last executing test programs: 8.921744214s ago: executing program 2 (id=766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.64043605s ago: executing program 2 (id=768): symlink(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = dup3(r1, r0, 0x0) rt_sigreturn() pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom(r4, &(0x7f0000000100)=""/31, 0x1f, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/31, 0x1f}], 0x1}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) readv(r7, 0x0, 0x0) poll(0x0, 0x0, 0x100) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) rt_sigreturn() connect$inet(r2, &(0x7f0000002d80)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) 8.328640581s ago: executing program 3 (id=770): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0/file0\x00'}, 0x6e) write(r4, &(0x7f00000003c0)="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", 0x12f) 7.446659628s ago: executing program 2 (id=774): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, 0x0, 0x5b, 0x0) 7.361735243s ago: executing program 3 (id=776): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="7604", 0x2}], 0x1}}], 0x2, 0x8080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 6.991859333s ago: executing program 3 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x7f, 0x0) 6.932530806s ago: executing program 5 (id=780): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket(0x18, 0x3, 0x120) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x28, 0x0, 0x0, 0x0, 0x0, "fe27e3"}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691180000000000017000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0x400c620e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xe002a0ffffffff, 0x0}) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000c00)='\x00', 0x0, 0x0, 0x0) creat(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={'sha512-avx\x00'}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f04ffe20d20"], 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b26, 0x0) 6.897346798s ago: executing program 2 (id=781): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000380)}}], 0x1, 0x0) 6.441587499s ago: executing program 5 (id=783): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x458, 0x3f3, 0x4, 0x0, 0x25dfdbfb, {0x6, 0x1, 0x38, [0x200, 0x1, 0x1, 0x8, 0xfffffff9, 0x1, 0x1, 0x7d0d, 0x3, 0x5, 0x7, 0x7, 0x3, 0xb, 0x0, 0x3, 0x0, 0x8, 0x2, 0x4, 0x8, 0x0, 0x10000, 0x3, 0x800, 0x7fffffff, 0xcac, 0x0, 0x8, 0x1038, 0x1ff, 0xfffffffc, 0x6, 0xdfa0, 0x1, 0x9, 0x80000000, 0x2, 0x5, 0xc, 0x5, 0x101, 0x1, 0x6, 0xc, 0x62, 0x0, 0x10, 0x0, 0x5, 0xe, 0x2, 0x0, 0x8, 0x1, 0x2, 0x2, 0x4, 0x8144, 0x9, 0x339, 0x0, 0x0, 0x5], [0x7, 0x5, 0x1, 0x0, 0xde2, 0x7, 0x0, 0x6, 0x3, 0x7, 0x8f, 0xfffffff6, 0x9b8, 0x4, 0x53, 0x2, 0x9, 0x2, 0x80000001, 0x4b4, 0xbdad, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xace4, 0xd594, 0x8, 0x5, 0x0, 0xc, 0x7fff, 0x7, 0x4, 0x2, 0x7, 0x9, 0x6, 0x2, 0x4, 0x7fff, 0x0, 0x7, 0x5, 0x2, 0x6, 0x4, 0x1, 0x787, 0x3, 0x3, 0xfff, 0x5, 0x7, 0x300000, 0x200, 0x7, 0x2, 0xfffe, 0x9, 0xaf72, 0x9, 0xed9], [0x9, 0xfffffeff, 0x3, 0x1, 0x0, 0x4, 0xfffffff7, 0x0, 0x5, 0x0, 0xfffffffa, 0x401, 0x0, 0xd32, 0xcc8, 0x1, 0x9, 0x7, 0x3, 0xb, 0x1b9, 0x3, 0x2, 0x7f, 0x8, 0x0, 0x1, 0x3, 0x1, 0x2c8, 0x4, 0x15fd, 0x5, 0x8, 0x4c7, 0x5, 0xb1, 0x3, 0xca, 0x400, 0x7, 0xcc, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3e6f9426, 0x6, 0x1, 0x40b, 0x954d, 0x9a, 0x401, 0xffffff1a, 0x5, 0x5, 0xe134, 0x5, 0x96fe, 0x101, 0x77, 0x6, 0x3ca], [0xa, 0x0, 0xff1, 0x7fff, 0x2, 0x2, 0x6, 0x4, 0x2, 0x7fffffff, 0x0, 0x40, 0x30b4, 0x7, 0x1, 0x1, 0xfffffffd, 0xf, 0xe2e, 0x63b, 0x6f, 0xd1d, 0x9, 0x5, 0x1, 0x0, 0x9, 0x0, 0x4, 0x3, 0xfffffff9, 0x1, 0x9, 0x4, 0x5117, 0x1, 0x5e74810d, 0x1000, 0xffffff01, 0x5, 0x9, 0x101, 0xffffff80, 0x200, 0x0, 0x6, 0x5, 0x9, 0x9, 0x50, 0x1, 0x5, 0x4, 0x0, 0x5, 0x1, 0x9, 0xf6, 0xfffffffc, 0xdc, 0x0, 0x80, 0xfffffffa, 0x5], 0x38, ['!}\x00', '/dev/uhid\x00', '/dev/uhid\x00', '@],:\x00', '-{/\x00', '[*\\[\x00', '/dev/uhid\x00', '$]}%*[]\x00', '\x00']}, ["", "", "", ""]}, 0x458}}, 0x4000041) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) r3 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) read(r2, &(0x7f00000009c0)=""/75, 0x4b) 6.404556698s ago: executing program 2 (id=784): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x0, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000001c0), &(0x7f0000000040)=@udp6}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000100000000000000009500"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0xff, 0x84}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20000400) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) ioctl$PPPIOCGUNIT(r3, 0x80047456, 0x0) 5.96698721s ago: executing program 4 (id=785): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIbtowvfTQQ4Ci6CEnAq1RIEUDoymKHtnWBZKLD4VPPREtbARFD2wRIKeAxcy+FVf/LMkkJcr+fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lhtwIAeJDOT3/1+AnPfwD4RLng//8BAAAAAAAAAAAAAOCgS1HEE5Fi6fxWmq0+dw2fa3euXpuZmLx9tZFU1Ryoypc/w8+fOHnqSy+Mn+7lh9ffa0/Fa9MXztZfXryytNxaWWnN12c67bnF+dY9b2G39W82Vh2A+pXXr85furRSP/HcyRu+vjb6wdDjR0bPjD9z7Ole2ZmJycnpvjK1wY+891vcaYTHoSjiWKR49vs/Ts2IKGL3x+Iu185+G6k6MVZ1YmZisurIQrvZWS2/nOodiCKi3lep0TtGD+Bc7EojYq1sftngsbJ700vN5ebFhVZ9qrm82l5tL3amUre1ZX/qUcTpFLEeEZtDt25uMIqoRYrvHt5KFyNioHccvlgNDL5zO4p97OM9KNtZH4xYLx6Bc3aADUURr0aKn7xTxFx5zPJPfCHi1TL/MeKtMl+KSOWFcSri/eo6GnnILWcv1KKIPyvP/5mtNF/dD3r3lXNfq3+lc2mxr2zvvvLIPx8epAN+bxqOIprVHX8rffTf7AAAAAAAAAAAAAAAAACw10aiiKcixSv//gfVuOKoxqUfPjP+u6M/3z9m/Mm7bKcs+1xErBX3Nib3UB5CPJWmUnrIY4k/yYajiD/K4/++/bAbAwAAAAAAAAAAAAAAAAAA8IlWxHuR4sV3j6b16J9TvN25XL/QvLjQnRW2N/dvb8707e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjluvnbOSczbmWcz3nRs7NnHFA5u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIn0WK73xjK0WKiEbEbHRzY6hXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mIZSET+IFPXfa1xfV4uIVP3bdbT85VQ0DpX56WiMl/lSNM7mbFZZa3z7IbSf3RlMRfwoUgwNv339hOfzP9j9dP0yiLe+ufPpl2rdHOh9OfrB0ONHDp8Zn/yVJ++0nG7XgLFz7c7Va/WZicnJ6b7Vtbz3T/etG837Lfam60TEyhtvvt5cWGgtW/hkLNS6C7XY0y2PROztBvduodZdyPereOjtucNC42A0Y2chqnv/be/ZfGyUz//3I8VvvvsfvQd+7/n/c91P15/w8dM/3nn+v3jzhvbp+f9E37oX8+9GBmsRw6tXlgaPRAyvvPHmsfaV5uXW5Vbn1PHjXx4f//LJ44OHIoYvtRdafUu7PlQAAAAAAAAAAAAAAAAAD1Yq4rcjRfNHW6keEdeq8VqjZ8afOfb0QAxU461uGLf12vSFs/WXF68sLbdWVlrz9ZlOe25xvnWvuxuuhnvNTEzuS2fuamSf2z8y/PLi0hvL7cu/v3rb7x8bPntxZXW5OXf7r2MkiohG/5qxqsEzE5NVoxfazU5VdWqPBmYOpiL+M1LMnaqnz+d1efxfGe8N9pXtH/+/1re+Wt6n8X+fumk/KRXx00jxG3/+ZHy+audjccsxy+X+OlKMnf5cLheHynK9NnTfK9AdGViW/d9I8fc/u7Fsr+9P7JR9/v6O7sFXnv/DkeIHf/q9+NW87sb3P+yM/+w//4/dvKF9Ov+f6Vv32A3vK9h118nn/1ikeOmJt+PX8roPe/9HEdvb29+KOJoLX38/xz6d/8/2rRuN7n5/fe+6DwAAAAAAAAAA8MgaTEX8TaR4erKWXsjr7uXv/83fvKF9+vtfv9i3bv4BzVe064MKAAAAAAfEYCrivUhxefXt62Oo+8Z/3zj+87d25l6fSDd9W/053y9U7w3Yyz//6zea9zu7+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dRn7zKf+kakeOW/n83l0pGyXG8e+NHq1+Hzi51jZxcWFueaq82LC6369FJzrlXW/Uyk2Pqrz+W6RTW/em+++e4c78PbvbnYlyPF5N/2ynbnYu/NTd6dD7w7F3tZ9lOR4r/+7sayvXmsP7tT9kRZ9i8jxdf/6fZlj+yUPVmW/V6k+OHX672yj5Vle+9H7b6TdLgWC63n5hYXbnkVKgAAAAAAAAAAAAAAAAAAANyvwVTEn0SK/7myHmt52H+e/783A3+tV/atb/bN93+Ta9U8/6PV/P93Wv4o8/+P7llPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0ZGiiDcjxdL5rbQxVH7uGj7X7ly9NjMxeftqI6mqOVCVL3+Gnz9x8tSXXhg/3csPr7/XnorXpi+crb+8eGVpubWy0pqvz3Tac4vzrXvewm7r7xy6rrHqANSvvH51/tKllfqJ507e8PW10Q+GHj8yemb8mWNP98rOTExOTveVqQ3ex97vq3E7DkURfxEpnv3+j9M/D0UUsftjcZdrZ7+NVJ0YqzoxMzFZdWSh3eysll9O9Q5EEVHvq9ToHaMHcC52pRGxVja/bPBY2b3ppeZy8+JCqz7VXF5tr7YXO1Op29qyP/Uo4nSKWI+IzaFbNzcYRbweKb57eCv9y1DEQO84fPH89FePn7hzO4p97OM9KNtZH4xYLx6Bc3aADUUR/xApfvLO0fjXoYhadH/iCxGv9hd8KSKVF8apiPdvcx3xaKpFEf9Xnv8zW+mdofJ+0LuvnPta/SudS4t9ZXv3lYP0fNi+/2txZA92e+8O+L1pOIr4YXXH30r/5r9rAAAAAAAAAAAAAAAAgAOkiF+OFC++ezRV44Ovjyludy7XLzQvLnSH9fXG/tUj/rDM7e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjVsX29va3uvVruX7OtZzrtYiirJ8/b+aMAzJ2DwAAAAAAAAAAAAAAAAAA+Hgpqn9SfOcbW6maS7URMRvd3DAf6Mfe/wcAAP//3sf+xA==") r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.154000414s ago: executing program 0 (id=787): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000390400000000f306856994000000", @ANYRES32=r3, @ANYBLOB="e3eb000000000000440012800b000100697036746e6c00003400028014000300fc010000000000000000000000000000050004004000000014000200fc"], 0x64}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0xa, @remote={0xac, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty}}}], 0x20, 0x2000000}}], 0x1, 0x0) 4.915228757s ago: executing program 4 (id=788): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x2000010, &(0x7f0000000f40)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=ignore,utf8,anchor=00000000000000000001,novrs,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30300000000030303030303030303030303030303030302c6769643d69676710b01c1f9d6e6f72652c6e6f6164696e6963622c756e64656c6574652c6e6f7672732c6c617374626c6f636b3d30303030303030303030303030303030303030312c7569643d69676e6f72652c6e6f7374726963742c616e63686f723d30303030303030303030303030303030303030352c766f6c756d653d303030303030386ee5eef62188e3303030303030303030308930302c756e1202682e87dc70c6e7ea5ddae3187388c671a93c7e"], 0x1, 0xc43, &(0x7f0000000200)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(0xffffffffffffffff, 0x8002007ffb) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.57837618s ago: executing program 2 (id=789): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) write$9p(r0, &(0x7f0000001400)="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", 0x600) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0) sendfile(r0, r1, 0x0, 0xe065) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder-control\x00', 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x340, 0x0) 4.479797051s ago: executing program 5 (id=790): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000140)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x0, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xf0}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b8005002b000300"/36], 0x3c}, 0x1, 0xffffffea}, 0x0) 4.469332554s ago: executing program 1 (id=791): socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xf000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x8000) socket$kcm(0xa, 0x6, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140), 0x208e24b) r4 = socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1000000000ffff2505000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x95, &(0x7f0000000180)=""/149}, 0x90) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xc}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33311e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}]}}]}, 0x90}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xffffffffffffffb8) 4.25059464s ago: executing program 0 (id=792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x7}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1c, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 3.901520407s ago: executing program 4 (id=793): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x4}, 0x10) 3.687386516s ago: executing program 0 (id=794): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000580), &(0x7f0000001740)=""/248, 0x3}, 0x20) 3.534053046s ago: executing program 3 (id=795): sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 3.429502535s ago: executing program 0 (id=796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c0ef815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaad1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69922050000f5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762e122428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302be7ff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9d3fded31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000bb60bc1f1635caf0ca9eabf804adc94e0a73923976299c7ac285542e5de1dd14183f1bb171eabe19fe98f551e1b635300d8e38f07eda29341535e532a6d64ed36fac9c77827bf85ac369eac8879e515b58a03438561c5e78157649c6d45e7e621b79d724e277f1ee49e5b63e81180626a73510be26082a097de42b016336707866d422a93e01c1cbe0cefd4a89dc24b0d7f549908b8620ffd7d900a0a96a381fdd763b39f0bc0af5faf593c5d39fdf43430e4b7c23b5cf691792248cfb9ec9f882dd19a9f6e9426b4f88fe14487942bb34e585083f7b98900682e2683922a94e2f0baecc00f74071d025220bcdbc7f5575ce72981e918681b5a0b1ee9af749885fd8cefb9e182b326eaebad4616647fe1c8c16e42e123c9651f634e962219f"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setpipe(r3, 