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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003600)={0x2020}, 0x2020) [ 1641.983567][ T5685] usb 4-1: USB disconnect, device number 105 10:21:11 executing program 5: symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:21:11 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004280)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0}, 0x68) 10:21:11 executing program 2: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 10:21:11 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) umount2(&(0x7f0000000240)='./file0\x00', 0x8) 10:21:12 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r3, 0x8927, &(0x7f0000000540)={'wlan0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000005c0)={0x7fff, [], 0x8, "dfc82f2762b51d"}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r1, 0x0, r2, 0x0, 0x2ffff, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086607, &(0x7f0000000040)) [ 1642.298970][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.332335][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.351183][ T27] audit: type=1804 audit(1684405272.096:982): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1316/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1642.383825][ T5685] usb 4-1: new high-speed USB device number 106 using dummy_hcd 10:21:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1642.623438][ T5685] usb 4-1: Using ep0 maxpacket: 32 [ 1642.743649][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.761837][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.785395][ T5685] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1642.795171][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.824712][ T5685] usb 4-1: config 0 descriptor?? [ 1642.884736][ T5685] hub 4-1:0.0: USB hub found [ 1642.982501][ T27] audit: type=1804 audit(1684405272.726:983): pid=27706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1317/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1643.028558][ T27] audit: type=1800 audit(1684405272.776:984): pid=27681 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 1643.045564][T27684] loop4: detected capacity change from 0 to 32768 [ 1643.060507][T27085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.071556][T27085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.103497][ T5685] hub 4-1:0.0: 1 port detected [ 1643.973322][ T5685] hub 4-1:0.0: activate --> -90 [ 1644.193282][ T5685] hub 4-1:0.0: hub_ext_port_status failed (err = 2) 10:21:15 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x2, "2e12"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:15 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) umount2(&(0x7f0000000240)='./file0\x00', 0x8) 10:21:15 executing program 4: syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x18800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0xfe, 0x5f6b, &(0x7f00000002c0)="$eJzs3U1vHVf9B/DfffRD/22tLqr+I4TclKdSmscSAgXaLmDBhgXKFiVy3SoiBZQElFYRceUNC14ECIklQixZ8QK6YMuOF0CkBAnUFYPG9xxnPLnOder4znXO5yM5M785M/aZfO/43uuZuScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjB9390thcRl3+ZFqxF/F8MIvoRK3W9HhEr62t5/WFEvBQ7zfFiRIyWIurtd/55PuKNiPjkuYh7929v1IvPHbAf3/vT33//42d++Lc/jk7/5883B2/ut96tW7/591/uHG6fAQAAoDRVVVW99Db/RHp/3++6UwDAXOTn/yrJy49DPW7sxyL0R61Wq9XqRa+bqunuNIuI2GpuU79mcDoeAI6Zrfi06y7QIfkXbRgRz3TdCWCh9bruAEfi3v3bG72Ub6/5fLA+ac/XguzJf6u3e3/HftNZ2teYzOvxtR2DeGGf/qzMqQ+LJOffb+d/edKez60ddf7zsl/+48mtT8XJ+Q/a+bc8Pfn3p+Zfqpz/8LHyH8gfAAAAAAAWWP77/1rH53+XDr8rB/Ko87/rc+oDAAAAAAAAADxphx3/b5fx/wAAAGBh1e/Va7997sGy/T6LrV5+qRfxbGt9oDDpZpnVrvsBAAAAAAAAAAAAACUZTq7hvdSLGEXEs6urVVXVX03t+nEddvvjrvT9h5J1/UseAAAmPnmudS9/L2I5Ii6lz/obra6uVtXyymq1Wq0s5dez46XlaqXxvjZP62VL4wO8IB6Oq/qbLTe2a5r1fnlWe/v71T9rXA0O0LH56DBwAIiIybPRPc9IT5mqej66fpXD8eD4f/o4/jmIrh+nAAAAwNGrqqrqpY/zPpHO+fe77hQAMBf5+b99XkCtVqvVavXTVzdV091pFhGx1dymfs1gOH4AOGa24tOuu0CH5F+0YUS81HUngIXW67oDHIl7929v9FK+vebzQRrfPV8Lsif/rd7Odnn7adNZ2teYzOvxtR2DeGGf/rw4pz4skpx/v53/5Un7OK33hPPvtf6MODf75V/v51oH/elazn/Qzr/lqI//edmO/tT8S5XzHz5W/gP5AwAAAADAAst//19z/jfvMgAAAAAAAAAcO/fu397I973m8/+fm7Ke+z+fTjn/nvyLlPPvt/L/Smu9QWP+7jsP8v/X/dsbf7j5z//P04Pmv5RneumR1UuPiF76Sb1hmh5m7x62PRqMJ/s6+cbrEVGN3ourcS0248yedfvp/+NB+9k97XVPR3vaz+1pHz7Ufn5P+yh97kC1kttPxUb8LK7FuzvtddvSjP1fntFezWjP+Q8c/0XK+Q8bX3X+q6m915rW7n7cf+i4b06n/Zy3r37+12eOfndm2o7B7r411ft3soP+7PyfPDOOX9zYvH7q1pWbN6+fjTTZs/RcpMkTlvMfpa/d3/+vTNrz7/3m8Xr34/Fj578otmO4b/6vNObr/X11zn3rQs5/nL5y/u+m9unH/3HOf//j/7UO+gMAAAAAAAAAAAAAAACPUlXVzi2ib0fEhXT/T1f3ZgIA85Wf/6skL1er1Wq1Wr1bjxasP5+5bqqme6tZRMRfm9vUrxl+Ne2bAQCL7L8R8Y+uO0Fn5F+w/Hl/wwefyAsU4saHH/3kyrVrm9dvRCx33RkAAAAAAAAA4DPJ43+uN8Z//kJErLXW2zP+6zuxftjxP4d5ZneA0Sc80Pc+tvvjQb8x3PjL8ejxv0/Go8f/Hs74eaMZ7eMZ7bOuypp1zcbUGz0acv4vN8Y7r/M/0Rp+vYTxX9tj3pcg53+y8Xiu8/9ya71m/tXvjnP+/T35n775wc9P3/jwo9evfnDl/c33N396/uzZM+cvXLh48eLp965e2zwz+bfDHh+tnH8e+zrnTxly/jlz+Zcl5//FVMu/LDn/L6Va/mXJ+efXe/IvS84/v/eRf1ly/q+mWv5lyfl/NdXyL0vO/7VUy78sOf+vpVr+Zcn5v55q+Zcl538q1fIvS87/dKrlX5acfz7DJf+y5PzzlQ3yL0vO/1yq5V+WnP/5VMu/LDn/N1It/7Lk/L+eavmXJed/IdXyL0vO/xupln9Zcv4XUy3/suT8v5lq+Zcl5/+tVMu/LDn/N1Mt/7Lk/L+davmXJef/nVRPyX/QRb+Yj5z/d1Pt+C9Lzv+tVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZ5XE7c9T4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYW9e4uR667vAH52vWuvHSAGQuqkBtaOcRxnk11f4gutGxNCSBMuzcWU9BLb9a6dBd/itUuSRrJRoETCqKiiJS8tF0VtXiqsFlW0SlEeqlaVKhH6QF8QVSUeoiqggFSprdpsNef8//+dmZ2d2bXH65lzPh8p/nlnzsw5c+Y/s/td57sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTb8MGpLwxkWVb7L/9jbZa9pfb31aNr88vef62PEAAAALhS/5f/+cb16YL9i7hR3Tb/+J7vfXt2dnY2++SKPxr+yuxsumI0y4ZXZVl+XXTp3x8bqN8meC4bGRis+3iww+5XdLh+qMP1wx2uX9nh+lUdrh/pcP28EzDP6uL7Mfmdbcr/urY4pdkN2XB+3aYWt3puYNXgYPxeTm4gv83s8NFsOjueTWUTDdsX2w7k27+8obav+7O4r8G6fa2vrZCfPXskHsNAOMebGvY1d5/RTz6Qjf78Z88e+bOzr9/UanY8DQ33Vxznlo214/xcuKQ41oFsVTon8TgH645zfYvnZEXDcQ7kt6v9vfk431jkca6YO8xl1fycj2SD+d9fzc/TUP239dJ5Wh8u+69bsiy7MHfYzdvM21c2mK1puGRw7vkZKVZk7T5qS+kd2dCS1umGRazT2pzc1LhOm18T8fnfEG43tMAx1D9NP/nsynnP+1LXaVR71Au9VprXYLdfK72yBuO6eDV/0M+3XIObwuN/dvPCa7Dl2mmxBtPjrluDGzutwcGVK/JjTk/CQH6buTW4rWH7FfmeBvL52ub2a3D87InT4zNPP3PH9InDx6aOTZ3csW3bxI5du/bs2TN+dPr41ETx52We7d63JhtMr4GN4dzF18CtTdvWL9XZb3TvdTjS5nW4tmnbbr8Oh5of3MDyvCDnr+nitfFo7aSPXBzMFniN5c/P1it/HabHXfc6HKp7Hbb8nNLidTi0iNdhbZvTWxf3NctQ3X+tjuFqfS5YW7cGm78eaV6D3f56pFfW4EhYFz/cuvDngvXheJ8fW+rXIyvmrcH0cMN7T+2S9PX+yJ58tFqXN9euuG5ldm5m6sydTx0+e/bMtiyMZfHOurXSvF7X1D2mbN56HVzyet0//Z7nb25x+dpwrkbuqP0xsuBzVdtm553tn6v8s1vr89lw6fYsjC5b7vPZ6rN57XymLNnmfNa2+dz4lX8tnnJp3fvv8ALvvzH3v1nsL93VcyuGh4rX74p0doYb3o8bn6qh/L1rIN/3G+OLez8eDv8t9/vxDW3ej9c1bdvt9+Ph5gcX348HOn2348o0P58jYZ0cn2j/flzbZt32pa7Jobbvx7eEORDO/1dXFUkh5aK6tbPQuk37GhoaDo9rKO6hcZ3uaNh+OGSz2r5e2n5563TLLcV9rUiPbs5yrdPRpm27vU7T+9VC63Sg03ffLk/z8zkS1sUNO9qv09o2r+y88vfO1fGvde+dKzutweEVK2vHPJwWYfF+P7s6rsE7syPZqex4NplfuzJfTwP5vsbuWtwaXBn+W+73ynVt1uCWpm27vQbT57GF1t7A0PwH3wXNz+dIWBcv3NV+Dda2uXd3d7923RIuSdvUfe3a/P21hb7ndXPTabqa3/OqHeff727/vdnaNsf3LDVntj9Pt4dLrmtxnppfvwu9piaz5TlP68Jxvr5n4fNUO57aNl/Zu8j1tD/LsvNP3pN/vzf8+8pfnvvBtxv+3aXVv+mcf/Ken7716D8s5fgB6H9vFmNN8bmu7l+mFvPv/wAAAEBfiLl/MMxE/gcAAIDSiLk//l/hifwPAAAApRFz/1CYSUXy/7p7X59+83yWmvmzQbw+nYYHiu1ix3UifDw6O6d2+T0vTv3n355f3L4Hsyz73wd+r+X26x6Ix1UYDcd56UONl8+/4flF7f/Qgbnt6vvrXw/3Hx/PYpdBqwruRJZlL1//pXw/o49dzOcrDxzK58MXnn+uts0be4uP4+1fe2ex/Z+E8u/+o4cbbv9aOA8/DnPiwdbnI97uWxdvW7/7E3P7i7cb2Pi2/GG/8Hhxv/Hn5Hz5uWL7eJ4XOv6/++JL36pt/9T7Wh//+cHWx/9SuN8Xw/zvdxfb1z8HtY/j7T4fjj/uL97uzm9+t+XxX/pCsf3p+4rtDoUZ978lfLzpvten68/XUwOHGx5X9uFiu7j/iR/8QX59vL94/83HP3LwYsP5aF4fr/xLcT/jTdvHy+N+or9p2n/tfurXZ9z/S79/qOE8d9r/pYdfe3ftfpv3f3vTdqef3Jrvf+7+Gn9i059+/kst9xePZ/9fnG54PPsfCq/jsP8XHg/rMVz/P5eK+2v+6QqHHmp8/4nbf33t+YbHE93/82L/l+4+ls9VI6vXXPeWt77twntr5y7LXn2kuL9O+z/2tVMNx/+NG4vzEa+PHf3m/S8k7v/MZ8ZOnpo5Nz1Zd1bzn53zkeJ44vFeH95bmz8+eOrsE1NnRidGJ7JstLw/Qu+yfTPMnxbjwlJvv/VAeD5v/urLazZ//4vx8n99tLj84oPF561bw3ZfDpevDc/fle7/hQ035q/vgVeKjxt67F2wftN/7FnUhuHxN39dENf76Xc9kZ+H2nX55434ur7C4//RZHE/3wnndTb8ZOaNN87tr377+LMRLj5SvN6v+PyFt7n4vP55eL4/+uPi/uNxxcf7o/B1zHfXNb7fxfXxnfODzfef/xSPC+H9JLtQXB+3iuf74hs3tjy8+HNIsgs35R//Ybqfm5b0MBcy8/TM+PHpk+eeGj87NXN2fObpZw6eOHXu5NmD+c/yPPipTrefe39ak78/TU7t2pnl71aninGVXevjP33g7izLNk9OHT187ujZA6enzhw7MjNzZGpyZvPho0enPtPp9tOT+7Zt37tj9/axY9OT+/bs3btj79j0yVO1wygOqoNdE58eO3nmYH6TmX079267666dE2MnTk1O7ds9MTF2rtPt889NY7Vb/+7Ymanjh89On5gam5l+Zmrftr27dm3v+NMAT5w+OjM6fubcyfFzM1NnxovHMno2v7j2ua/T7SmnmX8rvp5tNlD8IL7s47fvSj+ftebFzy54V8UmTT9A9PXws2j+6e2n9yzm45j7h8NMKpL/AQAAoApi7l8ZZiL/AwAAQGnE3L8qzET+BwAAgNKIuX8kzKQi+V//X/9f/1//X/+/9f71//uT/n97+v8d6P9fQX9+Vv//wJHJ3RP6//r/1Ou1/n/M/auzrJL5HwAAAKog5v41YSbyPwAAAJRGzP3XhZnI/wAAAFAaMfe/JcykIvlf/1//X/9f/1//v/X+9f/7k/5/e/r/Hej/+/3/+v/6/3RVr/X/Y+5/a5hJRfI/AAAAVEHM/W8LM5H/AQAAoDRi7r8+zET+BwAAgNKIuX9tmElF8r/+v/6//r/+v/5/6/3r//cn/f/29P870P/X/9f/1/+nq3qt/x9z/9vDTCqS/wEAAKAKYu5/R5iJ/A8AAAClEXP/O8NM5H8AAAAojZj7bwgzqUj+1//X/9f/1//X/2+9f/3//qT/357+/8LyDfX/9f/1//X/6ape6//H3P+uMJOK5H8AAACogpj7bwwzkf8BAACgNGLu/4UwE/kfAAAASiPm/nVhJhXJ//r/+v/6//r/+v+t96//35+uYv8/byTq/5e3/5/T/9f/1//X/6ereq3/H3P/TWEmFcn/AAAAUAUx998cZiL/AwAAQGnE3P+LYSbyPwAAAJRGzP3rw0wqkv/1/7va/7+tvpil/6//37Q+9P/1//X/l4Hf/9+e/n8H+v/6//r/+v90Va/1/2Puf3eYSUXyPwAAAFRBzP3vCTOR/wEAAKA0Yu5/b5iJ/A8AAAClEXP/aJhJRfK//r/f/6//r/+v/996//r//Un/vz39/w6udv+/+MJT//8qudbHr/+v/898vdb/j7l/Q5hJRfI/AAAAVEHM/RvDTOR/AAAAKI2Y+28JM5H/AQAAoDRi7t8UZlKR/K//r/+v/6//r//fev/6//1J/789/f8O/P5//X/9f/1/uqrX+v8x978vzKQi+R8AAACqIOb+zWEm8j8AAACURsz9t4aZyP8AAABQGjH3bwkzqUj+1//X/9f/v4z+/9avFTfU/9f/1//vOfr/7en/d6D/r/+v/6//T1f1Wv8/5v7bwkwqkv8BAACgCmLu3xpmIv8DAABAacTcf3uYifwPAAAApRFz/1iYSUXyv/6//r/+v9//r//fev/6//1J/789/f8O9P/1//X/9f/pql7r/8fcf0eYSUXyPwAAAFRBzP13hpnI/wAAAFAaMfePh5nI/wAAAFAaMfdPhJlUJP8vd/+/7gzr/+v/6//r/+v/6/93nf5/e9eu/9/qM+V8+v/6//18/Pr/+v/M12v9/5j7t4WZvqKrSP4HAACAKoi5f3uYifwPAAAApRFz/44wE/kfAAAASiPm/p1hJhXJ/37/v/6//r/+v/5/6/3r//eH5oK9/n97fv9/B/r/+v/6//r/dFWv9f9j7r8rzKQi+R8AAACqIOb+XWEm8j8AAACURsz9u8NM5H8AAAAojZj794SZVCT/6//r/+v/6//r/7fev/5/f9L/b68q/f9I/39prnV/vt+PX/9f/5/5eq3/H3P/3jCTiuR/AAAAqIKY+98fZiL/AwAAQGnE3P9LYSbyPwAAAJRGzP2/HGZSkfyv/6//r/+v/99H/f+7M/1//f8O9P/bq0r/3+//vzzXuj/f78ev/6//z3y91v+PuX9fmElF8j8AAABUQcz9vxJmIv8DAABAacTcf3eYifwPAAAApRFz//4wk4rkf/1//X/9f/3/Pur/Nzwe/X/9/1b0/9vr3f5/fGXp/+v/9+/x6//r/zNfr/X/Y+7/QJhJRfI/AAAAVEHM/feEmczP/4PLd1QAAABAN8Xc/8EwE//+DwAAAKURc/+9YSYVyf/6//r/+v/6//r/rfev/9+f9P/b693+f8Hv/9f/7+fj1//X/2e+Xuv/x9z/oTCTiuR/AAAAqIKY++8LM5H/AQAAoDRi7v9wmIn8DwAAAKURc//9YSYVyf/6//r/+v/L1v+fyPT/9f/1/686/f/29P870P/X/9f/1/+nq3qt/x9z/6+GmVQk/wMAAEAVxNz/QJiJ/A8AAAClEXP/g2Em8j8AAACURsz9HwkzqUj+1//X/9f/9/v/9f9b71//vz/p/7en/9+B/r/+v/6//j9d1Wv9/5j7PxpmUpH8DwAAAFUQc//HwkzkfwAAACiNmPs/HmYi/wMAAEBpxNz/a2EmFcn/+v/6//r/+v/6/633r//fn/T/29P/70D/X/9f/1//n67qtf5/zP0PhZlUJP8DAABAFcTc/3CYifwPAAAApRFz/yNhJvI/AAAAlEbM/Y+GmVQk/+v/6//r/+v/6/+33r/+f3/S/29P/78D/X/9f/1//X+6qtf6/zH3HwgzqUj+BwAAgCqIuf8TYSbyPwAAAJRGzP2/HmYi/wMAAEBpxNz/yTCTiuR//X/9f/1//X/9/9b71//vT/r/7en/d6D/r/+v/6//T1f1Wv8/5v7Hwkwqkv8BAACgCmLu/40wE/kfAAAASiPm/t8MM5H/AQAAoDRi7v+tMJOK5H/9f/1//X/9f/3/1vvX/+9P+v/t6f93oP+v/6//r/9PV/Va/z/m/t8OM6lI/gcAAIAqiLn/8TAT+R8AAABKI+b+g2Em8j8AAACURsz9h8JMKpL/9f/1//X/e7T//8cb//mH3/vYoW36//r/+v9Lov/fnv5/B/r/+v/6//r/dFWv9f9j7j8cZlKR/A8AAABVEHP/74SZyP8AAABQGjH3Hwkzkf8BAACgNGLunwwzqUj+1//X/9f/79H+v9//n+j/6/8vhf5/e/r/Hej/6//r/+v/01VL7v+PLnhXXen/x9w/FWZSkfwPAAAAVRBz/9EwE/kfAAAASiPm/mNhJvI/AAAAlEbM/U+EmVQk/+v/6//r/+v/6/+33r/+f3/S/29P/78D/X/9f/1//X+6qtd+/3/M/dNhJhXJ/wAAAFAFMfd/KsxE/gcAAIDSiLn/02Em8j8AAACURsz9x8NMKpL/9f/1//X/9f/1/1vvX/+/P+n/t6f/34H+v/6//r/+P13Va/3/mPtPhJlUJP8DAABAFcTcfzLMRP4HAACA0oi5/1SYifwPAAAApRFz/+kwk4rkf/1//X/9f/1//f/W+9f/70/6/+3p/3eg/9+yP//X3/+rexZze/1//X/9f5r1Wv8/5v4nw0wqkv8BAACgCmLuPxNmIv8DAABAacTcPxNmIv/D/7N3386flVUcx3/MiDMOhXQWFjb+FzRWFv4L1rY25ow555xzFgMoYsasGFHMGQOKiooBFQuH3XMOs/y+3uvu3t197nNer+YUiM/XcYeZzzDvuQAAANPI3f/QuKXJ/tf/6/8vXP9/0d30//p//b/+f2v6/2X6/xX6f9//1//r/9nUaP1/7v6HxS1N9j8AAAB0kLv/4XGL/Q8AAADTyN3/iLjF/gcAAIBp5O5/ZNzSZP/r//X/vv8/ev9/D/2//l//fxr0/8s69f8PueGSB9969b2vOZ339f/6f/2//p9tjdb/5+5/VNzSZP8DAABAB7n7Hx232P8AAAAwjdz9j4lb7H8AAACYRu7+x8YtTfa//l//r/8fvf/3/X/9v/7/dOj/l3Xq/8/kff2//l//r/9nW6P1/7n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAATCN3/xPiFvsfAAAAppG7//K4pcn+1//r//X/+n/9/+H39f/7NFD/f7H+X/+v/9f/6//1/92N1v/n7n9i3NJk/wMAAEAHufufFLfY/wAAADCN3P1PjlvsfwAAAJhG7v6nxC1N9r/+X/+v/9f/6/8Pv6//36eB+v8zel//r//X/+/39+v/9f8cN1r/n7v/qXFLk/0PAAAAHeTuf1rcYv8DAADANHL3Pz1usf8BAABgGrn7nxG3NNn/+n/9v/5f/6//P/y+/n+fLlT/f/mR/l//f+d/jf5f/6//1/9z0mj9f+7+Z8YtTfY/AAAAdJC7/1lxi/0PAAAA08jd/+y4xf4HAACAaeTuf07c0mT/6//1//p//b/+//D7+v998v3/Zfr/Ffp//b/+X//Ppkbr/3P3PzduabL/AQAAoIPc/c+LW+x/AAAAmEbu/ufHLfY/AAAATCN3/wvilib7X/+v/9f/6//1/4ff1//vk/5/mf5/hf5f/6//1/+zqdH6/9z9L4xbmux/AAAA6CB3/4viFvsfAAAAppG7/8Vxi/0PAAAA08jd/5K4ZXX/37ZxkXdhnNr/X6T/1//r/4/0//r/k/T/+6T/X6b/X6H/1//r//X/bGq0/j93/0vjFv/+HwAAAKaRu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3NJk//v+v/5f/6//v/aO/wH6f/3/JLbr/+97T/2//l//r//X/+v/OTuj9f+5+18ZtzTZ/wAAANBB7v5XxS32PwAAAEwjd/+r4xb7HwAAAKaRu/81cUuT/a//1//r//X/vv9/+H39/z75/v8y/f8K/b/+X/+v/2dTo/X/uftfG7c02f8AAADQQe7+18Ut9j8AAABMI3f/6+MW+x8AAACmkbv/DXFLk/2/af9/x9+l/y/6f/3/Xf986P/1//r/c0//v0z/v0L/r//X/+v/2dRo/X/u/jfGLU32PwAAAHSQu/9NcYv9DwAAANPI3f/muMX+BwAAgGnk7n9L3NJk//v+/9F99P/6f/2//v/Q+/r/fdL/L9P/r9D/6//1//p/NjVa/5+7/61xS5P9DwAAAB3k7n9b3GL/AwAAwDRy9789brH/AQAAYBq5+98RtzTZ//r/s/7+/4kEWP9/6u/X/59K/x9/HvT/+v/zQP+/TP+/Qv+v/9f/6//Z1Gj9f+7+d8YtTfY/AAAAdJC7/11xi/0PAAAA08jd/+64xf4HAACAaeTuf0/c0mT/6//Puv8/Qf9/6u/X/x/+86H/1//r/889/f8y/f8K/b/+X/+v/2dTo/X/ufuviFua7H8AAADoIHf/e+MW+x8AAACmkbv/fXGL/Q8AAADTyN3//rilyf7X/+v/9f/6f/3/4ff1//uk/1+m/z86Orpy4Qfo//X/+n/9P5sarf/P3f+BuKXJ/gcAAIAOcvdfGbfY/wAAADCN3P1XxS32PwAAAEwjd/8H45Ym+1//r//X/+v/9f+H39f/71Pv/j9r+f9N/79C/6//1//r/9nUaP1/7v4PxS1N9j8AAAB0kLv/6rjF/gcAAIBp5O7/cNxi/wMAAMA0cvdfE7c02f+n9P8Zter/9f/nsP+//Qz6/4vjr+n/9f9H+n/9/4re/f86/f+KS0/+I0H/r//X/+v/2cZo/X/u/o/ELfe7yzAEAAAAdit3/0fjlib//h8AAAA6yN3/sbjF/gcAAIBp5O7/eNzSZP/7/r/+3/f/9f/6/8Pv6//3Sf+/TP+/wvf/9f/6f/0/mxqt/8/d/4m4pcn+BwAAgA5y938ybrH/AQAAYBq5+z8Vt9j/AAAAMI3c/dfGLU32v/5f/6//1//r/w+/r//fJ/3/Mv3/Cv2//l//r/9nU6P1/7n7Px23NNn/AAAA0EHu/s/ELfY/AAAATCN3/2fjFvsfAAAAppG7/3NxS5P9r//X/+v/9f/6/8Pv6//3Sf+/TP+/Qv+v/9f/6//Z1Gj9f+7+z8ctTfY/AAAAdJC7/wtxi/0PAAAA08jd/8W4xf4HAACAaeTu/1Lc0mT/6//1//p//b/+//D7+v990v8v0/+v0P/r//X/+n82NVr/n7v/y3FLk/0PAAAAHeTuvy5usf8BAABgGrn7vxK32P8AAAAwjdz9X41bmux//b/+X/+v/9f/H35f/79Po/T/l132gOv1//p//b/+/9z1/5ce+/v1/4xotP4/d//X4pYm+x8AAAA6yN3/9bjF/gcAAIBp5O7/Rtxi/wMAAMA0cvd/M25psv/1//p//X+P/v/++n/9fxOj9P++/39mv1//r//f8+/3/X/9P8eN1v/n7r8+bmmy/wEAAKCD3P3filvsfwAAAJhG7v5vxy32PwAAAEwjd/8NcUuT/a//1//r/3v0/0f6f/1/E/r/Zfr/Ffr/89TP37TJ772L/Mey/l//z0BG6/9z938nbmmy/wEAAKCD3P3fjVvsfwAAAJhG7v7vxS32PwAAAEwjd//345Ym+1//r//X/+v/9f+H39f/75P+f5n+f4X+3/f/9f/6fzY1Wv+fu/8HcUuT/Q8AAAAd5O7/Ydxi/wMAAMA0cvf/KG6x/wEAAGAauft/HLc02f/6/x32/3eP/7D+X/+v/9f/6/+P0f8v0/+v0P/r//X/+n82NVr/n7v/J3FLk/0PAAAAHeTu/2ncYv8DAADANHL3/yxusf8BAABgGrn7fx63NNn/+v8d9v++/6//1/+foP/X/x+i/1+m/1+h/9f/6//1/2xqtP4/d/8v4pYm+x8AAAA6yN1/Y9xi/wMAAMA0cvf/Mm6x/wEAAGAauft/Fbc02f/6f/3/Sv9/480n/5L+X/+v/z9P/f9F+v+zov9fpv9fof/X/+v/9f9sarT+P3f/r+OWJvsfAAAAOsjd/5u4xf4HAACAaeTuvylusf8BAABgGrn7fxu3NNn/+n/9v+//6//1/4ff9/3/fdL/L7uQ/f8t/8ez+n/9/55/v/5f/89xo/X/uft/F7c02f8AAADQQe7+m+MW+x8AAACmkbv/93GL/Q8AAADTyN3/h7ilyf7X/+v/9f/6f/3/4ff1//uk/1/m+/8r9P/6f/2//p9Njdb/5+7/Y9zSZP8DAABAB7n7b4lb7H8AAACYRu7+P8Ut9j8AAABMI3f/n+OWJvtf/6//1//r//fb/9/rksuve+CDrrpC/8+d9P/L9P8r9P/6f/2//p9Njdb/5+7/S9zSZP8DAABAB7n7b41b7H8AAACYRu7+v8Yt9j8AAABMI3f/3+KWJvtf/6//1//r//fb//v+v/7/OP3/Mv3/Cv2//l//r/9nU6P1/7n7/x63NNn/AAAA0EHu/n/ELfY/AAAATCN3/21xi/0PAAAA08jd/8+4pcn+1//r//X/+n/9/7H3T/xfqv/fJ/3/Mv3/Cv2//l//r/9nU6P1/7n7/xW3NNn/AAAA0EHu/n/HLfY/AAAATCN3/+1xi/0PAAAA08jd/5+4pcn+1//r//X/+n/9/+H39f/7pP9fpv9fof/X/+v/9f9sarT+P3f/fwMAAP//ZMtsvA==") getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/152, 0x98) 10:21:15 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 10:21:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:15 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1645.681928][ T27] audit: type=1800 audit(1684405275.426:985): pid=27719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 1645.754996][ T5089] usb 4-1: USB disconnect, device number 106 [ 1645.761078][ T27] audit: type=1800 audit(1684405275.426:986): pid=27719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 1645.761120][ T27] audit: type=1800 audit(1684405275.466:987): pid=27719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1967 res=0 errno=0 10:21:15 executing program 2: r0 = socket(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x7, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) 10:21:15 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) umount2(&(0x7f0000000240)='./file0\x00', 0x8) 10:21:15 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1645.957876][ T27] audit: type=1804 audit(1684405275.706:988): pid=27717 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1318/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 10:21:15 executing program 2: syz_emit_ethernet(0x1fc6, &(0x7f0000000080), 0x0) [ 1646.037757][T27077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.061857][T27077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:21:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1646.136623][ T27] audit: type=1800 audit(1684405275.886:989): pid=27735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 10:21:15 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0) [ 1646.228427][ T27] audit: type=1800 audit(1684405275.916:990): pid=27735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 1646.253344][ T5089] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1646.312620][ T27] audit: type=1800 audit(1684405275.936:991): pid=27735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 1646.458608][ T27] audit: type=1804 audit(1684405276.206:992): pid=27739 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1319/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 1646.513285][ T5089] usb 4-1: Using ep0 maxpacket: 32 [ 1646.529006][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.556625][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.570442][T27716] loop4: detected capacity change from 0 to 32768 [ 1646.653830][ T5089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.678376][ T5089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.689105][ T5089] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1646.704921][ T5089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.724479][ T5089] usb 4-1: config 0 descriptor?? [ 1646.764373][ T5089] hub 4-1:0.0: USB hub found [ 1646.973459][ T5089] hub 4-1:0.0: 1 port detected [ 1647.825600][ T5089] hub 4-1:0.0: activate --> -90 [ 1648.043479][ T5089] hub 4-1:0.0: hub_ext_port_status failed (err = 2) 10:21:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x3, "2e12ad"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:19 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) umount2(&(0x7f0000000240)='./file0\x00', 0x8) 10:21:19 executing program 1: r0 = open(0x0, 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:19 executing program 4: syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x18800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0xfe, 0x5f6b, &(0x7f00000002c0)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/152, 0x98) 10:21:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) dup2(r0, r2) 10:21:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1649.544107][ T27] audit: type=1800 audit(1684405279.296:993): pid=27750 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 10:21:19 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000), 0x10) [ 1649.593446][ T5089] usb 4-1: USB disconnect, device number 107 [ 1649.755625][ T27] audit: type=1804 audit(1684405279.506:994): pid=27755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1320/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 10:21:19 executing program 5: pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvmmsg(r0, &(0x7f0000000500), 0x10, 0x0, 0x0) [ 1649.832650][T27085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.860941][T27085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:21:19 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad030300e8d50000000100000014000005002433108906d320d98a61a90021c9bf", 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x22) [ 1649.915951][ T5089] usb 4-1: new high-speed USB device number 108 using dummy_hcd 10:21:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:19 executing program 2: socketpair$unix(0xa, 0x3, 0x87, &(0x7f00000007c0)) 10:21:19 executing program 5: socketpair$unix(0x2, 0xa, 0x300, &(0x7f00000007c0)) [ 1650.163340][ T5089] usb 4-1: Using ep0 maxpacket: 32 [ 1650.301099][ T5089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.323291][ T5089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.341224][ T5089] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1650.351277][ T5089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.361031][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.380607][ T5089] usb 4-1: config 0 descriptor?? [ 1650.388180][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.424445][ T5089] hub 4-1:0.0: USB hub found [ 1650.520075][T27749] loop4: detected capacity change from 0 to 32768 [ 1650.643456][ T5089] hub 4-1:0.0: 1 port detected [ 1651.523454][ T5089] hub 4-1:0.0: activate --> -90 [ 1651.733317][ T5089] hub 4-1:0.0: hub_ext_port_status failed (err = 3) 10:21:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x3, "2e12ad"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:22 executing program 5: socketpair$unix(0xf, 0x3, 0x0, &(0x7f00000007c0)) 10:21:22 executing program 2: syz_clone(0x41000000, &(0x7f00000000c0)="af011f05814dc6f2f1378ebfb37dfeedcb48892e048af70887b4aab6ac85062bfc13dd4f1e9ada782602a0b78e639b5172867e423def8a4a493cbb3b23fb2128a7f399e18f49fe29c91df5d7bcc53e4a21e93dca4c45e4a5aa287b2dc4920b214242080c0aa747f15b46858e4324fc00ce605267494491cccb384448d13641ec204cc6af49459731ec7df13e5b2ec9ad8741d2f13b2b2d5a2e7f114f6bfa14dab723966e6f22caa1213293b6ad8a13035dbcd68e2937771f5f462b41af4a4c4deabcf6471b47c34b765d", 0xca, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="2b328d1c180aefb31b27bb6a3a1ac0ac19da243d5b09790df198ac4a2b6d9c156cc0c1023de4ef4ab85dd1faeb381b9a142f5427b2b9215ca499119934cc8d5eeaa11d7e07a619237249f1460a7fe88bf6f4d1240b625523078247d441b86635d9223f17bd38cf8fecbf0342089416ad8e81357111c682f5a7b9bfc9f0e546b58f28c010303cbef40d4f2aefe2caf063d543412480345f4697188985bf806d05f3b40f14af90204254ee8e0155c2d62bf18ea90b1bfe377e85db3598791ca97e6960b7fe59bca904f813e2faa0691a28527766e49caddaa4b7af7c9e18467a6d3ee3f970cc8cea002fc68b64425583d02a6c2d621651679999b3df09beca") 10:21:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/152, 0x98) 10:21:22 executing program 1: r0 = open(0x0, 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:23 executing program 5: syz_clone(0xc4080100, 0x0, 0x0, 0x0, 0x0, 0x0) 10:21:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/152, 0x98) [ 1653.231358][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1653.231376][ T27] audit: type=1800 audit(1684405282.976:996): pid=27782 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 10:21:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/152, 0x98) [ 1653.408836][ T27] audit: type=1804 audit(1684405283.156:997): pid=27786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1322/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 1653.463737][ T5089] usb 4-1: reset high-speed USB device number 108 using dummy_hcd 10:21:23 executing program 4: syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x18800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0xfe, 0x5f6b, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/152, 0x98) [ 1653.526894][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.540711][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:21:23 executing program 2: r0 = socket(0x2, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000006340), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:21:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0xe, 0x0, &(0x7f0000000200)) [ 1653.734701][ T5089] usb 4-1: Using ep0 maxpacket: 32 [ 1654.308479][T27803] loop4: detected capacity change from 0 to 32768 [ 1654.623362][ T5089] hub 4-1:0.0: activate --> -90 [ 1654.833453][ T5089] hub 4-1:0.0: hub_ext_port_status failed (err = 3) 10:21:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x3, "2e12ad"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000480)=ANY=[]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000180)) 10:21:26 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "187bbb", 0x8, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, {[], "0ef3b1486e6bbb4f"}}}}}, 0x0) 10:21:26 executing program 1: r0 = open(0x0, 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:26 executing program 4: syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x18800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0xfe, 