D:2CED.005E: item 0 1 0 12 parsing failed [ 608.052035][ T1361] kone 0003:1E7D:2CED.005E: parse failed [ 608.058135][ T1361] kone: probe of 0003:1E7D:2CED.005E failed with error -22 [ 608.096285][ T8201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.106989][ T8201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.116640][ T8201] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 608.125550][ T8201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.144046][ T8201] usb 5-1: config 0 descriptor?? [ 608.219387][ T1361] usb 4-1: USB disconnect, device number 101 [ 608.353143][ T5587] usb 1-1: New USB device found, idVendor=12d1, idProduct=1420, bcdDevice= 0.00 [ 608.362962][ T5587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.390813][ T5587] usb 1-1: config 0 descriptor?? [ 608.431319][ T5587] hub 1-1:0.0: bad descriptor, ignoring hub [ 608.437337][ T5587] hub: probe of 1-1:0.0 failed with error -5 [ 608.443512][ T5587] usb-storage 1-1:0.0: USB Mass Storage device detected [ 608.611356][ T8201] playstation 0003:054C:0CE6.005F: unknown main item tag 0x0 [ 608.618664][ T8201] playstation 0003:054C:0CE6.005F: unknown main item tag 0x0 [ 608.625837][ T8201] playstation 0003:054C:0CE6.005F: unknown main item tag 0x0 [ 608.633232][ T8201] playstation 0003:054C:0CE6.005F: unknown main item tag 0x0 [ 608.640594][ T8201] playstation 0003:054C:0CE6.005F: unknown main item tag 0x0 [ 608.648063][ T8201] playstation 0003:054C:0CE6.005F: unknown main item tag 0x0 [ 608.655483][ T8201] playstation 0003:054C:0CE6.005F: unknown main item tag 0x0 [ 608.663316][ T8201] playstation 0003:054C:0CE6.005F: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.4-1/input0 [ 608.686395][ T1361] Bluetooth: hci0: command 0x1009 tx timeout [ 608.743816][ T5587] usb 1-1: USB disconnect, device number 102 [ 608.810504][ T8201] playstation 0003:054C:0CE6.005F: Invalid byte count transferred, expected 20 got 0 [ 608.819890][ T8201] playstation 0003:054C:0CE6.005F: Failed to retrieve DualSense pairing info: -22 [ 608.828974][ T8201] playstation 0003:054C:0CE6.005F: Failed to get MAC address from DualSense [ 608.837514][ T8201] playstation 0003:054C:0CE6.005F: Failed to create dualsense. [ 608.845356][ T8201] playstation: probe of 0003:054C:0CE6.005F failed with error -22 [ 609.005720][ T5587] usb 5-1: USB disconnect, device number 94 [ 609.029372][ T8203] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 609.338686][ T24] kauditd_printk_skb: 143 callbacks suppressed [ 609.338697][ T24] audit: type=1400 audit(1729421442.380:6326): avc: denied { getopt } for pid=11500 comm="syz.0.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 609.538978][ T8203] usb 4-1: not running at top speed; connect to a high speed hub [ 609.597647][T11508] netlink: 'syz.4.2628': attribute type 3 has an invalid length. [ 609.605285][T11508] netlink: 'syz.4.2628': attribute type 3 has an invalid length. [ 609.656941][ T8201] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 609.665800][ T8203] usb 4-1: config 7 has an invalid interface number: 206 but max is 3 [ 609.673833][ T8203] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 609.682361][ T8203] usb 4-1: config 7 has an invalid interface number: 65 but max is 3 [ 609.690446][ T8203] usb 4-1: config 7 has an invalid interface number: 46 but max is 3 [ 609.698434][ T8203] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 609.707040][ T8203] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 609.715631][ T8203] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 609.724118][ T8203] usb 4-1: config 7 has an invalid interface number: 128 but max is 3 [ 609.732121][ T8203] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 609.740620][ T8203] usb 4-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 609.750518][ T8203] usb 4-1: config 7 has no interface number 0 [ 609.756411][ T8203] usb 4-1: config 7 has no interface number 1 [ 609.762301][ T8203] usb 4-1: config 7 has no interface number 2 [ 609.768256][ T8203] usb 4-1: config 7 has no interface number 3 [ 609.774136][ T8203] usb 4-1: config 7 interface 206 altsetting 235 has an invalid endpoint with address 0x0, skipping [ 609.784888][ T8203] usb 4-1: config 7 interface 206 altsetting 235 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 609.795867][ T8203] usb 4-1: config 7 interface 206 altsetting 235 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 609.807106][ T8203] usb 4-1: config 7 interface 65 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 609.817519][ T8203] usb 4-1: config 7 interface 65 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 609.827919][ T8203] usb 4-1: config 7 interface 65 altsetting 8 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 609.838828][ T8203] usb 4-1: config 7 interface 46 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 609.849554][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 609.859910][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 609.870399][ T8203] usb 4-1: config 7 interface 46 