0x407, 0x7000000) fcntl$setpipe(r3, 0x407, 0x100000) read$hidraw(r2, 0x0, 0x0) 3.265425555s ago: executing program 5 (id=797): r0 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xed81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "5780eafb"}, @global=@item_012={0x1, 0x1, 0x0, "f3"}]}}, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82187202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r4, 0x8044610a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 3.20961621s ago: executing program 1 (id=798): gettid() r0 = memfd_create(&(0x7f0000000900)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1r\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\x03\x00\x00\x00\x00\x00\x00\x00\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 2.231018603s ago: executing program 3 (id=801): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_matches\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0x4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_io_uring_setup(0x9cb, &(0x7f0000000400)={0x0, 0x3c1, 0x800, 0x0, 0x303, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x19, 0x0, [{0x0, 0xf, "e39335900f115624170e15dad0"}, {0x0, 0x2}, {0x0, 0x2}]}, @timestamp={0x44, 0x4}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000030a09080000000000000000010000000900030073797a32000000002c0004800800024017bef2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c00028008000240000000030800034000000001080001400000000f08000240000000030800014000000009000000400000000f080001400000000214000000110001"], 0x128}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x270, 0x0, 0x0, 0x0, 0x20, 0x1223, 0x3f07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x38, 0xc0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x5, 0x6, {0x9, 0x21, 0x8001, 0x81, 0x1, {0x22, 0x624}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x83, 0x6, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7f, 0x0, 0x1}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xd1, 0x2, 0x40, 0x7e}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x4, 0x3f, 0x401, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "89042ec390675ef9409c659b9aa56173"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x3, 0x907e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc0, 0x7, 0x895}]}, 0x2, [{0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "2f8b629134e41ba55736933fde75a4add741356fbe07419ff709aa0fd0a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.648846123s ago: executing program 1 (id=802): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x458, 0x3f3, 0x4, 0x0, 0x25dfdbfb, {0x6, 0x1, 0x38, [0x200, 0x1, 0x1, 0x8, 0xfffffff9, 0x1, 0x1, 0x7d0d, 0x3, 0x5, 0x7, 0x7, 0x3, 0xb, 0x0, 0x3, 0x0, 0x8, 0x2, 0x4, 0x8, 0x0, 0x10000, 0x3, 0x800, 0x7fffffff, 0xcac, 0x0, 0x8, 0x1038, 0x1ff, 0xfffffffc, 0x6, 0xdfa0, 0x1, 0x9, 0x80000000, 0x2, 0x5, 0xc, 0x5, 0x101, 0x1, 0x6, 0xc, 0x62, 0x0, 0x10, 0x0, 0x5, 0xe, 0x2, 0x0, 0x8, 0x1, 0x2, 0x2, 0x4, 0x8144, 0x9, 0x339, 0x0, 0x0, 0x5], [0x7, 0x5, 0x1, 0x0, 0xde2, 0x7, 0x0, 0x6, 0x3, 0x7, 0x8f, 0xfffffff6, 0x9b8, 0x4, 0x53, 0x2, 0x9, 0x2, 0x80000001, 0x4b4, 0xbdad, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xace4, 0xd594, 0x8, 0x5, 0x0, 0xc, 0x7fff, 0x7, 0x4, 0x2, 0x7, 0x9, 0x6, 0x2, 0x4, 0x7fff, 0x0, 0x7, 0x5, 0x2, 0x6, 0x4, 0x1, 0x787, 0x3, 0x3, 0xfff, 0x5, 0x7, 0x300000, 0x200, 0x7, 0x2, 0xfffe, 0x9, 0xaf72, 0x9, 0xed9], [0x9, 0xfffffeff, 0x3, 0x1, 0x0, 0x4, 0xfffffff7, 0x0, 0x5, 0x0, 0xfffffffa, 0x401, 0x0, 0xd32, 0xcc8, 0x1, 0x9, 0x7, 0x3, 0xb, 0x1b9, 0x3, 0x2, 0x7f, 0x8, 0x0, 0x1, 0x3, 0x1, 0x2c8, 0x4, 0x15fd, 0x5, 0x8, 0x4c7, 0x5, 0xb1, 0x3, 0xca, 0x400, 0x7, 0xcc, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3e6f9426, 0x6, 0x1, 0x40b, 0x954d, 0x9a, 0x401, 0xffffff1a, 0x5, 0x5, 0xe134, 0x5, 0x96fe, 0x101, 0x77, 0x6, 0x3ca], [0xa, 0x0, 0xff1, 0x7fff, 0x2, 0x2, 0x6, 0x4, 0x2, 0x7fffffff, 0x0, 0x40, 0x30b4, 0x7, 0x1, 0x1, 0xfffffffd, 0xf, 0xe2e, 0x63b, 0x6f, 0xd1d, 0x9, 0x5, 0x1, 0x0, 0x9, 0x0, 0x4, 0x3, 0xfffffff9, 0x1, 0x9, 0x4, 0x5117, 0x1, 0x5e74810d, 0x1000, 0xffffff01, 0x5, 0x9, 0x101, 0xffffff80, 0x200, 0x0, 0x6, 0x5, 0x9, 0x9, 0x50, 0x1, 0x5, 0x4, 0x0, 0x5, 0x1, 0x9, 0xf6, 0xfffffffc, 0xdc, 0x0, 0x80, 0xfffffffa, 0x5], 0x38, ['!}\x00', '/dev/uhid\x00', '/dev/uhid\x00', '@],:\x00', '-{/\x00', '[*\\[\x00', '/dev/uhid\x00', '$]}%*[]\x00', '\x00']}, ["", "", "", ""]}, 0x458}}, 0x4000041) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) r3 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) read(r2, &(0x7f00000009c0)=""/75, 0x4b) 1.358686419s ago: executing program 4 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) unshare(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@abort}, {@oldalloc}], [{@obj_type={'obj_type', 0x3d, '({'}}, {@appraise}]}, 0x1, 0x246, &(0x7f0000001b00)="$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") creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat(r2, &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "ec28a1ba80a20507"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 1.259015179s ago: executing program 5 (id=804): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 762.353371ms ago: executing program 1 (id=805): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001500)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x204, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x1e3, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @random="90e488f9971a", {}, @value=@ver_80211n={0x0, 0xdc8}}, 0x0, @default, 0x4004, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0xb06}}, [{0xdd, 0x32, "2d5014b2109a59339408ad50548584c01cda5f3ced6f13b590b9aaf1bca488130effc03c7c2adf4757f254203300027902dd"}, {0xdd, 0x58, "eb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde0f9c497c9bbde281223c0596f01156deb1f851f7602fb2299c382c07898a4d7dddbc046ef6a9"}, {0xdd, 0xc8, "4f2a899e94bcf0613609929460dda7b3421f2af277170aab1eef1bc7a6bad283ec72e75c78d8f4f30f5e2ee79daf8ece54852b5b93eabb5832b001d39227230802e601a7f9749d370367565ddb88a137c4572cce24103d4337027917c48d29a1860dad1f99fe412ea5a5eff0a43812f63ec34a05279e6dc25839f828e60b01f9b6a65bf411101d89dc154716566458aa4111340a6d895801f8d51908b9bdd47762550f4ee51c8a3f64cfe2f8b701e79d393a957fa4e3e620099b226f683280ec0f5d85f9c59d29d9"}, {0xdd, 0x3f, "83534cd40fda26eabadf3814f88fa9c5d39124ac6ffcf2583cbdd58fa0969b3e6783c46ed2318e9705000347f36f4bece9457b39a13ca21d7fae66b239a7ea"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x204}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001540)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000000000000000003000000000300000002000000ffffffff0000000000000001000000000000000400004914a950beada843564f9a63d2086830345b4badaab276986a33c6b948187f6c60d2d0b8ff34aed8b9e46b3a17008d"], &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000b0086dd6012000800383a00fc010000000000000000000000000000ff0200000000000000000000000000010100007800000000600ad91500002c00ff010000000000000000000000000001fe8000000000000000000000000000040000009000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) 517.489673ms ago: executing program 1 (id=806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 318.697339ms ago: executing program 1 (id=807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x7f, 0x0) 316.984215ms ago: executing program 4 (id=808): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$dsp(r0, &(0x7f0000000300)="90", 0x36) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5) syz_emit_ethernet(0x7e, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000700000000000019078ac1e0001ac1414aa04009078e00000e0742f00000000000000110000ac1414aaac1e000107030000443c00036401010200000000ffffffff00000000e00000020000000000000000000000007f000001000000007f0000010004000000000002000000009271efb7849dcc1c52b73f9d670cd50c4c7e0ce1d78f3029e983dbadeeae42be98e22521c04c66d2130cf7b83b581f3cb4eb897f75454198fd5e8923912e2f53abdfddcf49edbe1accf44b79a78014b16a116f550b485f5cdc8736ad366b7eef5478e408af"], 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x10c}, {&(0x7f0000000640)="aa1d484e37000a00d16a4732ea0e8f21d5bc01000000067a0689fff2a41cfbf0e900b3bfabfe6c96366c99b6bfa00968f471", 0x32}], 0x2) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) timer_create(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c90001"], 0x22) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a03", 0x2c}], 0x1) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x0, 0x2}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000004c0)={0x4, 0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f0000000700)=""/177, 0xb1}], &(0x7f00000003c0)=[0x0]}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, 0x0) close_range(r2, r7, 0x0) 310.872068ms ago: executing program 0 (id=809): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 231.834062ms ago: executing program 5 (id=810): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000140)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x0, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xf0}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b8005002b000300"/36], 0x3c}, 0x1, 0xffffffea}, 0x0) 0s ago: executing program 0 (id=811): syz_clone3(&(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x66) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)}, {0x0}], 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x18}, 0x0) syz_open_dev$video4linux(0x0, 0x1b, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): activated: batadv_slave_1 [ 78.635615][ T5095] veth1_vlan: entered promiscuous mode [ 78.654996][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.680344][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.697758][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.708566][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.719674][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.730433][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.740522][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.751042][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.764026][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.796780][ T5090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.806073][ T5090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.816122][ T5090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.825770][ T5090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.889081][ T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.901195][ T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.911360][ T2780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.919244][ T2780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.927598][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.939537][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.951144][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.963712][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.973936][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.987225][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.997106][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.010431][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.022937][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.063421][ T5093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.074938][ T5093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.084591][ T5093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.093335][ T5093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.174241][ T2780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.211542][ T2780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.301942][ T5095] veth0_macvtap: entered promiscuous mode [ 79.364837][ T5210] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.413347][ T973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.413639][ T5095] veth1_macvtap: entered promiscuous mode [ 79.438546][ T973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.529494][ T5216] bridge_slave_0: left allmulticast mode [ 79.537109][ T5216] bridge_slave_0: left promiscuous mode [ 79.544089][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.565959][ T5216] bridge_slave_1: left allmulticast mode [ 79.571788][ T5216] bridge_slave_1: left promiscuous mode [ 79.577570][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.627021][ T5216] bond0: (slave bond_slave_0): Releasing backup interface [ 79.656368][ T5216] bond0: (slave bond_slave_1): Releasing backup interface [ 79.693965][ T5216] team0: Port device team_slave_0 removed [ 79.719060][ T5216] team0: Port device team_slave_1 removed [ 79.735867][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.743808][ T5216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.754721][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.762332][ T5216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.860391][ T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.885463][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.914395][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.926109][ T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.932385][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.958693][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.980178][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.004786][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.033280][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.072204][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.089033][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.204147][ T2799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.255833][ T2799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.279676][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.323618][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.334430][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.348938][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.366610][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.401545][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.418948][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.431055][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.444934][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.590147][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.599306][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.612531][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.624971][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.643312][ T5095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.652786][ T5095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.664833][ T5095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.677648][ T5095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.164548][ T2780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.221701][ T2780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.393212][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.401065][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.595323][ T5266] veth0_vlan: entered allmulticast mode [ 81.773343][ T5269] veth0_vlan: left promiscuous mode [ 81.796481][ T5269] veth0_vlan: entered promiscuous mode [ 82.476591][ T5296] loop4: detected capacity change from 0 to 8 [ 82.598023][ T5296] SQUASHFS error: Failed to read block 0x4e8: -5 [ 82.641871][ T29] audit: type=1800 audit(1719584916.749:2): pid=5296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.32" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 82.762192][ T5159] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.895835][ T5310] bond_slave_0: entered promiscuous mode [ 82.901829][ T5310] bond_slave_1: entered promiscuous mode [ 82.939584][ T5310] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 82.961659][ T5159] usb 3-1: Using ep0 maxpacket: 16 [ 82.988700][ T5310] team0: Port device macvlan2 added [ 83.011482][ T5159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 83.065739][ T5159] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 83.121173][ T5159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.122163][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.212320][ T5159] usb 3-1: config 0 descriptor?? [ 83.399958][ T8] usb 1-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 83.447101][ T5294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'. [ 83.490615][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 83.573229][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.658973][ T8] usb 1-1: config 0 descriptor?? [ 83.892434][ T779] usb 1-1: USB disconnect, device number 2 [ 83.989728][ T5334] team0: Device bond0 is up. Set it down before adding it as a team port [ 84.042539][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.053877][ T5334] batadv0: entered promiscuous mode [ 84.089604][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.107112][ T5334] team0: entered promiscuous mode [ 84.143893][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.144234][ T5334] team_slave_0: entered promiscuous mode [ 84.194572][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.261903][ T5159] hid (null): unknown global tag 0xc [ 84.266437][ T5334] team_slave_1: entered promiscuous mode [ 84.341946][ T5159] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 84.368145][ T5159] hid-generic 0003:0158:0100.0001: unexpected long global item [ 84.402267][ T5159] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 84.475468][ T5159] usb 3-1: USB disconnect, device number 2 [ 84.829068][ T5323] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 84.835939][ T5323] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 84.939745][ T5323] vhci_hcd vhci_hcd.0: Device attached [ 85.068310][ T5353] vhci_hcd: connection closed [ 85.073323][ T2780] vhci_hcd: stop threads [ 85.161668][ T2780] vhci_hcd: release socket [ 85.204662][ T2780] vhci_hcd: disconnect device [ 85.210225][ T5360] loop1: detected capacity change from 0 to 8 [ 85.783951][ T5360] SQUASHFS error: Failed to read block 0x4e8: -5 [ 85.856548][ T29] audit: type=1800 audit(2000000001.399:3): pid=5360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.50" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 86.305566][ T5369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.53'. [ 86.326640][ T25] cfg80211: failed to load regulatory.db [ 86.487019][ T5373] bond_slave_0: entered promiscuous mode [ 86.492964][ T5373] bond_slave_1: entered promiscuous mode [ 86.574591][ T5373] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.602596][ T5373] macvlan2: entered promiscuous mode [ 86.638815][ T5373] bond0: entered promiscuous mode [ 86.666485][ T5373] team0: Port device macvlan2 added [ 87.332491][ T5393] loop2: detected capacity change from 0 to 512 [ 87.416855][ T5393] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.63: bad orphan inode 2130706432 [ 87.436153][ T5393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.548240][ T5393] ext4 filesystem being mounted at /root/syzkaller.trUqYJ/13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.638146][ T5393] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz.2.63: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=26368, size=2048 fake=0 [ 87.968792][ T5406] loop3: detected capacity change from 0 to 8 [ 88.560724][ T5406] SQUASHFS error: Failed to read block 0x4e8: -5 [ 88.716710][ T29] audit: type=1800 audit(2000000004.239:4): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.67" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 88.860828][ T5089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.305908][ T5420] bond_slave_0: entered promiscuous mode [ 89.311857][ T5420] bond_slave_1: entered promiscuous mode [ 89.397359][ T5420] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.459320][ T5420] team0: Port device macvlan2 added [ 89.774201][ T29] audit: type=1326 audit(2000000005.389:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5442 comm="syz.3.81" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f590bf75b29 code=0x0 [ 91.061396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 92.611396][ T29] audit: type=1326 audit(2000000008.219:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5456 comm="syz.0.85" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f758b975b29 code=0x0 [ 92.719805][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 92.786633][ T5492] team0: entered promiscuous mode [ 92.833135][ T5492] team_slave_0: entered promiscuous mode [ 92.855726][ T5492] team_slave_1: entered promiscuous mode [ 92.927369][ T5495] block nbd5: shutting down sockets [ 92.944736][ T5498] team_slave_0: entered allmulticast mode [ 93.032051][ T5498] team0: Port device team_slave_0 removed [ 93.103510][ T5489] team0: left promiscuous mode [ 93.112830][ T5489] team_slave_1: left promiscuous mode [ 93.545492][ T5462] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.85'. [ 93.573600][ T5462] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 94.029984][ T5523] loop2: detected capacity change from 0 to 2048 [ 94.093181][ T5523] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 94.132375][ T5523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.288107][ T5531] loop1: detected capacity change from 0 to 512 [ 94.332892][ T5531] ======================================================= [ 94.332892][ T5531] WARNING: The mand mount option has been deprecated and [ 94.332892][ T5531] and is ignored by this kernel. Remove the mand [ 94.332892][ T5531] option from the mount to silence this warning. [ 94.332892][ T5531] ======================================================= [ 94.334150][ T5536] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262407 (only 8 groups) [ 94.518591][ T5531] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 94.560385][ T5531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 94.571007][ T5531] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.628929][ T5531] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.110: bg 0: block 361: padding at end of block bitmap is not set [ 94.686950][ T5531] EXT4-fs (loop1): Remounting filesystem read-only [ 94.706925][ T5537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.111'. [ 94.719427][ T5531] EXT4-fs (loop1): 1 truncate cleaned up [ 94.734170][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 94.740011][ T5531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 94.819660][ T5531] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz.1.110: dx entry: limit 0 != root limit 125 [ 94.845514][ T5544] team0: entered promiscuous mode [ 94.861449][ T5544] team_slave_0: entered promiscuous mode [ 94.869087][ T5531] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.110: Corrupt directory, running e2fsck is recommended [ 94.891033][ T5544] team_slave_1: entered promiscuous mode [ 94.913629][ T29] audit: type=1326 audit(2000000010.519:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5547 comm="syz.0.115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f758b975b29 code=0x0 [ 94.964141][ T5544] team_slave_0: entered allmulticast mode [ 95.040219][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 95.084312][ T5544] team0: Port device team_slave_0 removed [ 95.120351][ T5539] team0: left promiscuous mode [ 95.169312][ T5539] team_slave_1: left promiscuous mode [ 95.211196][ T29] audit: type=1326 audit(2000000010.819:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.3.113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f590bf75b29 code=0x0 [ 95.261419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 95.273391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 95.417377][ T5558] loop1: detected capacity change from 0 to 512 [ 95.513397][ T5558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.668786][ T29] audit: type=1326 audit(2000000011.279:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.5.