0x5f6b, &(0x7f00000002c0)="$eJzs3U1vHVf9B/DfffRD/22tLqr+I4TclKdSmscSAgXaLmDBhgXKFiVy3SoiBZQElFYRceUNC14ECIklQixZ8QK6YMuOF0CkBAnUFYPG9xxnPLnOder4znXO5yM5M785M/aZfO/43uuZuScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjB9390thcRl3+ZFqxF/F8MIvoRK3W9HhEr62t5/WFEvBQ7zfFiRIyWIurtd/55PuKNiPjkuYh7929v1IvPHbAf3/vT33//42d++Lc/jk7/5883B2/ut96tW7/591/uHG6fAQAAoDRVVVW99Db/RHp/3++6UwDAXOTn/yrJy49DPW7sxyL0R61Wq9XqRa+bqunuNIuI2GpuU79mcDoeAI6Zrfi06y7QIfkXbRgRz3TdCWCh9bruAEfi3v3bG72Ub6/5fLA+ac/XguzJf6u3e3/HftNZ2teYzOvxtR2DeGGf/qzMqQ+LJOffb+d/edKez60ddf7zsl/+48mtT8XJ+Q/a+bc8Pfn3p+Zfqpz/8LHyH8gfAAAAAAAWWP77/1rH53+XDr8rB/Ko87/rc+oDAAAAAAAAADxphx3/b5fx/wAAAGBh1e/Va7997sGy/T6LrV5+qRfxbGt9oDDpZpnVrvsBAAAAAAAAAAAAACUZTq7hvdSLGEXEs6urVVXVX03t+nEddvvjrvT9h5J1/UseAAAmPnmudS9/L2I5Ii6lz/obra6uVtXyymq1Wq0s5dez46XlaqXxvjZP62VL4wO8IB6Oq/qbLTe2a5r1fnlWe/v71T9rXA0O0LH56DBwAIiIybPRPc9IT5mqej66fpXD8eD4f/o4/jmIrh+nAAAAwNGrqqrqpY/zPpHO+fe77hQAMBf5+b99XkCtVqvVavXTVzdV091pFhGx1dymfs1gOH4AOGa24tOuu0CH5F+0YUS81HUngIXW67oDHIl7929v9FK+vebzQRrfPV8Lsif/rd7Odnn7adNZ2teYzOvxtR2DeGGf/rw4pz4skpx/v53/5Un7OK33hPPvtf6MODf75V/v51oH/elazn/Qzr/lqI//edmO/tT8S5XzHz5W/gP5AwAAAADAAst//19z/jfvMgAAAAAAAAAcO/fu397I973m8/+fm7Ke+z+fTjn/nvyLlPPvt/L/Smu9QWP+7jsP8v/X/dsbf7j5z//P04Pmv5RneumR1UuPiF76Sb1hmh5m7x62PRqMJ/s6+cbrEVGN3ourcS0248yedfvp/+NB+9k97XVPR3vaz+1pHz7Ufn5P+yh97kC1kttPxUb8LK7FuzvtddvSjP1fntFezWjP+Q8c/0XK+Q8bX3X+q6m915rW7n7cf+i4b06n/Zy3r37+12eOfndm2o7B7r411ft3soP+7PyfPDOOX9zYvH7q1pWbN6+fjTTZs/RcpMkTlvMfpa/d3/+vTNrz7/3m8Xr34/Fj578otmO4b/6vNObr/X11zn3rQs5/nL5y/u+m9unH/3HOf//j/7UO+gMAAAAAAAAAAAAAAACPUlXVzi2ib0fEhXT/T1f3ZgIA85Wf/6skL1er1Wq1Wr1bjxasP5+5bqqme6tZRMRfm9vUrxl+Ne2bAQCL7L8R8Y+uO0Fn5F+w/Hl/wwefyAsU4saHH/3kyrVrm9dvRCx33RkAAAAAAAAA4DPJ43+uN8Z//kJErLXW2zP+6zuxftjxP4d5ZneA0Sc80Pc+tvvjQb8x3PjL8ejxv0/Go8f/Hs74eaMZ7eMZ7bOuypp1zcbUGz0acv4vN8Y7r/M/0Rp+vYTxX9tj3pcg53+y8Xiu8/9ya71m/tXvjnP+/T35n775wc9P3/jwo9evfnDl/c33N396/uzZM+cvXLh48eLp965e2zwz+bfDHh+tnH8e+zrnTxly/jlz+Zcl5//FVMu/LDn/L6Va/mXJ+efXe/IvS84/v/eRf1ly/q+mWv5lyfl/NdXyL0vO/7VUy78sOf+vpVr+Zcn5v55q+Zcl538q1fIvS87/dKrlX5acfz7DJf+y5PzzlQ3yL0vO/1yq5V+WnP/5VMu/LDn/N1It/7Lk/L+eavmXJed/IdXyL0vO/xupln9Zcv4XUy3/suT8v5lq+Zcl5/+tVMu/LDn/N1Mt/7Lk/L+davmXJef/nVRPyX/QRb+Yj5z/d1Pt+C9Lzv+tVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZ5XE7c9T4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYW9e4uR667vAH52vWuvHSAGQuqkBtaOcRxnk11f4gutGxNCSBMuzcWU9BLb9a6dBd/itUuSRrJRoETCqKiiJS8tF0VtXiqsFlW0SlEeqlaVKhH6QF8QVSUeoiqggFSprdpsNef8//+dmZ2d2bXH65lzPh8p/nlnzsw5c+Y/s/td57sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTb8MGpLwxkWVb7L/9jbZa9pfb31aNr88vef62PEAAAALhS/5f/+cb16YL9i7hR3Tb/+J7vfXt2dnY2++SKPxr+yuxsumI0y4ZXZVl+XXTp3x8bqN8meC4bGRis+3iww+5XdLh+qMP1wx2uX9nh+lUdrh/pcP28EzDP6uL7Mfmdbcr/urY4pdkN2XB+3aYWt3puYNXgYPxeTm4gv83s8NFsOjueTWUTDdsX2w7k27+8obav+7O4r8G6fa2vrZCfPXskHsNAOMebGvY1d5/RTz6Qjf78Z88e+bOzr9/UanY8DQ33Vxznlo214/xcuKQ41oFsVTon8TgH645zfYvnZEXDcQ7kt6v9vfk431jkca6YO8xl1fycj2SD+d9fzc/TUP239dJ5Wh8u+69bsiy7MHfYzdvM21c2mK1puGRw7vkZKVZk7T5qS+kd2dCS1umGRazT2pzc1LhOm18T8fnfEG43tMAx1D9NP/nsynnP+1LXaVR71Au9VprXYLdfK72yBuO6eDV/0M+3XIObwuN/dvPCa7Dl2mmxBtPjrluDGzutwcGVK/JjTk/CQH6buTW4rWH7FfmeBvL52ub2a3D87InT4zNPP3PH9InDx6aOTZ3csW3bxI5du/bs2TN+dPr41ETx52We7d63JhtMr4GN4dzF18CtTdvWL9XZb3TvdTjS5nW4tmnbbr8Oh5of3MDyvCDnr+nitfFo7aSPXBzMFniN5c/P1it/HabHXfc6HKp7Hbb8nNLidTi0iNdhbZvTWxf3NctQ3X+tjuFqfS5YW7cGm78eaV6D3f56pFfW4EhYFz/cuvDngvXheJ8fW+rXIyvmrcH0cMN7T+2S9PX+yJ58tFqXN9euuG5ldm5m6sydTx0+e/bMtiyMZfHOurXSvF7X1D2mbN56HVzyet0//Z7nb25x+dpwrkbuqP0xsuBzVdtm553tn6v8s1vr89lw6fYsjC5b7vPZ6rN57XymLNnmfNa2+dz4lX8tnnJp3fvv8ALvvzH3v1nsL93VcyuGh4rX74p0doYb3o8bn6qh/L1rIN/3G+OLez8eDv8t9/vxDW3ej9c1bdvt9+Ph5gcX348HOn2348o0P58jYZ0cn2j/flzbZt32pa7Jobbvx7eEORDO/1dXFUkh5aK6tbPQuk37GhoaDo9rKO6hcZ3uaNh+OGSz2r5e2n5563TLLcV9rUiPbs5yrdPRpm27vU7T+9VC63Sg03ffLk/z8zkS1sUNO9qv09o2r+y88vfO1fGvde+dKzutweEVK2vHPJwWYfF+P7s6rsE7syPZqex4NplfuzJfTwP5vsbuWtwaXBn+W+73ynVt1uCWpm27vQbT57GF1t7A0PwH3wXNz+dIWBcv3NV+Dda2uXd3d7923RIuSdvUfe3a/P21hb7ndXPTabqa3/OqHeff727/vdnaNsf3LDVntj9Pt4dLrmtxnppfvwu9piaz5TlP68Jxvr5n4fNUO57aNl/Zu8j1tD/LsvNP3pN/vzf8+8pfnvvBtxv+3aXVv+mcf/Ken7716D8s5fgB6H9vFmNN8bmu7l+mFvPv/wAAAEBfiLl/MMxE/gcAAIDSiLk//l/hifwPAAAApRFz/1CYSUXy/7p7X59+83yWmvmzQbw+nYYHiu1ix3UifDw6O6d2+T0vTv3n355f3L4Hsyz73wd+r+X26x6Ix1UYDcd56UONl8+/4flF7f/Qgbnt6vvrXw/3Hx/PYpdBqwruRJZlL1//pXw/o49dzOcrDxzK58MXnn+uts0be4uP4+1fe2ex/Z+E8u/+o4cbbv9aOA8/DnPiwdbnI97uWxdvW7/7E3P7i7cb2Pi2/GG/8Hhxv/Hn5Hz5uWL7eJ4XOv6/++JL36pt/9T7Wh//+cHWx/9SuN8Xw/zvdxfb1z8HtY/j7T4fjj/uL97uzm9+t+XxX/pCsf3p+4rtDoUZ978lfLzpvten68/XUwOHGx5X9uFiu7j/iR/8QX59vL94/83HP3LwYsP5aF4fr/xLcT/jTdvHy+N+or9p2n/tfurXZ9z/S79/qOE8d9r/pYdfe3ftfpv3f3vTdqef3Jrvf+7+Gn9i059+/kst9xePZ/9fnG54PPsfCq/jsP8XHg/rMVz/P5eK+2v+6QqHHmp8/4nbf33t+YbHE93/82L/l+4+ls9VI6vXXPeWt77twntr5y7LXn2kuL9O+z/2tVMNx/+NG4vzEa+PHf3m/S8k7v/MZ8ZOnpo5Nz1Zd1bzn53zkeJ44vFeH95bmz8+eOrsE1NnRidGJ7JstLw/Qu+yfTPMnxbjwlJvv/VAeD5v/urLazZ//4vx8n99tLj84oPF561bw3ZfDpevDc/fle7/hQ035q/vgVeKjxt67F2wftN/7FnUhuHxN39dENf76Xc9kZ+H2nX55434ur7C4//RZHE/3wnndTb8ZOaNN87tr377+LMRLj5SvN6v+PyFt7n4vP55eL4/+uPi/uNxxcf7o/B1zHfXNb7fxfXxnfODzfef/xSPC+H9JLtQXB+3iuf74hs3tjy8+HNIsgs35R//Ybqfm5b0MBcy8/TM+PHpk+eeGj87NXN2fObpZw6eOHXu5NmD+c/yPPipTrefe39ak78/TU7t2pnl71aninGVXevjP33g7izLNk9OHT187ujZA6enzhw7MjNzZGpyZvPho0enPtPp9tOT+7Zt37tj9/axY9OT+/bs3btj79j0yVO1wygOqoNdE58eO3nmYH6TmX079267666dE2MnTk1O7ds9MTF2rtPt889NY7Vb/+7Ymanjh89On5gam5l+Zmrftr27dm3v+NMAT5w+OjM6fubcyfFzM1NnxovHMno2v7j2ua/T7SmnmX8rvp5tNlD8IL7s47fvSj+ftebFzy54V8UmTT9A9PXws2j+6e2n9yzm45j7h8NMKpL/AQAAoApi7l8ZZiL/AwAAQGnE3L8qzET+BwAAgNKIuX8kzKQi+V//X/9f/1//X/+/9f71//uT/n97+v8d6P9fQX9+Vv//wJHJ3RP6//r/1Ou1/n/M/auzrJL5HwAAAKog5v41YSbyPwAAAJRGzP3XhZnI/wAAAFAaMfe/JcykIvlf/1//X/9f/1//v/X+9f/7k/5/e/r/Hej/+/3/+v/6/3RVr/X/Y+5/a5hJRfI/AAAAVEHM/W8LM5H/AQAAoDRi7r8+zET+BwAAgNKIuX9tmElF8r/+v/6//r/+v/5/6/3r//cn/f/29P870P/X/9f/1/+nq3qt/x9z/9vDTCqS/wEAAKAKYu5/R5iJ/A8AAAClEXP/O8NM5H8AAAAojZj7bwgzqUj+1//X/9f/1//X/2+9f/3//qT/357+/8LyDfX/9f/1//X/6ape6//H3P+uMJOK5H8AAACogpj7bwwzkf8BAACgNGLu/4UwE/kfAAAASiPm/nVhJhXJ//r/+v/6//r/+v+t96//35+uYv8/byTq/5e3/5/T/9f/1//X/6ereq3/H3P/TWEmFcn/AAAAUAUx998cZiL/AwAAQGnE3P+LYSbyPwAAAJRGzP3rw0wqkv/1/7va/7+tvpil/6//37Q+9P/1//X/l4Hf/9+e/n8H+v/6//r/+v90Va/1/2Puf3eYSUXyPwAAAFRBzP3vCTOR/wEAAKA0Yu5/b5iJ/A8AAAClEXP/aJhJRfK//r/f/6//r/+v/996//r//Un/vz39/w6udv+/+MJT//8qudbHr/+v/898vdb/j7l/Q5hJRfI/AAAAVEHM/RvDTOR/AAAAKI2Y+28JM5H/AQAAoDRi7t8UZlKR/K//r/+v/6//r//fev/6//1J/789/f8O/P5//X/9f/1/uqrX+v8x978vzKQi+R8AAACqIOb+zWEm8j8AAACURsz9t4aZyP8AAABQGjH3bwkzqUj+1//X/9f/v4z+/9avFTfU/9f/1//vOfr/7en/d6D/r/+v/6//T1f1Wv8/5v7bwkwqkv8BAACgCmLu3xpmIv8DAABAacTcf3uYifwPAAAApRFz/1iYSUXyv/6//r/+v9//r//fev/6//1J/789/f8O9P/1//X/9f/pql7r/8fcf0eYSUXyPwAAAFRBzP13hpnI/wAAAFAaMfePh5nI/wAAAFAaMfdPhJlUJP8vd/+/7gzr/+v/6//r/+v/6/93nf5/e9eu/9/qM+V8+v/6//18/Pr/+v/M12v9/5j7t4WZvqKrSP4HAACAKoi5f3uYifwPAAAApRFz/44wE/kfAAAASiPm/p1hJhXJ/37/v/6//r/+v/5/6/3r//eH5oK9/n97fv9/B/r/+v/6//r/dFWv9f9j7r8rzKQi+R8AAACqIOb+XWEm8j8AAACURsz9u8NM5H8AAAAojZj794SZVCT/6//r/+v/6//r/7fev/5/f9L/b68q/f9I/39prnV/vt+PX/9f/5/5eq3/H3P/3jCTiuR/AAAAqIKY+98fZiL/AwAAQGnE3P9LYSbyPwAAAJRGzP2/HGZSkfyv/6//r/+v/99H/f+7M/1//f8O9P/bq0r/3+//vzzXuj/f78ev/6//z3y91v+PuX9fmElF8j8AAABUQcz9vxJmIv8DAABAacTcf3eYifwPAAAApRFz//4wk4rkf/1//X/9f/3/Pur/Nzwe/X/9/1b0/9vr3f5/fGXp/+v/9+/x6//r/zNfr/X/Y+7/QJhJRfI/AAAAVEHM/feEmczP/4PLd1QAAABAN8Xc/8EwE//+DwAAAKURc/+9YSYVyf/6//r/+v/6//r/rfev/9+f9P/b693+f8Hv/9f/7+fj1//X/2e+Xuv/x9z/oTCTiuR/AAAAqIKY++8LM5H/AQAAoDRi7v9wmIn8DwAAAKURc//9YSYVyf/6//r/+v/L1v+fyPT/9f/1/686/f/29P870P/X/9f/1/+nq3qt/x9z/6+GmVQk/wMAAEAVxNz/QJiJ/A8AAAClEXP/g2Em8j8AAACURsz9HwkzqUj+1//X/9f/9/v/9f9b71//vz/p/7en/9+B/r/+v/6//j9d1Wv9/5j7PxpmUpH8DwAAAFUQc//HwkzkfwAAACiNmPs/HmYi/wMAAEBpxNz/a2EmFcn/+v/6//r/+v/6/633r//fn/T/29P/70D/X/9f/1//n67qtf5/zP0PhZlUJP8DAABAFcTc/3CYifwPAAAApRFz/yNhJvI/AAAAlEbM/Y+GmVQk/+v/6//r/+v/6/+33r/+f3/S/29P/78D/X/9f/1//X+6qtf6/zH3HwgzqUj+BwAAgCqIuf8TYSbyPwAAAJRGzP2/HmYi/wMAAEBpxNz/yTCTiuR//X/9f/1//X/9/9b71//vT/r/7en/d6D/r/+v/6//T1f1Wv8/5v7Hwkwqkv8BAACgCmLu/40wE/kfAAAASiPm/t8MM5H/AQAAoDRi7v+tMJOK5H/9f/1//X/9f/3/1vvX/+9P+v/t6f93oP+v/6//r/9PV/Va/z/m/t8OM6lI/gcAAIAqiLn/8TAT+R8AAABKI+b+g2Em8j8AAACURsz9h8JMKpL/9f/1//X/e7T//8cb//mH3/vYoW36//r/+v9Lov/fnv5/B/r/+v/6//r/dFWv9f9j7j8cZlKR/A8AAABVEHP/74SZyP8AAABQGjH3Hwkzkf8BAACgNGLunwwzqUj+1//X/9f/79H+v9//n+j/6/8vhf5/e/r/Hej/6//r/+v/01VL7v+PLnhXXen/x9w/FWZSkfwPAAAAVRBz/9EwE/kfAAAASiPm/mNhJvI/AAAAlEbM/U+EmVQk/+v/6//r/+v/6/+33r/+f3/S/29P/78D/X/9f/1//X+6qtd+/3/M/dNhJhXJ/wAAAFAFMfd/KsxE/gcAAIDSiLn/02Em8j8AAACURsz9x8NMKpL/9f/1//X/9f/1/1vvX/+/P+n/t6f/34H+v/6//r/+P13Va/3/mPtPhJlUJP8DAABAFcTcfzLMRP4HAACA0oi5/1SYifwPAAAApRFz/+kwk4rkf/1//X/9f/1//f/W+9f/70/6/+3p/3eg/9+yP//X3/+rexZze/1//X/9f5r1Wv8/5v4nw0wqkv8BAACgCmLuPxNmIv8DAABAacTcPxNmIv/D/7N3386flVUcx3/MiDMOhXQWFjb+FzRWFv4L1rY25ow555xzFgMoYsasGFHMGQOKiooBFQuH3XMOs/y+3uvu3t197nNer+YUiM/XcYeZzzDvuQAAANPI3f/QuKXJ/tf/6/8vXP9/0d30//p//b/+f2v6/2X6/xX6f9//1//r/9nUaP1/7v6HxS1N9j8AAAB0kLv/4XGL/Q8AAADTyN3/iLjF/gcAAIBp5O5/ZNzSZP/r//X/vv8/ev9/D/2//l//fxr0/8s69f8PueGSB9969b2vOZ339f/6f/2//p9tjdb/5+5/VNzSZP8DAABAB7n7Hx232P8AAAAwjdz9j4lb7H8AAACYRu7+x8YtTfa//l//r/8fvf/3/X/9v/7/dOj/l3Xq/8/kff2//l//r/9nW6P1/7n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAATCN3/xPiFvsfAAAAppG7//K4pcn+1//r//X/+n/9/+H39f/7NFD/f7H+X/+v/9f/6//1/92N1v/n7n9i3NJk/wMAAEAHufufFLfY/wAAADCN3P1PjlvsfwAAAJhG7v6nxC1N9r/+X/+v/9f/6/8Pv6//36eB+v8zel//r//X/+/39+v/9f8cN1r/n7v/qXFLk/0PAAAAHeTuf1rcYv8DAADANHL3Pz1usf8BAABgGrn7nxG3NNn/+n/9v/5f/6//P/y+/n+fLlT/f/mR/l//f+d/jf5f/6//1/9z0mj9f+7+Z8YtTfY/AAAAdJC7/1lxi/0PAAAA08jd/+y4xf4HAACAaeTuf07c0mT/6//1//p//b/+//D7+v998v3/Zfr/Ffp//b/+X//Ppkbr/3P3PzduabL/AQAAoIPc/c+LW+x/AAAAmEbu/ufHLfY/AAAATCN3/wvilib7X/+v/9f/6//1/4ff1//vk/5/mf5/hf5f/6//1/+zqdH6/9z9L4xbmux/AAAA6CB3/4viFvsfAAAAppG7/8Vxi/0PAAAA08jd/5K4ZXX/37ZxkXdhnNr/X6T/1//r/4/0//r/k/T/+6T/X6b/X6H/1//r//X/bGq0/j93/0vjFv/+HwAAAKaRu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3NJk//v+v/5f/6//v/aO/wH6f/3/JLbr/+97T/2//l//r//X/+v/OTuj9f+5+18ZtzTZ/wAAANBB7v5XxS32PwAAAEwjd/+r4xb7HwAAAKaRu/81cUuT/a//1//r//X/vv9/+H39/z75/v8y/f8K/b/+X/+v/2dTo/X/uftfG7c02f8AAADQQe7+18Ut9j8AAABMI3f/6+MW+x8AAACmkbv/DXFLk/2/af9/x9+l/y/6f/3/Xf986P/1//r/c0//v0z/v0L/r//X/+v/2dRo/X/u/jfGLU32PwAAAHSQu/9NcYv9DwAAANPI3f/muMX+BwAAgGnk7n9L3NJk//v+/9F99P/6f/2//v/Q+/r/fdL/L9P/r9D/6//1//p/NjVa/5+7/61xS5P9DwAAAB3k7n9b3GL/AwAAwDRy9789brH/AQAAYBq5+98RtzTZ//r/s/7+/4kEWP9/6u/X/59K/x9/HvT/+v/zQP+/TP+/Qv+v/9f/6//Z1Gj9f+7+d8YtTfY/AAAAdJC7/11xi/0PAAAA08jd/+64xf4HAACAaeTuf0/c0mT/6//Puv8/Qf9/6u/X/x/+86H/1//r/889/f8y/f8K/b/+X/+v/2dTo/X/ufuviFua7H8AAADoIHf/e+MW+x8AAACmkbv/fXGL/Q8AAADTyN3//rilyf7X/+v/9f/6f/3/4ff1//uk/1+m/z86Orpy4Qfo//X/+n/9P5sarf/P3f+BuKXJ/gcAAIAOcvdfGbfY/wAAADCN3P1XxS32PwAAAEwjd/8H45Ym+1//r//X/+v/9f+H39f/71Pv/j9r+f9N/79C/6//1//r/9nUaP1/7v4PxS1N9j8AAAB0kLv/6rjF/gcAAIBp5O7/cNxi/wMAAMA0cvdfE7c02f+n9P8Zter/9f/nsP+//Qz6/4vjr+n/9f9H+n/9/4re/f86/f+KS0/+I0H/r//X/+v/2cZo/X/u/o/ELfe7yzAEAAAAdit3/0fjlib//h8AAAA6yN3/sbjF/gcAAIBp5O7/eNzSZP/7/r/+3/f/9f/6/8Pv6//3Sf+/TP+/wvf/9f/6f/0/mxqt/8/d/4m4pcn+BwAAgA5y938ybrH/AQAAYBq5+z8Vt9j/AAAAMI3c/dfGLU32v/5f/6//1//r/w+/r//fJ/3/Mv3/Cv2//l//r/9nU6P1/7n7Px23NNn/AAAA0EHu/s/ELfY/AAAATCN3/2fjFvsfAAAAppG7/3NxS5P9r//X/+v/9f/6/8Pv6//3Sf+/TP+/Qv+v/9f/6//Z1Gj9f+7+z8ctTfY/AAAAdJC7/wtxi/0PAAAA08jd/8W4xf4HAACAaeTu/1Lc0mT/6//1//p//b/+//D7+v990v8v0/+v0P/r//X/+n82NVr/n7v/y3FLk/0PAAAAHeTuvy5usf8BAABgGrn7vxK32P8AAAAwjdz9X41bmux//b/+X/+v/9f/H35f/79Po/T/l132gOv1//p//b/+/9z1/5ce+/v1/4xotP4/d//X4pYm+x8AAAA6yN3/9bjF/gcAAIBp5O7/Rtxi/wMAAMA0cvd/M25psv/1//p//X+P/v/++n/9fxOj9P++/39mv1//r//f8+/3/X/9P8eN1v/n7r8+bmmy/wEAAKCD3P3filvsfwAAAJhG7v5vxy32PwAAAEwjd/8NcUuT/a//1//r/3v0/0f6f/1/E/r/Zfr/Ffr/89TP37TJ772L/Mey/l//z0BG6/9z938nbmmy/wEAAKCD3P3fjVvsfwAAAJhG7v7vxS32PwAAAEwjd//345Ym+1//r//X/+v/9f+H39f/75P+f5n+f4X+3/f/9f/6fzY1Wv+fu/8HcUuT/Q8AAAAd5O7/Ydxi/wMAAMA0cvf/KG6x/wEAAGAauft/HLc02f/6/x32/3eP/7D+X/+v/9f/6/+P0f8v0/+v0P/r//X/+n82NVr/n7v/J3FLk/0PAAAAHeTu/2ncYv8DAADANHL3/yxusf8BAABgGrn7fx63NNn/+v8d9v++/6//1/+foP/X/x+i/1+m/1+h/9f/6//1/2xqtP4/d/8v4pYm+x8AAAA6yN1/Y9xi/wMAAMA0cvf/Mm6x/wEAAGAauft/Fbc02f/6f/3/Sv9/480n/5L+X/+v/z9P/f9F+v+zov9fpv9fof/X/+v/9f9sarT+P3f/r+OWJvsfAAAAOsjd/5u4xf4HAACAaeTuvylusf8BAABgGrn7fxu3NNn/+n/9v+//6//1/4ff9/3/fdL/L7uQ/f8t/8ez+n/9/55/v/5f/89xo/X/uft/F7c02f8AAADQQe7+m+MW+x8AAACmkbv/93GL/Q8AAADTyN3/h7ilyf7X/+v/9f/6f/3/4ff1//uk/1/m+/8r9P/6f/2//p9Njdb/5+7/Y9zSZP8DAABAB7n7b4lb7H8AAACYRu7+P8Ut9j8AAABMI3f/n+OWJvtf/6//1//r//fb/9/rksuve+CDrrpC/8+d9P/L9P8r9P/6f/2//p9Njdb/5+7/S9zSZP8DAABAB7n7b41b7H8AAACYRu7+v8Yt9j8AAABMI3f/3+KWJvtf/6//1//r//fb//v+v/7/OP3/Mv3/Cv2//l//r/9nU6P1/7n7/x63NNn/AAAA0EHu/n/ELfY/AAAATCN3/21xi/0PAAAA08jd/8+4pcn+1//r//X/+n/9/7H3T/xfqv/fJ/3/Mv3/Cv2//l//r/9nU6P1/7n7/xW3NNn/AAAA0EHu/n/HLfY/AAAATCN3/+1xi/0PAAAA08jd/5+4pcn+1//r//X/+n/9/+H39f/7pP9fpv9fof/X/+v/9f9sarT+P3f/fwMAAP//ZMtsvA==") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/152, 0x98) 10:21:26 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) [ 1656.345182][ T27] audit: type=1800 audit(1684405286.096:998): pid=27819 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 1656.375703][ T5679] usb 4-1: USB disconnect, device number 108 10:21:26 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) 10:21:26 executing program 2: fsopen(&(0x7f0000000000)='sysv\x00', 0x1) getpgid(0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x1, 0x11, r0, 0x0) [ 1656.587414][ T27] audit: type=1804 audit(1684405286.336:999): pid=27822 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1323/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1656.684599][T27085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1656.692487][T27085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:21:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1c) 10:21:26 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) 10:21:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1656.813153][ T5679] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1657.083229][ T5679] usb 4-1: Using ep0 maxpacket: 32 [ 1657.157492][ T27] audit: type=1804 audit(1684405286.906:1000): pid=27842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1324/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1657.233464][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1657.253268][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.265924][T27824] loop4: detected capacity change from 0 to 32768 [ 1657.275449][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.280979][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.329623][ T5679] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1657.358941][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.387184][ T5679] usb 4-1: config 0 descriptor?? [ 1657.454550][ T5679] hub 4-1:0.0: USB hub found [ 1657.673442][ T5679] hub 4-1:0.0: 1 port detected [ 1658.533184][ T5679] hub 4-1:0.0: activate --> -90 [ 1658.753173][ T5679] hub 4-1:0.0: hub_ext_port_status failed (err = 3) 10:21:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:29 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) 10:21:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1c) 10:21:29 executing program 4: syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x18800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0xfe, 0x5f6b, &(0x7f00000002c0)="$eJzs3U1vHVf9B/DfffRD/22tLqr+I4TclKdSmscSAgXaLmDBhgXKFiVy3SoiBZQElFYRceUNC14ECIklQixZ8QK6YMuOF0CkBAnUFYPG9xxnPLnOder4znXO5yM5M785M/aZfO/43uuZuScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjB9390thcRl3+ZFqxF/F8MIvoRK3W9HhEr62t5/WFEvBQ7zfFiRIyWIurtd/55PuKNiPjkuYh7929v1IvPHbAf3/vT33//42d++Lc/jk7/5883B2/ut96tW7/591/uHG6fAQAAoDRVVVW99Db/RHp/3++6UwDAXOTn/yrJy49DPW7sxyL0R61Wq9XqRa+bqunuNIuI2GpuU79mcDoeAI6Zrfi06y7QIfkXbRgRz3TdCWCh9bruAEfi3v3bG72Ub6/5fLA+ac/XguzJf6u3e3/HftNZ2teYzOvxtR2DeGGf/qzMqQ+LJOffb+d/edKez60ddf7zsl/+48mtT8XJ+Q/a+bc8Pfn3p+Zfqpz/8LHyH8gfAAAAAAAWWP77/1rH53+XDr8rB/Ko87/rc+oDAAAAAAAAADxphx3/b5fx/wAAAGBh1e/Va7997sGy/T6LrV5+qRfxbGt9oDDpZpnVrvsBAAAAAAAAAAAAACUZTq7hvdSLGEXEs6urVVXVX03t+nEddvvjrvT9h5J1/UseAAAmPnmudS9/L2I5Ii6lz/obra6uVtXyymq1Wq0s5dez46XlaqXxvjZP62VL4wO8IB6Oq/qbLTe2a5r1fnlWe/v71T9rXA0O0LH56DBwAIiIybPRPc9IT5mqej66fpXD8eD4f/o4/jmIrh+nAAAAwNGrqqrqpY/zPpHO+fe77hQAMBf5+b99XkCtVqvVavXTVzdV091pFhGx1dymfs1gOH4AOGa24tOuu0CH5F+0YUS81HUngIXW67oDHIl7929v9FK+vebzQRrfPV8Lsif/rd7Odnn7adNZ2teYzOvxtR2DeGGf/rw4pz4skpx/v53/5Un7OK33hPPvtf6MODf75V/v51oH/elazn/Qzr/lqI//edmO/tT8S5XzHz5W/gP5AwAAAADAAst//19z/jfvMgAAAAAAAAAcO/fu397I973m8/+fm7Ke+z+fTjn/nvyLlPPvt/L/Smu9QWP+7jsP8v/X/dsbf7j5z//P04Pmv5RneumR1UuPiF76Sb1hmh5m7x62PRqMJ/s6+cbrEVGN3ourcS0248yedfvp/+NB+9k97XVPR3vaz+1pHz7Ufn5P+yh97kC1kttPxUb8LK7FuzvtddvSjP1fntFezWjP+Q8c/0XK+Q8bX3X+q6m915rW7n7cf+i4b06n/Zy3r37+12eOfndm2o7B7r411ft3soP+7PyfPDOOX9zYvH7q1pWbN6+fjTTZs/RcpMkTlvMfpa/d3/+vTNrz7/3m8Xr34/Fj578otmO4b/6vNObr/X11zn3rQs5/nL5y/u+m9unH/3HOf//j/7UO+gMAAAAAAAAAAAAAAACPUlXVzi2ib0fEhXT/T1f3ZgIA85Wf/6skL1er1Wq1Wr1bjxasP5+5bqqme6tZRMRfm9vUrxl+Ne2bAQCL7L8R8Y+uO0Fn5F+w/Hl/wwefyAsU4saHH/3kyrVrm9dvRCx33RkAAAAAAAAA4DPJ43+uN8Z//kJErLXW2zP+6zuxftjxP4d5ZneA0Sc80Pc+tvvjQb8x3PjL8ejxv0/Go8f/Hs74eaMZ7eMZ7bOuypp1zcbUGz0acv4vN8Y7r/M/0Rp+vYTxX9tj3pcg53+y8Xiu8/9ya71m/tXvjnP+/T35n775wc9P3/jwo9evfnDl/c33N396/uzZM+cvXLh48eLp965e2zwz+bfDHh+tnH8e+zrnTxly/jlz+Zcl5//FVMu/LDn/L6Va/mXJ+efXe/IvS84/v/eRf1ly/q+mWv5lyfl/NdXyL0vO/7VUy78sOf+vpVr+Zcn5v55q+Zcl538q1fIvS87/dKrlX5acfz7DJf+y5PzzlQ3yL0vO/1yq5V+WnP/5VMu/LDn/N1It/7Lk/L+eavmXJed/IdXyL0vO/xupln9Zcv4XUy3/suT8v5lq+Zcl5/+tVMu/LDn/N1Mt/7Lk/L+davmXJef/nVRPyX/QRb+Yj5z/d1Pt+C9Lzv+tVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZ5XE7c9T4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYW9e4uR667vAH52vWuvHSAGQuqkBtaOcRxnk11f4gutGxNCSBMuzcWU9BLb9a6dBd/itUuSRrJRoETCqKiiJS8tF0VtXiqsFlW0SlEeqlaVKhH6QF8QVSUeoiqggFSprdpsNef8//+dmZ2d2bXH65lzPh8p/nlnzsw5c+Y/s/td57sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTb8MGpLwxkWVb7L/9jbZa9pfb31aNr88vef62PEAAAALhS/5f/+cb16YL9i7hR3Tb/+J7vfXt2dnY2++SKPxr+yuxsumI0y4ZXZVl+XXTp3x8bqN8meC4bGRis+3iww+5XdLh+qMP1wx2uX9nh+lUdrh/pcP28EzDP6uL7Mfmdbcr/urY4pdkN2XB+3aYWt3puYNXgYPxeTm4gv83s8NFsOjueTWUTDdsX2w7k27+8obav+7O4r8G6fa2vrZCfPXskHsNAOMebGvY1d5/RTz6Qjf78Z88e+bOzr9/UanY8DQ33Vxznlo214/xcuKQ41oFsVTon8TgH645zfYvnZEXDcQ7kt6v9vfk431jkca6YO8xl1fycj2SD+d9fzc/TUP239dJ5Wh8u+69bsiy7MHfYzdvM21c2mK1puGRw7vkZKVZk7T5qS+kd2dCS1umGRazT2pzc1LhOm18T8fnfEG43tMAx1D9NP/nsynnP+1LXaVR71Au9VprXYLdfK72yBuO6eDV/0M+3XIObwuN/dvPCa7Dl2mmxBtPjrluDGzutwcGVK/JjTk/CQH6buTW4rWH7FfmeBvL52ub2a3D87InT4zNPP3PH9InDx6aOTZ3csW3bxI5du/bs2TN+dPr41ETx52We7d63JhtMr4GN4dzF18CtTdvWL9XZb3TvdTjS5nW4tmnbbr8Oh5of3MDyvCDnr+nitfFo7aSPXBzMFniN5c/P1it/HabHXfc6HKp7Hbb8nNLidTi0iNdhbZvTWxf3NctQ3X+tjuFqfS5YW7cGm78eaV6D3f56pFfW4EhYFz/cuvDngvXheJ8fW+rXIyvmrcH0cMN7T+2S9PX+yJ58tFqXN9euuG5ldm5m6sydTx0+e/bMtiyMZfHOurXSvF7X1D2mbN56HVzyet0//Z7nb25x+dpwrkbuqP0xsuBzVdtm553tn6v8s1vr89lw6fYsjC5b7vPZ6rN57XymLNnmfNa2+dz4lX8tnnJp3fvv8ALvvzH3v1nsL93VcyuGh4rX74p0doYb3o8bn6qh/L1rIN/3G+OLez8eDv8t9/vxDW3ej9c1bdvt9+Ph5gcX348HOn2348o0P58jYZ0cn2j/flzbZt32pa7Jobbvx7eEORDO/1dXFUkh5aK6tbPQuk37GhoaDo9rKO6hcZ3uaNh+OGSz2r5e2n5563TLLcV9rUiPbs5yrdPRpm27vU7T+9VC63Sg03ffLk/z8zkS1sUNO9qv09o2r+y88vfO1fGvde+dKzutweEVK2vHPJwWYfF+P7s6rsE7syPZqex4NplfuzJfTwP5vsbuWtwaXBn+W+73ynVt1uCWpm27vQbT57GF1t7A0PwH3wXNz+dIWBcv3NV+Dda2uXd3d7923RIuSdvUfe3a/P21hb7ndXPTabqa3/OqHeff727/vdnaNsf3LDVntj9Pt4dLrmtxnppfvwu9piaz5TlP68Jxvr5n4fNUO57aNl/Zu8j1tD/LsvNP3pN/vzf8+8pfnvvBtxv+3aXVv+mcf/Ken7716D8s5fgB6H9vFmNN8bmu7l+mFvPv/wAAAEBfiLl/MMxE/gcAAIDSiLk//l/hifwPAAAApRFz/1CYSUXy/7p7X59+83yWmvmzQbw+nYYHiu1ix3UifDw6O6d2+T0vTv3n355f3L4Hsyz73wd+r+X26x6Ix1UYDcd56UONl8+/4flF7f/Qgbnt6vvrXw/3Hx/PYpdBqwruRJZlL1//pXw/o49dzOcrDxzK58MXnn+uts0be4uP4+1fe2ex/Z+E8u/+o4cbbv9aOA8/DnPiwdbnI97uWxdvW7/7E3P7i7cb2Pi2/GG/8Hhxv/Hn5Hz5uWL7eJ4XOv6/++JL36pt/9T7Wh//+cHWx/9SuN8Xw/zvdxfb1z8HtY/j7T4fjj/uL97uzm9+t+XxX/pCsf3p+4rtDoUZ978lfLzpvten68/XUwOHGx5X9uFiu7j/iR/8QX59vL94/83HP3LwYsP5aF4fr/xLcT/jTdvHy+N+or9p2n/tfurXZ9z/S79/qOE8d9r/pYdfe3ftfpv3f3vTdqef3Jrvf+7+Gn9i059+/kst9xePZ/9fnG54PPsfCq/jsP8XHg/rMVz/P5eK+2v+6QqHHmp8/4nbf33t+YbHE93/82L/l+4+ls9VI6vXXPeWt77twntr5y7LXn2kuL9O+z/2tVMNx/+NG4vzEa+PHf3m/S8k7v/MZ8ZOnpo5Nz1Zd1bzn53zkeJ44vFeH95bmz8+eOrsE1NnRidGJ7JstLw/Qu+yfTPMnxbjwlJvv/VAeD5v/urLazZ//4vx8n99tLj84oPF561bw3ZfDpevDc/fle7/hQ035q/vgVeKjxt67F2wftN/7FnUhuHxN39dENf76Xc9kZ+H2nX55434ur7C4//RZHE/3wnndTb8ZOaNN87tr377+LMRLj5SvN6v+PyFt7n4vP55eL4/+uPi/uNxxcf7o/B1zHfXNb7fxfXxnfODzfef/xSPC+H9JLtQXB+3iuf74hs3tjy8+HNIsgs35R//Ybqfm5b0MBcy8/TM+PHpk+eeGj87NXN2fObpZw6eOHXu5NmD+c/yPPipTrefe39ak78/TU7t2pnl71aninGVXevjP33g7izLNk9OHT187ujZA6enzhw7MjNzZGpyZvPho0enPtPp9tOT+7Zt37tj9/axY9OT+/bs3btj79j0yVO1wygOqoNdE58eO3nmYH6TmX079267666dE2MnTk1O7ds9MTF2rtPt889NY7Vb/+7Ymanjh89On5gam5l+Zmrftr27dm3v+NMAT5w+OjM6fubcyfFzM1NnxovHMno2v7j2ua/T7SmnmX8rvp5tNlD8IL7s47fvSj+ftebFzy54V8UmTT9A9PXws2j+6e2n9yzm45j7h8NMKpL/AQAAoApi7l8ZZiL/AwAAQGnE3L8qzET+BwAAgNKIuX8kzKQi+V//X/9f/1//X/+/9f71//uT/n97+v8d6P9fQX9+Vv//wJHJ3RP6//r/1Ou1/n/M/auzrJL5HwAAAKog5v41YSbyPwAAAJRGzP3XhZnI/wAAAFAaMfe/JcykIvlf/1//X/9f/1//v/X+9f/7k/5/e/r/Hej/+/3/+v/6/3RVr/X/Y+5/a5hJRfI/AAAAVEHM/W8LM5H/AQAAoDRi7r8+zET+BwAAgNKIuX9tmElF8r/+v/6//r/+v/5/6/3r//cn/f/29P870P/X/9f/1/+nq3qt/x9z/9vDTCqS/wEAAKAKYu5/R5iJ/A8AAAClEXP/O8NM5H8AAAAojZj7bwgzqUj+1//X/9f/1//X/2+9f/3//qT/357+/8LyDfX/9f/1//X/6ape6//H3P+uMJOK5H8AAACogpj7bwwzkf8BAACgNGLu/4UwE/kfAAAASiPm/nVhJhXJ//r/+v/6//r/+v+t96//35+uYv8/byTq/5e3/5/T/9f/1//X/6ereq3/H3P/TWEmFcn/AAAAUAUx998cZiL/AwAAQGnE3P+LYSbyPwAAAJRGzP3rw0wqkv/1/7va/7+tvpil/6//37Q+9P/1//X/l4Hf/9+e/n8H+v/6//r/+v90Va/1/2Puf3eYSUXyPwAAAFRBzP3vCTOR/wEAAKA0Yu5/b5iJ/A8AAAClEXP/aJhJRfK//r/f/6//r/+v/996//r//Un/vz39/w6udv+/+MJT//8qudbHr/+v/898vdb/j7l/Q5hJRfI/AAAAVEHM/RvDTOR/AAAAKI2Y+28JM5H/AQAAoDRi7t8UZlKR/K//r/+v/6//r//fev/6//1J/789/f8O/P5//X/9f/1/uqrX+v8x978vzKQi+R8AAACqIOb+zWEm8j8AAACURsz9t4aZyP8AAABQGjH3bwkzqUj+1//X/9f/v4z+/9avFTfU/9f/1//vOfr/7en/d6D/r/+v/6//T1f1Wv8/5v7bwkwqkv8BAACgCmLu3xpmIv8DAABAacTcf3uYifwPAAAApRFz/1iYSUXyv/6//r/+v9//r//fev/6//1J/789/f8O9P/1//X/9f/pql7r/8fcf0eYSUXyPwAAAFRBzP13hpnI/wAAAFAaMfePh5nI/wAAAFAaMfdPhJlUJP8vd/+/7gzr/+v/6//r/+v/6/93nf5/e9eu/9/qM+V8+v/6//18/Pr/+v/M12v9/5j7t4WZvqKrSP4HAACAKoi5f3uYifwPAAAApRFz/44wE/kfAAAASiPm/p1hJhXJ/37/v/6//r/+v/5/6/3r//eH5oK9/n97fv9/B/r/+v/6//r/dFWv9f9j7r8rzKQi+R8AAACqIOb+XWEm8j8AAACURsz9u8NM5H8AAAAojZj794SZVCT/6//r/+v/6//r/7fev/5/f9L/b68q/f9I/39prnV/vt+PX/9f/5/5eq3/H3P/3jCTiuR/AAAAqIKY+98fZiL/AwAAQGnE3P9LYSbyPwAAAJRGzP2/HGZSkfyv/6//r/+v/99H/f+7M/1//f8O9P/bq0r/3+//vzzXuj/f78ev/6//z3y91v+PuX9fmElF8j8AAABUQcz9vxJmIv8DAABAacTcf3eYifwPAAAApRFz//4wk4rkf/1//X/9f/3/Pur/Nzwe/X/9/1b0/9vr3f5/fGXp/+v/9+/x6//r/zNfr/X/Y+7/QJhJRfI/AAAAVEHM/feEmczP/4PLd1QAAABAN8Xc/8EwE//+DwAAAKURc/+9YSYVyf/6//r/+v/6//r/rfev/9+f9P/b693+f8Hv/9f/7+fj1//X/2e+Xuv/x9z/oTCTiuR/AAAAqIKY++8LM5H/AQAAoDRi7v9wmIn8DwAAAKURc//9YSYVyf/6//r/+v/L1v+fyPT/9f/1/686/f/29P870P/X/9f/1/+nq3qt/x9z/6+GmVQk/wMAAEAVxNz/QJiJ/A8AAAClEXP/g2Em8j8AAACURsz9HwkzqUj+1//X/9f/9/v/9f9b71//vz/p/7en/9+B/r/+v/6//j9d1Wv9/5j7PxpmUpH8DwAAAFUQc//HwkzkfwAAACiNmPs/HmYi/wMAAEBpxNz/a2EmFcn/+v/6//r/+v/6/633r//fn/T/29P/70D/X/9f/1//n67qtf5/zP0PhZlUJP8DAABAFcTc/3CYifwPAAAApRFz/yNhJvI/AAAAlEbM/Y+GmVQk/+v/6//r/+v/6/+33r/+f3/S/29P/78D/X/9f/1//X+6qtf6/zH3HwgzqUj+BwAAgCqIuf8TYSbyPwAAAJRGzP2/HmYi/wMAAEBpxNz/yTCTiuR//X/9f/1//X/9/9b71//vT/r/7en/d6D/r/+v/6//T1f1Wv8/5v7Hwkwqkv8BAACgCmLu/40wE/kfAAAASiPm/t8MM5H/AQAAoDRi7v+tMJOK5H/9f/1//X/9f/3/1vvX/+9P+v/t6f93oP+v/6//r/9PV/Va/z/m/t8OM6lI/gcAAIAqiLn/8TAT+R8AAABKI+b+g2Em8j8AAACURsz9h8JMKpL/9f/1//X/e7T//8cb//mH3/vYoW36//r/+v9Lov/fnv5/B/r/+v/6//r/dFWv9f9j7j8cZlKR/A8AAABVEHP/74SZyP8AAABQGjH3Hwkzkf8BAACgNGLunwwzqUj+1//X/9f/79H+v9//n+j/6/8vhf5/e/r/Hej/6//r/+v/01VL7v+PLnhXXen/x9w/FWZSkfwPAAAAVRBz/9EwE/kfAAAASiPm/mNhJvI/AAAAlEbM/U+EmVQk/+v/6//r/+v/6/+33r/+f3/S/29P/78D/X/9f/1//X+6qtd+/3/M/dNhJhXJ/wAAAFAFMfd/KsxE/gcAAIDSiLn/02Em8j8AAACURsz9x8NMKpL/9f/1//X/9f/1/1vvX/+/P+n/t6f/34H+v/6//r/+P13Va/3/mPtPhJlUJP8DAABAFcTcfzLMRP4HAACA0oi5/1SYifwPAAAApRFz/+kwk4rkf/1//X/9f/1//f/W+9f/70/6/+3p/3eg/9+yP//X3/+rexZze/1//X/9f5r1Wv8/5v4nw0wqkv8BAACgCmLuPxNmIv8DAABAacTcPxNmIv/D/7N3386flVUcx3/MiDMOhXQWFjb+FzRWFv4L1rY25ow555xzFgMoYsasGFHMGQOKiooBFQuH3XMOs/y+3uvu3t197nNer+YUiM/XcYeZzzDvuQAAANPI3f/QuKXJ/tf/6/8vXP9/0d30//p//b/+f2v6/2X6/xX6f9//1//r/9nUaP1/7v6HxS1N9j8AAAB0kLv/4XGL/Q8AAADTyN3/iLjF/gcAAIBp5O5/ZNzSZP/r//X/vv8/ev9/D/2//l//fxr0/8s69f8PueGSB9969b2vOZ339f/6f/2//p9tjdb/5+5/VNzSZP8DAABAB7n7Hx232P8AAAAwjdz9j4lb7H8AAACYRu7+x8YtTfa//l//r/8fvf/3/X/9v/7/dOj/l3Xq/8/kff2//l//r/9nW6P1/7n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAATCN3/xPiFvsfAAAAppG7//K4pcn+1//r//X/+n/9/+H39f/7NFD/f7H+X/+v/9f/6//1/92N1v/n7n9i3NJk/wMAAEAHufufFLfY/wAAADCN3P1PjlvsfwAAAJhG7v6nxC1N9r/+X/+v/9f/6/8Pv6//36eB+v8zel//r//X/+/39+v/9f8cN1r/n7v/qXFLk/0PAAAAHeTuf1rcYv8DAADANHL3Pz1usf8BAABgGrn7nxG3NNn/+n/9v/5f/6//P/y+/n+fLlT/f/mR/l//f+d/jf5f/6//1/9z0mj9f+7+Z8YtTfY/AAAAdJC7/1lxi/0PAAAA08jd/+y4xf4HAACAaeTuf07c0mT/6//1//p//b/+//D7+v998v3/Zfr/Ffp//b/+X//Ppkbr/3P3PzduabL/AQAAoIPc/c+LW+x/AAAAmEbu/ufHLfY/AAAATCN3/wvilib7X/+v/9f/6//1/4ff1//vk/5/mf5/hf5f/6//1/+zqdH6/9z9L4xbmux/AAAA6CB3/4viFvsfAAAAppG7/8Vxi/0PAAAA08jd/5K4ZXX/37ZxkXdhnNr/X6T/1//r/4/0//r/k/T/+6T/X6b/X6H/1//r//X/bGq0/j93/0vjFv/+HwAAAKaRu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3NJk//v+v/5f/6//v/aO/wH6f/3/JLbr/+97T/2//l//r//X/+v/OTuj9f+5+18ZtzTZ/wAAANBB7v5XxS32PwAAAEwjd/+r4xb7HwAAAKaRu/81cUuT/a//1//r//X/vv9/+H39/z75/v8y/f8K/b/+X/+v/2dTo/X/uftfG7c02f8AAADQQe7+18Ut9j8AAABMI3f/6+MW+x8AAACmkbv/DXFLk/2/af9/x9+l/y/6f/3/Xf986P/1//r/c0//v0z/v0L/r//X/+v/2dRo/X/u/jfGLU32PwAAAHSQu/9NcYv9DwAAANPI3f/muMX+BwAAgGnk7n9L3NJk//v+/9F99P/6f/2//v/Q+/r/fdL/L9P/r9D/6//1//p/NjVa/5+7/61xS5P9DwAAAB3k7n9b3GL/AwAAwDRy9789brH/AQAAYBq5+98RtzTZ//r/s/7+/4kEWP9/6u/X/59K/x9/HvT/+v/zQP+/TP+/Qv+v/9f/6//Z1Gj9f+7+d8YtTfY/AAAAdJC7/11xi/0PAAAA08jd/+64xf4HAACAaeTuf0/c0mT/6//Puv8/Qf9/6u/X/x/+86H/1//r/889/f8y/f8K/b/+X/+v/2dTo/X/ufuviFua7H8AAADoIHf/e+MW+x8AAACmkbv/fXGL/Q8AAADTyN3//rilyf7X/+v/9f/6f/3/4ff1//uk/1+m/z86Orpy4Qfo//X/+n/9P5sarf/P3f+BuKXJ/gcAAIAOcvdfGbfY/wAAADCN3P1XxS32PwAAAEwjd/8H45Ym+1//r//X/+v/9f+H39f/71Pv/j9r+f9N/79C/6//1//r/9nUaP1/7v4PxS1N9j8AAAB0kLv/6rjF/gcAAIBp5O7/cNxi/wMAAMA0cvdfE7c02f+n9P8Zter/9f/nsP+//Qz6/4vjr+n/9f9H+n/9/4re/f86/f+KS0/+I0H/r//X/+v/2cZo/X/u/o/ELfe7yzAEAAAAdit3/0fjlib//h8AAAA6yN3/sbjF/gcAAIBp5O7/eNzSZP/7/r/+3/f/9f/6/8Pv6//3Sf+/TP+/wvf/9f/6f/0/mxqt/8/d/4m4pcn+BwAAgA5y938ybrH/AQAAYBq5+z8Vt9j/AAAAMI3c/dfGLU32v/5f/6//1//r/w+/r//fJ/3/Mv3/Cv2//l//r/9nU6P1/7n7Px23NNn/AAAA0EHu/s/ELfY/AAAATCN3/2fjFvsfAAAAppG7/3NxS5P9r//X/+v/9f/6/8Pv6//3Sf+/TP+/Qv+v/9f/6//Z1Gj9f+7+z8ctTfY/AAAAdJC7/wtxi/0PAAAA08jd/8W4xf4HAACAaeTu/1Lc0mT/6//1//p//b/+//D7+v990v8v0/+v0P/r//X/+n82NVr/n7v/y3FLk/0PAAAAHeTuvy5usf8BAABgGrn7vxK32P8AAAAwjdz9X41bmux//b/+X/+v/9f/H35f/79Po/T/l132gOv1//p//b/+/9z1/5ce+/v1/4xotP4/d//X4pYm+x8AAAA6yN3/9bjF/gcAAIBp5O7/Rtxi/wMAAMA0cvd/M25psv/1//p//X+P/v/++n/9fxOj9P++/39mv1//r//f8+/3/X/9P8eN1v/n7r8+bmmy/wEAAKCD3P3filvsfwAAAJhG7v5vxy32PwAAAEwjd/8NcUuT/a//1//r/3v0/0f6f/1/E/r/Zfr/Ffr/89TP37TJ772L/Mey/l//z0BG6/9z938nbmmy/wEAAKCD3P3fjVvsfwAAAJhG7v7vxS32PwAAAEwjd//345Ym+1//r//X/+v/9f+H39f/75P+f5n+f4X+3/f/9f/6fzY1Wv+fu/8HcUuT/Q8AAAAd5O7/Ydxi/wMAAMA0cvf/KG6x/wEAAGAauft/HLc02f/6/x32/3eP/7D+X/+v/9f/6/+P0f8v0/+v0P/r//X/+n82NVr/n7v/J3FLk/0PAAAAHeTu/2ncYv8DAADANHL3/yxusf8BAABgGrn7fx63NNn/+v8d9v++/6//1/+foP/X/x+i/1+m/1+h/9f/6//1/2xqtP4/d/8v4pYm+x8AAAA6yN1/Y9xi/wMAAMA0cvf/Mm6x/wEAAGAauft/Fbc02f/6f/3/Sv9/480n/5L+X/+v/z9P/f9F+v+zov9fpv9fof/X/+v/9f9sarT+P3f/r+OWJvsfAAAAOsjd/5u4xf4HAACAaeTuvylusf8BAABgGrn7fxu3NNn/+n/9v+//6//1/4ff9/3/fdL/L7uQ/f8t/8ez+n/9/55/v/5f/89xo/X/uft/F7c02f8AAADQQe7+m+MW+x8AAACmkbv/93GL/Q8AAADTyN3/h7ilyf7X/+v/9f/6f/3/4ff1//uk/1/m+/8r9P/6f/2//p9Njdb/5+7/Y9zSZP8DAABAB7n7b4lb7H8AAACYRu7+P8Ut9j8AAABMI3f/n+OWJvtf/6//1//r//fb/9/rksuve+CDrrpC/8+d9P/L9P8r9P/6f/2//p9Njdb/5+7/S9zSZP8DAABAB7n7b41b7H8AAACYRu7+v8Yt9j8AAABMI3f/3+KWJvtf/6//1//r//fb//v+v/7/OP3/Mv3/Cv2//l//r/9nU6P1/7n7/x63NNn/AAAA0EHu/n/ELfY/AAAATCN3/21xi/0PAAAA08jd/8+4pcn+1//r//X/+n/9/7H3T/xfqv/fJ/3/Mv3/Cv2//l//r/9nU6P1/7n7/xW3NNn/AAAA0EHu/n/HLfY/AAAATCN3/+1xi/0PAAAA08jd/5+4pcn+1//r//X/+n/9/+H39f/7pP9fpv9fof/X/+v/9f9sarT+P3f/fwMAAP//ZMtsvA==") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/152, 0x98) 10:21:29 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1660.206501][ T27] audit: type=1800 audit(1684405289.956:1001): pid=27847 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1950 res=0 errno=0 10:21:30 executing program 5: read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 10:21:30 executing program 5: read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) [ 1660.489260][ T27] audit: type=1804 audit(1684405290.236:1002): pid=27861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1325/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1660.516680][ T5083] usb 4-1: reset high-speed USB device number 109 using dummy_hcd 10:21:30 executing program 2: syz_clone(0x10380000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 10:21:30 executing program 5: read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) [ 1660.618570][T27079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.645346][T27079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:21:30 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) 10:21:30 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_setup(0x8c6a, &(0x7f0000000000)=0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) io_submit(r0, 0x3, &(0x7f0000001740)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0x0, 0x7}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f00000001c0)="b8a449", 0x3}, 0x0]) [ 1660.793145][ T5083] usb 4-1: Using ep0 maxpacket: 32 [ 1661.163874][T27855] loop4: detected capacity change from 0 to 32768 [ 1661.663243][ T5083] hub 4-1:0.0: activate --> -90 [ 1662.725219][T27843] usb 4-1: USB disconnect, device number 109 [ 1662.733270][ T5083] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1662.750412][ T5083] usb 4-1-port1: config error 10:21:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:32 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) 10:21:32 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="584e5c71f6b87753808693386b3a77219d82228337b77427fa5e206dfce2c7bc97f53cca62f5f1a9b682e205b8", @ANYRES64, @ANYRES8], 0x100000530) 10:21:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:32 executing program 4: syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x18800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0xfe, 0x5f6b, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/152, 0x98) 10:21:33 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) [ 1663.294778][ T27] audit: type=1800 audit(1684405293.046:1003): pid=27883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 10:21:33 executing program 5: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 10:21:33 executing program 5: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) [ 1663.539496][ T27] audit: type=1804 audit(1684405293.286:1004): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1326/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 10:21:33 executing program 5: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) [ 1663.611161][T27085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.640345][T27085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.653243][ T5679] usb 4-1: new high-speed USB device number 110 using dummy_hcd 10:21:33 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 10:21:33 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 10:21:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1663.914791][ T5679] usb 4-1: Using ep0 maxpacket: 32 10:21:33 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) [ 1664.073636][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1664.087955][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1664.117161][ T5679] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1664.134499][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.152616][ T5679] usb 4-1: config 0 descriptor?? [ 1664.179253][ T27] audit: type=1804 audit(1684405293.926:1005): pid=27905 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1327/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1664.206894][ T5679] hub 4-1:0.0: USB hub found [ 1664.250891][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.268919][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:21:34 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1664.319463][T27885] loop4: detected capacity change from 0 to 32768 [ 1664.401484][ T27] audit: type=1800 audit(1684405294.146:1006): pid=27914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 1664.443398][ T5679] hub 4-1:0.0: 1 port detected [ 1664.502728][T27910] kvm: pic: non byte read [ 1664.522694][T27910] kvm: pic: level sensitive irq not supported [ 1664.522860][T27910] kvm: pic: non byte read [ 1664.561055][T27910] kvm: pic: level sensitive irq not supported [ 1664.561144][T27910] kvm: pic: non byte read [ 1664.580446][T27910] kvm: pic: level sensitive irq not supported [ 1664.580530][T27910] kvm: pic: non byte read [ 1664.599042][T27910] kvm: pic: level sensitive irq not supported [ 1664.599129][T27910] kvm: pic: non byte read [ 1664.615088][T27910] kvm: pic: level sensitive irq not supported [ 1664.615175][T27910] kvm: pic: non byte read [ 1665.303329][ T5679] hub 4-1:0.0: activate --> -90 [ 1666.379932][ T5680] usb 4-1: USB disconnect, device number 110 [ 1666.403295][ T5679] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1666.410328][ T5679] usb 4-1-port1: config error 10:21:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', 0x0}) 10:21:36 executing program 4: syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x18800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0xfe, 0x5f6b, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/152, 0x98) 10:21:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:21:36 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(0x0, 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1666.926777][ T27] audit: type=1800 audit(1684405296.676:1007): pid=27922 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1960 res=0 errno=0 10:21:36 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(0x0, 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1667.018429][ T27] audit: type=1800 audit(1684405296.706:1008): pid=27922 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1960 res=0 errno=0 10:21:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1667.145451][ T27] audit: type=1800 audit(1684405296.896:1009): pid=27939 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1972 res=0 errno=0 10:21:36 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(0x0, 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1667.179292][ T27] audit: type=1800 audit(1684405296.916:1010): pid=27939 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 1667.223872][ T27] audit: type=1804 audit(1684405296.976:1011): pid=27936 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1328/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 1667.279552][T27843] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1667.296794][T27933] kvm: pic: non byte read [ 1667.330096][T27933] kvm: pic: level sensitive irq not supported [ 1667.330184][T27933] kvm: pic: non byte read [ 1667.353394][ T27] audit: type=1800 audit(1684405297.106:1012): pid=27947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 1667.355459][T27942] kvm: pic: non byte read [ 1667.374786][T27933] kvm: pic: level sensitive irq not supported [ 1667.380919][T27933] kvm: pic: non byte read [ 1667.394923][T27933] kvm: pic: level sensitive irq not supported [ 1667.395187][T27077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.410363][T27933] kvm: pic: level sensitive irq not supported [ 1667.410744][T27933] kvm: pic: level sensitive irq not supported [ 1667.417706][T27077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:21:37 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1667.434946][ T27] audit: type=1800 audit(1684405297.146:1013): pid=27947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 1667.497310][ T27] audit: type=1800 audit(1684405297.246:1014): pid=27949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 1667.524659][T27843] usb 4-1: Using ep0 maxpacket: 32 10:21:37 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1667.622663][ T27] audit: type=1804 audit(1684405297.306:1015): pid=27950 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2410040285/syzkaller.pDPPRo/1363/bus" dev="sda1" ino=1972 res=1 errno=0 [ 1667.647991][T27843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.677952][T27843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.714375][T27843] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1667.734484][ T27] audit: type=1804 audit(1684405297.306:1016): pid=27949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2410040285/syzkaller.pDPPRo/1363/bus" dev="sda1" ino=1972 res=1 errno=0 [ 1667.738005][T27843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.780556][T27843] usb 4-1: config 0 descriptor?? [ 1667.824593][T27843] hub 4-1:0.0: USB hub found [ 1667.881252][T27926] loop4: detected capacity change from 0 to 32768 [ 1668.043456][T27843] hub 4-1:0.0: 1 port detected [ 1668.923424][T27843] hub 4-1:0.0: activate --> -90 [ 1670.008968][ T5679] usb 4-1: USB disconnect, device number 111 [ 1670.023378][T27843] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1670.030248][T27843] usb 4-1-port1: config error 10:21:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:40 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)='l', 0x1}], 0x1}, 0x0) 10:21:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:40 executing program 5: socketpair(0xa, 0x0, 0xfffff89d, &(0x7f0000000040)) 10:21:40 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:40 executing program 4: syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x18800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0xfe, 0x5f6b, &(0x7f00000002c0)="$eJzs3U1vHVf9B/DfffRD/22tLqr+I4TclKdSmscSAgXaLmDBhgXKFiVy3SoiBZQElFYRceUNC14ECIklQixZ8QK6YMuOF0CkBAnUFYPG9xxnPLnOder4znXO5yM5M785M/aZfO/43uuZuScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjB9390thcRl3+ZFqxF/F8MIvoRK3W9HhEr62t5/WFEvBQ7zfFiRIyWIurtd/55PuKNiPjkuYh7929v1IvPHbAf3/vT33//42d++Lc/jk7/5883B2/ut96tW7/591/uHG6fAQAAoDRVVVW99Db/RHp/3++6UwDAXOTn/yrJy49DPW7sxyL0R61Wq9XqRa+bqunuNIuI2GpuU79mcDoeAI6Zrfi06y7QIfkXbRgRz3TdCWCh9bruAEfi3v3bG72Ub6/5fLA+ac/XguzJf6u3e3/HftNZ2teYzOvxtR2DeGGf/qzMqQ+LJOffb+d/edKez60ddf7zsl/+48mtT8XJ+Q/a+bc8Pfn3p+Zfqpz/8LHyH8gfAAAAAAAWWP77/1rH53+XDr8rB/Ko87/rc+oDAAAAAAAAADxphx3/b5fx/wAAAGBh1e/Va7997sGy/T6LrV5+qRfxbGt9oDDpZpnVrvsBAAAAAAAAAAAAACUZTq7hvdSLGEXEs6urVVXVX03t+nEddvvjrvT9h5J1/UseAAAmPnmudS9/L2I5Ii6lz/obra6uVtXyymq1Wq0s5dez46XlaqXxvjZP62VL4wO8IB6Oq/qbLTe2a5r1fnlWe/v71T9rXA0O0LH56DBwAIiIybPRPc9IT5mqej66fpXD8eD4f/o4/jmIrh+nAAAAwNGrqqrqpY/zPpHO+fe77hQAMBf5+b99XkCtVqvVavXTVzdV091pFhGx1dymfs1gOH4AOGa24tOuu0CH5F+0YUS81HUngIXW67oDHIl7929v9FK+vebzQRrfPV8Lsif/rd7Odnn7adNZ2teYzOvxtR2DeGGf/rw4pz4skpx/v53/5Un7OK33hPPvtf6MODf75V/v51oH/elazn/Qzr/lqI//edmO/tT8S5XzHz5W/gP5AwAAAADAAst//19z/jfvMgAAAAAAAAAcO/fu397I973m8/+fm7Ke+z+fTjn/nvyLlPPvt/L/Smu9QWP+7jsP8v/X/dsbf7j5z//P04Pmv5RneumR1UuPiF76Sb1hmh5m7x62PRqMJ/s6+cbrEVGN3ourcS0248yedfvp/+NB+9k97XVPR3vaz+1pHz7Ufn5P+yh97kC1kttPxUb8LK7FuzvtddvSjP1fntFezWjP+Q8c/0XK+Q8bX3X+q6m915rW7n7cf+i4b06n/Zy3r37+12eOfndm2o7B7r411ft3soP+7PyfPDOOX9zYvH7q1pWbN6+fjTTZs/RcpMkTlvMfpa/d3/+vTNrz7/3m8Xr34/Fj578otmO4b/6vNObr/X11zn3rQs5/nL5y/u+m9unH/3HOf//j/7UO+gMAAAAAAAAAAAAAAACPUlXVzi2ib0fEhXT/T1f3ZgIA85Wf/6skL1er1Wq1Wr1bjxasP5+5bqqme6tZRMRfm9vUrxl+Ne2bAQCL7L8R8Y+uO0Fn5F+w/Hl/wwefyAsU4saHH/3kyrVrm9dvRCx33RkAAAAAAAAA4DPJ43+uN8Z//kJErLXW2zP+6zuxftjxP4d5ZneA0Sc80Pc+tvvjQb8x3PjL8ejxv0/Go8f/Hs74eaMZ7eMZ7bOuypp1zcbUGz0acv4vN8Y7r/M/0Rp+vYTxX9tj3pcg53+y8Xiu8/9ya71m/tXvjnP+/T35n775wc9P3/jwo9evfnDl/c33N396/uzZM+cvXLh48eLp965e2zwz+bfDHh+tnH8e+zrnTxly/jlz+Zcl5//FVMu/LDn/L6Va/mXJ+efXe/IvS84/v/eRf1ly/q+mWv5lyfl/NdXyL0vO/7VUy78sOf+vpVr+Zcn5v55q+Zcl538q1fIvS87/dKrlX5acfz7DJf+y5PzzlQ3yL0vO/1yq5V+WnP/5VMu/LDn/N1It/7Lk/L+eavmXJed/IdXyL0vO/xupln9Zcv4XUy3/suT8v5lq+Zcl5/+tVMu/LDn/N1Mt/7Lk/L+davmXJef/nVRPyX/QRb+Yj5z/d1Pt+C9Lzv+tVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZ5XE7c9T4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYW9e4uR667vAH52vWuvHSAGQuqkBtaOcRxnk11f4gutGxNCSBMuzcWU9BLb9a6dBd/itUuSRrJRoETCqKiiJS8tF0VtXiqsFlW0SlEeqlaVKhH6QF8QVSUeoiqggFSprdpsNef8//+dmZ2d2bXH65lzPh8p/nlnzsw5c+Y/s/td57sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTb8MGpLwxkWVb7L/9jbZa9pfb31aNr88vef62PEAAAALhS/5f/+cb16YL9i7hR3Tb/+J7vfXt2dnY2++SKPxr+yuxsumI0y4ZXZVl+XXTp3x8bqN8meC4bGRis+3iww+5XdLh+qMP1wx2uX9nh+lUdrh/pcP28EzDP6uL7Mfmdbcr/urY4pdkN2XB+3aYWt3puYNXgYPxeTm4gv83s8NFsOjueTWUTDdsX2w7k27+8obav+7O4r8G6fa2vrZCfPXskHsNAOMebGvY1d5/RTz6Qjf78Z88e+bOzr9/UanY8DQ33Vxznlo214/xcuKQ41oFsVTon8TgH645zfYvnZEXDcQ7kt6v9vfk431jkca6YO8xl1fycj2SD+d9fzc/TUP239dJ5Wh8u+69bsiy7MHfYzdvM21c2mK1puGRw7vkZKVZk7T5qS+kd2dCS1umGRazT2pzc1LhOm18T8fnfEG43tMAx1D9NP/nsynnP+1LXaVR71Au9VprXYLdfK72yBuO6eDV/0M+3XIObwuN/dvPCa7Dl2mmxBtPjrluDGzutwcGVK/JjTk/CQH6buTW4rWH7FfmeBvL52ub2a3D87InT4zNPP3PH9InDx6aOTZ3csW3bxI5du/bs2TN+dPr41ETx52We7d63JhtMr4GN4dzF18CtTdvWL9XZb3TvdTjS5nW4tmnbbr8Oh5of3MDyvCDnr+nitfFo7aSPXBzMFniN5c/P1it/HabHXfc6HKp7Hbb8nNLidTi0iNdhbZvTWxf3NctQ3X+tjuFqfS5YW7cGm78eaV6D3f56pFfW4EhYFz/cuvDngvXheJ8fW+rXIyvmrcH0cMN7T+2S9PX+yJ58tFqXN9euuG5ldm5m6sydTx0+e/bMtiyMZfHOurXSvF7X1D2mbN56HVzyet0//Z7nb25x+dpwrkbuqP0xsuBzVdtm553tn6v8s1vr89lw6fYsjC5b7vPZ6rN57XymLNnmfNa2+dz4lX8tnnJp3fvv8ALvvzH3v1nsL93VcyuGh4rX74p0doYb3o8bn6qh/L1rIN/3G+OLez8eDv8t9/vxDW3ej9c1bdvt9+Ph5gcX348HOn2348o0P58jYZ0cn2j/flzbZt32pa7Jobbvx7eEORDO/1dXFUkh5aK6tbPQuk37GhoaDo9rKO6hcZ3uaNh+OGSz2r5e2n5563TLLcV9rUiPbs5yrdPRpm27vU7T+9VC63Sg03ffLk/z8zkS1sUNO9qv09o2r+y88vfO1fGvde+dKzutweEVK2vHPJwWYfF+P7s6rsE7syPZqex4NplfuzJfTwP5vsbuWtwaXBn+W+73ynVt1uCWpm27vQbT57GF1t7A0PwH3wXNz+dIWBcv3NV+Dda2uXd3d7923RIuSdvUfe3a/P21hb7ndXPTabqa3/OqHeff727/vdnaNsf3LDVntj9Pt4dLrmtxnppfvwu9piaz5TlP68Jxvr5n4fNUO57aNl/Zu8j1tD/LsvNP3pN/vzf8+8pfnvvBtxv+3aXVv+mcf/Ken7716D8s5fgB6H9vFmNN8bmu7l+mFvPv/wAAAEBfiLl/MMxE/gcAAIDSiLk//l/hifwPAAAApRFz/1CYSUXy/7p7X59+83yWmvmzQbw+nYYHiu1ix3UifDw6O6d2+T0vTv3n355f3L4Hsyz73wd+r+X26x6Ix1UYDcd56UONl8+/4flF7f/Qgbnt6vvrXw/3Hx/PYpdBqwruRJZlL1//pXw/o49dzOcrDxzK58MXnn+uts0be4uP4+1fe2ex/Z+E8u/+o4cbbv9aOA8/DnPiwdbnI97uWxdvW7/7E3P7i7cb2Pi2/GG/8Hhxv/Hn5Hz5uWL7eJ4XOv6/++JL36pt/9T7Wh//+cHWx/9SuN8Xw/zvdxfb1z8HtY/j7T4fjj/uL97uzm9+t+XxX/pCsf3p+4rtDoUZ978lfLzpvten68/XUwOHGx5X9uFiu7j/iR/8QX59vL94/83HP3LwYsP5aF4fr/xLcT/jTdvHy+N+or9p2n/tfurXZ9z/S79/qOE8d9r/pYdfe3ftfpv3f3vTdqef3Jrvf+7+Gn9i059+/kst9xePZ/9fnG54PPsfCq/jsP8XHg/rMVz/P5eK+2v+6QqHHmp8/4nbf33t+YbHE93/82L/l+4+ls9VI6vXXPeWt77twntr5y7LXn2kuL9O+z/2tVMNx/+NG4vzEa+PHf3m/S8k7v/MZ8ZOnpo5Nz1Zd1bzn53zkeJ44vFeH95bmz8+eOrsE1NnRidGJ7JstLw/Qu+yfTPMnxbjwlJvv/VAeD5v/urLazZ//4vx8n99tLj84oPF561bw3ZfDpevDc/fle7/hQ035q/vgVeKjxt67F2wftN/7FnUhuHxN39dENf76Xc9kZ+H2nX55434ur7C4//RZHE/3wnndTb8ZOaNN87tr377+LMRLj5SvN6v+PyFt7n4vP55eL4/+uPi/uNxxcf7o/B1zHfXNb7fxfXxnfODzfef/xSPC+H9JLtQXB+3iuf74hs3tjy8+HNIsgs35R//Ybqfm5b0MBcy8/TM+PHpk+eeGj87NXN2fObpZw6eOHXu5NmD+c/yPPipTrefe39ak78/TU7t2pnl71aninGVXevjP33g7izLNk9OHT187ujZA6enzhw7MjNzZGpyZvPho0enPtPp9tOT+7Zt37tj9/axY9OT+/bs3btj79j0yVO1wygOqoNdE58eO3nmYH6TmX079267666dE2MnTk1O7ds9MTF2rtPt889NY7Vb/+7Ymanjh89On5gam5l+Zmrftr27dm3v+NMAT5w+OjM6fubcyfFzM1NnxovHMno2v7j2ua/T7SmnmX8rvp5tNlD8IL7s47fvSj+ftebFzy54V8UmTT9A9PXws2j+6e2n9yzm45j7h8NMKpL/AQAAoApi7l8ZZiL/AwAAQGnE3L8qzET+BwAAgNKIuX8kzKQi+V//X/9f/1//X/+/9f71//uT/n97+v8d6P9fQX9+Vv//wJHJ3RP6//r/1Ou1/n/M/auzrJL5HwAAAKog5v41YSbyPwAAAJRGzP3XhZnI/wAAAFAaMfe/JcykIvlf/1//X/9f/1//v/X+9f/7k/5/e/r/Hej/+/3/+v/6/3RVr/X/Y+5/a5hJRfI/AAAAVEHM/W8LM5H/AQAAoDRi7r8+zET+BwAAgNKIuX9tmElF8r/+v/6//r/+v/5/6/3r//cn/f/29P870P/X/9f/1/+nq3qt/x9z/9vDTCqS/wEAAKAKYu5/R5iJ/A8AAAClEXP/O8NM5H8AAAAojZj7bwgzqUj+1//X/9f/1//X/2+9f/3//qT/357+/8LyDfX/9f/1//X/6ape6//H3P+uMJOK5H8AAACogpj7bwwzkf8BAACgNGLu/4UwE/kfAAAASiPm/nVhJhXJ//r/+v/6//r/+v+t96//35+uYv8/byTq/5e3/5/T/9f/1//X/6ereq3/H3P/TWEmFcn/AAAAUAUx998cZiL/AwAAQGnE3P+LYSbyPwAAAJRGzP3rw0wqkv/1/7va/7+tvpil/6//37Q+9P/1//X/l4Hf/9+e/n8H+v/6//r/+v90Va/1/2Puf3eYSUXyPwAAAFRBzP3vCTOR/wEAAKA0Yu5/b5iJ/A8AAAClEXP/aJhJRfK//r/f/6//r/+v/996//r//Un/vz39/w6udv+/+MJT//8qudbHr/+v/898vdb/j7l/Q5hJRfI/AAAAVEHM/RvDTOR/AAAAKI2Y+28JM5H/AQAAoDRi7t8UZlKR/K//r/+v/6//r//fev/6//1J/789/f8O/P5//X/9f/1/uqrX+v8x978vzKQi+R8AAACqIOb+zWEm8j8AAACURsz9t4aZyP8AAABQGjH3bwkzqUj+1//X/9f/v4z+/9avFTfU/9f/1//vOfr/7en/d6D/r/+v/6//T1f1Wv8/5v7bwkwqkv8BAACgCmLu3xpmIv8DAABAacTcf3uYifwPAAAApRFz/1iYSUXyv/6//r/+v9//r//fev/6//1J/789/f8O9P/1//X/9f/pql7r/8fcf0eYSUXyPwAAAFRBzP13hpnI/wAAAFAaMfePh5nI/wAAAFAaMfdPhJlUJP8vd/+/7gzr/+v/6//r/+v/6/93nf5/e9eu/9/qM+V8+v/6//18/Pr/+v/M12v9/5j7t4WZvqKrSP4HAACAKoi5f3uYifwPAAAApRFz/44wE/kfAAAASiPm/p1hJhXJ/37/v/6//r/+v/5/6/3r//eH5oK9/n97fv9/B/r/+v/6//r/dFWv9f9j7r8rzKQi+R8AAACqIOb+XWEm8j8AAACURsz9u8NM5H8AAAAojZj794SZVCT/6//r/+v/6//r/7fev/5/f9L/b68q/f9I/39prnV/vt+PX/9f/5/5eq3/H3P/3jCTiuR/AAAAqIKY+98fZiL/AwAAQGnE3P9LYSbyPwAAAJRGzP2/HGZSkfyv/6//r/+v/99H/f+7M/1//f8O9P/bq0r/3+//vzzXuj/f78ev/6//z3y91v+PuX9fmElF8j8AAABUQcz9vxJmIv8DAABAacTcf3eYifwPAAAApRFz//4wk4rkf/1//X/9f/3/Pur/Nzwe/X/9/1b0/9vr3f5/fGXp/+v/9+/x6//r/zNfr/X/Y+7/QJhJRfI/AAAAVEHM/feEmczP/4PLd1QAAABAN8Xc/8EwE//+DwAAAKURc/+9YSYVyf/6//r/+v/6//r/rfev/9+f9P/b693+f8Hv/9f/7+fj1//X/2e+Xuv/x9z/oTCTiuR/AAAAqIKY++8LM5H/AQAAoDRi7v9wmIn8DwAAAKURc//9YSYVyf/6//r/+v/L1v+fyPT/9f/1/686/f/29P870P/X/9f/1/+nq3qt/x9z/6+GmVQk/wMAAEAVxNz/QJiJ/A8AAAClEXP/g2Em8j8AAACURsz9HwkzqUj+1//X/9f/9/v/9f9b71//vz/p/7en/9+B/r/+v/6//j9d1Wv9/5j7PxpmUpH8DwAAAFUQc//HwkzkfwAAACiNmPs/HmYi/wMAAEBpxNz/a2EmFcn/+v/6//r/+v/6/633r//fn/T/29P/70D/X/9f/1//n67qtf5/zP0PhZlUJP8DAABAFcTc/3CYifwPAAAApRFz/yNhJvI/AAAAlEbM/Y+GmVQk/+v/6//r/+v/6/+33r/+f3/S/29P/78D/X/9f/1//X+6qtf6/zH3HwgzqUj+BwAAgCqIuf8TYSbyPwAAAJRGzP2/HmYi/wMAAEBpxNz/yTCTiuR//X/9f/1//X/9/9b71//vT/r/7en/d6D/r/+v/6//T1f1Wv8/5v7Hwkwqkv8BAACgCmLu/40wE/kfAAAASiPm/t8MM5H/AQAAoDRi7v+tMJOK5H/9f/1//X/9f/3/1vvX/+9P+v/t6f93oP+v/6//r/9PV/Va/z/m/t8OM6lI/gcAAIAqiLn/8TAT+R8AAABKI+b+g2Em8j8AAACURsz9h8JMKpL/9f/1//X/e7T//8cb//mH3/vYoW36//r/+v9Lov/fnv5/B/r/+v/6//r/dFWv9f9j7j8cZlKR/A8AAABVEHP/74SZyP8AAABQGjH3Hwkzkf8BAACgNGLunwwzqUj+1//X/9f/79H+v9//n+j/6/8vhf5/e/r/Hej/6//r/+v/01VL7v+PLnhXXen/x9w/FWZSkfwPAAAAVRBz/9EwE/kfAAAASiPm/mNhJvI/AAAAlEbM/U+EmVQk/+v/6//r/+v/6/+33r/+f3/S/29P/78D/X/9f/1//X+6qtd+/3/M/dNhJhXJ/wAAAFAFMfd/KsxE/gcAAIDSiLn/02Em8j8AAACURsz9x8NMKpL/9f/1//X/9f/1/1vvX/+/P+n/t6f/34H+v/6//r/+P13Va/3/mPtPhJlUJP8DAABAFcTcfzLMRP4HAACA0oi5/1SYifwPAAAApRFz/+kwk4rkf/1//X/9f/1//f/W+9f/70/6/+3p/3eg/9+yP//X3/+rexZze/1//X/9f5r1Wv8/5v4nw0wqkv8BAACgCmLuPxNmIv8DAABAacTcPxNmIv/D/7N3386flVUcx3/MiDMOhXQWFjb+FzRWFv4L1rY25ow555xzFgMoYsasGFHMGQOKiooBFQuH3XMOs/y+3uvu3t197nNer+YUiM/XcYeZzzDvuQAAANPI3f/QuKXJ/tf/6/8vXP9/0d30//p//b/+f2v6/2X6/xX6f9//1//r/9nUaP1/7v6HxS1N9j8AAAB0kLv/4XGL/Q8AAADTyN3/iLjF/gcAAIBp5O5/ZNzSZP/r//X/vv8/ev9/D/2//l//fxr0/8s69f8PueGSB9969b2vOZ339f/6f/2//p9tjdb/5+5/VNzSZP8DAABAB7n7Hx232P8AAAAwjdz9j4lb7H8AAACYRu7+x8YtTfa//l//r/8fvf/3/X/9v/7/dOj/l3Xq/8/kff2//l//r/9nW6P1/7n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAATCN3/xPiFvsfAAAAppG7//K4pcn+1//r//X/+n/9/+H39f/7NFD/f7H+X/+v/9f/6//1/92N1v/n7n9i3NJk/wMAAEAHufufFLfY/wAAADCN3P1PjlvsfwAAAJhG7v6nxC1N9r/+X/+v/9f/6/8Pv6//36eB+v8zel//r//X/+/39+v/9f8cN1r/n7v/qXFLk/0PAAAAHeTuf1rcYv8DAADANHL3Pz1usf8BAABgGrn7nxG3NNn/+n/9v/5f/6//P/y+/n+fLlT/f/mR/l//f+d/jf5f/6//1/9z0mj9f+7+Z8YtTfY/AAAAdJC7/1lxi/0PAAAA08jd/+y4xf4HAACAaeTuf07c0mT/6//1//p//b/+//D7+v998v3/Zfr/Ffp//b/+X//Ppkbr/3P3PzduabL/AQAAoIPc/c+LW+x/AAAAmEbu/ufHLfY/AAAATCN3/wvilib7X/+v/9f/6//1/4ff1//vk/5/mf5/hf5f/6//1/+zqdH6/9z9L4xbmux/AAAA6CB3/4viFvsfAAAAppG7/8Vxi/0PAAAA08jd/5K4ZXX/37ZxkXdhnNr/X6T/1//r/4/0//r/k/T/+6T/X6b/X6H/1//r//X/bGq0/j93/0vjFv/+HwAAAKaRu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3NJk//v+v/5f/6//v/aO/wH6f/3/JLbr/+97T/2//l//r//X/+v/OTuj9f+5+18ZtzTZ/wAAANBB7v5XxS32PwAAAEwjd/+r4xb7HwAAAKaRu/81cUuT/a//1//r//X/vv9/+H39/z75/v8y/f8K/b/+X/+v/2dTo/X/uftfG7c02f8AAADQQe7+18Ut9j8AAABMI3f/6+MW+x8AAACmkbv/DXFLk/2/af9/x9+l/y/6f/3/Xf986P/1//r/c0//v0z/v0L/r//X/+v/2dRo/X/u/jfGLU32PwAAAHSQu/9NcYv9DwAAANPI3f/muMX+BwAAgGnk7n9L3NJk//v+/9F99P/6f/2//v/Q+/r/fdL/L9P/r9D/6//1//p/NjVa/5+7/61xS5P9DwAAAB3k7n9b3GL/AwAAwDRy9789brH/AQAAYBq5+98RtzTZ//r/s/7+/4kEWP9/6u/X/59K/x9/HvT/+v/zQP+/TP+/Qv+v/9f/6//Z1Gj9f+7+d8YtTfY/AAAAdJC7/11xi/0PAAAA08jd/+64xf4HAACAaeTuf0/c0mT/6//Puv8/Qf9/6u/X/x/+86H/1//r/889/f8y/f8K/b/+X/+v/2dTo/X/ufuviFua7H8AAADoIHf/e+MW+x8AAACmkbv/fXGL/Q8AAADTyN3//rilyf7X/+v/9f/6f/3/4ff1//uk/1+m/z86Orpy4Qfo//X/+n/9P5sarf/P3f+BuKXJ/gcAAIAOcvdfGbfY/wAAADCN3P1XxS32PwAAAEwjd/8H45Ym+1//r//X/+v/9f+H39f/71Pv/j9r+f9N/79C/6//1//r/9nUaP1/7v4PxS1N9j8AAAB0kLv/6rjF/gcAAIBp5O7/cNxi/wMAAMA0cvdfE7c02f+n9P8Zter/9f/nsP+//Qz6/4vjr+n/9f9H+n/9/4re/f86/f+KS0/+I0H/r//X/+v/2cZo/X/u/o/ELfe7yzAEAAAAdit3/0fjlib//h8AAAA6yN3/sbjF/gcAAIBp5O7/eNzSZP/7/r/+3/f/9f/6/8Pv6//3Sf+/TP+/wvf/9f/6f/0/mxqt/8/d/4m4pcn+BwAAgA5y938ybrH/AQAAYBq5+z8Vt9j/AAAAMI3c/dfGLU32v/5f/6//1//r/w+/r//fJ/3/Mv3/Cv2//l//r/9nU6P1/7n7Px23NNn/AAAA0EHu/s/ELfY/AAAATCN3/2fjFvsfAAAAppG7/3NxS5P9r//X/+v/9f/6/8Pv6//3Sf+/TP+/Qv+v/9f/6//Z1Gj9f+7+z8ctTfY/AAAAdJC7/wtxi/0PAAAA08jd/8W4xf4HAACAaeTu/1Lc0mT/6//1//p//b/+//D7+v990v8v0/+v0P/r//X/+n82NVr/n7v/y3FLk/0PAAAAHeTuvy5usf8BAABgGrn7vxK32P8AAAAwjdz9X41bmux//b/+X/+v/9f/H35f/79Po/T/l132gOv1//p//b/+/9z1/5ce+/v1/4xotP4/d//X4pYm+x8AAAA6yN3/9bjF/gcAAIBp5O7/Rtxi/wMAAMA0cvd/M25psv/1//p//X+P/v/++n/9fxOj9P++/39mv1//r//f8+/3/X/9P8eN1v/n7r8+bmmy/wEAAKCD3P3filvsfwAAAJhG7v5vxy32PwAAAEwjd/8NcUuT/a//1//r/3v0/0f6f/1/E/r/Zfr/Ffr/89TP37TJ772L/Mey/l//z0BG6/9z938nbmmy/wEAAKCD3P3fjVvsfwAAAJhG7v7vxS32PwAAAEwjd//345Ym+1//r//X/+v/9f+H39f/75P+f5n+f4X+3/f/9f/6fzY1Wv+fu/8HcUuT/Q8AAAAd5O7/Ydxi/wMAAMA0cvf/KG6x/wEAAGAauft/HLc02f/6/x32/3eP/7D+X/+v/9f/6/+P0f8v0/+v0P/r//X/+n82NVr/n7v/J3FLk/0PAAAAHeTu/2ncYv8DAADANHL3/yxusf8BAABgGrn7fx63NNn/+v8d9v++/6//1/+foP/X/x+i/1+m/1+h/9f/6//1/2xqtP4/d/8v4pYm+x8AAAA6yN1/Y9xi/wMAAMA0cvf/Mm6x/wEAAGAauft/Fbc02f/6f/3/Sv9/480n/5L+X/+v/z9P/f9F+v+zov9fpv9fof/X/+v/9f9sarT+P3f/r+OWJvsfAAAAOsjd/5u4xf4HAACAaeTuvylusf8BAABgGrn7fxu3NNn/+n/9v+//6//1/4ff9/3/fdL/L7uQ/f8t/8ez+n/9/55/v/5f/89xo/X/uft/F7c02f8AAADQQe7+m+MW+x8AAACmkbv/93GL/Q8AAADTyN3/h7ilyf7X/+v/9f/6f/3/4ff1//uk/1/m+/8r9P/6f/2//p9Njdb/5+7/Y9zSZP8DAABAB7n7b4lb7H8AAACYRu7+P8Ut9j8AAABMI3f/n+OWJvtf/6//1//r//fb/9/rksuve+CDrrpC/8+d9P/L9P8r9P/6f/2//p9Njdb/5+7/S9zSZP8DAABAB7n7b41b7H8AAACYRu7+v8Yt9j8AAABMI3f/3+KWJvtf/6//1//r//fb//v+v/7/OP3/Mv3/Cv2//l//r/9nU6P1/7n7/x63NNn/AAAA0EHu/n/ELfY/AAAATCN3/21xi/0PAAAA08jd/8+4pcn+1//r//X/+n/9/7H3T/xfqv/fJ/3/Mv3/Cv2//l//r/9nU6P1/7n7/xW3NNn/AAAA0EHu/n/HLfY/AAAATCN3/+1xi/0PAAAA08jd/5+4pcn+1//r//X/+n/9/+H39f/7pP9fpv9fof/X/+v/9f9sarT+P3f/fwMAAP//ZMtsvA==") openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/152, 0x98) 10:21:40 executing program 5: bpf$PROG_LOAD_XDP(0x12, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:21:40 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x200, 0x800, 0xfff}, 0x48) 10:21:40 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)=[{0x0, 0x803e000000000000}, {&(0x7f0000000500)="01", 0x1}], 0x2}, 0x0) [ 1670.746765][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1670.760792][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:21:40 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0xf}}], 0x10}, 0x0) [ 1670.903493][ T6299] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1671.163162][ T6299] usb 4-1: Using ep0 maxpacket: 32 [ 1671.290719][ T6299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.312620][ T6299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1671.325692][ T6299] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1671.338808][ T6299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.339890][T27961] loop4: detected capacity change from 0 to 32768 [ 1671.379291][ T6299] usb 4-1: config 0 descriptor?? [ 1671.434308][ T6299] hub 4-1:0.0: USB hub found [ 1671.643442][ T6299] hub 4-1:0.0: 1 port detected [ 1672.493315][T15603] hub 4-1:0.0: activate --> -90 [ 1673.578489][T27843] usb 4-1: USB disconnect, device number 112 [ 1673.593436][T15603] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1673.600585][T15603] usb 4-1-port1: config error 10:21:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:43 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000000), 0x98) 10:21:43 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:43 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000180)={0x10}, 0x10) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x2, &(0x7f0000000140)={r3}, &(0x7f0000000240)=0x14) 10:21:43 executing program 4: syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x18800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0xfe, 0x5f6b, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 10:21:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1674.065311][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.071667][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.181303][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 1674.181350][ T27] audit: type=1800 audit(1684405303.926:1033): pid=27993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1970 res=0 errno=0 10:21:44 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, 0x0, 0x0, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1674.272149][ T27] audit: type=1800 audit(1684405303.946:1034): pid=27993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1970 res=0 errno=0 10:21:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x2, 0x58, 0xbbf}, 0x48) 10:21:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0xc, &(0x7f00000001c0), 0x4) [ 1674.350537][ T27] audit: type=1800 audit(1684405303.946:1035): pid=27993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 1674.410095][ T27] audit: type=1800 audit(1684405304.136:1036): pid=27999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 1674.433807][T15603] usb 4-1: new high-speed USB device number 113 using dummy_hcd 10:21:44 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, 0x0, 0x0, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000300)={&(0x7f0000000000)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/178, 0xb2}], 0x1, &(0x7f00000002c0)=""/43, 0x2b}, 0x10122) [ 1674.458816][T27085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.481202][T27085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:21:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@alu={0x4, 0x0, 0x8, 0xa}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xe1, &(0x7f00000000c0)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1674.519511][ T27] audit: type=1800 audit(1684405304.136:1037): pid=27999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 1674.606778][ T27] audit: type=1800 audit(1684405304.146:1038): pid=27999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 1674.678425][ T27] audit: type=1800 audit(1684405304.326:1039): pid=28006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 1674.723098][T15603] usb 4-1: Using ep0 maxpacket: 32 [ 1674.737423][ T27] audit: type=1800 audit(1684405304.326:1040): pid=28006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 1674.806486][ T27] audit: type=1800 audit(1684405304.346:1041): pid=28006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 1674.873471][T15603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.898349][T15603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.912025][T15603] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1674.925198][T15603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.943376][T15603] usb 4-1: config 0 descriptor?? [ 1674.986677][ T27] audit: type=1804 audit(1684405304.736:1042): pid=27996 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1330/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1675.001254][T27984] loop4: detected capacity change from 0 to 32768 [ 1675.014087][T15603] hub 4-1:0.0: USB hub found [ 1675.243309][T15603] hub 4-1:0.0: 1 port detected [ 1676.123327][T15603] hub 4-1:0.0: activate --> -90 [ 1677.207815][ T5679] usb 4-1: USB disconnect, device number 113 [ 1677.223343][T15603] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1677.230257][T15603] usb 4-1-port1: config error 10:21:47 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:47 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 10:21:47 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, 0x0, 0x0, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000001c0)={0x0, 0x8}) 10:21:47 executing program 4: syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x18800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0xfe, 0x5f6b, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 10:21:47 executing program 5: select(0x40, &(0x7f0000000000)={0x6}, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)={0x1}, &(0x7f0000000100)) 10:21:47 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240), 0x0, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000001c0)) [ 1677.954105][T27077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.974260][T27077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:21:47 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240), 0x0, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:47 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x808084, &(0x7f0000000140)=ANY=[@ANYBLOB='cruft\x00map=normal,uid=', @ANYRESHEX, @ANYBLOB="e54f4230521c7bcb150552e0a8e949000000"], 0x1, 0x9c6, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=@isofs_parent={0x14, 0x2, {0x5}}, 0x0) 10:21:47 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240), 0x0, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1678.103384][ T5083] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1678.286703][T28035] loop5: detected capacity change from 0 to 1764 [ 1678.375442][ T5083] usb 4-1: Using ep0 maxpacket: 32 [ 1678.510417][ T5083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1678.525926][ T5083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1678.551856][ T5083] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1678.571884][ T5083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.598759][ T5083] usb 4-1: config 0 descriptor?? [ 1678.644623][ T5083] hub 4-1:0.0: USB hub found [ 1678.702460][T28019] loop4: detected capacity change from 0 to 32768 [ 1678.863341][ T5083] hub 4-1:0.0: 1 port detected [ 1679.733220][ T5083] hub 4-1:0.0: activate --> -90 [ 1680.798123][ T5679] usb 4-1: USB disconnect, device number 114 [ 1680.823317][ T5083] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1680.831395][ T5083] usb 4-1-port1: config error 10:21:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:51 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x0, 0x9}}) 10:21:51 executing program 5: sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 10:21:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:51 executing program 4: syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x18800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0xfe, 0x5f6b, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 10:21:51 