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 609.881029][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 609.891346][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 609.901748][ T8201] usb 2-1: Using ep0 maxpacket: 8 [ 609.906641][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 609.917039][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 609.927471][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 609.937873][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 609.948383][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has a duplicate endpoint with address 0x81, skipping [ 609.958917][ T8203] usb 4-1: config 7 interface 46 altsetting 9 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 609.969789][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 609.980189][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 609.990676][ T8203] usb 4-1: config 7 interface 46 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 610.000961][ T8203] usb 4-1: config 7 interface 128 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.014098][ T8203] usb 4-1: config 7 interface 206 has no altsetting 0 [ 610.020883][ T8201] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.030799][ T8203] usb 4-1: config 7 interface 65 has no altsetting 0 [ 610.037291][ T8201] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 610.046080][ T8203] usb 4-1: config 7 interface 46 has no altsetting 0 [ 610.058038][ T8201] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 610.067047][ T8203] usb 4-1: config 7 interface 128 has no altsetting 0 [ 610.073877][ T8201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.092669][ T8201] usb 2-1: config 0 descriptor?? [ 610.106467][T11511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2629'. [ 610.229654][ T8203] usb 4-1: New USB device found, idVendor=19d2, idProduct=0065, bcdDevice=88.ec [ 610.238512][ T8203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.246430][ T8203] usb 4-1: Product: Ћ [ 610.250336][ T8203] usb 4-1: Manufacturer: 쇌觋쑓夢㷦눁㿕啣垸ѱ裓쟧흀䑇ﲳ酣ᩕ툢예ѿ竿擫垤꽻ݴ㩵఻篖갂פ楗躙矎흴ࢯꎼ功넛钧뱾営傍ኳ㮑䘠骚Ċ콭鉌ជ꼳栱⠫ [ 610.270300][ T8203] usb 4-1: SerialNumber: І [ 610.275112][ T8203] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 610.283639][ T8203] usb 4-1: no configuration chosen from 1 choice [ 610.583887][T11520] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 611.152800][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 611.212448][ T5] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 611.563202][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.573997][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.583543][ T5] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 611.592644][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.601091][ T5] usb 1-1: config 0 descriptor?? [ 611.624572][ T8203] usb 4-1: USB disconnect, device number 102 [ 611.845053][T11554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2640'. [ 611.925121][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 611.931057][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 611.940619][ T5] usb 1-1: USB disconnect, device number 103 [ 612.069022][ T24] audit: type=1326 audit(1729421445.256:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.4.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 612.103869][ T24] audit: type=1326 audit(1729421445.277:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.4.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 612.135800][T11579] overlayfs: failed to resolve './file0': -2 [ 612.161388][ T24] audit: type=1326 audit(1729421445.309:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.4.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 612.185491][ T24] audit: type=1326 audit(1729421445.309:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.4.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 612.209457][ T24] audit: type=1326 audit(1729421445.309:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.4.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 612.220189][T11593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2651'. [ 612.234241][ T24] audit: type=1326 audit(1729421445.309:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.4.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 612.273956][ T5587] usb 2-1: USB disconnect, device number 94 [ 612.310498][ T24] audit: type=1326 audit(1729421445.309:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.4.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 612.353749][ T24] audit: type=1326 audit(1729421445.309:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.4.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209bbe0ff9 code=0x7ffc0000 [ 612.385233][ T24] audit: type=1400 audit(1729421445.330:6335): avc: denied { create } for pid=11580 comm="syz.0.