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe641775b29 code=0x0 [ 95.718000][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.851574][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.091443][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 96.104126][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 96.137080][ T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 96.157139][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.188468][ T25] usb 3-1: config 0 descriptor?? [ 96.213552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.222472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.231154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.243998][ T5111] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 96.254473][ T5111] CPU: 0 PID: 5111 Comm: kworker/u9:9 Not tainted 6.10.0-rc5-syzkaller-00200-g5bbd9b249880 #0 [ 96.264736][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 96.274809][ T5111] Workqueue: hci4 hci_rx_work [ 96.279542][ T5111] Call Trace: [ 96.282835][ T5111] [ 96.285780][ T5111] dump_stack_lvl+0x241/0x360 [ 96.290497][ T5111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.295730][ T5111] ? __pfx__printk+0x10/0x10 [ 96.300354][ T5111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.306005][ T5111] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 96.311318][ T5111] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 96.316731][ T5111] sysfs_create_dir_ns+0x2ce/0x3a0 [ 96.321871][ T5111] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 96.327521][ T5111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.333170][ T5111] kobject_add_internal+0x435/0x8d0 [ 96.338399][ T5111] kobject_add+0x152/0x220 [ 96.342850][ T5111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.348498][ T5111] ? do_raw_spin_unlock+0x13c/0x8b0 [ 96.353720][ T5111] ? device_add+0x3e7/0xbf0 [ 96.358254][ T5111] ? __pfx_kobject_add+0x10/0x10 [ 96.363210][ T5111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.368860][ T5111] ? _raw_spin_unlock+0x28/0x50 [ 96.373725][ T5111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.379369][ T5111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.385007][ T5111] ? get_device_parent+0x165/0x410 [ 96.390150][ T5111] device_add+0x4e5/0xbf0 [ 96.394512][ T5111] hci_conn_add_sysfs+0xe8/0x200 [ 96.399480][ T5111] le_conn_complete_evt+0xc9f/0x12e0 [ 96.404805][ T5111] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 96.410553][ T5111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.416205][ T5111] ? __mutex_unlock_slowpath+0x21d/0x750 [ 96.421855][ T5111] ? __copy_skb_header+0x437/0x5b0 [ 96.426985][ T5111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.432637][ T5111] ? skb_pull_data+0x112/0x230 [ 96.437424][ T5111] hci_le_enh_conn_complete_evt+0x185/0x420 [ 96.443347][ T5111] hci_event_packet+0xa55/0x1540 [ 96.448314][ T5111] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 96.453645][ T5111] ? __pfx_hci_event_packet+0x10/0x10 [ 96.459038][ T5111] ? do_raw_spin_unlock+0x13c/0x8b0 [ 96.464275][ T5111] ? __entry_text_end+0xfdfc5/0x1020c9 [ 96.469753][ T5111] ? hci_send_to_monitor+0xd8/0x7f0 [ 96.474980][ T5111] ? kcov_remote_start+0x9e/0x7e0 [ 96.480016][ T5111] hci_rx_work+0x3e8/0xca0 [ 96.484459][ T5111] ? process_scheduled_works+0x945/0x1830 [ 96.490194][ T5111] process_scheduled_works+0xa2e/0x1830 [ 96.495811][ T5111] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.501818][ T5111] ? assign_work+0x364/0x3d0 [ 96.506441][ T5111] worker_thread+0x86d/0xd50 [ 96.511071][ T5111] ? __kthread_parkme+0x169/0x1d0 [ 96.516111][ T5111] ? __pfx_worker_thread+0x10/0x10 [ 96.521234][ T5111] kthread+0x2f2/0x390 [ 96.525333][ T5111] ? __pfx_worker_thread+0x10/0x10 [ 96.530472][ T5111] ? __pfx_kthread+0x10/0x10 [ 96.535100][ T5111] ret_from_fork+0x4d/0x80 [ 96.539548][ T5111] ? __pfx_kthread+0x10/0x10 [ 96.544171][ T5111] ret_from_fork_asm+0x1a/0x30 [ 96.548992][ T5111] [ 96.562939][ T5111] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 96.577331][ T5111] Bluetooth: hci4: failed to register connection device [ 96.604004][ T5565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'. [ 96.838728][ T29] audit: type=1326 audit(2000000012.449:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.1.121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86aad75b29 code=0x0 [ 97.227388][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.239398][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.281165][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.337946][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.369556][ T25] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 97.449207][ T25] hid-generic 0003:0158:0100.0002: unexpected long global item [ 97.492296][ T25] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 97.512142][ T5595] loop4: detected capacity change from 0 to 1024 [ 97.566714][ T5154] usb 3-1: USB disconnect, device number 3 [ 97.588552][ T5595] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.636251][ T5574] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.121'. [ 97.662062][ T5574] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 97.713386][ T5595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.721322][ T5604] loop5: detected capacity change from 0 to 128 [ 97.734439][ T5604] EXT4-fs: Ignoring removed oldalloc option [ 97.740365][ T5604] ext4: Unknown parameter 'obj_type' [ 97.841535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.890020][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 97.932514][ T5254] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 98.017895][ T5095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.214760][ T5611] syz.1.133 uses obsolete (PF_INET,SOCK_PACKET) [ 98.684804][ T29] audit: type=1326 audit(2000000014.279:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5613 comm="syz.2.135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb264b75b29 code=0x0 [ 98.847158][ T5598] loop3: detected capacity change from 0 to 32768 [ 98.958984][ T29] audit: type=1326 audit(2000000014.569:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5642 comm="syz.5.143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe641775b29 code=0x0 [ 99.032462][ T5598] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.049865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.148302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.181450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.246430][ T5598] XFS (loop3): Ending clean mount [ 99.808071][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 99.916927][ T5597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.944335][ T5670] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 99.966351][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.201392][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 100.219960][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 100.245410][ T25] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 100.256019][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.283605][ T25] usb 2-1: config 0 descriptor?? [ 100.348295][ T29] audit: type=1326 audit(2000000015.959:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.4.146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x0 [ 100.504745][ T5663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'. [ 100.556594][ T5090] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.989074][ T5663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.032575][ T5663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.093406][ T5663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.214008][ T5663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.424471][ T25] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 101.432064][ T25] hid-generic 0003:0158:0100.0003: unexpected long global item [ 101.440577][ T25] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 102.239025][ T5671] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.146'. [ 102.254898][ T5154] usb 2-1: USB disconnect, device number 2 [ 102.295793][ T5671] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 102.356340][ T5695] loop5: detected capacity change from 0 to 2048 [ 102.452178][ T5695] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 102.473650][ T5695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.691754][ T5695] loop5: detected capacity change from 0 to 512 [ 102.929953][ T5712] loop5: detected capacity change from 0 to 1024 [ 103.011684][ T5099] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.118766][ T5699] block nbd3: shutting down sockets [ 103.251651][ T5099] usb 3-1: Using ep0 maxpacket: 16 [ 103.272437][ T5099] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 103.275354][ T29] audit: type=1326 audit(2000000018.879:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.1.161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86aad75b29 code=0x0 [ 103.365947][ T5099] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 103.406791][ T5099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.450463][ T5099] usb 3-1: config 0 descriptor?? [ 103.494825][ T5716] hfsplus: xattr searching failed [ 103.551478][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 103.702995][ T5705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'. [ 103.815059][ T5716] hfsplus: b-tree write err: -5, ino 3 [ 103.878555][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 103.977513][ T5727] team_slave_0: entered allmulticast mode [ 104.075719][ T5727] team0: Port device team_slave_0 removed [ 104.211962][ T5705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.250330][ T5705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.313396][ T5705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.382990][ T5705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.455326][ T5099] hid (null): unknown global tag 0xc [ 104.474369][ T5099] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 104.532788][ T5099] hid-generic 0003:0158:0100.0004: unexpected long global item [ 104.564540][ T5099] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22 [ 104.605834][ T5733] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 104.665826][ T5099] usb 3-1: USB disconnect, device number 4 [ 104.967205][ T5743] loop1: detected capacity change from 0 to 1024 [ 105.019292][ T5743] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.119887][ T5743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.368594][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.434183][ T5754] netlink: 'syz.2.172': attribute type 10 has an invalid length. [ 105.509556][ T5754] batman_adv: batadv0: Adding interface: team0 [ 105.552205][ T5754] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.608298][ T5754] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 105.626992][ T5757] netlink: 'syz.2.172': attribute type 10 has an invalid length. [ 105.655683][ T5757] netlink: 2 bytes leftover after parsing attributes in process `syz.2.172'. [ 105.715676][ T5757] team0: entered promiscuous mode [ 105.721150][ T5757] team_slave_1: entered promiscuous mode [ 105.748344][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.779286][ T5757] batman_adv: batadv0: Interface activated: team0 [ 105.792549][ T5099] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.825861][ T5757] batman_adv: batadv0: Interface deactivated: team0 [ 105.851493][ T5757] batman_adv: batadv0: Removing interface: team0 [ 105.890633][ T5757] bridge0: port 3(team0) entered blocking state [ 105.913760][ T5757] bridge0: port 3(team0) entered disabled state [ 105.931009][ T5767] loop1: detected capacity change from 0 to 2048 [ 105.959783][ T5757] team0: entered allmulticast mode [ 106.001370][ T5757] team_slave_1: entered allmulticast mode [ 