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x0) syz_open_procfs$userns(0x0, &(0x7f00000004c0)) socket$igmp(0x2, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001140)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000032c0)={0x2020}, 0x2020) accept(0xffffffffffffffff, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001140)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 10:21:51 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1681.375230][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 1681.375250][ T27] audit: type=1800 audit(1684405311.126:1057): pid=28045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 10:21:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1681.461004][ T27] audit: type=1800 audit(1684405311.126:1058): pid=28045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 10:21:51 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1681.579982][ T27] audit: type=1800 audit(1684405311.126:1059): pid=28045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 10:21:51 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1681.681950][ T27] audit: type=1800 audit(1684405311.246:1060): pid=28053 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 1681.705047][ T6299] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1681.758063][ T27] audit: type=1800 audit(1684405311.256:1061): pid=28053 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 1681.839565][ T27] audit: type=1800 audit(1684405311.266:1062): pid=28053 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 1681.874497][ T27] audit: type=1800 audit(1684405311.406:1063): pid=28061 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 1681.904790][ T27] audit: type=1800 audit(1684405311.416:1064): pid=28061 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 1681.935915][ T27] audit: type=1800 audit(1684405311.416:1065): pid=28061 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 1681.958860][ T6299] usb 4-1: Using ep0 maxpacket: 32 [ 1681.971657][ T27] audit: type=1800 audit(1684405311.536:1066): pid=28064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 1682.083395][ T6299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1682.096215][ T6299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1682.114604][ T6299] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1682.130417][ T6299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.144103][ T6299] usb 4-1: config 0 descriptor?? [ 1682.184886][ T6299] hub 4-1:0.0: USB hub found [ 1682.327334][T28046] loop4: detected capacity change from 0 to 32768 [ 1682.393323][ T6299] hub 4-1:0.0: 1 port detected [ 1683.263393][ T6299] hub 4-1:0.0: activate --> -90 [ 1684.349034][ T5679] usb 4-1: USB disconnect, device number 115 [ 1684.363388][T15603] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1684.370268][T15603] usb 4-1-port1: config error 10:21:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:54 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:54 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x0) syz_open_procfs$userns(0x0, &(0x7f00000004c0)) socket$igmp(0x2, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001140)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000032c0)={0x2020}, 0x2020) accept(0xffffffffffffffff, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001140)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 10:21:54 executing program 5: getpid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 10:21:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x6}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x0, 0x9}}) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000200)) 10:21:54 executing program 4: add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 10:21:54 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:54 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x808084, &(0x7f0000000b80)=ANY=[@ANYBLOB='cruft\x00map=normal,uid=', @ANYRESHEX, @ANYBLOB="e54f4230521c7bcb150552d662491b00f9d335d7d7f70fc87ca8e949000000"], 0x1, 0x9c6, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=@FILEID_INO32_GEN={0x8}, 0x0) 10:21:54 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1685.213395][T15603] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1685.281708][T28093] loop4: detected capacity change from 0 to 1764 [ 1685.466764][T15603] usb 4-1: Using ep0 maxpacket: 32 [ 1685.586977][T15603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1685.607024][T15603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1685.621223][T15603] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1685.637671][T15603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.652410][T15603] usb 4-1: config 0 descriptor?? [ 1685.697086][T15603] hub 4-1:0.0: USB hub found [ 1685.913281][T15603] hub 4-1:0.0: 1 port detected [ 1686.783351][T15603] hub 4-1:0.0: activate --> -90 [ 1687.847038][ T6291] usb 4-1: USB disconnect, device number 116 [ 1687.863370][T15603] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1687.870258][T15603] usb 4-1-port1: config error 10:21:58 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:21:58 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:21:58 executing program 4: syz_clone(0x40100000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) 10:21:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) 10:21:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 10:21:58 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/267, 0xa1) [ 1688.423164][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1688.423183][ T27] audit: type=1800 audit(1684405318.176:1078): pid=28111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1962 res=0 errno=0 10:21:58 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1688.506339][ T27] audit: type=1800 audit(1684405318.206:1079): pid=28111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1962 res=0 errno=0 10:21:58 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079201010c2154000f3070102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1688.543426][ T27] audit: type=1800 audit(1684405318.216:1080): pid=28111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1962 res=0 errno=0 10:21:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:21:58 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x28000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1688.598181][T28117] loop5: detected capacity change from 0 to 1764 [ 1688.605586][ T27] audit: type=1800 audit(1684405318.336:1081): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1962 res=0 errno=0 10:21:58 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/267, 0xa1) [ 1688.700389][ T27] audit: type=1800 audit(1684405318.346:1082): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 1688.765323][ T6291] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1688.788662][ T27] audit: type=1800 audit(1684405318.346:1083): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 1688.871320][ T27] audit: type=1800 audit(1684405318.486:1084): pid=28125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 1688.915371][ T27] audit: type=1800 audit(1684405318.486:1085): pid=28125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 1688.936240][ T6299] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1688.939168][T28129] loop5: detected capacity change from 0 to 1764 [ 1688.944427][ T27] audit: type=1800 audit(1684405318.486:1086): pid=28125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 1689.033311][ T6291] usb 4-1: Using ep0 maxpacket: 32 [ 1689.193376][ T6291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.209832][ T6291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.220092][ T6291] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1689.234029][ T6299] usb 3-1: Using ep0 maxpacket: 16 [ 1689.239262][ T6291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.255757][ T6291] usb 4-1: config 0 descriptor?? [ 1689.294943][ T6291] hub 4-1:0.0: USB hub found [ 1689.373428][ T6299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1689.504539][ T6291] hub 4-1:0.0: 1 port detected [ 1689.543370][ T6299] usb 3-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.f3 [ 1689.552511][ T6299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.560804][ T6299] usb 3-1: Product: syz [ 1689.565351][ T6299] usb 3-1: Manufacturer: syz [ 1689.570066][ T6299] usb 3-1: SerialNumber: syz [ 1689.576785][ T6299] usb 3-1: config 0 descriptor?? [ 1689.626795][ T6299] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 1689.923310][ T6299] rc_core: IR keymap rc-imon-pad not found [ 1689.929600][ T6299] Registered IR keymap rc-empty [ 1689.935316][ T6299] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1689.946333][ T6299] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1690.053514][ T6299] imon:send_packet: packet tx failed (-71) [ 1690.073294][ T6299] imon 3-1:0.0: remote input dev register failed [ 1690.079970][ T6299] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1690.115865][ T6299] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1690.122467][ T6299] imon:imon_probe: failed to initialize context! [ 1690.136799][ T6299] imon 3-1:0.0: unable to register, err -19 [ 1690.157576][ T6299] usb 3-1: USB disconnect, device number 26 [ 1690.363347][ T6291] hub 4-1:0.0: activate --> -90 [ 1691.415449][T15603] usb 4-1: USB disconnect, device number 117 [ 1691.425524][ T6291] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1691.434110][ T6291] usb 4-1-port1: config error 10:22:01 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:22:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) 10:22:01 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x28000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/267, 0xa1) 10:22:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)) [ 1691.964513][ T27] audit: type=1800 audit(1684405321.716:1087): pid=28138 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 10:22:01 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x28000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:01 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x23, &(0x7f0000000080)={r1}, 0x8) [ 1692.109934][T28140] loop5: detected capacity change from 0 to 1764 10:22:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/267, 0xa1) 10:22:01 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1692.333256][ T5679] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1692.367036][T28156] loop5: detected capacity change from 0 to 1764 [ 1692.593324][ T5679] usb 4-1: Using ep0 maxpacket: 32 [ 1692.615609][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.653099][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1692.729028][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.753063][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1692.762990][ T5679] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1692.800541][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.819501][ T5679] usb 4-1: config 0 descriptor?? [ 1692.886722][ T5679] hub 4-1:0.0: USB hub found [ 1693.101055][ T5679] hub 4-1:0.0: 1 port detected [ 1693.963454][ T5679] hub 4-1:0.0: activate --> -90 [ 1695.038989][T15603] usb 4-1: USB disconnect, device number 118 [ 1695.054995][ T5679] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1695.062255][ T5679] usb 4-1-port1: config error 10:22:05 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:22:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x5}) 10:22:05 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002180)={0xa, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0xfffffff8}}) 10:22:05 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:05 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") getdents(0xffffffffffffffff, &(0x7f0000000680)=""/267, 0xa1) 10:22:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1695.622127][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1695.622146][ T27] audit: type=1800 audit(1684405325.366:1099): pid=28174 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1970 res=0 errno=0 10:22:05 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1695.658955][ T27] audit: type=1800 audit(1684405325.406:1100): pid=28174 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 1695.691653][T28172] loop5: detected capacity change from 0 to 1764 10:22:05 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") getdents(0xffffffffffffffff, &(0x7f0000000680)=""/267, 0xa1) 10:22:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000008c0)={0x1, 0x0, 0x0, 0x0, 0x182, &(0x7f00000004c0)}) [ 1695.864312][ T27] audit: type=1800 audit(1684405325.616:1101): pid=28181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1946 res=0 errno=0 [ 1695.893415][ T5083] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1695.918761][T28180] loop5: detected capacity change from 0 to 1764 [ 1695.934603][ T27] audit: type=1800 audit(1684405325.616:1102): pid=28181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1946 res=0 errno=0 10:22:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000240)={@void, @val, @ipv6=@udp={0x0, 0x6, "83260d", 0x18, 0x11, 0x0, @mcast1, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0xc00000}}}}}, 0x4a) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 10:22:05 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") getdents(0xffffffffffffffff, &(0x7f0000000680)=""/267, 0xa1) [ 1696.039254][ T27] audit: type=1800 audit(1684405325.636:1103): pid=28181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1946 res=0 errno=0 [ 1696.133290][ T5083] usb 4-1: Using ep0 maxpacket: 32 [ 1696.133886][T27079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.169488][T27079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.263254][ T5083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1696.288636][T28190] loop5: detected capacity change from 0 to 1764 [ 1696.295201][ T5083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1696.299095][T28188] syzkaller1: entered promiscuous mode [ 1696.324586][ T5083] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1696.340865][T28188] syzkaller1: entered allmulticast mode 10:22:06 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/267, 0xa1) [ 1696.371232][ T5083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.409904][ T5083] usb 4-1: config 0 descriptor?? [ 1696.464592][ T5083] hub 4-1:0.0: USB hub found [ 1696.492346][ T27] audit: type=1804 audit(1684405326.236:1104): pid=28182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1342/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 1696.673263][ T5083] hub 4-1:0.0: 1 port detected [ 1696.824271][T28171] loop4: detected capacity change from 0 to 32768 [ 1696.832325][T28171] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (28171) [ 1696.847826][T28171] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1696.857837][T28171] BTRFS info (device loop4): turning on sync discard [ 1696.864905][T28171] BTRFS info (device loop4): using free space tree [ 1696.892352][T28171] BTRFS info (device loop4): enabling ssd optimizations [ 1696.918767][ T27] audit: type=1800 audit(1684405326.666:1105): pid=28171 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 1696.997544][T28171] BTRFS info (device loop4): balance: start -f -s [ 1697.040590][T28171] BTRFS info (device loop4): relocating block group 1048576 flags system [ 1697.116447][T28171] BTRFS info (device loop4): balance: ended with status: 0 [ 1697.553278][ T5083] hub 4-1:0.0: activate --> -90 [ 1698.634712][ T5685] usb 4-1: USB disconnect, device number 119 [ 1698.643386][ T5083] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1698.650238][ T5083] usb 4-1-port1: config error 10:22:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x4, "28adfd27"}, 0x0, 0x0, 0x0, 0x0}) 10:22:08 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/267, 0xa1) 10:22:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:08 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0xada66a977c02d739) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/57, 0x39}, {&(0x7f0000000700)=""/69, 0x45}, {&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f0000001840)=""/2, 0x2}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x5, &(0x7f0000003f80)=""/60, 0x3c}, 0xffff}, {{&(0x7f0000003fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004040)=""/173, 0xad}, {&(0x7f0000004100)=""/230, 0xe6}, {&(0x7f0000004200)=""/7, 0x7}, {&(0x7f0000004240)=""/196, 0xc4}, {&(0x7f0000004340)=""/15, 0xf}], 0x5, &(0x7f0000004400)=""/8, 0x8}, 0xc9}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000004440)=""/190, 0xbe}, {&(0x7f0000004500)=""/34, 0x22}], 0x2, &(0x7f00000055c0)=""/133, 0x85}, 0xfffffffd}], 0x3, 0x400100a0, &(0x7f0000005740)={0x77359400}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000007c0)) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r6, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000100), 0x40000c4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = open(&(0x7f00000017c0)='./file0\x00', 0x101000, 0x80) io_submit(0x0, 0x4, &(0x7f0000001880)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x200, 0xffffffffffffffff, &(0x7f0000001c00)="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", 0x1000, 0x7fffffff}, 0x0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000002e40)="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", 0x107, 0x0, 0x0, 0x0, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7f, 0xffffffffffffffff, &(0x7f00000005c0)="c29e8a8c59c9efcb6918d3d6916219b16e6b6f1732e144bd963f2a503b7d96c57eda1e2714f6b73388013d9916d659d92855b9fe9a3b71da706e0a21dfd5fbcf5a38d6c1c0631626e45150a1b48c8d6abf26080230201055add8803e5bc206b764fe72f01fd0235656f1bdd9bf70b4c98586de930aa2b5ff757a6c2a1d3c8a98d7fa4c45768b0b2c060e6b39f9c7a70f06a671f5ed75ad5f7483cf58b53940350c4173bffb83bed477fd9b459f125e9677ed9ae98e0590d8e1edc619971f036f1f892034fb19f370f3299b29438895fb22e0b86dab32537b757f8146a92c8b06685360a62e91cd487b1faf967d3aefac4d", 0xf1, 0x4, 0x0, 0x45d1e5ff0d410c9f, r0}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x840, &(0x7f0000004580)=ANY=[@ANYBLOB="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", @ANYRESDEC=0xee00, @ANYRESDEC], 0xff, 0x20e, &(0x7f0000002c00)="$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") syz_clone(0x42048480, 0x0, 0x0, 0x0, 0x0, 0x0) 10:22:08 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:08 executing program 4: fsopen(&(0x7f0000001900)='virtiofs\x00', 0x0) 10:22:08 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x10000, 0x0, 0x0) 10:22:09 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/267, 0xa1) [ 1699.224568][ T27] audit: type=1800 audit(1684405328.976:1106): pid=28220 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1949 res=0 errno=0 [ 1699.267943][ T27] audit: type=1800 audit(1684405329.006:1107): pid=28224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1949 res=0 errno=0 [ 1699.345094][ T27] audit: type=1800 audit(1684405329.046:1108): pid=28220 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1949 res=0 errno=0 10:22:09 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/267, 0xa1) [ 1699.803325][T15603] usb 4-1: new high-speed USB device number 120 using dummy_hcd 10:22:09 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000001000)='./binderfs/custom1\x00', 0x800, 0x0) 10:22:09 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0xada66a977c02d739) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/57, 0x39}, {&(0x7f0000000700)=""/69, 0x45}, {&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f0000001840)=""/2, 0x2}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x5, &(0x7f0000003f80)=""/60, 0x3c}, 0xffff}, {{&(0x7f0000003fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004040)=""/173, 0xad}, {&(0x7f0000004100)=""/230, 0xe6}, {&(0x7f0000004200)=""/7, 0x7}, {&(0x7f0000004240)=""/196, 0xc4}, {&(0x7f0000004340)=""/15, 0xf}], 0x5, &(0x7f0000004400)=""/8, 0x8}, 0xc9}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000004440)=""/190, 0xbe}, {&(0x7f0000004500)=""/34, 0x22}], 0x2, &(0x7f00000055c0)=""/133, 0x85}, 0xfffffffd}], 0x3, 0x400100a0, &(0x7f0000005740)={0x77359400}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000007c0)) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r6, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000100), 0x40000c4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = open(&(0x7f00000017c0)='./file0\x00', 0x101000, 0x80) io_submit(0x0, 0x4, &(0x7f0000001880)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x200, 0xffffffffffffffff, &(0x7f0000001c00)="79b0fcbcb231bf2d6ffdce555d92dbd35130ddc940e31c38eeac6742aa05c27f16c9ad008f3e941a7649e78e3869c284693b96bc04b3dd88a708bd91c4baa88c2497d110be1431a6cf74f035d80e9f7b50a94495b2a8d2fb7669c86e2d4fa9c098ae780c5c5ec09e98816fcdd764424cb493032d7f6032964d7d3a92c3587d51a6f7f82ad09699eb5abd3337f5bf470098d2d51517df78908b1132ce9cba578d208448116350f5d27d2eacfaf7eed397878ecd61005a004167a487cdedc88a4ce05e877d4e955f2e6dc3e386fb84beb4610b62dd1b64c8840122354e9c7ad7ae2e9a6b32fb442bc63ff78c3420fb7571f7d5e01bf7ba7877fa290b4ad9c0b335c4a90b11e334eaefc0163bebd4ef65e1d4a5d25b798ce2d58eb12f735d2d8fd12fdc20db7c8451a1760fc23657f0b64daf61bb9eaf079ff3a4bab8d10876c39990255eafc1bb4fc2b4d0eb1d8940e566c22ae52125b4d22da3614419c6482894374fb48bde9715a041ab715c08460ff792fe3de919a21a69714cdcd6021dfe52db9b1f5e54cc3b50363c41d5d9c02c72051ce38769cc259813a9c7c3f148be7ac682c980ef2978b94be8884ad378f40f69f50deb2614525ad9bbf937d3005f03baa0de648a153e7b4ee5fc6c8c5d1513985e701060b8c2bb4ab2612fb1a3b770514189902353346ad16729e00e21870e997751f1b8bf874e67c94043cede25e474ab1dd4bb5b2c51f04687e3c062d19aca4da01f35a49f9ee6cd95d3e4c4d5a051f0fa3ca34c0aa5739ec18202bcca44b226ebca50306eb49c74b5b4c9d3632fdb2317ccd82e4cbe948df9757aadb4549ff15b3570dc80c664563f381fc99a5f16bfe69753e4e2412b72b6a2aba21b7ac41518f56efbd0034ca8ed1c61cbc625c140fecd27adbc91b358db143fc5a2688d725823123154e259f3cd0690824d510ad72da19c9a72f40d03de9fd291c40e240a177b29c224ee221356b5997c388cbde101694ae6b2eadb4989d09b164d1496bece5ec5bcab8bf88978c0c509afbb0b908940a7faa41c797de956eff8a450422656a0709be4c07b0435c59a66aea792e189b441ad91047c13c33832a276ac73410c1e2fbc9d94f6771474ac4baeb2f851cbefb494d20c61ca539157a37936acb4cd15a06cd00cc7a8ec5efdd96af8df1d59e60e7cf7aeab28a9d5b03e445a04bc3f0f8651a647e7a0d8d2352de379feaa023e6a5acc41dd9f42142885aa6f05e91a602335ba70f35ae614d03a734b57e5f19579c09d47130fdf450d181976867cdeadd4c7a1614b6b29e38b025f328deb2119df62f409b34411564675e80f7beff852566ec71656521da5e7fb25fb5dd995f5133e62659a94705ffca974cb8bfbcb1b0c65502437b81f8bee996828b0b61d222a000de1c73a5e5181f17cb4d7ee18f20dcc92b7c64041db9fad736ad20ca746c9e8552fa8034e093e8e75179da0cdb0c994086bc0764b973992a5314d51a697336d37eb79f2e4a0d2c15e471169622ba876501cbfc3f904350f13ca773544f169d4d6a273f089fb7f84e80470310f11a596cb5e77ec6c78b4d523b9062190fb6bb3a3978d6f83993507c8adc69fc938e209f9b30e727226d8fd25fb5fff25bdad2edb2d0fb4dde8d19a7f267242af41c6e87439bbc9c4a8197047f4999e49b7dc218535ef44e0a4913f57fe24e82192f55f28585ff37d3020e1d5fece61864b3738b0f3890df5c8480375ea1076ce04f1e342af0e88b1d22ac2ce350c89c8f3c9c8f7037d12cc5e519101f69a08d92f537fe367d59440efd3ce42868b048fb48d80c1a0bba4df146c63bb9774e988d108edd77743ffb9e885771b33f99e0a17977c7fe4b44946e6ad86a73cef1bb06c54def93074f1b3a9aa817c69d79ba90a254c93c99aa91ae8fdd95f56f1ced5b58c4d9452a6a9b623612d2c7be5fae650bf379b47723b249e1a2b8296fb1340c0b70847990ea1e330e4e4bac1ff918e7dccb5165a7d6203cac95134d2b02d15c5297e3aa2d6fc12dac23c935f43cc29bdbebd972062659f74e75dcb4bb0d8adcf0883686dd5c81716d174b856a827268bedc2a105f7a107a5b6ca50dae8e8c2aa81f1a9a34d7022c503bc4fcdcf010c48c48e2b56bfeecdbfea433955b2ea379cba6a2a426fa7f65861b0c48fe2bc22b891488896ace6eb8764bcddbe768456e523559717f3d84ac70f925f197109df9b106b53710cb35fb591fa43a62ec4ba167de7a1b69cd3d5358016ae57f20c3dda6c62c0c16bd343349b26365458f08db7d7b8045909dc84b9957043326299149f9ee17c3d56f5b2f4b2d745c91bb3aaafe5c7a35bbdbdd35d30bf5ccfe8a1aa732eeff3c18cf242b5f1432bcb2a62bd37f41dd2d51d776738d9dd1cac07f41e7e9a0020ae935ff7925faa40039053ddcf53891c0e0dcedd534a0b17d16d41d31883ac1af6dc59614c1e99227ff5715f0995e675b0786ac8e0a3dcc6b0d90da66fd85c1fb9582a58f36082e2c20f7e43d23139c8e71f8397e72f3138d2f3fba214bd40a019874f4b8797b8aee877044e1818baa0e88929170c683abbac1ffcd08e1ed4482025e8a192cb857c7090400dd07f531a62fabe86897860304f30f6b883de74eb1ec9693226c6820d495fcb3c91594fc99656acc21602ddadc258e7a51b379859bffee9f0f11d5108b71cea6a1c8d7559bf3d0fdd386cce0a3f6825ca412c64ac57a504a480e4d8fb4beb980efe52272068b3409cec376ead0366d36ce38388e66c7e375f641139330d7adda9aacb2f52c757498359c08c2526fe77a49c06eed18f4a326df87ecca112e4ad018b20cb452898c08a4631d85a221084ef2cbeab40f2137b349131d7ae76ddeed3cfed13fff6b56b051a2ff3e1268e383b028fc85a2a4cbef87e45fb7de9aba1cbab9726ad75e19f661dfc500e56109e8f3bdababf988a90cfcdd6b914a395e2a75280c878959047aea44e1b524b729c89d25eaaa9da50c87d70cdb1b5e239679372ed09b75ac6bfc193d68a11f0058184ced9e2e6767d423327d3e09b2347afcdc870ceb04c9849b1ff847d6b79c1fb867b87e0e766739cc56e32af743803223b4729cd1b482b7a3a2597932fed5829737a6112e98b3bf67437126dc205f3f48b439b87e2f04903f1f5d5546c96a68e7c478c476da9bc0a3e3530055540d9a9278964aa4a8f4d1d909eb7db9c8ab48f212f7a148dd21bda767b895ca48584cebbe44990805e697ab40e6e4d83b66bfb6c6ecf0dc19255adfd64c570f772796b088f8bacd767f92a12438a5ccceb2b7eb94f57b21c8acf43ec85b61fcf04c86fa724214f6a3803527073a99d69eeb03b5180af9f81d0c0e93a0e2731dd61c9b66eba0b2691c85de7afaca20684a9dedc7c51b28d233eaa1147594c847389f4549a9d887acb6f9f944e9c618e8dbb20173deb9cb8efd53439db7c8500edfcbacecc06cea243e124f9263dce63fea42ebba51abc14ece4b15da100a7a5dc8fb994bacdca2ba93f38fe0d7715bf301bec980fc2dbf547e1d939f50f47dd0c888111ab09bde607abb99942aa033a44be66a4ea53ed1001ef94f19e7476b3278822c28e73579a7c4012b8c6adea365f0b59f0b13f6c30fdff96c9dfc648a25bfe9415a6389d22d419dcd906bdf1ea96f5e91d080f7d5d3b2199672291102b6eb1992d09da1a9ddbb44a59891d5d1141e088b79c66d062417db338e4a24a581447dc840a3e93ae96373cc5046a0208576b9a05b8fe826651de865666f4a720ef2f4aaa871477600305de112e44a95adb832884907457481355ff6f6225557531229dc76abdb4144d7f1ce2de2a98d74c5f9843a12ab1777c94a9a16af4ef8445380cc22e9323736fb2a473f1778bb996e2103e6294afb1a126816c25e058b1e377cbba6080908c41e02a8a39798cb257cd84088d32eaa44c7a487e087559787348e1a1eb142008592d6ace173607a5a17fb1953def854026b83687f0d91bad3b52ffe4344dc74f20460388bfb51ab439028c105d337f0bcb91231a0f36c3472b709e10a66cb9c8ec883e2a05d96cacb52341ba5c84eea76ff78ec1d513790196c5ae449be6f750c1abf8684653f0ce0e7f4249f2da4c5541ece43a2ac9dbf97bd0d7a29544ab59cd4b089899f050740b1bad03f9dec694ead348ca96e564785fa3f3cfa9b2c3c18016a870e20cc3bf63e25def471a5d35e50d6957f1055b7539151607fdad51423fda7b584e0cfa732d24148913e12047b219c3eccc3dfcff428b37aadbeb0f7a2041bacf08876ee56d038f08a5fd38806176190607be7a79ae119c500e5bd52e8671746ebcd7d8581da10487bca8290ded0a8b0bcfbedbe3345b146c62081a2f7f5eb743ff06984bc828ea0fa610420f30fa80f8970692273dba14371a1a1987b6842a65c51371080591148964947dbab7807adc9e7b8d9335d8e5cf2db41f6be882af556ec049d80cefb65f830817f5505875d82e8ff54bcca295e98190fc216e1dc5eaf71bb471ef65eedfb213a2e67a67b22a29a91cbf26a548b7dd147ba148342dd2e7f3f7a559e75b90367915053f344e8c122d64d7064066682edbc8f36c21d36dc2f30eb3e1d31bce068013a321c631e24cf62ceaa277ce9b9d8b41244c902af2307598d8836a0fc71f323422d020b01df55efd9f080bcaf9c65a1285007e59f8319f95c6d947553d7bbfd351c22f13de62ab5b1e902a64331adf1b98bf917e7c835b7872c64599770012b9bb5501cadc2357b77cc293e24b8f379c84ef5a85ba7224b9eaf4c1c2a16a05bf6601fe0233da1f8be451e733009e859dd6e8224f9112a5212f13e66d23bfb3f545241e099f2e8a6d852b0cd4ebac4b57373c53e1348d49442f4e59b3f21c019bc7b29138d420bb63dfe18e76954c6bdb8e6fb991b8049556d2e2675fa53bccbceb98d7f503e561f58d6b072bf6762ecad6b0379c95df03fb7357498a59427b300ae0505bfe379dec8983b876b013b1d9e0ee295fcad39d6b3805507bc779631f2bf7955ac0d794eef77b773ab979e2f3b43978909329b81e608266fa1213248ff89369d54afd8c15cedcf04f52eacc02132c3e8861eb5d1e8942a4b377143a27cdb2837d4aba805abbfdfdf07462108cd9fc0fd1d364913d247f519c8849c8b7fefa08618c78ec9e68fc9011d1fd3f3445d7766dbe0bb377a986556eefa8c7928ae1732e1e50ee89568a2752d02bdae275a4db6108a5c7d636ae161c7afbee5a8732bc4c793b207081ea6290ce0d3588524cddf7fee892c36871f618da2aca26930fea96303391298baac8378d595a38a46d472c64c32f3a027d2266afff8e231a2f260fcb25d54fc816ec320be93f9c9f27a53b531aeb0fdcef729728c3b5985448a1538874ef5d91de4d0859dcf5046860246742b4ce3a47dfd70771328ee833e98804a3c08e8f25a1e8ce28eddc18fc1967d7973d0b3ff6a2f7bf55d2fd7023d95d20d5581747c10110405102555f735ddc75aec05358de260cc40fa697335dfaad2dc6326131462f4a4b63e25b4eb77d5301922c0eb277b051ce8c90d091f675ea54d06a67d107d3ea8988cfc35f511b5ff0b179c860509b239f53e2e59537766fb885605d4398ca9061acb2977349e2b777be9df50a6442ad03fbd4cc9b8a514f11d21d7376154fa4f6b65fc7a00eb55f7ca9d555c13c7218ebf6414ea05cc277e75bef30b4650f510d13fb56c65f6e105a9d1469049d21cade4e0d85064f31607a5c0f7dcbf16b6508e4949f44080eda59571ecbc240f93d", 