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 612.411062][ T1361] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 612.563295][ T8203] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 612.753873][ T1361] usb 1-1: config 0 has no interfaces? [ 612.759366][ T1361] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 612.770605][ T1361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.779746][ T1361] usb 1-1: config 0 descriptor?? [ 612.801634][ T8203] usb 5-1: Using ep0 maxpacket: 16 [ 612.916596][ T913] tipc: Left network mode [ 612.944377][ T8203] usb 5-1: config index 0 descriptor too short (expected 26904, got 18) [ 612.952533][ T8203] usb 5-1: config 7 has an invalid interface number: 180 but max is 0 [ 612.960645][ T8203] usb 5-1: config 7 has no interface number 0 [ 613.144682][ T8203] usb 5-1: New USB device found, idVendor=0c52, idProduct=2421, bcdDevice=4e.15 [ 613.153726][ T8203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 613.162144][ T8203] usb 5-1: Product: syz [ 613.166277][ T8203] usb 5-1: Manufacturer: syz [ 613.170869][ T8203] usb 5-1: SerialNumber: syz [ 613.213791][ T8203] ftdi_sio 5-1:7.180: FTDI USB Serial Device converter detected [ 613.226701][ T8203] usb 5-1: Detected FT-X [ 613.420750][ T8203] ftdi_sio ttyUSB0: Unable to read latency timer: -5 [ 613.429276][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.437405][ T913] device bridge_slave_0 left promiscuous mode [ 613.444184][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.456803][ T913] device veth1_macvtap left promiscuous mode [ 613.463352][ T913] device veth0_vlan left promiscuous mode [ 613.658956][ T8203] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 613.687571][ T8203] ftdi_sio 5-1:7.180: GPIO initialisation failed: -71 [ 613.696274][ T8203] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 613.706273][ T8203] usb 5-1: USB disconnect, device number 95 [ 613.712862][ T8203] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 613.722458][ T8203] ftdi_sio 5-1:7.180: device disconnected [ 614.676550][T11631] syz.4.2660[11631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 614.676974][T11631] syz.4.2660[11631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 615.848140][ T5] usb 1-1: USB disconnect, device number 104 [ 616.790132][T11647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2662'. [ 616.883352][ T24] audit: type=1400 audit(1729421450.306:6336): avc: denied { mounton } for pid=11639 comm="syz.0.2661" path="/61/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 616.883400][T11640] 9pnet: Insufficient options for proto=fd [ 616.920397][ T24] audit: type=1326 audit(1729421450.337:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.0.2661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38acb46ff9 code=0x0 [ 617.761241][T11659] overlayfs: failed to resolve './file0': -2 [ 617.794139][T11656] netlink: 'syz.3.2667': attribute type 3 has an invalid length. [ 618.021469][ T1197] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 618.269112][ T1197] usb 1-1: Using ep0 maxpacket: 16 [ 618.393102][ T1197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.403835][ T1197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.413365][ T1197] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.426066][ T1197] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 618.434988][ T1197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.443560][ T1197] usb 1-1: config 0 descriptor?? [ 618.927921][ T1197] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 618.935000][ T1197] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 618.944384][ T1197] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 618.951643][ T1197] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 618.958987][ T1197] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 618.966186][ T1197] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 618.973320][ T1197] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 618.981041][ T1197] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 618.988296][ T1197] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 618.995693][ T1197] microsoft 0003:045E:07DA.0060: unknown main item tag 0x0 [ 619.007772][ T1197] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0060/input/input45 [ 619.020588][ T1197] microsoft 0003:045E:07DA.0060: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 619.060142][ T1361] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 619.156306][ T8204] usb 1-1: USB disconnect, device number 105 [ 619.402753][ T1361] usb 4-1: config 0 has no interfaces? [ 619.408094][ T1361] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 619.416945][ T1361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.425214][ T1361] usb 4-1: config 0 descriptor?? [ 621.214162][T11701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2676'. [ 621.313179][T11698] incfs: Options parsing error. -22 [ 621.318260][T11698] incfs: mount failed -22 [ 621.325051][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 621.334384][T11698] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.342215][T11698] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11698 comm=syz.4.2677 [ 621.672161][ T8202] usb 4-1: USB disconnect, device number 103 [ 622.032086][ C1] EXT4-fs (loop4): error count since last fsck: 2117085983 [ 622.039086][ C1] EXT4-fs (loop4): initial error at time 859096682778: 4g߿|y[it#}?'