106.011474][ T5099] usb 1-1: Using ep0 maxpacket: 16 [ 106.016056][ T5767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.023914][ T5099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 106.046674][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.178'. [ 106.060241][ T5757] bridge0: port 3(team0) entered blocking state [ 106.066715][ T5757] bridge0: port 3(team0) entered forwarding state [ 106.084566][ T5099] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 106.100626][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.147590][ T5099] usb 1-1: config 0 descriptor?? [ 106.187858][ T5776] team0: entered promiscuous mode [ 106.208745][ T5776] team_slave_0: entered promiscuous mode [ 106.228443][ T5776] team_slave_1: entered promiscuous mode [ 106.237498][ T5776] macvlan2: entered promiscuous mode [ 106.266301][ T5776] bond0: entered promiscuous mode [ 106.302858][ T5774] team_slave_0: entered allmulticast mode [ 106.358389][ T5774] team0: Port device team_slave_0 removed [ 106.383567][ T5756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.173'. [ 106.399261][ T5770] team0: left promiscuous mode [ 106.415078][ T5770] team_slave_1: left promiscuous mode [ 106.447421][ T5770] macvlan2: left promiscuous mode [ 106.463967][ T5770] bond0: left promiscuous mode [ 106.580697][ T5762] block nbd3: shutting down sockets [ 106.761811][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.779537][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.797801][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.823894][ T29] audit: type=1326 audit(2000000022.419:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.2.179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb264b75b29 code=0x0 [ 106.853245][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.881666][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.950316][ T5099] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 106.961792][ T5099] hid-generic 0003:0158:0100.0005: unexpected long global item [ 106.970339][ T5099] hid-generic 0003:0158:0100.0005: probe with driver hid-generic failed with error -22 [ 107.032274][ T5790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.180'. [ 107.151510][ T5099] usb 1-1: USB disconnect, device number 3 [ 107.188202][ T5798] loop1: detected capacity change from 0 to 1024 [ 107.525711][ T5802] hfsplus: xattr searching failed [ 107.544408][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 108.065746][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 108.112484][ T5818] team0: entered promiscuous mode [ 108.143354][ T5818] team_slave_0: entered promiscuous mode [ 108.167324][ T5818] team_slave_0: entered allmulticast mode [ 108.177600][ T5802] hfsplus: b-tree write err: -5, ino 3 [ 108.211424][ T5817] team0: left promiscuous mode [ 109.302370][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 109.340589][ T5830] block nbd5: shutting down sockets [ 109.445363][ T29] audit: type=1326 audit(2000000025.059:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f590bf75b29 code=0x0 [ 110.008563][ T5862] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 110.050696][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.381375][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 110.399709][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 110.631996][ T5881] loop2: detected capacity change from 0 to 1024 [ 111.211361][ T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 111.243395][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.286461][ T8] usb 1-1: config 0 descriptor?? [ 111.454310][ T5886] hfsplus: xattr searching failed [ 111.553906][ T5886] hfsplus: b-tree write err: -5, ino 3 [ 111.572889][ T5858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'. [ 112.043168][ T5858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.082532][ T5858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.120805][ T5858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.149195][ T5858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.186221][ T8] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 112.189506][ T5896] block nbd3: shutting down sockets [ 112.206343][ T8] hid-generic 0003:0158:0100.0006: unexpected long global item [ 112.269306][ T8] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22 [ 112.297566][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 112.396782][ T5159] usb 1-1: USB disconnect, device number 4 [ 112.740218][ T29] audit: type=1326 audit(2000000028.349:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.5.220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe641775b29 code=0x0 [ 113.231549][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.374050][ T5935] netlink: 'syz.0.225': attribute type 41 has an invalid length. [ 113.451494][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 113.489512][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 113.550136][ T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 113.596632][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.656815][ T25] usb 3-1: config 0 descriptor?? [ 113.908474][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'. [ 114.003838][ T29] audit: type=1326 audit(2000000029.619:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.5.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe641775b29 code=0x0 [ 114.366324][ T5956] loop4: detected capacity change from 0 to 1024 [ 114.376972][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.412137][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.490410][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.519486][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.595325][ T25] hid (null): unknown global tag 0xc [ 114.652032][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 114.696493][ T25] hid-generic 0003:0158:0100.0007: unexpected long global item [ 114.714212][ T5960] hfsplus: xattr searching failed [ 114.729950][ T25] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 114.831172][ T5154] usb 3-1: USB disconnect, device number 5 [ 114.915573][ T5960] hfsplus: b-tree write err: -5, ino 3 [ 115.518659][ T5961] block nbd1: shutting down sockets [ 115.526247][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.237'. [ 116.024931][ T5964] loop0: detected capacity change from 0 to 32768 [ 116.051722][ T5985] loop1: detected capacity change from 0 to 2048 [ 116.117487][ T5985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.164824][ T5964] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.258154][ T29] audit: type=1326 audit(2000000031.869:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.2.241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb264b75b29 code=0x0 [ 116.441449][ T5964] XFS (loop0): Ending clean mount [ 116.741467][ T6013] loop3: detected capacity change from 0 to 128 [ 116.997116][ T6013] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 117.965032][ T5090] sysv_free_block: flc_count > flc_size [ 118.071639][ T5090] sysv_free_block: flc_count > flc_size [ 118.086671][ T5090] sysv_free_block: flc_count > flc_size [ 118.123007][ T5090] sysv_free_block: flc_count > flc_size [ 118.151771][ T5090] sysv_free_block: flc_count > flc_size [ 118.163377][ T5090] sysv_free_block: flc_count > flc_size [ 118.173340][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.191760][ T5090] sysv_free_block: flc_count > flc_size [ 118.220017][ T5963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.253265][ T5090] sysv_free_block: flc_count > flc_size [ 118.264298][ T5090] sysv_free_block: flc_count > flc_size [ 118.269858][ T5090] sysv_free_block: flc_count > flc_size [ 118.308850][ T5090] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 118.706680][ T6027] loop2: detected capacity change from 0 to 256 [ 119.037925][ T5092] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.712418][ T6044] netlink: 'syz.4.259': attribute type 41 has an invalid length. [ 119.729241][ T6031] block nbd3: shutting down sockets [ 119.755487][ T6049] loop0: detected capacity change from 0 to 128 [ 120.310560][ T29] audit: type=1326 audit(2000000035.799:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758b975b29 code=0x7ffc0000 [ 120.944472][ T29] audit: type=1326 audit(2000000035.799:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758b975b29 code=0x7ffc0000 [ 121.041359][ T29] audit: type=1326 audit(2000000035.809:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f758b975b29 code=0x7ffc0000 [ 121.225060][ T29] audit: type=1326 audit(2000000035.809:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758b975b29 code=0x7ffc0000 [ 121.373516][ T29] audit: type=1326 audit(2000000035.809:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758b975b29 code=0x7ffc0000 [ 121.496353][ T29] audit: type=1326 audit(2000000035.809:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f758b975b29 code=0x7ffc0000 [ 121.635297][ T29] audit: type=1326 audit(2000000035.809:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758b975b29 code=0x7ffc0000 [ 121.742237][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.268'. [ 121.761675][ T29] audit: type=1326 audit(2000000035.809:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758b975b29 code=0x7ffc0000 [ 121.861216][ T29] audit: type=1326 audit(2000000035.819:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f758b975b29 code=0x7ffc0000 [ 121.960711][ T29] audit: type=1326 audit(2000000036.009:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758b975b29 code=0x7ffc0000 [ 123.039490][ T6075] loop2: detected capacity change from 0 to 32768 [ 123.082266][ T6075] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.290370][ T6075] XFS (loop2): Ending clean mount [ 123.307845][ T6087] block nbd3: shutting down sockets [ 123.493355][ T6109] netlink: 'syz.1.277': attribute type 41 has an invalid length. [ 123.933872][ T6132] loop0: detected capacity change from 0 to 128 [ 123.970653][ T6132] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 124.789842][ T6072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.800150][ T5092] sysv_free_block: flc_count > flc_size [ 124.807368][ T5092] sysv_free_block: flc_count > flc_size [ 124.821388][ T5092] sysv_free_block: flc_count > flc_size [ 124.828203][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 124.842011][ T5092] sysv_free_block: flc_count > flc_size [ 124.847572][ T5092] sysv_free_block: flc_count > flc_size [ 124.898942][ T5092] sysv_free_block: flc_count > flc_size [ 124.917246][ T5092] sysv_free_block: flc_count > flc_size [ 124.940753][ T5092] sysv_free_block: flc_count > flc_size [ 124.947904][ T5092] sysv_free_block: flc_count > flc_size [ 124.954202][ T5092] sysv_free_block: flc_count > flc_size [ 125.002040][ T5092] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 125.296406][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 125.386026][ T6148] netlink: 'syz.3.288': attribute type 10 has an invalid length. [ 125.515572][ T6148] batman_adv: batadv0: Adding interface: team0 [ 125.549141][ T6148] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.629335][ T5089] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.657297][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 125.657314][ T29] audit: type=1326 audit(2000000041.269:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.5.285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe641775b29 code=0x0 [ 125.692002][ T6148] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 125.711373][ T6151] netlink: 'syz.3.288': attribute type 10 has an invalid length. [ 125.720060][ T6151] netlink: 2 bytes leftover after parsing attributes in process `syz.3.288'. [ 125.737688][ T6151] team0: entered promiscuous mode [ 125.771510][ T6151] team_slave_0: entered promiscuous mode [ 125.807452][ T6151] team_slave_1: entered promiscuous mode [ 125.858794][ T6151] macvlan2: entered promiscuous mode [ 125.895581][ T6160] Zero length message leads to an empty skb [ 125.903496][ T6151] bond0: entered promiscuous mode [ 