0x1000, 0x7fffffff}, 0x0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000002e40)="229aa3c47e39d085df89ffbfdf493adfd961867bb61b547feb7cb045b6812ecad064f0defcf53d97e492f1c6a1a034527a1b9e656d09dcfc88a9704fbc87f1be3672bccf2afab0c107724f30beb1af06cd38bd82a39ad034bafc6836b65e70f7469c6864e45e43d71bade338078782c3524cee4d7b4f94f22af8a1ce7d93b306195939f06baf56e917f76a124456a0404508288f73bb6191e2bc9fe067b380628813772cdec7a14bb4abaa3267f123e91df2e8cde36e2dcf65d289362e52abef9e9cf5a33fbdd1281830dcb39b50f537864434aa52ffeab56bc7e7b9bd709695315483bd7152e8dbf54555d820d1376071a4428a871944aa4c76fc852e1bdcb0627235de9b5e2c", 0x107, 0x0, 0x0, 0x0, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7f, 0xffffffffffffffff, &(0x7f00000005c0)="c29e8a8c59c9efcb6918d3d6916219b16e6b6f1732e144bd963f2a503b7d96c57eda1e2714f6b73388013d9916d659d92855b9fe9a3b71da706e0a21dfd5fbcf5a38d6c1c0631626e45150a1b48c8d6abf26080230201055add8803e5bc206b764fe72f01fd0235656f1bdd9bf70b4c98586de930aa2b5ff757a6c2a1d3c8a98d7fa4c45768b0b2c060e6b39f9c7a70f06a671f5ed75ad5f7483cf58b53940350c4173bffb83bed477fd9b459f125e9677ed9ae98e0590d8e1edc619971f036f1f892034fb19f370f3299b29438895fb22e0b86dab32537b757f8146a92c8b06685360a62e91cd487b1faf967d3aefac4d", 0xf1, 0x4, 0x0, 0x45d1e5ff0d410c9f, r0}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x840, &(0x7f0000004580)=ANY=[@ANYBLOB="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", @ANYRESDEC=0xee00, @ANYRESDEC], 0xff, 0x20e, &(0x7f0000002c00)="$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") syz_clone(0x42048480, 0x0, 0x0, 0x0, 0x0, 0x0) 10:22:10 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1700.208667][T15603] usb 4-1: Using ep0 maxpacket: 32 [ 1700.255299][T28239] loop5: detected capacity change from 0 to 1764 [ 1700.333438][T15603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.354997][T27079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.355847][T15603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.362851][T27079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.400487][T15603] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1700.433269][T15603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.450940][T15603] usb 4-1: config 0 descriptor?? [ 1700.494412][T15603] hub 4-1:0.0: USB hub found [ 1700.703488][T15603] hub 4-1:0.0: 1 port detected [ 1701.580654][T15603] hub 4-1:0.0: activate --> -90 [ 1702.664869][T27843] usb 4-1: USB disconnect, device number 120 [ 1702.673826][ T1668] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1702.680787][ T1668] usb 4-1-port1: config error 10:22:12 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:22:12 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$eJzs3c1vVOe9B/DvGWxwnIiQhJvLRUkYyCVxEl8zNhe4KJsL9hgm1y9XtpGCughpMBXCaqqklZKoCypVXTVqF1WltrssK1WKlE2zqVi1XXbVRaUq/0EVdUW7cXXOjMHglzHEZij9fKzDOXPO7zzP75lz5jyaYeY84Z/Z8vJyNd3n4wu/fJDJ8vA5O/HFJ59+XE7fu57d2ZUTxa+TgST1pC/JgaR/fGJudrpLQdeSS0luJEWSPWnPt+RSih/liduPb6T4RVkvO2+Zf2m9Pv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBhVIxPNBqjRaZaMxferG+sGgJ8k+23Crxelfp513qTopwyMLAy1PeB/bc3P1v+cyTPtR89Vw1InoF89Piz+15/pq+2sv8mCT0Q73/40bW3l5YW3+t1Ij1yrjnTmp9tTZ8516y35mfrp0+ebBw7Pzlfn2xNNecvzi80p+vjc80zC7Nz9aHxV+qjp08frzdHLs5emDk3MTLVXFl56r/GGo2T9TdG/r95Zm5+dubYGyPz4+dbU1OtmXNVTLm5jDlVnoj/11qoLzTPTNfrV64uLR7vlmQZNLqVoLFuQWONsbHR0bGx0ZMnTp841Wj0rVnRuEvWRPT+pKW3tvsSDvet1un/M5VWZnIhb6a+7t94JjKX2UwX62/v+LxI1f/vOdbctN7V/f9KL3/g9uaDqfr/F9qPXtio/98g16/4t2er5Sbv58N8lGt5O0tZymLe25mMHtq/c2lmJq3MZzatTOdMtabeWVPP6ZzMyTTyVs5nMvOpZzKtTKWZ+VzMfBbSzHR1ds2lmTNZyGzmUs9QxvNK6hnN6ZzO8dTTzEguZjYXMpNzmciZqpQruVo978c3yfFW0OhWgsY2CdL/89XtxGUc7styp//f3T10aPxBJAQAAABsu//4ffbuf/p3f07683z1ufxka6rZ+PtyW6/TAwAAALZB9XW958pZf7n0fIrq/X+v0wIAAAC2UVH9xq5IMphD7aWVX0L5EAAAAAAeEdX//79QzgbLpUMpvP8HAACAR033e+x3jSiGV27/W7/cnl/uRHTu8zs42ZpqjozPTr0+mpequwxUvzRYU9qupOivfn7wag63ow4PtueDd5Y4UEaNjrw+mldzpNOQoRfL2Yu/av32xN2RY+3Il9uRL3cih9Yp83gZCQCPuiOb9Mdb7f9fzXA7Yvhg2Zmm7+A6PWtDzwoAD4vuY+x0jSj+u8v7/6dz5VD7KwUjeSfvZimXM1z92qD6xsG6pQ6u+hrCcJdPA1Zi/3CqluG7Pw8YWj92MWMZ7vKJwOCq4WUA4FFypEs/vJX+f7jL+/9BXykEgIfKrRHsd3Ch120EAO6klwYAAAAAAAAAAAAAAAAAAAAAAAAAAIDtt003+V/e1S5uR8cRWH+hM35RHmilFjoLy575LS3sTrKdBf5tx3Pu5VUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB6VIdq23vpbsSdJIcuzBZ7Vzrvc6gR4rbuZmPsjeXucBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCo6dz/v5b2/PH2qvTVkqNJLiX5Wq9z3E43e53ADhvosn3V/f/LY57lIn3tw56if3xibna6PPzV2A+1Lz759ONyup88ygLKGu4YXKJTw8Z7PVXtNTix+P61b7/7rfrE2SrJswuTUxPT5+b+93bgs8VnST3tacVKvt89+psfr9Pyz8qWbq3eyareibX1/vt6e29e72auLi2OlTUtNN9c+M43r36watPTOZy8OJQM3VnTN8qpXdNjdxd3OP2b1VZ8Wfyg2Juf5lJ1/Mtno1guykP0ZNX+x65cXVoceefdpcsb5LQvh5JcvvMsuzOnNQ5V15N1VWddrf/61aXFRjHQufLs71Lepjollu0Y3aANT1WnzGCnDbu31Ib6xm2orHrea+ttb2d0fIOMnslL3Y70Gi9tfqTXV3xZ/Kk4nz/m+6vG/6iVx/9otvLqLGOqyFVnyoaRtXZk1fKx1RveujvyLz+796ZwXwaSH+br+Z9bx7+26vrfOVb3fz1a4/brYs0YQ6tq/Iqvi0Ori93kdVH1SPvvSqWdQWOjfTp57m9HbZDnv+W1pO/gPV0VX+tyRdmp1//Pi6H8NdeN/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADz8imTXOmuLWnI0yb4kT5Zr6snydtRXGyy2o5j7dr2ntfdecTM380H29joPAAAAAAAAALbH2YkvPvn043Kq/j9+V/6z1tlST/qS7Ct+8lgm5manuxTUn1xKcqNcHri3HMr98sTtxzfKRwfurQwAYOv+EQAA//85LGx5") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/267, 0xa1) 10:22:12 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0xada66a977c02d739) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/57, 0x39}, {&(0x7f0000000700)=""/69, 0x45}, {&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f0000001840)=""/2, 0x2}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x5, &(0x7f0000003f80)=""/60, 0x3c}, 0xffff}, {{&(0x7f0000003fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004040)=""/173, 0xad}, {&(0x7f0000004100)=""/230, 0xe6}, {&(0x7f0000004200)=""/7, 0x7}, {&(0x7f0000004240)=""/196, 0xc4}, {&(0x7f0000004340)=""/15, 0xf}], 0x5, &(0x7f0000004400)=""/8, 0x8}, 0xc9}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000004440)=""/190, 0xbe}, {&(0x7f0000004500)=""/34, 0x22}], 0x2, &(0x7f00000055c0)=""/133, 0x85}, 0xfffffffd}], 0x3, 0x400100a0, &(0x7f0000005740)={0x77359400}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000007c0)) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r6, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000100), 0x40000c4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = open(&(0x7f00000017c0)='./file0\x00', 0x101000, 0x80) io_submit(0x0, 0x4, &(0x7f0000001880)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x200, 0xffffffffffffffff, &(0x7f0000001c00)="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", 0x1000, 0x7fffffff}, 0x0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000002e40)="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", 0x107, 0x0, 0x0, 0x0, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7f, 0xffffffffffffffff, &(0x7f00000005c0)="c29e8a8c59c9efcb6918d3d6916219b16e6b6f1732e144bd963f2a503b7d96c57eda1e2714f6b73388013d9916d659d92855b9fe9a3b71da706e0a21dfd5fbcf5a38d6c1c0631626e45150a1b48c8d6abf26080230201055add8803e5bc206b764fe72f01fd0235656f1bdd9bf70b4c98586de930aa2b5ff757a6c2a1d3c8a98d7fa4c45768b0b2c060e6b39f9c7a70f06a671f5ed75ad5f7483cf58b53940350c4173bffb83bed477fd9b459f125e9677ed9ae98e0590d8e1edc619971f036f1f892034fb19f370f3299b29438895fb22e0b86dab32537b757f8146a92c8b06685360a62e91cd487b1faf967d3aefac4d", 0xf1, 0x4, 0x0, 0x45d1e5ff0d410c9f, r0}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x840, &(0x7f0000004580)=ANY=[@ANYBLOB="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", @ANYRESDEC=0xee00, @ANYRESDEC], 0xff, 0x20e, &(0x7f0000002c00)="$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") syz_clone(0x42048480, 0x0, 0x0, 0x0, 0x0, 0x0) 10:22:12 executing program 1: open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), 0x0, 0x0, 0x3) [ 1703.209566][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1703.209585][ T27] audit: type=1800 audit(1684405332.956:1113): pid=28254 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 10:22:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff}) r1 = dup(r0) recvmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/7}], 0x0, &(0x7f0000000080)=[@cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000000180), 0xd, &(0x7f0000000700)=[{&(0x7f0000000200)=""/229}, {&(0x7f0000000300)=""/116}, {&(0x7f0000000380)=""/120}, {&(0x7f0000000400)=""/163}, {&(0x7f00000004c0)=""/163}, {&(0x7f0000000580)=""/183}, {&(0x7f0000000640)=""/76}, {&(0x7f00000006c0)=""/46}], 0x0, &(0x7f0000000780)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x5450, 0x0) [ 1703.339579][ T27] audit: type=1800 audit(1684405333.006:1114): pid=28254 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1703.343980][T28260] loop5: detected capacity change from 0 to 1764 [ 1703.721300][T28266] loop4: detected capacity change from 0 to 256 [ 1703.733835][T28266] FAT-fs (loop4): Unrecognized mount option "iocset=macgaelic" or missing value [ 1703.933286][ T1668] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1704.223482][ T1668] usb 4-1: Using ep0 maxpacket: 32 10:22:14 executing program 2: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 10:22:14 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/267, 0xa1) 10:22:14 executing program 1: open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003600)={0x2020}, 0x2020) [ 1704.393256][ T1668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.413467][ T1668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 10:22:14 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0xada66a977c02d739) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/57, 0x39}, {&(0x7f0000000700)=""/69, 0x45}, {&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f0000001840)=""/2, 0x2}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x5, &(0x7f0000003f80)=""/60, 0x3c}, 0xffff}, {{&(0x7f0000003fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004040)=""/173, 0xad}, {&(0x7f0000004100)=""/230, 0xe6}, {&(0x7f0000004200)=""/7, 0x7}, {&(0x7f0000004240)=""/196, 0xc4}, {&(0x7f0000004340)=""/15, 0xf}], 0x5, &(0x7f0000004400)=""/8, 0x8}, 0xc9}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000004440)=""/190, 0xbe}, {&(0x7f0000004500)=""/34, 0x22}], 0x2, &(0x7f00000055c0)=""/133, 0x85}, 0xfffffffd}], 0x3, 0x400100a0, &(0x7f0000005740)={0x77359400}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000007c0)) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r6, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000100), 0x40000c4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = open(&(0x7f00000017c0)='./file0\x00', 0x101000, 0x80) io_submit(0x0, 0x4, &(0x7f0000001880)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x200, 0xffffffffffffffff, &(0x7f0000001c00)="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", 0x1000, 0x7fffffff}, 0x0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000002e40)="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", 0x107, 0x0, 0x0, 0x0, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7f, 0xffffffffffffffff, &(0x7f00000005c0)="c29e8a8c59c9efcb6918d3d6916219b16e6b6f1732e144bd963f2a503b7d96c57eda1e2714f6b73388013d9916d659d92855b9fe9a3b71da706e0a21dfd5fbcf5a38d6c1c0631626e45150a1b48c8d6abf26080230201055add8803e5bc206b764fe72f01fd0235656f1bdd9bf70b4c98586de930aa2b5ff757a6c2a1d3c8a98d7fa4c45768b0b2c060e6b39f9c7a70f06a671f5ed75ad5f7483cf58b53940350c4173bffb83bed477fd9b459f125e9677ed9ae98e0590d8e1edc619971f036f1f892034fb19f370f3299b29438895fb22e0b86dab32537b757f8146a92c8b06685360a62e91cd487b1faf967d3aefac4d", 0xf1, 0x4, 0x0, 0x45d1e5ff0d410c9f, r0}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x840, &(0x7f0000004580)=ANY=[@ANYBLOB="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", @ANYRESDEC=0xee00, @ANYRESDEC], 0xff, 0x20e, &(0x7f0000002c00)="$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") syz_clone(0x42048480, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1704.442565][ T1668] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1704.517940][ T1668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.572681][ T1668] usb 4-1: config 0 descriptor?? [ 1704.594452][T27085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.605053][T27085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.622329][ T27] audit: type=1800 audit(1684405334.366:1115): pid=28283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 1704.654433][ T1668] hub 4-1:0.0: USB hub found 10:22:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1704.679881][T28282] loop5: detected capacity change from 0 to 1764 [ 1704.689644][ T27] audit: type=1800 audit(1684405334.396:1116): pid=28283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 1704.913515][ T1668] hub 4-1:0.0: 1 port detected [ 1704.931916][T28288] loop4: detected capacity change from 0 to 256 [ 1704.939691][T28288] FAT-fs (loop4): Unrecognized mount option "iocset=macgaelic" or missing value [ 1705.368747][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.392547][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.763220][ T1668] hub 4-1:0.0: activate --> -90 [ 1705.897889][ T27] audit: type=1800 audit(1684405335.636:1117): pid=28294 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1959 res=0 errno=0 [ 1706.808486][ T5685] usb 4-1: USB disconnect, device number 121 [ 1706.823347][ T1668] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1706.836622][ T1668] usb 4-1-port1: config error 10:22:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:22:17 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x36, 0xa, 0x62, 0x8, 0x17ef, 0x721e, 0xb9ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:22:17 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000680)=""/267, 0xa1) 10:22:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:17 executing program 1: open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:17 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0xada66a977c02d739) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/57, 0x39}, {&(0x7f0000000700)=""/69, 0x45}, {&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f0000001840)=""/2, 0x2}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x5, &(0x7f0000003f80)=""/60, 0x3c}, 0xffff}, {{&(0x7f0000003fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004040)=""/173, 0xad}, {&(0x7f0000004100)=""/230, 0xe6}, {&(0x7f0000004200)=""/7, 0x7}, {&(0x7f0000004240)=""/196, 0xc4}, {&(0x7f0000004340)=""/15, 0xf}], 0x5, &(0x7f0000004400)=""/8, 0x8}, 0xc9}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000004440)=""/190, 0xbe}, {&(0x7f0000004500)=""/34, 0x22}], 0x2, &(0x7f00000055c0)=""/133, 0x85}, 0xfffffffd}], 0x3, 0x400100a0, &(0x7f0000005740)={0x77359400}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000007c0)) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r6, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000100), 0x40000c4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = open(&(0x7f00000017c0)='./file0\x00', 0x101000, 0x80) io_submit(0x0, 0x4, &(0x7f0000001880)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x200, 0xffffffffffffffff, &(0x7f0000001c00)="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", 0x1000, 0x7fffffff}, 0x0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000002e40)="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", 0x107, 0x0, 0x0, 0x0, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7f, 0xffffffffffffffff, &(0x7f00000005c0)="c29e8a8c59c9efcb6918d3d6916219b16e6b6f1732e144bd963f2a503b7d96c57eda1e2714f6b73388013d9916d659d92855b9fe9a3b71da706e0a21dfd5fbcf5a38d6c1c0631626e45150a1b48c8d6abf26080230201055add8803e5bc206b764fe72f01fd0235656f1bdd9bf70b4c98586de930aa2b5ff757a6c2a1d3c8a98d7fa4c45768b0b2c060e6b39f9c7a70f06a671f5ed75ad5f7483cf58b53940350c4173bffb83bed477fd9b459f125e9677ed9ae98e0590d8e1edc619971f036f1f892034fb19f370f3299b29438895fb22e0b86dab32537b757f8146a92c8b06685360a62e91cd487b1faf967d3aefac4d", 0xf1, 0x4, 0x0, 0x45d1e5ff0d410c9f, r0}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x840, &(0x7f0000004580)=ANY=[@ANYBLOB="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", @ANYRESDEC=0xee00, @ANYRESDEC], 0xff, 0x20e, &(0x7f0000002c00)="$eJzs3bFrE1EcB/BfbdXikiJCQRwOXJxCW+ieIhXEgNISpCJitCmUJhQsBBRs3QQHN0dHN1FwcfOPEHQVHcTR4tKhEDEnSSNRYyG92Hw+y/24977we8s9brh3N8/U1pbXN1a2tz/H+PhIjBWiEDsjMRFHYjRSDwIAOEx2Go342khl3QsAcDDs/wAwfHrc/68cYEsAQJ/t//3/ydKbD+VKYbZfnQEA/bK4dO3SXLE4v5Ak4xG1h/VSvZRe0/G5lViNalRiKnKxG9FoSesLF4vzU0nTRJRqWz/zW/XSaGd+OnIx0T0/neaTzvzROLE3PxO5ONU9P9M1fyzOnd2Tz0cu3t6O9ajGcvzItvOb00ly/nLxl/zx5jwAAAAAAAAAAAAAAAAAAAAAAOiHfNLS9fyefP5342n+H84Hap2v86iZH4vTY9muHQAAAAAAAAAAAAAAAAAAAAbFxt17a+VqtXKnVdxaWD3ZeecQF7vzj18MQBv/X/HqeeXdsxvXF3ua/O39QPS8/+Lq/T/MeTkIHf69mHxaKL/e/Pil11TWTyYAAAAAAAAAAAAAAAAAABg+7Y9+s+4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALLT/v9/34pPs5MzWS8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAh9z0AAP//RNm0Fg==") syz_clone(0x42048480, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1707.384906][ T27] audit: type=1800 audit(1684405337.136:1118): pid=28303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1707.454443][ T27] audit: type=1800 audit(1684405337.156:1119): pid=28303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1707.497690][T28301] loop5: detected capacity change from 0 to 1764 [ 1707.870425][T27843] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1707.871413][T28311] loop4: detected capacity change from 0 to 256 [ 1707.894982][T28311] FAT-fs (loop4): Unrecognized mount option "iocset=macgaelic" or missing value [ 1707.993766][ T5083] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1708.303374][ T5083] usb 3-1: Using ep0 maxpacket: 8 10:22:18 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000680)=""/267, 0xa1) 10:22:18 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1708.543444][ T27] audit: type=1800 audit(1684405338.286:1120): pid=28316 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1708.604241][T28320] loop5: detected capacity change from 0 to 1764 [ 1708.633376][ T5083] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=b9.ed 10:22:18 executing program 4: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000840)=@filename='./file0/file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000a00)='nfs\x00', 0x101208e, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = getpid() open(&(0x7f0000000640)='./file0/file0\x00', 0x101001, 0xc0) ptrace$peek(0x2, r0, &(0x7f0000000940)) getrlimit(0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r0, 0xc, &(0x7f0000000680)={0x439105b, 0x3}, &(0x7f0000000700)) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) fstat(0xffffffffffffffff, &(0x7f0000000980)) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000600)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) syz_read_part_table(0x5e8, &(0x7f0000000000)="$eJzs1E9oHFUcB/DfTLI7u2DZUCqCegi09LS2UC8V3EMoacglCaUWEc9CQT0UcvBQtrQ9++/mJSK0EIIQvHiKt5ANhAgbLyHHsHjykhCEoDAyO7txiRcPCRL5fA67b977Pn5vmB8vuNDSyCLPk3pkw5lKpBHjfyeqJz/D9YHJiPdWpu/OTi5M3bsfkcSHxeSbr/TzyUi2GP9wqm7euNX9buvO4crE9tWdztgwFmtpxJOI+GT/RePUlrEzfG3+J1ZbG41n/YZtPUwHDffOy3Kt/eC1d99Pk6RyzvXLXs9id+Zx71r3dlHuYOnSjUqne3xrc5BrFqFfT7bVI+LVuYionePZOH/9/nv+qPp1eWP2vr2yv/f0eO768uLN5uW99faXZXPEUflfK+/N1GUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcudXWRqM6GO/OPO69/dFb0298kX76VZqMxopIbfhQP+P6z54/qkfWeljUv9a9/fLnfP5g6dKNSqcS80uDus3iOCNH+ubBybm4wAbff+bzz1q/f19O1Z4ez11fXrzZvLy33h5+4KNqrX1lsT98MtKKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/MH13dnJh6t79iDQZr0VEOvFiY7D2W0TkecTrP32w/PHm1C/F3Hz2Y0T8GbNZ9ke+dedwZWL76k5nLBaycs9aGpEnETFePvdW/6s349/4KwAA///CpW8b") 10:22:18 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000680)=""/267, 0xa1) [ 1708.653114][T27843] usb 4-1: Using ep0 maxpacket: 32 [ 1708.667511][ T5083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.669671][ T27] audit: type=1800 audit(1684405338.286:1121): pid=28316 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1708.701641][ T5083] usb 3-1: Product: syz [ 1708.709319][ T27] audit: type=1800 audit(1684405338.376:1122): pid=28322 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1708.715977][ T5083] usb 3-1: Manufacturer: syz [ 1708.736980][T27085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 10:22:18 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1708.750616][T27085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.787611][ T5083] usb 3-1: SerialNumber: syz [ 1708.793730][T27843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.810536][ T5083] r8152-cfgselector 3-1: config 0 descriptor?? [ 1708.820756][T27843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 10:22:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1708.829767][ T27] audit: type=1800 audit(1684405338.556:1123): pid=28314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1972 res=0 errno=0 [ 1708.850973][T27843] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1708.871190][T27843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.939453][T27843] usb 4-1: config 0 descriptor?? [ 1708.973197][ T27] audit: type=1800 audit(1684405338.636:1124): pid=28324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1708.994534][T27843] hub 4-1:0.0: USB hub found [ 1709.029147][ T27] audit: type=1800 audit(1684405338.646:1125): pid=28324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1709.129696][T28332] pimreg: entered allmulticast mode [ 1709.229720][T28332] loop4: detected capacity change from 0 to 2048 [ 1709.313651][ T5083] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1709.339457][T28332] loop4: p4 < > [ 1709.394634][ T5083] r8152-cfgselector 3-1: bad CDC descriptors [ 1709.754128][ T5083] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1709.826854][ T4445] loop4: p4 < > [ 1709.838984][T28329] loop5: detected capacity change from 0 to 1764 [ 1709.846939][ T27] audit: type=1800 audit(1684405338.756:1126): pid=28326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1709.886826][ T5083] r8152-cfgselector 3-1: USB disconnect, device number 27 [ 1709.897540][T27843] hub 4-1:0.0: 1 port detected [ 1709.996856][T22347] blk_print_req_error: 22 callbacks suppressed [ 1709.996875][T22347] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1710.036176][ T27] audit: type=1804 audit(1684405339.786:1127): pid=28336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1347/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 1710.082025][T22347] udevd[22347]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1710.125935][T28338] udevd[28338]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1710.152897][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.171644][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1710.423325][T27843] hub 4-1:0.0: activate --> -90 [ 1711.506069][ T5083] usb 4-1: USB disconnect, device number 122 [ 1711.523203][T27843] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1711.530130][T27843] usb 4-1-port1: config error 10:22:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:22:21 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:21 executing program 4: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000840)=@filename='./file0/file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000a00)='nfs\x00', 0x101208e, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = getpid() open(&(0x7f0000000640)='./file0/file0\x00', 0x101001, 0xc0) ptrace$peek(0x2, r0, &(0x7f0000000940)) getrlimit(0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r0, 0xc, &(0x7f0000000680)={0x439105b, 0x3}, &(0x7f0000000700)) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) fstat(0xffffffffffffffff, &(0x7f0000000980)) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000600)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) syz_read_part_table(0x5e8, &(0x7f0000000000)="$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") 10:22:21 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 10:22:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x36, 0xa, 0x62, 0x8, 0x17ef, 0x721e, 0xb9ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1712.071468][ T27] audit: type=1800 audit(1684405341.816:1128): pid=28346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1712.119914][ T27] audit: type=1800 audit(1684405341.816:1129): pid=28346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1712.129809][T28345] loop5: detected capacity change from 0 to 1764 [ 1712.352025][T28353] loop4: detected capacity change from 0 to 2048 [ 1712.360529][T28234] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1712.401705][T28353] loop4: p4 < > [ 1712.545641][ T4445] loop4: p4 < > [ 1712.683476][T28234] usb 3-1: Using ep0 maxpacket: 8 10:22:22 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xffffff1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:22 executing program 4: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000840)=@filename='./file0/file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000a00)='nfs\x00', 0x101208e, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = getpid() open(&(0x7f0000000640)='./file0/file0\x00', 0x101001, 0xc0) ptrace$peek(0x2, r0, &(0x7f0000000940)) getrlimit(0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r0, 0xc, &(0x7f0000000680)={0x439105b, 0x3}, &(0x7f0000000700)) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) fstat(0xffffffffffffffff, &(0x7f0000000980)) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000600)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) syz_read_part_table(0x5e8, &(0x7f0000000000)="$eJzs1E9oHFUcB/DfTLI7u2DZUCqCegi09LS2UC8V3EMoacglCaUWEc9CQT0UcvBQtrQ9++/mJSK0EIIQvHiKt5ANhAgbLyHHsHjykhCEoDAyO7txiRcPCRL5fA67b977Pn5vmB8vuNDSyCLPk3pkw5lKpBHjfyeqJz/D9YHJiPdWpu/OTi5M3bsfkcSHxeSbr/TzyUi2GP9wqm7euNX9buvO4crE9tWdztgwFmtpxJOI+GT/RePUlrEzfG3+J1ZbG41n/YZtPUwHDffOy3Kt/eC1d99Pk6RyzvXLXs9id+Zx71r3dlHuYOnSjUqne3xrc5BrFqFfT7bVI+LVuYionePZOH/9/nv+qPp1eWP2vr2yv/f0eO768uLN5uW99faXZXPEUflfK+/N1GUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcudXWRqM6GO/OPO69/dFb0298kX76VZqMxopIbfhQP+P6z54/qkfWeljUv9a9/fLnfP5g6dKNSqcS80uDus3iOCNH+ubBybm4wAbff+bzz1q/f19O1Z4ez11fXrzZvLy33h5+4KNqrX1lsT98MtKKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/MH13dnJh6t79iDQZr0VEOvFiY7D2W0TkecTrP32w/PHm1C/F3Hz2Y0T8GbNZ9ke+dedwZWL76k5nLBaycs9aGpEnETFePvdW/6s349/4KwAA///CpW8b") 