ӟW:1718688895: inode 3004047120: block 13825873481662590247 [ 622.053627][ C1] EXT4-fs (loop4): last error at time 1080855295924: ?yI^UiW[WW疪Kյ7:-482426113: inode 334053147: block 6546824129065771903 [ 622.701971][T11720] netlink: 'syz.4.2681': attribute type 1 has an invalid length. [ 622.709579][T11720] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2681'. [ 622.718445][T11720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2681'. [ 622.831983][ T8200] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 623.193977][ T8200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.204698][ T8200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.214244][ T8200] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 623.223082][ T8200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.231815][ T8200] usb 1-1: config 0 descriptor?? [ 623.737325][ T8200] usbhid 1-1:0.0: can't add hid device: -71 [ 623.743069][ T8200] usbhid: probe of 1-1:0.0 failed with error -71 [ 623.751119][ T8200] usb 1-1: USB disconnect, device number 106 [ 625.543046][T11743] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2688'. SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=2 req=2653 state=1 status=67 (errno 9: Bad file descriptor) [ 626.095285][ T24] audit: type=1400 audit(1729421459.974:6338): avc: denied { write } for pid=274 comm="syz-executor" path="pipe:[13068]" dev="pipefs" ino=13068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 626.271526][T11770] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.278357][T11770] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.286100][T11770] device bridge_slave_0 entered promiscuous mode [ 626.294501][T11770] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.301358][T11770] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.301488][ T8204] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 626.308613][T11770] device bridge_slave_1 entered promiscuous mode [ 626.368548][T11770] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.375386][T11770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.382533][T11770] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.389394][T11770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.404899][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 626.412243][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.419932][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.429761][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 626.437789][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.444711][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.453056][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 626.461118][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.468079][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.481000][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 626.490048][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 626.504026][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.514540][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.522556][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.529988][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 626.537898][T11770] device veth0_vlan entered promiscuous mode [ 626.544563][ T913] device bridge_slave_1 left promiscuous mode [ 626.550532][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.557940][ T913] device bridge_slave_0 left promiscuous mode [ 626.563885][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.571445][ T913] device veth1_macvtap left promiscuous mode [ 626.577416][ T913] device veth0_vlan left promiscuous mode [ 626.677695][T11770] device veth1_macvtap entered promiscuous mode [ 626.684527][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.694839][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 626.703567][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 626.714179][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 626.722551][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 627.948779][ T913] device bridge_slave_1 left promiscuous mode [ 627.954689][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.961999][ T913] device bridge_slave_0 left promiscuous mode [ 627.968100][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.975808][ T913] device bridge_slave_1 left promiscuous mode [ 627.981873][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.989234][ T913] device bridge_slave_0 left promiscuous mode [ 627.995152][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.003194][ T913] device veth1_macvtap left promiscuous mode [ 628.009035][ T913] device veth0_vlan left promiscuous mode [ 628.014815][ T913] device veth1_macvtap left promiscuous mode [ 628.020599][ T913] device veth0_vlan left promiscuous mode [ 628.026337][ T913] device veth1_macvtap left promiscuous mode [ 628.032121][ T913] device veth0_vlan left promiscuous mode