125.935106][ T6151] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.969959][ T6151] batman_adv: batadv0: Interface activated: team0 [ 125.993672][ T6151] batman_adv: batadv0: Interface deactivated: team0 [ 126.008447][ T6151] batman_adv: batadv0: Removing interface: team0 [ 126.049399][ T6151] bridge0: port 3(team0) entered blocking state [ 126.060614][ T6151] bridge0: port 3(team0) entered disabled state [ 126.080405][ T6151] team0: entered allmulticast mode [ 126.099492][ T6151] team_slave_0: entered allmulticast mode [ 126.117588][ T6151] team_slave_1: entered allmulticast mode [ 126.151428][ T6151] macvlan2: entered allmulticast mode [ 126.204385][ T6151] bond0: entered allmulticast mode [ 126.229573][ T6151] bond_slave_0: entered allmulticast mode [ 126.251423][ T6151] bond_slave_1: entered allmulticast mode [ 126.309019][ T6151] bridge0: port 3(team0) entered blocking state [ 126.315459][ T6151] bridge0: port 3(team0) entered forwarding state [ 126.370155][ T6158] block nbd4: shutting down sockets [ 126.824084][ T6176] netlink: 'syz.2.299': attribute type 41 has an invalid length. [ 126.869875][ T6182] loop5: detected capacity change from 0 to 128 [ 126.919972][ T6182] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 127.832677][ T5093] sysv_free_block: flc_count > flc_size [ 127.888595][ T5093] sysv_free_block: flc_count > flc_size [ 127.911450][ T5093] sysv_free_block: flc_count > flc_size [ 127.931326][ T5093] sysv_free_block: flc_count > flc_size [ 127.951658][ T5093] sysv_free_block: flc_count > flc_size [ 127.972678][ T5093] sysv_free_block: flc_count > flc_size [ 127.994052][ T5093] sysv_free_block: flc_count > flc_size [ 128.014296][ T5093] sysv_free_block: flc_count > flc_size [ 128.037911][ T5093] sysv_free_block: flc_count > flc_size [ 128.064417][ T5093] sysv_free_block: flc_count > flc_size [ 128.086656][ T5093] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 128.940759][ T6201] loop1: detected capacity change from 0 to 8 [ 129.518243][ T29] audit: type=1326 audit(2000000045.129:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb264b75b29 code=0x0 [ 130.469333][ T6203] loop5: detected capacity change from 0 to 32768 [ 130.589649][ T6203] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.632084][ T29] audit: type=1326 audit(2000000046.249:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86aad75b29 code=0x0 [ 130.980206][ T6243] loop0: detected capacity change from 0 to 128 [ 131.000072][ T6243] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 131.677864][ T6203] XFS (loop5): Ending clean mount [ 131.979896][ T5092] sysv_free_block: flc_count > flc_size [ 131.996288][ T5092] sysv_free_block: flc_count > flc_size [ 132.020815][ T5092] sysv_free_block: flc_count > flc_size [ 132.080133][ T5092] sysv_free_block: flc_count > flc_size [ 132.112880][ T5092] sysv_free_block: flc_count > flc_size [ 132.118461][ T5092] sysv_free_block: flc_count > flc_size [ 132.172197][ T5092] sysv_free_block: flc_count > flc_size [ 132.177762][ T5092] sysv_free_block: flc_count > flc_size [ 132.237847][ T5092] sysv_free_block: flc_count > flc_size [ 132.254690][ T6252] loop4: detected capacity change from 0 to 128 [ 132.267230][ T5092] sysv_free_block: flc_count > flc_size [ 132.273650][ T5092] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 133.761372][ T29] audit: type=1326 audit(2000000048.729:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x7ffc0000 [ 133.785826][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.811456][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.013791][ T29] audit: type=1326 audit(2000000048.729:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x7ffc0000 [ 134.451925][ T29] audit: type=1326 audit(2000000048.869:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f1e7c375b29 code=0x7ffc0000 [ 134.655305][ T29] audit: type=1326 audit(2000000048.869:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x7ffc0000 [ 134.734138][ T29] audit: type=1326 audit(2000000048.869:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x7ffc0000 [ 134.891246][ T29] audit: type=1326 audit(2000000048.899:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1e7c375b29 code=0x7ffc0000 [ 134.923851][ T29] audit: type=1326 audit(2000000048.899:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x7ffc0000 [ 134.946055][ T29] audit: type=1326 audit(2000000048.899:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x7ffc0000 [ 135.041384][ T29] audit: type=1326 audit(2000000048.899:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1e7c375b29 code=0x7ffc0000 [ 135.102281][ T6247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.214490][ T5093] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.745591][ T6299] loop1: detected capacity change from 0 to 128 [ 136.502307][ T29] audit: type=1326 audit(2000000052.099:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6298 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86aad75b29 code=0x7ffc0000 [ 139.523241][ T6353] syz.5.347 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 140.113425][ T6332] loop1: detected capacity change from 0 to 32768 [ 140.682374][ T6332] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.534384][ T6332] XFS (loop1): Ending clean mount [ 142.136776][ T5091] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.455480][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.487360][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.500750][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.521831][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.541869][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 142.559234][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.793713][ T2780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.066683][ T5159] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.317253][ T5159] usb 1-1: Using ep0 maxpacket: 16 [ 143.364571][ T5159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 143.650254][ T5159] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 143.657813][ T2780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.679258][ T5159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.725169][ T5159] usb 1-1: config 0 descriptor?? [ 144.432899][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 144.631809][ T5111] Bluetooth: hci4: command tx timeout [ 144.934265][ T2780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.081695][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.107573][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 145.107591][ T29] audit: type=1326 audit(2000000060.709:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.1.359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86aad75b29 code=0x0 [ 145.174791][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.217284][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.253826][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.280377][ T5159] hid (null): unknown global tag 0xc [ 145.310565][ T2780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.332891][ T5159] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 145.355007][ T5159] hid-generic 0003:0158:0100.0008: unexpected long global item [ 145.379346][ T5159] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 145.400735][ T6416] netlink: 'syz.4.361': attribute type 10 has an invalid length. [ 145.502309][ T5159] usb 1-1: USB disconnect, device number 5 [ 145.563320][ T6416] batman_adv: batadv0: Adding interface: team0 [ 145.569494][ T6416] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.642369][ T6416] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 145.687996][ T6414] netlink: 'syz.4.361': attribute type 10 has an invalid length. [ 145.699115][ T6414] netlink: 2 bytes leftover after parsing attributes in process `syz.4.361'. [ 145.722548][ T6414] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.729587][ T6414] batman_adv: batadv0: Interface activated: team0 [ 145.736199][ T6414] batman_adv: batadv0: Interface deactivated: team0 [ 145.752575][ T6414] batman_adv: batadv0: Removing interface: team0 [ 145.762686][ T6414] bridge0: port 3(team0) entered blocking state [ 145.772815][ T6414] bridge0: port 3(team0) entered disabled state [ 145.841254][ T6414] team0: entered allmulticast mode [ 145.921767][ T6414] team_slave_1: entered allmulticast mode [ 145.951383][ T6414] macvlan2: entered allmulticast mode [ 145.980654][ T6414] bond0: entered allmulticast mode [ 145.990821][ T6414] bond_slave_0: entered allmulticast mode [ 145.996814][ T6414] bond_slave_1: entered allmulticast mode [ 146.007132][ T6414] team0: left allmulticast mode [ 146.012519][ T6414] team_slave_1: left allmulticast mode [ 146.021950][ T6414] macvlan2: left allmulticast mode [ 146.027156][ T6414] bond0: left allmulticast mode [ 146.034806][ T6414] bond_slave_0: left allmulticast mode [ 146.040346][ T6414] bond_slave_1: left allmulticast mode [ 146.321795][ T779] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.571362][ T779] usb 2-1: Using ep0 maxpacket: 16 [ 146.618582][ T779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 146.701699][ T5111] Bluetooth: hci4: command tx timeout [ 146.750742][ T779] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 146.813005][ T2780] bridge_slave_1: left allmulticast mode [ 146.879189][ T779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.890109][ T2780] bridge_slave_1: left promiscuous mode [ 146.929019][ T2780] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.969635][ T779] usb 2-1: config 0 descriptor?? [ 147.065979][ T2780] bridge_slave_0: left allmulticast mode [ 147.109059][ T2780] bridge_slave_0: left promiscuous mode [ 147.170498][ T2780] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.242175][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.363'. [ 147.315779][ T2780] bond_slave_0: left promiscuous mode [ 147.344283][ T2780] bond_slave_1: left promiscuous mode [ 147.702794][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.723156][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.747114][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.785168][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.841419][ T6435] loop2: detected capacity change from 0 to 40427 [ 147.843963][ T779] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 147.914443][ T779] hid-generic 0003:0158:0100.0009: unexpected long global item [ 147.931120][ T6440] loop3: detected capacity change from 0 to 2048 [ 147.933427][ T6435] F2FS-fs (loop2): invalid crc value [ 147.953909][ T779] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 148.008965][ T6435] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.032476][ T6440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.045217][ T5094] usb 2-1: USB disconnect, device number 3 [ 148.080921][ T6440] ext4 filesystem being mounted at /root/syzkaller.vUYSo0/57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.134562][ T6427] loop0: detected capacity change from 0 to 32768 [ 148.323219][ T6427] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.340507][ T6435] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.454564][ T29] audit: type=1804 audit(2000000064.059:73): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.366" name="/root/syzkaller.trUqYJ/63/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 148.476569][ T6427] XFS (loop0): Ending clean mount [ 148.797109][ T5111] Bluetooth: hci4: command tx timeout [ 148.962025][ T2780] team0: Port device macvlan2 removed [ 149.072321][ T6426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.112235][ T2780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.161904][ T2780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.797519][ T2780] bond0 (unregistering): Released all slaves [ 149.823222][ T5090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.008035][ T6378] chnl_net:caif_netlink_parms(): no params data found [ 150.292036][ T6477] syz.1.373 (pid 6477) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 