10:22:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$eJzs3c1vVOe9B/DvGWxwnIiQhJvLRUkYyCVxEl8zNhe4KJsL9hgm1y9XtpGCughpMBXCaqqklZKoCypVXTVqF1WltrssK1WKlE2zqVi1XXbVRaUq/0EVdUW7cXXOjMHglzHEZij9fKzDOXPO7zzP75lz5jyaYeY84Z/Z8vJyNd3n4wu/fJDJ8vA5O/HFJ59+XE7fu57d2ZUTxa+TgST1pC/JgaR/fGJudrpLQdeSS0luJEWSPWnPt+RSih/liduPb6T4RVkvO2+Zf2m9Pv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBhVIxPNBqjRaZaMxferG+sGgJ8k+23Crxelfp513qTopwyMLAy1PeB/bc3P1v+cyTPtR89Vw1InoF89Piz+15/pq+2sv8mCT0Q73/40bW3l5YW3+t1Ij1yrjnTmp9tTZ8516y35mfrp0+ebBw7Pzlfn2xNNecvzi80p+vjc80zC7Nz9aHxV+qjp08frzdHLs5emDk3MTLVXFl56r/GGo2T9TdG/r95Zm5+dubYGyPz4+dbU1OtmXNVTLm5jDlVnoj/11qoLzTPTNfrV64uLR7vlmQZNLqVoLFuQWONsbHR0bGx0ZMnTp841Wj0rVnRuEvWRPT+pKW3tvsSDvet1un/M5VWZnIhb6a+7t94JjKX2UwX62/v+LxI1f/vOdbctN7V/f9KL3/g9uaDqfr/F9qPXtio/98g16/4t2er5Sbv58N8lGt5O0tZymLe25mMHtq/c2lmJq3MZzatTOdMtabeWVPP6ZzMyTTyVs5nMvOpZzKtTKWZ+VzMfBbSzHR1ds2lmTNZyGzmUs9QxvNK6hnN6ZzO8dTTzEguZjYXMpNzmciZqpQruVo978c3yfFW0OhWgsY2CdL/89XtxGUc7styp//f3T10aPxBJAQAAABsu//4ffbuf/p3f07683z1ufxka6rZ+PtyW6/TAwAAALZB9XW958pZf7n0fIrq/X+v0wIAAAC2UVH9xq5IMphD7aWVX0L5EAAAAAAeEdX//79QzgbLpUMpvP8HAACAR033e+x3jSiGV27/W7/cnl/uRHTu8zs42ZpqjozPTr0+mpequwxUvzRYU9qupOivfn7wag63ow4PtueDd5Y4UEaNjrw+mldzpNOQoRfL2Yu/av32xN2RY+3Il9uRL3cih9Yp83gZCQCPuiOb9Mdb7f9fzXA7Yvhg2Zmm7+A6PWtDzwoAD4vuY+x0jSj+u8v7/6dz5VD7KwUjeSfvZimXM1z92qD6xsG6pQ6u+hrCcJdPA1Zi/3CqluG7Pw8YWj92MWMZ7vKJwOCq4WUA4FFypEs/vJX+f7jL+/9BXykEgIfKrRHsd3Ch120EAO6klwYAAAAAAAAAAAAAAAAAAAAAAAAAAIDtt003+V/e1S5uR8cRWH+hM35RHmilFjoLy575LS3sTrKdBf5tx3Pu5VUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB6VIdq23vpbsSdJIcuzBZ7Vzrvc6gR4rbuZmPsjeXucBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCo6dz/v5b2/PH2qvTVkqNJLiX5Wq9z3E43e53ADhvosn3V/f/LY57lIn3tw56if3xibna6PPzV2A+1Lz759ONyup88ygLKGu4YXKJTw8Z7PVXtNTix+P61b7/7rfrE2SrJswuTUxPT5+b+93bgs8VnST3tacVKvt89+psfr9Pyz8qWbq3eyareibX1/vt6e29e72auLi2OlTUtNN9c+M43r36watPTOZy8OJQM3VnTN8qpXdNjdxd3OP2b1VZ8Wfyg2Juf5lJ1/Mtno1guykP0ZNX+x65cXVoceefdpcsb5LQvh5JcvvMsuzOnNQ5V15N1VWddrf/61aXFRjHQufLs71Lepjollu0Y3aANT1WnzGCnDbu31Ib6xm2orHrea+ttb2d0fIOMnslL3Y70Gi9tfqTXV3xZ/Kk4nz/m+6vG/6iVx/9otvLqLGOqyFVnyoaRtXZk1fKx1RveujvyLz+796ZwXwaSH+br+Z9bx7+26vrfOVb3fz1a4/brYs0YQ6tq/Iqvi0Ori93kdVH1SPvvSqWdQWOjfTp57m9HbZDnv+W1pO/gPV0VX+tyRdmp1//Pi6H8NdeN/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADz8imTXOmuLWnI0yb4kT5Zr6snydtRXGyy2o5j7dr2ntfdecTM380H29joPAAAAAAAAALbH2YkvPvn043Kq/j9+V/6z1tlST/qS7Ct+8lgm5manuxTUn1xKcqNcHri3HMr98sTtxzfKRwfurQwAYOv+EQAA//85LGx5") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) [ 1713.134145][T28234] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=b9.ed [ 1713.173391][T28234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.181461][T28234] usb 3-1: Product: syz [ 1713.183283][ T5685] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1713.193429][T28234] usb 3-1: Manufacturer: syz [ 1713.193454][T28234] usb 3-1: SerialNumber: syz [ 1713.203718][T28234] r8152-cfgselector 3-1: config 0 descriptor?? [ 1713.235320][T28338] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1713.304605][T28338] udevd[28338]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1713.327033][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.329070][T28360] loop5: detected capacity change from 0 to 1764 [ 1713.339464][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.500839][ T5685] usb 4-1: Using ep0 maxpacket: 32 [ 1713.502199][T28365] loop4: detected capacity change from 0 to 2048 [ 1713.564002][T28234] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1713.618619][T28234] r8152-cfgselector 3-1: bad CDC descriptors [ 1713.699219][T28365] loop4: p4 < > 10:22:23 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xffffff1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003600)={0x2020}, 0x2020) [ 1713.953738][T28234] r8152-cfgselector 3-1: Unknown version 0x0000 10:22:24 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) 10:22:24 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x804040, &(0x7f0000001500)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c6d61703d6e6f726d616c2c636865636b3d72656c617865642c6d61703d6f66662c686964652c00f092b8b85f4b6b280cd28806e4c904b5781808df759e63b3e0b207d3dbfe5d257afb17896499e743b7b946b7a00bc150990bb398e969fc1cc3cf95ac69564960c797259287a1f1ea541d6791d091f01cc0b0636acc1442f7aa44d5b280ab7094f6f11b355e4a42f9aeeb4e01e8cffc782de00c6b7ae7cd93c19dbaecc9efa6c701000000010000001923957c2481a0dda1261d17762262de"], 0x1, 0x99f, &(0x7f0000000b40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) [ 1714.271076][T28234] r8152-cfgselector 3-1: USB disconnect, device number 28 [ 1714.402829][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1714.402848][ T27] audit: type=1800 audit(1684405344.146:1135): pid=28367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 1714.413338][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1714.462537][ T27] audit: type=1800 audit(1684405344.146:1136): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 1714.501068][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1714.503871][T28338] udevd[28338]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1714.526113][ T5685] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1714.533230][ T27] audit: type=1800 audit(1684405344.276:1137): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 1714.546075][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.586808][T28338] udevd[28338]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1714.610965][ T5685] usb 4-1: config 0 descriptor?? [ 1714.617682][T28372] loop5: detected capacity change from 0 to 1764 [ 1714.664172][ T5685] hub 4-1:0.0: USB hub found [ 1714.723134][ T5083] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1714.883365][ T5685] hub 4-1:0.0: 1 port detected [ 1715.123459][ T5083] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1715.132577][ T5083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.151749][ T5083] usb 5-1: config 0 descriptor?? [ 1715.195740][ T5083] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1715.753399][ T5685] hub 4-1:0.0: activate --> -90 [ 1716.839162][ T7] usb 4-1: USB disconnect, device number 123 [ 1716.853422][ T5685] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1716.860386][ T5685] usb 4-1-port1: config error 10:22:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:26 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xffffff1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r2, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x36, 0xa, 0x62, 0x8, 0x17ef, 0x721e, 0xb9ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:22:26 executing program 5: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0xce, "f9439e0f318cba15c2aa26e2dc82bc799b7aaf1d8d8a261810a573cd425b6abc9d498fe71a13adfef16b9157c7855ee77d8878ce92141ed465531bd43c01badc6c79fb073bac43d91dfe2f440553276c37370b54c86b6da44357e41516f43ff947084b3785a72dc23ef8978557c0c187c62f33ffcb42ad6fa2d4466d8853c32b62a27c3044159c896794de84e839eea5dbf68d1b4f19dd437801060f06dbf6d22ed3a3eb70434195a9657262a09ed75a70c1f458947bb8dbb80637fc4d5441714e627560498c7f0b818bdcaddc69"}) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100)) r0 = syz_open_dev$hidraw(&(0x7f0000000140), 0x0, 0x400000) write$hidraw(r0, &(0x7f0000000180)="ac576958a17a586c0f76f8eec47455b48974f30b3a73fc59155057ecb23e56c10ad98fc1807423b4ec481baff89bd123aa4da0494cffc9f085eefe11bcaf4f8312d60f848a79fef2a8b8b9a730ec259de14bf3a61b90d666c2bb2b1a9262da9992e950a3d5dee4edf538276ae51394c5b462fe56f31e70028be6aa3814c48ba5a8f61da2c9a9507dc5717d54a96c2968da25d40fb9402310be4a6f5b538633b9eb4c41c4dda7dd01f9338bb8334d66276f2fa0d8c3c3e0b1e73551f1447ae8f43a299afced5bd93520ef5ef14c4cba0c1a71acc603092ae1226e97cb93", 0xdd) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x8, 0xc04241) write$hidraw(r1, &(0x7f00000002c0)="fc408cffb24df1ed0eab1a3140ddbc79f87b37a22ab0ec30a1df843a4c3c0bdcac19eb69b02f718031c60e666b7b6a1522ffe270cd0b945ff66c185fdc9cafef9bc3fc7e4e8c0476ece7af78a1ace416c919b51ba62f00152ff43a6f92a4892a6d02931ed5b5a1dfc82f62538ad7612e6a4ae774ee1679af4eea140cf5704771dc99d0a33bfe", 0x86) write$hidraw(r1, &(0x7f0000000380)="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", 0x1000) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000001380)) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000013c0)={0x3a6, "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"}) r2 = syz_open_dev$hidraw(&(0x7f0000001780), 0x9, 0x8000) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f00000017c0)={0xdfc, "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"}) read$hidraw(r0, &(0x7f00000025c0)=""/59, 0x3b) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000002600)="f72ab591ec449792f6638e9726484ea0b3a90b6a9b76d65f8a3b90e9a1aebfe3ff32adeb25111475285144c74c6172f9a4c720dbf8d3a93ccddd22a4bf85f02f970c6958a87afeb08a9af5a7f6d051e2b41ea07aaf90abe51f859a1455ad1564576bd31837") syz_open_dev$hidraw(&(0x7f0000004940), 0x1, 0x8100) [ 1717.133229][ T5083] gspca_sunplus: reg_r err -71 [ 1717.138145][ T5083] sunplus: probe of 5-1:0.0 failed with error -71 10:22:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000040), 0x90) [ 1717.184310][ T5083] usb 5-1: USB disconnect, device number 121 [ 1717.193863][ T27] audit: type=1800 audit(1684405346.946:1138): pid=28380 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 10:22:27 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="3a01000092908108ac051582588f000000010902d532000000000009040000030b08000009058d1f0d0001000009050502000000000009058b0e1e"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6}, 0x1c, &(0x7f00000000c0)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0xffff, 0x0, 0x0, [0xff0000, 0x0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x35, &(0x7f0000000200)=@string={0x35, 0x3, "9b689510985ce09a30f2b02e8b04f25e983e4b82285f5c2a22ed0daef7f8eca76dbcd6f24ebf0077b981ac0620d0711df0e239"}}, {0x51, &(0x7f0000000280)=@string={0x51, 0x3, "9a144d2714604acd2478d30b9bde2323887411ecde4cfbc9e9b9ab12c29ad75dbbc027928d703cdb361a7586525b431304b2f42efc7e2a8b0972cd16f2120bf0a44205643640a94305b43423246da4"}}]}) [ 1717.285491][ T27] audit: type=1800 audit(1684405346.976:1139): pid=28380 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 10:22:27 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1717.343333][ T27] audit: type=1800 audit(1684405346.996:1140): pid=28380 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 1717.396894][ T27] audit: type=1804 audit(1684405347.126:1141): pid=28377 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1349/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1717.427422][ T27] audit: type=1800 audit(1684405347.166:1142): pid=28389 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 1717.455517][ T5685] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1717.463838][ T27] audit: type=1800 audit(1684405347.166:1143): pid=28389 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 1717.499220][ T27] audit: type=1800 audit(1684405347.236:1144): pid=28390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 1717.525202][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.536936][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:22:27 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1717.543284][ T5680] usb 4-1: new high-speed USB device number 124 using dummy_hcd 10:22:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:27 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) [ 1717.713270][ T7] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1717.721012][ T5685] usb 3-1: Using ep0 maxpacket: 8 10:22:27 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1717.813357][ T5680] usb 4-1: Using ep0 maxpacket: 32 [ 1717.837347][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.848922][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.943593][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1717.956287][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 1717.970758][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.987769][ T5680] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1717.999056][ T5680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.015080][ T5680] usb 4-1: config 0 descriptor?? [ 1718.023265][T27843] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1718.043619][ T5685] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=b9.ed [ 1718.052818][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.061580][ T5685] usb 3-1: Product: syz [ 1718.067402][ T5680] hub 4-1:0.0: USB hub found [ 1718.072323][ T5685] usb 3-1: Manufacturer: syz [ 1718.077300][ T5685] usb 3-1: SerialNumber: syz [ 1718.084452][ T5685] r8152-cfgselector 3-1: config 0 descriptor?? [ 1718.093157][ T7] usb 6-1: config index 0 descriptor too short (expected 13013, got 45) [ 1718.104828][ T7] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1718.113048][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1718.122164][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1718.133677][ T7] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1718.144832][ T7] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 30 [ 1718.155009][ T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1718.164650][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.174975][ T7] usb 6-1: config 0 descriptor?? [ 1718.283485][ T5680] hub 4-1:0.0: 1 port detected [ 1718.343497][ T5685] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1718.349942][ T5685] r8152-cfgselector 3-1: bad CDC descriptors [ 1718.403327][T27843] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1718.412657][ T5685] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1718.427881][T28334] usb 6-1: USB disconnect, device number 24 [ 1718.433267][ T5685] r8152-cfgselector 3-1: USB disconnect, device number 29 [ 1718.442822][T27843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.449362][ T4399] Bluetooth: hci6: Opcode 0x c03 failed: -71 [ 1718.474405][T27843] usb 5-1: config 0 descriptor?? [ 1718.525414][T27843] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1719.163474][ T5680] hub 4-1:0.0: activate --> -90 [ 1720.245022][ T5685] usb 4-1: USB disconnect, device number 124 [ 1720.273519][ T5680] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1720.280426][ T5680] usb 4-1-port1: config error [ 1720.493434][T27843] gspca_sunplus: reg_r err -71 [ 1720.498868][T27843] sunplus: probe of 5-1:0.0 failed with error -71 [ 1720.507189][T27843] usb 5-1: USB disconnect, device number 122 10:22:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:30 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) 10:22:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x36, 0xa, 0x62, 0x8, 0x17ef, 0x721e, 0xb9ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:22:30 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="3a01000092908108ac051582588f000000010902d532000000000009040000030b08000009058d1f0d0001000009050502000000000009058b0e1e"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6}, 0x1c, &(0x7f00000000c0)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0xffff, 0x0, 0x0, [0xff0000, 0x0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x35, &(0x7f0000000200)=@string={0x35, 0x3, "9b689510985ce09a30f2b02e8b04f25e983e4b82285f5c2a22ed0daef7f8eca76dbcd6f24ebf0077b981ac0620d0711df0e239"}}, {0x51, &(0x7f0000000280)=@string={0x51, 0x3, "9a144d2714604acd2478d30b9bde2323887411ecde4cfbc9e9b9ab12c29ad75dbbc027928d703cdb361a7586525b431304b2f42efc7e2a8b0972cd16f2120bf0a44205643640a94305b43423246da4"}}]}) 10:22:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1720.801906][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 1720.801925][ T27] audit: type=1800 audit(1684405350.546:1152): pid=28408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 1720.864763][ T27] audit: type=1800 audit(1684405350.596:1153): pid=28408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 1720.909227][ T27] audit: type=1800 audit(1684405350.646:1154): pid=28408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 10:22:30 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1720.947282][ T27] audit: type=1804 audit(1684405350.676:1155): pid=28407 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1351/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 10:22:30 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) [ 1721.005240][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.013390][ T27] audit: type=1800 audit(1684405350.766:1156): pid=28413 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 1721.033720][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.043395][T28334] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1721.064519][ T1668] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1721.074174][ T27] audit: type=1800 audit(1684405350.816:1157): pid=28415 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 10:22:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:30 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) [ 1721.122771][ T27] audit: type=1800 audit(1684405350.856:1158): pid=28413 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 1721.143280][T27843] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1721.254910][ T27] audit: type=1800 audit(1684405351.006:1159): pid=28420 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 1721.281092][ T27] audit: type=1800 audit(1684405351.026:1160): pid=28420 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 1721.293326][T28334] usb 6-1: Using ep0 maxpacket: 8 [ 1721.323335][ T1668] usb 3-1: Using ep0 maxpacket: 8 10:22:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0), 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1721.363248][ T5680] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1721.371681][ T27] audit: type=1800 audit(1684405351.116:1161): pid=28421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 10:22:31 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000003600)={0x2020}, 0x2020) [ 1721.424059][T28334] usb 6-1: config index 0 descriptor too short (expected 13013, got 45) [ 1721.434682][T27843] usb 4-1: Using ep0 maxpacket: 32 [ 1721.436671][T28334] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1721.480335][T28334] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1721.496417][T28334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1721.507366][T28334] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1721.518994][T28334] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 30 [ 1721.531471][T28334] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1721.541469][T28334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.563658][T28334] usb 6-1: config 0 descriptor?? [ 1721.575977][T27843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1721.603416][ T1668] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=b9.ed [ 1721.604551][T27843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.612636][ T1668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.612665][ T1668] usb 3-1: Product: syz [ 1721.612684][ T1668] usb 3-1: Manufacturer: syz [ 1721.647451][T27843] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f 10:22:31 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000003600)={0x2020}, 0x2020) [ 1721.683259][T27843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.708349][T27843] usb 4-1: config 0 descriptor?? [ 1721.725791][ T1668] usb 3-1: SerialNumber: syz [ 1721.743510][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.745727][ T1668] r8152-cfgselector 3-1: config 0 descriptor?? [ 1721.751518][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.765016][T27843] hub 4-1:0.0: USB hub found [ 1721.779728][ T5680] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 10:22:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0), 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1721.799438][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.832399][ T5680] usb 5-1: config 0 descriptor?? [ 1721.854587][T28334] usb 6-1: USB disconnect, device number 25 [ 1721.875832][ T4399] Bluetooth: hci6: Opcode 0x c03 failed: -71 [ 1721.886300][ T5680] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1721.973466][T27843] hub 4-1:0.0: 1 port detected 10:22:31 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000003600)={0x2020}, 0x2020) [ 1722.053473][ T1668] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1722.060566][ T1668] r8152-cfgselector 3-1: bad CDC descriptors [ 1722.113528][ T1668] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1722.117934][T27077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1722.131238][ T1668] r8152-cfgselector 3-1: USB disconnect, device number 30 [ 1722.153416][T27077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:22:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7fe3fe6307f28c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r2}, 0x0, 0x0, 0x80000000000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:22:32 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, 0x0, 0x0) [ 1722.853561][T27843] hub 4-1:0.0: activate --> -90 [ 1723.883411][ T5680] gspca_sunplus: reg_r err -71 [ 1723.888450][ T5680] sunplus: probe of 5-1:0.0 failed with error -71 [ 1723.902603][ T5680] usb 5-1: USB disconnect, device number 123 [ 1723.921000][ T5685] usb 4-1: USB disconnect, device number 125 [ 1723.930016][T27843] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1723.937196][T27843] usb 4-1-port1: config error 10:22:34 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0), 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:34 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="3a01000092908108ac051582588f000000010902d532000000000009040000030b08000009058d1f0d0001000009050502000000000009058b0e1e"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6}, 0x1c, &(0x7f00000000c0)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0xffff, 0x0, 0x0, [0xff0000, 0x0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x35, &(0x7f0000000200)=@string={0x35, 0x3, "9b689510985ce09a30f2b02e8b04f25e983e4b82285f5c2a22ed0daef7f8eca76dbcd6f24ebf0077b981ac0620d0711df0e239"}}, {0x51, &(0x7f0000000280)=@string={0x51, 0x3, "9a144d2714604acd2478d30b9bde2323887411ecde4cfbc9e9b9ab12c29ad75dbbc027928d703cdb361a7586525b431304b2f42efc7e2a8b0972cd16f2120bf0a44205643640a94305b43423246da4"}}]}) 10:22:34 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f00000002c0)="53884bcc21d803690aac0ea90994d652bd14d86707909c0861d4e465c9fc3aa8bb96f1854410b5a1d7109b41227afa678906cb02ecd58b35c3da94607e851e1a17a2f044f137080d6ffc996fe8300afb59cddfd27e88c00aaf064b4094a3274d9ec431f0cc0803870477880c4b435226c8d5b8dc47412a6eed87f35f93d58c1b3c8606af7022a30b3558a75aaf7928b7fd8ee88e0330a2af5545d3e49a376cba1815ec86b7551e2ba90c45f8dba3a06a979771265d3004716cac3ad8aa4cb9", 0xbf}, {&(0x7f0000000440)="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", 0x13d}, {&(0x7f0000001bc0)="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", 0x3cd}], 0x3, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x0) 10:22:34 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, 0x0, 0x0) 10:22:34 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) 10:22:34 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d07, &(0x7f0000000180)=0x3c) 10:22:34 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='numa_maps\x00') read$FUSE(r3, 0x0, 0x0) 10:22:34 executing program 2: syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@rts={{}, {0x20}, @device_b}, 0x10) [ 1724.726631][T28463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1724.763167][T28334] usb 5-1: new high-speed USB device number 124 using dummy_hcd 10:22:34 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x71b, 0x2, 0x0], 0x3, 0x800}) unshare(0x4e040200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) unshare(0x8000600) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/220) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, &(0x7f00000003c0)) openat$ppp(0xffffffffffffff9c, 0x0, 0x4d0e80, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000400)=""/210) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000300)={0xbf15, 0x0, 0x800}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xeffffffffffffffa) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) lseek(r2, 0x7fffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup2(r3, r4) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x0, 0x40003}}, 0x14) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) [ 1724.775771][ T5680] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1724.790381][T27079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1724.802316][T27079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1724.823317][ T5685] usb 4-1: new high-speed USB device number 126 using dummy_hcd 10:22:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:34 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4205, r0, 0x2, &(0x7f0000000040)) [ 1725.055012][ T5680] usb 6-1: Using ep0 maxpacket: 8 [ 1725.093257][ T5685] usb 4-1: Using ep0 maxpacket: 32 [ 1725.123469][T28334] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1725.135246][T28334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.147157][T28334] usb 5-1: config 0 descriptor?? [ 1725.183773][ T5680] usb 6-1: config index 0 descriptor too short (expected 13013, got 45) [ 1725.185472][T28334] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1725.192171][ T5680] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1725.218235][ T5680] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1725.227814][ T5680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1725.237838][ T5680] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1725.248004][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1725.271218][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1725.282811][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.283766][ T5680] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 30 [ 1725.293804][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.308014][ T5685] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1725.308047][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.318658][ T5685] usb 4-1: config 0 descriptor?? [ 1725.331358][ T5680] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1725.341684][ T5680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.370918][ T5685] hub 4-1:0.0: USB hub found [ 1725.377495][ T5680] usb 6-1: config 0 descriptor?? [ 1725.573414][ T5685] hub 4-1:0.0: 1 port detected [ 1725.641477][ T1668] usb 6-1: USB disconnect, device number 26 [ 1725.656770][ T4399] Bluetooth: hci6: Opcode 0x c03 failed: -71 [ 1726.453319][ T5685] hub 4-1:0.0: activate --> -90 [ 1727.163176][T28334] gspca_sunplus: reg_r err -71 [ 1727.168162][T28334] sunplus: probe of 5-1:0.0 failed with error -71 [ 1727.176712][T28334] usb 5-1: USB disconnect, device number 124 [ 1727.527366][ T5680] usb 4-1: USB disconnect, device number 126 [ 1727.543504][ T5685] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1727.550486][ T5685] usb 4-1-port1: config error 10:22:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000800)) 10:22:37 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000ac0)={{}, {0x77359400}}, &(0x7f0000000b00)) 10:22:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:37 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="3a01000092908108ac051582588f000000010902d532000000000009040000030b08000009058d1f0d0001000009050502000000000009058b0e1e"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6}, 0x1c, &(0x7f00000000c0)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0xffff, 0x0, 0x0, [0xff0000, 0x0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x35, &(0x7f0000000200)=@string={0x35, 0x3, "9b689510985ce09a30f2b02e8b04f25e983e4b82285f5c2a22ed0daef7f8eca76dbcd6f24ebf0077b981ac0620d0711df0e239"}}, {0x51, &(0x7f0000000280)=@string={0x51, 0x3, "9a144d2714604acd2478d30b9bde2323887411ecde4cfbc9e9b9ab12c29ad75dbbc027928d703cdb361a7586525b431304b2f42efc7e2a8b0972cd16f2120bf0a44205643640a94305b43423246da4"}}]}) 10:22:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x0}) 10:22:37 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:22:37 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) 10:22:37 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_delete(0x0) timer_gettime(0x0, 0x0) 10:22:37 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfff]}, 0x8}) 10:22:37 executing program 1: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:22:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@dioread_nolock}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mblk_io_submit}, {@discard}, {@usrjquota}]}, 