150.669330][ T5089] syz-executor: attempt to access beyond end of device [ 150.669330][ T5089] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.774749][ T29] audit: type=1326 audit(2000000066.379:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.4.374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x0 [ 150.813556][ T5089] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 150.819729][ T6498] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 150.862836][ T5111] Bluetooth: hci4: command tx timeout [ 151.128098][ T5092] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.192262][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.241016][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.267065][ T6378] bridge_slave_0: entered allmulticast mode [ 151.331981][ T6378] bridge_slave_0: entered promiscuous mode [ 152.821180][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.842433][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.851626][ T6378] bridge_slave_1: entered allmulticast mode [ 152.859251][ T6378] bridge_slave_1: entered promiscuous mode [ 153.137996][ T2780] hsr_slave_0: left promiscuous mode [ 153.185610][ T2780] hsr_slave_1: left promiscuous mode [ 153.201971][ T5159] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.261742][ T2780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.269261][ T2780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.474316][ T2780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.531353][ T2780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.631572][ T5159] usb 5-1: Using ep0 maxpacket: 16 [ 153.653967][ T2780] veth1_macvtap: left promiscuous mode [ 153.728751][ T5159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 153.854217][ T2780] veth0_macvtap: left promiscuous mode [ 154.004615][ T2780] veth1_vlan: left promiscuous mode [ 154.266814][ T5159] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 154.279116][ T2780] veth0_vlan: left promiscuous mode [ 154.325121][ T5159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.384713][ T5159] usb 5-1: config 0 descriptor?? [ 154.489516][ T6534] loop2: detected capacity change from 0 to 2048 [ 154.618464][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.381'. [ 155.048872][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.089022][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.122357][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.170497][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.239767][ T5159] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 155.285764][ T5159] hid-generic 0003:0158:0100.000A: unexpected long global item [ 155.314158][ T5159] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 155.364411][ T6555] loop2: detected capacity change from 0 to 128 [ 155.374114][ T6555] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 155.434602][ T5159] usb 5-1: USB disconnect, device number 2 [ 155.848637][ T6541] loop0: detected capacity change from 0 to 40427 [ 155.875337][ T6541] F2FS-fs (loop0): invalid crc value [ 155.920524][ T6541] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.109158][ T5089] sysv_free_block: flc_count > flc_size [ 156.110488][ T6541] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 156.124958][ T5089] sysv_free_block: flc_count > flc_size [ 156.141884][ T5089] sysv_free_block: flc_count > flc_size [ 156.147453][ T5089] sysv_free_block: flc_count > flc_size [ 156.158703][ T5089] sysv_free_block: flc_count > flc_size [ 156.174686][ T29] audit: type=1804 audit(2000000071.789:75): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.387" name="/root/syzkaller.Fnn4Tm/63/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 156.176626][ T5089] sysv_free_block: flc_count > flc_size [ 156.239957][ T5089] sysv_free_block: flc_count > flc_size [ 156.253262][ T5089] sysv_free_block: flc_count > flc_size [ 156.270623][ T5089] sysv_free_block: flc_count > flc_size [ 156.277790][ T5089] sysv_free_block: flc_count > flc_size [ 156.309091][ T5089] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 156.547328][ T2780] team0 (unregistering): Port device team_slave_1 removed [ 156.607520][ T6564] loop2: detected capacity change from 0 to 2048 [ 156.644341][ T29] audit: type=1326 audit(2000000072.259:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.4.392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x0 [ 156.712612][ T6564] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 156.727409][ T6564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.925315][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 157.964072][ T5092] syz-executor: attempt to access beyond end of device [ 157.964072][ T5092] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.983837][ T5092] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 158.295721][ T6378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.330164][ T6578] netlink: 'syz.2.400': attribute type 41 has an invalid length. [ 158.347045][ T6593] loop1: detected capacity change from 0 to 128 [ 158.355921][ T6593] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 158.405466][ T6378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.583118][ T6378] team0: Port device team_slave_0 added [ 158.600851][ T6378] team0: Port device team_slave_1 added [ 158.771709][ T5156] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 158.843414][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.873352][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.950616][ T29] audit: type=1326 audit(2000000074.559:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.2.408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb264b75b29 code=0x0 [ 158.981883][ T6378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.004119][ T5156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.017241][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.037398][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.069419][ T5156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.099090][ T5156] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 159.179673][ T5156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.206010][ T6378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.221536][ T5091] sysv_free_block: flc_count > flc_size [ 159.227170][ T5091] sysv_free_block: flc_count > flc_size [ 159.249430][ T5156] usb 4-1: config 0 descriptor?? [ 159.285934][ T5091] sysv_free_block: flc_count > flc_size [ 159.321360][ T5091] sysv_free_block: flc_count > flc_size [ 159.344298][ T5091] sysv_free_block: flc_count > flc_size [ 159.364564][ T5091] sysv_free_block: flc_count > flc_size [ 159.377486][ T5091] sysv_free_block: flc_count > flc_size [ 159.394972][ T5091] sysv_free_block: flc_count > flc_size [ 159.405747][ T5091] sysv_free_block: flc_count > flc_size [ 159.433711][ T5091] sysv_free_block: flc_count > flc_size [ 159.450736][ T5091] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 159.659069][ T6378] hsr_slave_0: entered promiscuous mode [ 159.717157][ T6378] hsr_slave_1: entered promiscuous mode [ 159.756340][ T6378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.779955][ T29] audit: type=1326 audit(2000000075.389:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.4.411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x0 [ 159.819063][ T6378] Cannot create hsr debugfs directory [ 159.905945][ T5156] usb 4-1: language id specifier not provided by device, defaulting to English [ 160.312650][ T5156] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71 [ 160.348336][ T5156] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 160.366259][ T5156] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 160.413745][ T5156] usb 4-1: USB disconnect, device number 2 [ 161.143395][ T6645] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 162.219972][ T6629] loop0: detected capacity change from 0 to 40427 [ 162.331475][ T5156] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.350703][ T6629] F2FS-fs (loop0): invalid crc value [ 162.386433][ T6629] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.505509][ T6657] netlink: 'syz.4.419': attribute type 41 has an invalid length. [ 162.542818][ T5156] usb 3-1: Using ep0 maxpacket: 16 [ 162.556611][ T5156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 162.607749][ T5156] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 162.628691][ T6629] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.641610][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.675068][ T5156] usb 3-1: config 0 descriptor?? [ 162.716861][ T29] audit: type=1804 audit(2000000078.329:79): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.413" name="/root/syzkaller.Fnn4Tm/66/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 162.899279][ T6653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.420'. [ 162.983223][ T6378] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.002547][ T6378] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.036283][ T6378] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.091087][ T6378] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.462594][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.516343][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.555947][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.619518][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.647990][ T29] audit: type=1326 audit(2000000079.249:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.4.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x0 [ 163.684756][ T6378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.686084][ T5156] hid (null): unknown global tag 0xc [ 163.719533][ T5156] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 163.748585][ T5156] hid-generic 0003:0158:0100.000C: unexpected long global item [ 163.753626][ T6378] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.789003][ T5156] hid-generic 0003:0158:0100.000C: probe with driver hid-generic failed with error -22 [ 163.808704][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.816041][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.901388][ T5154] usb 3-1: USB disconnect, device number 6 [ 163.944657][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.952017][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.312838][ T5092] syz-executor: attempt to access beyond end of device [ 164.312838][ T5092] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.330162][ T5092] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 164.501679][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.695488][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 164.717549][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 164.759819][ T8] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 164.783030][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.856571][ T8] usb 4-1: config 0 descriptor?? [ 164.869878][ T6378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.113656][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.433'. [ 165.644159][ T6704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.662387][ T6704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.709953][ T6704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.764044][ T6704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.850721][ T8] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 165.891556][ T8] hid-generic 0003:0158:0100.000D: unexpected long global item [ 165.933064][ T8] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 166.050357][ T25] usb 4-1: USB disconnect, device number 3 [ 166.138014][ T6378] veth0_vlan: entered promiscuous mode [ 166.189700][ T6758] xt_hashlimit: invalid rate [ 166.199761][ T6378] veth1_vlan: entered promiscuous mode [ 166.354338][ T6378] veth0_macvtap: entered promiscuous mode [ 166.408123][ T6378] veth1_macvtap: entered promiscuous mode [ 