0x1, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 10:22:38 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_delete(0x0) [ 1728.246757][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 1728.246777][ T27] audit: type=1804 audit(1684405357.996:1184): pid=28481 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1357/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 10:22:38 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_delete(0x0) [ 1728.330711][T27077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1728.347415][T27077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:22:38 executing program 1: r0 = syz_clone(0x6a100, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="189141bc506e4564cb44710a36ed3bd401fd3be19df0086f85603ba4e9ba93a81788c10a1a42a0d0bd5ceab63f7c5a7ff42787807be0f55ada3159b1447387dcb041cf411606075a643043b347987953587ece4b2dc31bfc78de628ecbb35c9c068765c5522fe2248f7e99b25cab4124810fdc2d6e3583ddf3e4cba5a5c1b06aef605e8de9f03e4f5361c9518cc567619b25aad7265fb9939e358912f9dfdad9996c03c8d1b9d0e26e9504a2446bd2cb861373a0bea2faea82ba1500bd5124861bf90f33bb1a2d39e480dba0b46874bbe893cfaadf3326c3629a43cc") sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) [ 1728.373460][ T5083] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1728.373460][ T5685] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1728.413186][ T5680] usb 4-1: new high-speed USB device number 127 using dummy_hcd 10:22:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1728.643207][ T5685] usb 6-1: Using ep0 maxpacket: 8 [ 1728.713214][ T5680] usb 4-1: Using ep0 maxpacket: 32 [ 1728.725703][ T27] audit: type=1804 audit(1684405358.476:1185): pid=28505 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1358/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1728.733528][ T5083] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1728.760985][ T5083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.782506][ T5083] usb 5-1: config 0 descriptor?? [ 1728.792001][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1728.800122][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1728.810361][ T5685] usb 6-1: config index 0 descriptor too short (expected 13013, got 45) [ 1728.825175][ T5685] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1728.825491][ T5083] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1728.849583][ T5685] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1728.859154][ T5685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1728.870578][ T5685] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1728.881381][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.892539][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1728.902796][ T5685] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 30 [ 1728.913214][ T5680] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1728.924622][ T5685] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1728.934198][ T5680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.942457][ T5685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.962772][ T5680] usb 4-1: config 0 descriptor?? [ 1728.970297][ T5685] usb 6-1: config 0 descriptor?? [ 1729.014498][ T5680] hub 4-1:0.0: USB hub found [ 1729.242073][ T5685] usb 6-1: USB disconnect, device number 27 [ 1729.246203][ T4399] Bluetooth: hci6: Opcode 0x c03 failed: -71 [ 1729.248452][ T5680] hub 4-1:0.0: 1 port detected 10:22:39 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="3a01000092908108ac051582588f000000010902d532000000000009040000030b08000009058d1f0d0001000009050502000000000009058b0e1e"], 0x0) [ 1730.103111][T28334] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1730.113429][T27843] hub 4-1:0.0: activate --> -90 [ 1730.343183][T28334] usb 6-1: Using ep0 maxpacket: 8 [ 1730.463461][T28334] usb 6-1: config index 0 descriptor too short (expected 13013, got 45) [ 1730.472486][T28334] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1730.480801][T28334] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1730.490718][T28334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1730.500686][T28334] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1730.510522][T28334] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 30 [ 1730.520550][T28334] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1730.529787][T28334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.549254][T28334] usb 6-1: config 0 descriptor?? [ 1730.583306][ T5083] gspca_sunplus: reg_r err -71 [ 1730.588224][ T5083] sunplus: probe of 5-1:0.0 failed with error -71 [ 1730.624743][ T5083] usb 5-1: USB disconnect, device number 125 [ 1730.797770][T28334] usb 6-1: USB disconnect, device number 28 [ 1730.806622][ T4399] Bluetooth: hci6: Opcode 0x c03 failed: -71 [ 1731.163370][T27843] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 1731.371365][ T5685] usb 4-1: USB disconnect, device number 127 [ 1731.383254][T27843] usb 4-1-port1: config error 10:22:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x0}) 10:22:41 executing program 1: r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000140)={0x0, 0x100}, 0x10) recvmsg(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=""/61, 0x3d}, 0x0) 10:22:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) 10:22:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:41 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:22:41 executing program 5: 10:22:41 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040)={0x0, 0xe24}, 0x10) sendto(r0, &(0x7f00000000c0)="da", 0xfe42, 0x400, 0x0, 0x0) 10:22:41 executing program 5: 10:22:41 executing program 1: r0 = socket(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x7, 0x0, 0x0) 10:22:41 executing program 5: 10:22:41 executing program 2: r0 = socket(0x18, 0x2, 0x0) shutdown(r0, 0x1) 10:22:41 executing program 5: syz_usb_connect(0x0, 0x3f, 0x0, 0x0) [ 1732.117783][ T27] audit: type=1804 audit(1684405361.866:1186): pid=28517 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1359/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 1732.152266][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.166104][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.213778][ T5685] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1732.293213][ T1668] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1732.544675][ T1668] usb 4-1: Using ep0 maxpacket: 32 [ 1732.573398][ T5685] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1732.582683][ T5685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.600797][ T5685] usb 5-1: config 0 descriptor?? [ 1732.646275][ T5685] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1732.683321][ T1668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.694505][ T1668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1732.704801][ T1668] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1732.714006][ T1668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.731934][ T1668] usb 4-1: config 0 descriptor?? [ 1732.784459][ T1668] hub 4-1:0.0: USB hub found [ 1733.003255][ T1668] hub 4-1:0.0: 1 port detected [ 1733.863252][ T6291] hub 4-1:0.0: activate --> -90 [ 1734.393344][ T5685] gspca_sunplus: reg_r err -71 [ 1734.398266][ T5685] sunplus: probe of 5-1:0.0 failed with error -71 [ 1734.411405][ T5685] usb 5-1: USB disconnect, device number 126 [ 1734.963332][ T6291] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 1735.168861][ T5680] usb 4-1: USB disconnect, device number 2 [ 1735.183533][ T6291] usb 4-1-port1: config error [ 1735.504791][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.511142][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 10:22:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x0}) 10:22:45 executing program 1: symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 10:22:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:45 executing program 5: syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 10:22:45 executing program 2: write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7fff}}, 0x18) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x0, {0x101}}, 0x18) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="c3769b9414fff30c01befbfd3eea15e8", 0x10) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x2, 0x40000) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'b', ' *:* ', 'rw\x00'}, 0x9) write$FUSE_OPEN(r0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0xd}}, 0x20) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001240)={0x0, 0x0, "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", "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"}) r2 = openat2(0xffffffffffffffff, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0x1, 0x120, 0x17}, 0x18) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x7, 0x2000000, 0x0, 0x7fff, 0x0, 0x3}}, 0x50) r3 = socket(0x39, 0x80000, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000004380)={'batadv_slave_1\x00'}) syz_open_dev$vcsu(&(0x7f00000043c0), 0x8000000000000000, 0x0) read$FUSE(r2, &(0x7f0000004400)={0x2020}, 0x2020) 10:22:45 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:22:45 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) 10:22:45 executing program 1: shmget(0x1, 0x3000, 0x0, &(0x7f000047a000/0x3000)=nil) 10:22:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000524000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000346000/0x1000)=nil) mremap(&(0x7f0000677000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000015f000/0x4000)=nil) [ 1735.857926][ T27] audit: type=1804 audit(1684405365.606:1187): pid=28540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1360/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 1735.892003][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 10:22:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_pts(r0, 0x101001) pread64(r1, 0x0, 0x0, 0x0) 10:22:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1735.901339][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:22:45 executing program 2: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) [ 1736.003320][T28234] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1736.053288][ T5680] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1736.092033][ T27] audit: type=1804 audit(1684405365.836:1188): pid=28555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1361/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1736.122923][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.132741][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.313193][ T5680] usb 4-1: Using ep0 maxpacket: 32 [ 1736.433363][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.444473][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.453489][T28234] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1736.455539][ T5680] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1736.473675][ T5680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.483981][T28234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.492476][ T5680] usb 4-1: config 0 descriptor?? [ 1736.505586][T28234] usb 5-1: config 0 descriptor?? [ 1736.534539][ T5680] hub 4-1:0.0: USB hub found [ 1736.566911][T28234] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1736.753372][ T5680] hub 4-1:0.0: 1 port detected [ 1737.623257][ T5680] hub 4-1:0.0: activate --> -90 [ 1738.263357][T28234] gspca_sunplus: reg_r err -71 [ 1738.268740][T28234] sunplus: probe of 5-1:0.0 failed with error -71 [ 1738.277948][T28234] usb 5-1: USB disconnect, device number 127 [ 1738.723244][ T5680] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 1738.928294][ T5685] usb 4-1: USB disconnect, device number 3 [ 1738.943296][ T5680] usb 4-1-port1: config error 10:22:49 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x2, "28ad"}, 0x0, 0x0, 0x0, 0x0}) 10:22:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r1, r0, 0x0) 10:22:49 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x488, &(0x7f0000000dc0)="$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") 10:22:49 executing program 5: syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 10:22:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:49 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) 10:22:49 executing program 2: r0 = syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="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"], 0xfd, 0x1117, &(0x7f00000024c0)="$eJzs2cFq1FAUBuD/JqPtbiTug6ALF1JaxgewC4XZutWNSEGwqw4Iiq/hG/gWvoJ25b50r4uCSyESM3GqDKh0KgjfB8k9OcnJyV3emwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvknwqyfUqacZclaQkbXs8P03Sjvlr7+sqJQ8P5ov7R7MHiyT198fLo6T0VX1Zmr2b282smTV7zd17+7c+LF6+ev7k8PDgaPmakjYnZxudRRlP9flc2WgPAAAA+G91FzbNmxd/0unqJfUHAAAAfmfT+wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6ubruJmDKokJWnb4/lpknZN3ZV/9H0AAADAxZVUeTxdlx+2AVbu5OO0/Mj345fSx7t5u6YeAAAAWHn27qfLbmsZnP+//rUb9Ovu25kM6/Lt4d6NTLKzM8TLIZ/3kzrJ7i+9Ts5ePx2P0tXJ1uXMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//YwzhLg==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYBLOB="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"/338, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16=r0, @ANYRES16=r0, @ANYRESHEX, @ANYRESHEX], 0x1, 0x0, &(0x7f0000000000)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file0\x00', r2, 0xffffffffffffffff) 10:22:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000001380)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '\x00', "15beb945a09940f91a94767010578f2b6b75eccb5a558a2772602b3e3e3be0cb47158df5afe403718daae26c44bde81152f1daf12fef1992bbc92b9b3d6f8f6ce55ae7fbff6205a80eabdd0f55096753810b481db629d3afc639b00e497258d158330eb448d05dad3f56e08bf50c7beedbbf44036020013fecc30ad580fa4f85eb6a33b40bd9c4d313bc640179a4135254d3f0c89bbc59e1869e8072d9d5d1fbddc58fb66cf3533a322a85005c2b230a91d9d769d0b8634e79258e8549b97fcb1df2e7f6fe59012c04425b372bb490f2ab336117770efd146c26359d5182c12d6a514d49b3aef08547f81e9d122e11a5ad802cffba920100"}}, 0x110) [ 1739.619663][ T27] audit: type=1804 audit(1684405369.366:1189): pid=28565 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1362/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 10:22:49 executing program 1: r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1000008, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@nodatasum}, {@rescan_uuid_tree}, {}, {@space_cache_v1}]}, 0xfe, 0x51ab, &(0x7f0000005280)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a404ad, &(0x7f00000008c0)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYBLOB="220f82c7b6207a48cc3490b8af26e2c90ea8b82fa4bcb6c7d2c4b4dfc9c14edf3722aabee25c063d9e590ad3b3f9d6529d", @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYBLOB="4fbebf292a448031d32abc215f3457e3959d0dd9e11a0a5f831fe3f313d6150d3426f4ea701ab51178c9b2b578bfa97bba0d53677a187afaf109efd5aaef2017a2ada4f61a4efb34f14b24adf678f80aae333c659a3b5ae5d46968c2f5e61748d9bd2b61a2813789d86b0ac8092452b3dd39d451866a18a1c39971c9f82459465505d2dd90cc8c578d2371988f2b3c15", @ANYRESHEX, @ANYRES32], 0x1, 0x0, &(0x7f0000000000)) r4 = open(&(0x7f00000025c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xc4009420, 0x0) 10:22:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10010, &(0x7f0000000040)=ANY=[], 0x1, 0x4f8, &(0x7f0000000380)="$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") open(&(0x7f0000000040)='./file0\x00', 0x450c02, 0x0) 10:22:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1739.667086][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.682230][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:22:49 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) [ 1739.773389][ T6291] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1739.793221][ T5680] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1739.999799][ T27] audit: type=1804 audit(1684405369.746:1190): pid=28581 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1363/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1740.043650][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.051524][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.085261][ T5680] usb 4-1: Using ep0 maxpacket: 32 [ 1740.143267][ T6291] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1740.164891][ T6291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.203391][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1740.203512][ T6291] usb 5-1: config 0 descriptor?? [ 1740.223213][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.243395][ T5680] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1740.252500][ T5680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.265541][ T6291] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1740.285394][ T5680] usb 4-1: config 0 descriptor?? [ 1740.325188][ T5680] hub 4-1:0.0: USB hub found [ 1740.533311][ T5680] hub 4-1:0.0: 1 port detected [ 1741.413205][ T5680] hub 4-1:0.0: activate --> -90 [ 1742.013238][ T6291] gspca_sunplus: reg_r err -71 [ 1742.018346][ T6291] sunplus: probe of 5-1:0.0 failed with error -71 [ 1742.031432][ T6291] usb 5-1: USB disconnect, device number 2 [ 1742.503314][ T5680] hub 4-1:0.0: hub_ext_port_status failed (err = 2) [ 1742.713351][ T5680] usb 4-1-port1: config error [ 1742.720729][ T1668] usb 4-1: USB disconnect, device number 4 10:22:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x2, "28ad"}, 0x0, 0x0, 0x0, 0x0}) 10:22:52 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) 10:22:52 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:22:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001380)={'netpci0\x00', 0x600}) 10:22:52 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) 10:22:53 executing program 1: syz_clone(0x41000000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 10:22:53 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:22:53 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) [ 1743.402197][ T27] audit: type=1804 audit(1684405373.146:1191): pid=28593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1364/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 10:22:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:53 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) [ 1743.445860][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.457380][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:22:53 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) [ 1743.543229][ T1668] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1743.543340][T27843] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1743.573098][ T5680] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1743.770396][ T1668] usb 6-1: device descriptor read/64, error 18 [ 1743.819676][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.823475][ T5680] usb 4-1: Using ep0 maxpacket: 32 [ 1743.837363][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1743.945016][T27843] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1743.960440][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1743.975584][T27843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.986625][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.009568][T27843] usb 5-1: config 0 descriptor?? [ 1744.015741][ T5680] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1744.026057][ T5680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.044014][ T5680] usb 4-1: config 0 descriptor?? [ 1744.045760][ T1668] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1744.065510][T27843] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1744.084197][ T5680] hub 4-1:0.0: USB hub found [ 1744.263360][ T1668] usb 6-1: device descriptor read/64, error 18 [ 1744.303371][ T5680] hub 4-1:0.0: 1 port detected [ 1744.394519][ T1668] usb usb6-port1: attempt power cycle [ 1744.833417][ T1668] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1745.033285][ T1668] usb 6-1: device descriptor read/8, error -61 [ 1745.173274][ T5685] hub 4-1:0.0: activate --> -90 [ 1745.313291][ T1668] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1745.513281][ T1668] usb 6-1: device descriptor read/8, error -61 [ 1745.633481][ T1668] usb usb6-port1: unable to enumerate USB device [ 1745.824864][T27843] gspca_sunplus: reg_r err -71 [ 1745.829758][T27843] sunplus: probe of 5-1:0.0 failed with error -71 [ 1745.857090][T27843] usb 5-1: USB disconnect, device number 3 [ 1746.273397][ T5685] hub 4-1:0.0: hub_ext_port_status failed (err = 2) [ 1746.474136][T27843] usb 4-1: USB disconnect, device number 5 [ 1746.493268][ T5685] usb 4-1-port1: config error 10:22:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x2, "28ad"}, 0x0, 0x0, 0x0, 0x0}) 10:22:56 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x488, &(0x7f0000000dc0)="$eJzs3ctvG8UfAPDvbpz0/Ut+pTxaWhooiIpH0qQPKsEFRCUOICHBoYhTSNKqNG1QEyRaRRA4lCOqxB31iMRfwAkuCDghcYU7qlShXFo4Ga29m9qJnSaNY0fx5yNtO+PZZOa7u2PPzthOAF1rMPsnidgdEX9ERH81W7/DYPW/uwtz4/8szI0nUS6/83dS2e/Owtx4sWvxc7uqmXI5z29rUO/19yPGpqYmr+T54dlLHw3PXL324oVLY+cnz09eHj19+sTxQ32nRk/W//IHlMV158Cn0wf3v/HejbfGz9744Jfvsl+5Oy+vjaNVBqtHt6FnWl1Zh+2pSSelDjaENemJiDQieiv9vz96YsdiWX+c+aKjjQM2VKlcLjd6fc7Nl4EtLBuoA92oeKHP7n+LrU1Dj03h9qvZIKga/918q5aUKvdFkd8b7dmg+gcj4uz8v99kW2zQPAQAQK0fsvHPC43Gf2k8UrPf//I1lIGI+H9E7I2IhyJiX0Q8HFHZ99GIeGyN9S9dIVk+/klvPVBgq5SN/17J17bqx3/F6C8GijnyPZX4e5NzF6Ymj+XH5Gj0bsvyIyvU8ePrv3/VrGwwti+O/ypjwIW58WIsmLfjVmnJBN3E2OzYemKudfvziAOl2vh785IkGxYvHoX9EXHgAeu48Ny3B5uV1Y5/s+3usvhX0IJ1pvLNiGer538+6s7/vQXHpOn65MhLp0ZPDm+Pqcljw8VVsdyvv11/u1n964q/BbLzv7Ph9b8Y/0CyPWLm6rWLlfXamcNrruP6n182vae5f/yNr/++5N1Kui9/7JOx2dkrIxF9yZvLHx+997NFvtg/i//okcb9f2/cOxKPR0R2ER+KiCci4nDe9icj4qmIOLJC/D+/9vSHa49/hVn5Fsrin7jf+Y/a87+YyIvnGxTVJ3ou/vR9s/pXd/5PVFJH80dW8/y3QnMaBQEAAABbWlp5D3ySDi2m03RoqPoe/n2xM52anpl9/tz0x5cnqu+VH4jetJjp6q+ZDx3J54aL/OiS/PF83vjrnh2V/ND49NREp4OHLrerSf/P/NXT6dYBG27pOtrLHWoH0H5rXkf3AU/YMnRn6F76P3Sv+v6fdqwdQPs1ev3/rAPtANpvaf8/06F2AO3n/h+6l/4P3Uv/h67U9LPxafOi+sTNiFjlh+0l1psoxaZoRpaIdFM0Y7MlYr7V3aG06i+zuH+i+FqU2qIkGu688vPGOv8cBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv8FwAA///Ryth+") 10:22:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:22:56 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:22:56 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) 10:22:56 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) 10:22:56 executing program 2: readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:22:56 executing program 1: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f00000000c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) 10:22:56 executing program 1: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./bus\x00', 0x0, &(0x7f0000001180)={[{@user_subvol_rm}, {@noinode_cache}, {@inode_cache}, {@usebackuproot}, {@compress}, {@commit={'commit', 0x3d, 0x2}}, {@ssd_spread}]}, 0x1, 0x50ef, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f0000001100)='./bus\x00', 0x4c27e, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000600)={0x10, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 10:22:56 executing program 2: readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) [ 1747.174983][T28630] fuse: Bad value for 'fd' 10:22:57 executing program 2: readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:22:57 executing program 2: symlink(0x0, &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) [ 1747.317099][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.323230][T28334] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1747.332635][ T1668] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1747.334286][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.349595][ T6291] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1747.543315][ T1668] usb 6-1: device descriptor read/64, error 18 [ 1747.593122][ T6291] usb 4-1: Using ep0 maxpacket: 32 [ 1747.683498][T28334] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1747.701697][T28334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.713440][ T6291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.735233][ T6291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.754465][T28334] usb 5-1: config 0 descriptor?? [ 1747.759848][ T6291] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1747.765615][ T27] audit: type=1800 audit(1684405377.506:1192): pid=28632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1946 res=0 errno=0 [ 1747.769982][ T6291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.805375][T28334] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1747.813314][ T1668] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1747.837321][ T6291] usb 4-1: config 0 descriptor?? [ 1747.891085][ T6291] hub 4-1:0.0: USB hub found [ 1748.003168][ T1668] usb 6-1: device descriptor read/64, error 18 [ 1748.093258][ T6291] hub 4-1:0.0: 1 port detected [ 1748.123373][ T1668] usb usb6-port1: attempt power cycle [ 1748.533328][ T1668] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1748.705370][ T1668] usb 6-1: device descriptor read/8, error -61 [ 1748.963219][ T6291] hub 4-1:0.0: activate --> -90 [ 1748.973297][ T1668] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1749.155387][ T1668] usb 6-1: device descriptor read/8, error -61 [ 1749.275438][ T1668] usb usb6-port1: unable to enumerate USB device [ 1749.563336][T28334] gspca_sunplus: reg_r err -71 [ 1749.568206][T28334] sunplus: probe of 5-1:0.0 failed with error -71 [ 1749.581146][T28334] usb 5-1: USB disconnect, device number 4 [ 1750.043324][ T6291] hub 4-1:0.0: hub_ext_port_status failed (err = 2) [ 1750.247948][ T5089] usb 4-1: USB disconnect, device number 6 [ 1750.253198][ T6291] usb 4-1-port1: config error 10:23:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x3, "28adfd"}, 0x0, 0x0, 0x0, 0x0}) 10:23:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:23:00 executing program 1: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev2(r0, &(0x7f00000048c0)=[{&(0x7f0000000200)="ad", 0x1}], 0x1, 0x1, 0x0, 0x0) 10:23:00 executing program 2: symlink(0x0, &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:23:00 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) 10:23:00 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) 10:23:00 executing program 2: symlink(0x0, &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:23:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/161}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200), 0x0, 0x2, r0}, 0x38) 10:23:00 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', 0x0) readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:23:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000002a80)=@base={0x1b, 0x800}, 0x48) 10:23:00 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', 0x0) readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:23:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) [ 1751.011595][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.022296][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.053500][T28334] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1751.093355][ T1668] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1751.163426][ T6291] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1751.283172][T28334] usb 6-1: device descriptor read/64, error 18 [ 1751.433238][ T6291] usb 4-1: Using ep0 maxpacket: 32 [ 1751.503574][ T1668] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1751.519828][ T1668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.532353][ T1668] usb 5-1: config 0 descriptor?? [ 1751.573683][ T6291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.584729][T28334] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1751.592419][ T6291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.604976][ T1668] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1751.612708][ T6291] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1751.622770][ T6291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.633669][ T6291] usb 4-1: config 0 descriptor?? [ 1751.674447][ T6291] hub 4-1:0.0: USB hub found [ 1751.793251][T28334] usb 6-1: device descriptor read/64, error 18 [ 1751.903264][ T6291] hub 4-1:0.0: 1 port detected [ 1751.923355][T28334] usb usb6-port1: attempt power cycle [ 1752.383315][T28334] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1752.603369][T28334] usb 6-1: device descriptor read/8, error -61 [ 1752.773359][ T6291] hub 4-1:0.0: activate --> -90 [ 1752.883091][T28334] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1752.913233][ T1668] gspca_sunplus: reg_r err -32 [ 1753.063340][T28334] usb 6-1: device descriptor read/8, error -61 [ 1753.183775][T28334] usb usb6-port1: unable to enumerate USB device [ 1753.853447][ T6291] hub 4-1:0.0: hub_ext_port_status failed (err = 3) [ 1754.054201][ T5089] usb 4-1: USB disconnect, device number 7 [ 1754.073285][ T6291] usb 4-1-port1: config error 10:23:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x3, "28adfd"}, 0x0, 0x0, 0x0, 0x0}) 10:23:04 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', 0x0) readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:23:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7467}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xf, &(0x7f00000000c0)=""/15, 0x40f00, 0xe, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x7, 0x0, 0x4000}, 0x10, 0x2a173, r2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) 10:23:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:23:04 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 10:23:04 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) [ 1754.573131][ T1668] sunplus: probe of 5-1:0.0 failed with error -32 10:23:04 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(0x0, &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) [ 1754.624851][ T1668] usb 5-1: USB disconnect, device number 5 10:23:04 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(0x0, &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:23:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/161}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 10:23:04 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(0x0, &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:23:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/161}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 10:23:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1, &(0x7f00000000c0)=@raw=[@ldst={0x0, 0x0, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x6, 0xa5, &(0x7f0000000200)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1754.831937][ T27] audit: type=1804 audit(1684405384.576:1193): pid=28669 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1368/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 1754.885643][T27079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1754.900246][T27079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1754.953530][ T6291] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1754.963107][T28334] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1755.023094][ T1668] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1755.153174][ T6291] usb 6-1: device descriptor read/64, error 18 [ 1755.233251][T28334] usb 4-1: Using ep0 maxpacket: 32 [ 1755.393393][T28334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1755.405112][T28334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1755.415012][T28334] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1755.424132][T28334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.438944][T28334] usb 4-1: config 0 descriptor?? [ 1755.444615][ T1668] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1755.453775][ T6291] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1755.462108][ T1668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.479932][ T1668] usb 5-1: config 0 descriptor?? [ 1755.494562][T28334] hub 4-1:0.0: USB hub found [ 1755.535271][ T1668] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1755.653140][ T6291] usb 6-1: device descriptor read/64, error 18 [ 1755.714743][T28334] hub 4-1:0.0: 1 port detected [ 1755.773390][ T6291] usb usb6-port1: attempt power cycle [ 1756.183139][ T6291] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1756.363232][ T6291] usb 6-1: device descriptor read/8, error -61 [ 1756.583616][T28334] hub 4-1:0.0: activate --> -90 [ 1756.633347][ T6291] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1756.814803][ T6291] usb 6-1: device descriptor read/8, error -61 [ 1756.853304][ T1668] gspca_sunplus: reg_r err -32 [ 1756.933754][ T6291] usb usb6-port1: unable to enumerate USB device [ 1757.683409][T28334] hub 4-1:0.0: hub_ext_port_status failed (err = 3) [ 1757.884560][ T5089] usb 4-1: USB disconnect, device number 8 [ 1757.893362][T28334] usb 4-1-port1: config error 10:23:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "2e12ad41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b00)={0x0, 0x0, 0x3, "28adfd"}, 0x0, 0x0, 0x0, 0x0}) 10:23:08 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:23:08 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, &(0x7f0000002fc0)}, 0x48) 10:23:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:23:08 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 10:23:08 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) [ 1758.353147][ T1668] sunplus: probe of 5-1:0.0 failed with error -32 [ 1758.370098][ T1668] usb 5-1: USB disconnect, device number 6 10:23:08 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:23:08 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)={&(0x7f0000000d80)='./file0\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003e40)={0x6, 0x3, &(0x7f0000003bc0)=@framed, &(0x7f0000003c40)='GPL\x00', 0x8, 0x22, &(0x7f0000003c80)=""/34, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000003ec0)='ns/user\x00') 10:23:08 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)=""/248, 0xf8) 10:23:08 executing program 1: bpf$BPF_PROG_TEST_RUN(0x1d, &(0x7f0000003040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)}, 0x48) 10:23:08 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(0x0, &(0x7f0000000300)=""/248, 0xf8) 10:23:08 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(0x0, &(0x7f0000000300)=""/248, 0xf8) [ 1758.622263][ T27] audit: type=1804 audit(1684405388.366:1194): pid=28692 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1369/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1758.686096][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.702567][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.733302][ T5685] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1758.764827][ T6291] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1758.843198][ T1668] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1758.923166][ T5685] usb 6-1: device descriptor read/64, error 18 [ 1759.003183][ T6291] usb 4-1: Using ep0 maxpacket: 32 [ 1759.123373][ T6291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.139895][ T6291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.150810][ T6291] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 1759.160518][ T6291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.170453][ T6291] usb 4-1: config 0 descriptor?? [ 1759.213424][ T1668] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1759.213502][ T5685] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1759.222517][ T1668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.248724][ T6291] hub 4-1:0.0: USB hub found [ 1759.258266][ T1668] usb 5-1: config 0 descriptor?? [ 1759.305143][ T1668] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1759.433245][ T6291] hub 4-1:0.0: 1 port detected [ 1759.453114][ T5685] usb 6-1: device descriptor read/64, error 18 [ 1759.575042][ T5685] usb usb6-port1: attempt power cycle [ 1760.013489][ T5685] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1760.203284][ T5685] usb 6-1: device descriptor read/8, error -61 [ 1760.303520][ T6291] hub 4-1:0.0: activate --> -90 [ 1760.483269][ T5685] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1760.623267][ T1668] gspca_sunplus: reg_r err -32 [ 1760.653537][ T5685] usb 6-1: device descriptor read/8, error -61 [ 1760.773371][ T5685] usb usb6-port1: unable to enumerate USB device [ 1761.403277][ T6291] hub 4-1:0.0: hub_ext_port_status failed (err = 3) [ 1761.611393][T27843] usb 4-1: USB disconnect, device number 9 [ 1761.623208][ T6291] usb 4-1-port1: config error 10:23:11 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(0x0, &(0x7f0000000300)=""/248, 0xf8) 10:23:11 executing program 1: bpf$MAP_CREATE(0x3, &(0x7f0000000dc0), 0x48) 10:23:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:23:11 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 10:23:11 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) [ 1762.093196][ T1668] sunplus: probe of 5-1:0.0 failed with error -32 [ 1762.110498][ T1668] usb 5-1: USB disconnect, device number 7 10:23:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7, 0x7, 0x401, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:23:11 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) 10:23:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000680)={0x2, 0x0, @private}, 0x10, 0x0}, 0x0) 10:23:12 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) 10:23:12 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000300)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r1, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x11}, r2}, 0x14) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) pwrite64(r3, &(0x7f0000000180)="89342bc1937ead45b3972e24372cc327bb70bc68ba0eb06e9e89d0966f3aca4a2cd1ffffffffff7f214b1c9f09ecad4fa965e837fd9b141aafaaa809ead88af5cf0e6de9e303a0b9ee4748dc7bcb76af26f470a5df0000000000000000000000000000b3993421d1f0c18e41489b75ce29a38654594099917eeaacd169ef033282fbfcb5d40b44ece51e646b0428983cdde6e3c2400c25a8d1968b59172db24ab3141f87aa3bf1debf20bba4a989bdf02283e4db7839d5e13281241f8a57b4277a1dd315419dc81b19a14bdab3523ebf06ef51033a4a97bb3b63046f3b00570e533295f4b816fdf0c2fe242e4bec23a8c374943e973ba4d9d2bedfd54f18bddfa612c4a26b5ca3821dd48c60664bfea97915f4063a8ec468edac31bcf8e904d45239596ac629690b867ca9036856", 0x12e, 0x0) 10:23:12 executing program 1: syz_read_part_table(0x406c, &(0x7f0000004080)="$eJzszzFKA0EUBuA3u0a3ENRaEINgvTZilVvsBdLaWFgbIZ7EMnggC+8yYmaTGJMuCBq+r3n/vDdvmQ3+iMvt7aPvhxTR9HH8dva1NIxp2666P7U3Dx8vTyU/ljJYTetutvu7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6OJiLTZzrmeLOdLtydVCePznHOOu+OIJheT0UVKOUU8z0dFWnx6vndQ8mF01e/9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwb9LaqSqljoj3bberxcbrVUxHVYomYni9ea/u6/2gD6fr8262+8vhkx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOSAAAAAAE/X/djkABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgrQAAAP//QMYgNQ==") 10:23:12 executing program 2: symlink(&(0x7f00000052c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=""/220, 0xdc) readlink(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) 10:23:12 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000300)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r1, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x11}, r2}, 0x14) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) pwrite64(r3, &(0x7f0000000180)="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", 0x12e, 0x0) 10:23:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x101001, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000080)={0x1, 0x0, 0xffffffe0, 0x1}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x1}) [ 1762.473187][T27843] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1762.534680][ T27] audit: type=1804 audit(1684405392.276:1195): pid=28734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1370/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 1762.563078][ T1668] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1762.597471][T27082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.618116][T27082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:23:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, 0xffffffffffffffff, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1762.693104][T27843] usb 6-1: device descriptor read/64, error 18 [ 1762.906764][ T27] audit: type=1804 audit(1684405392.656:1196): pid=28748 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1371/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1762.933857][ T1668] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=c7.71 [ 1762.945274][ T1668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.964238][ T1668] usb 5-1: config 0 descriptor?? [ 1762.970317][T27843] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1762.978447][T27079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.995567][T27079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1763.005470][ T1668] gspca_main: sunplus-2.14.0 probing 0733:3281 [ 1763.193103][T27843] usb 6-1: device descriptor read/64, error 18 [ 1763.334744][T27843] usb usb6-port1: attempt power cycle [ 1763.763239][T27843] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1763.953442][T27843] usb 6-1: device descriptor read/8, error -61 [ 1764.223218][T27843] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1764.323238][ T1668] gspca_sunplus: reg_r err -32 [ 1764.413393][T27843] usb 6-1: device descriptor read/8, error -61 [ 1764.534315][T27843] usb usb6-port1: unable to enumerate USB device 10:23:14 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="3a01000092908108ac051582588f000000010902d5320000000000090400"], 0x0) 10:23:15 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7b, 0xc, 0x68, 0x40, 0x733, 0x3281, 0xc771, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xd8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000005200)={0x84, &(0x7f0000004d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) 10:23:15 executing program 3: pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) 10:23:15 executing program 2: write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x100c, {0x1, 0x0, 0x4}, 0x0, 0x0, 0xee00, 0x0, 0x2, 0x6, 0x3, 0x7, 0x100000000, 0xe1d, 0x7, 0x4e00, 0x0, 0x7ff, 0x8000000000000000, 0x1000000000000, 0x0, 0x2}}, 0xa0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) r0 = fanotify_init(0x0, 0x80000) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fanotify_mark(r0, 0x105, 0x4000103b, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) close(0xffffffffffffffff) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) timer_create(0x2, &(0x7f00000002c0)={0x0, 0xa60, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000400)=0x0) clock_gettime(0x4, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000480)={{r6, r7+60000000}, {0x0, 0x989680}}, &(0x7f00000004c0)) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000006600880027bd7000fddbdf25000000ae84a0ad5301d00bd04e810a00", @ANYRES32=0x0, @ANYBLOB="0000050000000708000b00ff40ffc008000b000008000b002100000008000b000000000000000000000000000000000000e455e052b839377c45ba08527856017b0ae0c2e795413e9f8c53a73aec8d3766ae1087389cbb253f48579d8834f6fad94ea3eca1c12090d360ab0051670cc6e03d15489ad90c2061a6f947433c0c88c9fa6ebd4cd11dd2547de5a053b27ef9d2ece0b07857a1f0bb007c5b46e68e6f9a3b53bfeb94b6da38e5797134d1cc96fe1bfe86406d3ed5f272ad8d716b000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) r9 = creat(&(0x7f0000000540)='./file0\x00', 0x2) ioctl$DRM_IOCTL_FREE_BUFS(r8, 0x4010641a, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[0x1000, 0x0, 0xfffffff8, 0xbe, 0x2, 0x0, 0x744, 0x5bd]}) sendto$inet6(r4, 0x0, 0x0, 0x20000014, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r9, 0xe40000000000, 0xcf, 0x0, 0x7}) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1, 0xab, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = syz_open_procfs(0x0, &(0x7f0000000640)='net/ip_tables_targets\x00') preadv(r10, &(0x7f0000000440)=[{&(0x7f0000000080)=""/227, 0xe3}], 0x1, 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000000040)={0x1}) 10:23:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, 0xffffffffffffffff, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 10:23:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) 10:23:15 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f0000000280)) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x1ff01) [ 1765.406783][ T27] audit: type=1804 audit(1684405395.156:1197): pid=28759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir733640410/syzkaller.jS2NMy/1560/bus" dev="sda1" ino=1952 res=1 errno=0 10:23:15 executing program 2: write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x100c, {0x1, 0x0, 0x4}, 0x0, 0x0, 0xee00, 0x0, 0x2, 0x6, 0x3, 0x7, 0x100000000, 0xe1d, 0x7, 0x4e00, 0x0, 0x7ff, 0x8000000000000000, 0x1000000000000, 0x0, 0x2}}, 0xa0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) r0 = fanotify_init(0x0, 0x80000) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fanotify_mark(r0, 0x105, 0x4000103b, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) close(0xffffffffffffffff) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) timer_create(0x2, &(0x7f00000002c0)={0x0, 0xa60, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000400)=0x0) clock_gettime(0x4, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000480)={{r6, r7+60000000}, {0x0, 0x989680}}, &(0x7f00000004c0)) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000006600880027bd7000fddbdf25000000ae84a0ad5301d00bd04e810a00", @ANYRES32=0x0, @ANYBLOB="0000050000000708000b00ff40ffc008000b000008000b002100000008000b000000000000000000000000000000000000e455e052b839377c45ba08527856017b0ae0c2e795413e9f8c53a73aec8d3766ae1087389cbb253f48579d8834f6fad94ea3eca1c12090d360ab0051670cc6e03d15489ad90c2061a6f947433c0c88c9fa6ebd4cd11dd2547de5a053b27ef9d2ece0b07857a1f0bb007c5b46e68e6f9a3b53bfeb94b6da38e5797134d1cc96fe1bfe86406d3ed5f272ad8d716b000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) r9 = creat(&(0x7f0000000540)='./file0\x00', 0x2) ioctl$DRM_IOCTL_FREE_BUFS(r8, 0x4010641a, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[0x1000, 0x0, 0xfffffff8, 0xbe, 0x2, 0x0, 0x744, 0x5bd]}) sendto$inet6(r4, 0x0, 0x0, 0x20000014, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r9, 0xe40000000000, 0xcf, 0x0, 0x7}) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1, 0xab, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = syz_open_procfs(0x0, &(0x7f0000000640)='net/ip_tables_targets\x00') preadv(r10, &(0x7f0000000440)=[{&(0x7f0000000080)=""/227, 0xe3}], 0x1, 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000000040)={0x1}) [ 1765.643675][T27843] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1765.653563][ T27] audit: type=1804 audit(1684405395.346:1198): pid=28770 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2410040285/syzkaller.pDPPRo/1449/bus" dev="sda1" ino=1966 res=1 errno=0 [ 1766.013431][T27843] usb 6-1: Using ep0 maxpacket: 8 [ 1766.154618][ T27] audit: type=1804 audit(1684405395.906:1199): pid=28771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir733640410/syzkaller.jS2NMy/1561/bus" dev="sda1" ino=1976 res=1 errno=0 [ 1766.180054][T27843] usb 6-1: config index 0 descriptor too short (expected 13013, got 45) [ 1766.269311][T27843] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 10:23:16 executing program 3: pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) [ 1766.348909][ T27] audit: type=1804 audit(1684405396.096:1200): pid=28767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1263288901/syzkaller.5HerJk/1372/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 1766.358689][T27843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 10:23:16 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) [ 1766.428298][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.440714][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.453941][T27843] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1766.471371][T27843] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 10:23:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, 0xffffffffffffffff, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) [ 1766.499889][T27843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.520391][T27843] usb 6-1: config 0 descriptor?? [ 1766.553176][ T1668] sunplus: probe of 5-1:0.0 failed with error -32 [ 1766.566809][ T1668] usb 5-1: USB disconnect, device number 8 10:23:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f00000000c0)="15f3a2778e32f767ff4a9c3e25f5ebd476169b1d4d0ab5772002c3e2addcb75d455336b92f8ad388", 0x2a, 0x0, 0x0, 0x0) [ 1766.587578][ T27] audit: type=1800 audit(1684405396.336:1201): pid=28778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1957 res=0 errno=0 [ 1766.664528][ T27] audit: type=1804 audit(1684405396.366:1202): pid=28778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2410040285/syzkaller.pDPPRo/1450/file0" dev="sda1" ino=1957 res=1 errno=0 [ 1871.712935][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1871.720030][ C1] rcu: (detected by 1, t=10502 jiffies, g=164017, q=99 ncpus=2) [ 1871.727772][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295124277-4295113775), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1871.741162][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g164017 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1871.752594][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1871.762690][ C1] rcu: RCU grace-period kthread stack dump: [ 1871.768618][ C1] task:rcu_preempt state:R running task stack:26520 pid:16 ppid:2 flags:0x00004000 [ 1871.779618][ C1] Call Trace: [ 1871.782959][ C1] [ 1871.786091][ C1] __schedule+0x187b/0x4900 [ 1871.790798][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1871.796741][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1871.802674][ C1] ? __asan_memset+0x23/0x40 [ 1871.807316][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1871.812198][ C1] schedule+0xc3/0x180 [ 1871.816299][ C1] schedule_timeout+0x1bd/0x310 [ 1871.821172][ C1] ? console_conditional_schedule+0x40/0x40 [ 1871.827110][ C1] ? update_process_times+0x1b0/0x1b0 [ 1871.832539][ C1] ? prepare_to_swait_event+0x329/0x350 [ 1871.838123][ C1] rcu_gp_fqs_loop+0x2c6/0x1010 [ 1871.843018][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1871.848245][ C1] ? rcu_gp_init+0x15d0/0x15d0 [ 1871.853035][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1871.858956][ C1] ? finish_swait+0xcd/0x1e0 [ 1871.863583][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1871.868206][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1871.873344][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 1871.879356][ C1] ? __kthread_parkme+0x164/0x1c0 [ 1871.884438][ C1] kthread+0x2b8/0x350 [ 1871.888534][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1871.893670][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1871.898290][ C1] ret_from_fork+0x1f/0x30 [ 1871.902774][ C1] [ 1871.905811][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1871.912154][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1871.917411][ C0] NMI backtrace for cpu 0 [ 1871.917422][ C0] CPU: 0 PID: 28783 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller-00015-g1b66c114d161 #0 [ 1871.917440][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1871.917450][ C0] RIP: 0010:__hrtimer_run_queues+0x53f/0xd10 [ 1871.917475][ C0] Code: 84 02 00 00 e8 62 6c 10 00 eb 0f e8 5b 6c 10 00 49 bf 00 00 00 00 00 fc ff df 49 8d 5e 3b 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 2a 03 00 00 0f b6 1b 31 ff 89 de e8 bd 6e 10 00 85 db [ 1871.917488][ C0] RSP: 0018:ffffc90000007d60 EFLAGS: 00000806 [ 1871.917502][ C0] RAX: 0000000000000000 RBX: ffff8880890a137b RCX: ffff8880790e8000 [ 1871.917514][ C0] RDX: 0000000000010001 RSI: ffffffff8b384320 RDI: ffffffff8b3842e0 [ 1871.917526][ C0] RBP: ffffc90000007eb0 R08: ffffffff817b101d R09: fffffbfff1cab88e [ 1871.917538][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b982b740 [ 1871.917549][ C0] R13: ffffffff88d20dd0 R14: ffff8880890a1340 R15: dffffc0000000000 [ 1871.917562][ C0] FS: 00007f5f1820a700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1871.917576][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1871.917587][ C0] CR2: 00007f45856d98a8 CR3: 00000000296d3000 CR4: 00000000003506f0 [ 1871.917602][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1871.917611][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1871.917622][ C0] Call Trace: [ 1871.917628][ C0] [ 1871.917645][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1871.917666][ C0] ? ktime_get_update_offsets_now+0x40b/0x420 [ 1871.917695][ C0] hrtimer_interrupt+0x396/0x980 [ 1871.917729][ C0] __sysvec_apic_timer_interrupt+0x13f/0x480 [ 1871.917756][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 1871.917793][ C0] [ 1871.917797][ C0] [ 1871.917803][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1871.917826][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 1871.917845][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 9e 7c 2a f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 83 2a a6 f6 65 8b 05 f4 e5 4a 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 1871.917858][ C0] RSP: 0018:ffffc9000310f900 EFLAGS: 00000206 [ 1871.917872][ C0] RAX: 9efaccb084d05700 RBX: 1ffff92000621f24 RCX: ffffffff816b81fa [ 1871.917885][ C0] RDX: dffffc0000000000 RSI: ffffffff8aea8d20 RDI: 0000000000000001 [ 1871.917896][ C0] RBP: ffffc9000310f990 R08: dffffc0000000000 R09: fffffbfff206504d [ 1871.917909][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1871.917921][ C0] R13: 1ffff92000621f20 R14: ffffc9000310f920 R15: 0000000000000246 [ 1871.917937][ C0] ? mark_lock+0x9a/0x340 [ 1871.917964][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1871.917981][ C0] ? ktime_get_update_offsets_now+0x40b/0x420 [ 1871.918010][ C0] clock_was_set+0x6a1/0x830 [ 1871.918038][ C0] ? destroy_hrtimer_on_stack+0x20/0x20 [ 1871.918058][ C0] ? __asan_memcpy+0x40/0x70 [ 1871.918085][ C0] ? timekeeping_update+0x3e5/0x450 [ 1871.918110][ C0] ? do_adjtimex+0x515/0xab0 [ 1871.918138][ C0] timekeeping_inject_offset+0x663/0x710 [ 1871.918164][ C0] ? do_adjtimex+0x515/0xab0 [ 1871.918189][ C0] ? timekeeping_warp_clock+0x150/0x150 [ 1871.918211][ C0] ? add_device_randomness+0xe6/0x130 [ 1871.918297][ C0] ? crng_reseed+0x210/0x210 [ 1871.918313][ C0] ? security_capable+0x8a/0xb0 [ 1871.918362][ C0] do_adjtimex+0x515/0xab0 [ 1871.918388][ C0] ? random_get_entropy_fallback+0x70/0x70 [ 1871.918413][ C0] ? __might_sleep+0xc0/0xc0 [ 1871.918437][ C0] ? __might_fault+0xbe/0x120 [ 1871.918460][ C0] ? __lock_acquire+0x2000/0x2000 [ 1871.918488][ C0] ? __might_fault+0xba/0x120 [ 1871.918513][ C0] __x64_sys_clock_adjtime+0x1e0/0x290 [ 1871.918533][ C0] ? do_clock_adjtime+0x120/0x120 [ 1871.918550][ C0] ? xfd_validate_state+0x6e/0x150 [ 1871.918580][ C0] ? print_irqtrace_events+0x220/0x220 [ 1871.918616][ C0] ? syscall_enter_from_user_mode+0x32/0x230 [ 1871.918637][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1871.918656][ C0] ? syscall_enter_from_user_mode+0x32/0x230 [ 1871.918677][ C0] do_syscall_64+0x41/0xc0 [ 1871.918720][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1871.918739][ C0] RIP: 0033:0x7f5f1748c169 [ 1871.918761][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1871.918774][ C0] RSP: 002b:00007f5f1820a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1871.918790][ C0] RAX: ffffffffffffffda RBX: 00007f5f175ac050 RCX: 00007f5f1748c169 [ 1871.918803][ C0] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1871.918813][ C0] RBP: 00007f5f174e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1871.918824][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1871.918834][ C0] R13: 00007ffea9020daf R14: 00007f5f1820a300 R15: 0000000000022000 [ 1871.918855][ C0]