166.489267][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.529195][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.568643][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.628073][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.665829][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.698669][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.751472][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.772598][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.819408][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.895833][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.961566][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.995876][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.061514][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.092571][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.137184][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.186176][ T6378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.224521][ T6378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.267255][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.326366][ T6378] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.390331][ T6378] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.421626][ T6378] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.430411][ T6378] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.556313][ T29] audit: type=1326 audit(2000000083.169:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb264b75b29 code=0x0 [ 167.821747][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.892210][ T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.929709][ T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.042045][ T2836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.061124][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.068367][ T2836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.101904][ T25] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.151527][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.202473][ T25] usb 5-1: config 0 descriptor?? [ 168.704236][ T25] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 168.771195][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000E/input/input5 [ 169.115023][ T25] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 169.290716][ T29] audit: type=1326 audit(2000000084.899:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.1.455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86aad75b29 code=0x0 [ 169.659967][ T779] usb 5-1: USB disconnect, device number 3 [ 172.061632][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 172.282005][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 172.303610][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 172.351416][ T25] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 172.395592][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.435621][ T25] usb 6-1: config 0 descriptor?? [ 172.690772][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.472'. [ 173.354393][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.385809][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.435030][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.467429][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.513782][ T25] hid (null): unknown global tag 0xc [ 173.548424][ T25] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 173.600708][ T25] hid-generic 0003:0158:0100.000F: unexpected long global item [ 173.641520][ T25] hid-generic 0003:0158:0100.000F: probe with driver hid-generic failed with error -22 [ 173.707590][ T25] usb 6-1: USB disconnect, device number 2 [ 173.950254][ T29] audit: type=1326 audit(2000000089.489:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.1.474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86aad75b29 code=0x0 [ 175.862292][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.101373][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 176.119543][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 176.158900][ T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 176.191706][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.237368][ T8] usb 1-1: config 0 descriptor?? [ 176.487243][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 177.009711][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.060559][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.155412][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.212791][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.244643][ T8] hid (null): invalid report_size 2675 [ 177.291233][ T8] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1 [ 177.331711][ T8] hid-generic 0003:0158:0100.0010: unexpected long global item [ 177.340459][ T8] hid-generic 0003:0158:0100.0010: probe with driver hid-generic failed with error -22 [ 177.442099][ T25] usb 1-1: USB disconnect, device number 6 [ 177.930511][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'. [ 178.178301][ T6968] team0: Port device team_slave_0 removed [ 178.584437][ T6959] loop4: detected capacity change from 0 to 32768 [ 178.599942][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 178.758222][ T6959] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.875431][ T29] audit: type=1326 audit(2000000094.479:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.0.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f758b975b29 code=0x0 [ 178.917533][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 178.979980][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.043114][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.094011][ T6993] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 179.100595][ T6993] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.129000][ T6993] vhci_hcd vhci_hcd.0: Device attached [ 179.133205][ T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.160450][ T6993] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 179.196360][ T6993] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 179.196756][ T25] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 179.262810][ T6993] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 179.269473][ T6993] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 179.288877][ T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.318461][ T25] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 179.340904][ T8] vhci_hcd: vhci_device speed not set [ 179.348681][ T6993] vhci_hcd vhci_hcd.0: Device attached [ 179.370226][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.405261][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.430243][ T6959] XFS (loop4): Ending clean mount [ 179.439961][ T25] usb 6-1: Product: syz [ 179.445927][ T8] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 179.465967][ T25] usb 6-1: Manufacturer: syz [ 179.480168][ T25] usb 6-1: SerialNumber: syz [ 179.703866][ T5095] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.091721][ T25] cdc_ncm 6-1:1.0: bind() failure [ 180.215337][ T25] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 180.262925][ T25] cdc_ncm 6-1:1.1: bind() failure [ 180.384594][ T25] usb 6-1: USB disconnect, device number 3 [ 180.841903][ T7007] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 180.886100][ T7012] overlayfs: failed to resolve './file0': -2 [ 180.965982][ T7017] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 181.546578][ T7007] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(18) [ 181.553251][ T7007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.858712][ T7007] vhci_hcd vhci_hcd.0: Device attached [ 181.922742][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 181.930291][ T6997] vhci_hcd: connection closed [ 181.934460][ T7021] vhci_hcd: connection closed [ 181.959709][ T6994] vhci_hcd: connection reset by peer [ 181.987546][ T61] vhci_hcd: stop threads [ 182.011861][ T61] vhci_hcd: release socket [ 182.031713][ T61] vhci_hcd: disconnect device [ 182.044635][ T61] vhci_hcd: stop threads [ 182.069401][ T61] vhci_hcd: release socket [ 182.092180][ T61] vhci_hcd: disconnect device [ 182.111836][ T61] vhci_hcd: stop threads [ 182.129107][ T61] vhci_hcd: release socket [ 182.149753][ T61] vhci_hcd: disconnect device [ 182.803210][ T29] audit: type=1326 audit(2000000098.399:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.0.511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f758b975b29 code=0x0 [ 184.001072][ T7080] netlink: 'syz.4.522': attribute type 41 has an invalid length. [ 184.342613][ T7102] Bluetooth: MGMT ver 1.22 [ 184.623080][ T8] vhci_hcd: vhci_device speed not set [ 184.922316][ T7112] loop4: detected capacity change from 0 to 2048 [ 185.026293][ T7112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.193439][ T7112] ext4 filesystem being mounted at /root/syzkaller.4GjdYS/91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.416678][ T7112] fs-verity: sha512 using implementation "sha512-avx2" [ 185.501116][ T7112] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.528: bg 0: block 288: padding at end of block bitmap is not set [ 185.551254][ T7112] fs-verity (loop4, inode 13): Error -117 writing Merkle tree block 1 [ 185.584240][ T7112] fs-verity (loop4, inode 13): Error -117 building Merkle tree [ 185.597227][ T29] audit: type=1804 audit(2000000101.199:86): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.532" name="/root/syzkaller.fE6zVL/110/cgroup.controllers" dev="sda1" ino=1985 res=1 errno=0 [ 185.793094][ T5095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.132554][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 186.256884][ T7136] vlan1: entered allmulticast mode [ 186.271953][ T7136] veth0_vlan: entered allmulticast mode [ 186.340263][ T7147] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 52234 - 0 [ 186.421493][ T7147] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 52234 - 0 [ 186.463599][ T7147] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 52234 - 0 [ 186.481586][ T7147] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 52234 - 0 [ 186.519400][ T7147] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 43754 - 0 [ 186.586111][ T7147] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 43754 - 0 [ 186.681447][ T7147] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 43754 - 0 [ 186.700919][ T7147] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 43754 - 0 [ 186.738415][ T7147] geneve2: entered promiscuous mode [ 186.756851][ T7147] geneve2: entered allmulticast mode [ 187.118558][ T7130] vlan1: left allmulticast mode [ 187.135433][ T7130] veth0_vlan: left allmulticast mode [ 187.230677][ T7171] ip6tnl1: entered promiscuous mode [ 187.243670][ T7171] ip6tnl1: entered allmulticast mode [ 187.324592][ T2799] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 187.410519][ T7175] loop4: detected capacity change from 0 to 2048 [ 187.516628][ T7175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.558291][ T7175] ext4 filesystem being mounted at /root/syzkaller.4GjdYS/95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.713136][ T7175] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.548: bg 0: block 288: padding at end of block bitmap is not set [ 187.785432][ T7175] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -117 [ 187.925197][ T5095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.140615][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 188.578732][ T7203] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 49217 - 0 [ 188.614033][ T7203] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 49217 - 0 [ 188.661483][ T7203] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 49217 - 0 [ 188.692298][ T7203] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 49217 - 0 [ 188.746005][ T7185] infiniband syz1: set down [ 188.754076][ T5156] infiniband syz1: ib_query_port failed (-19) [ 188.768114][ T7203] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 47449 - 0 [ 188.792539][ T7185] infiniband syz1: added syzkaller0 [ 188.825636][ T7203] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 47449 - 0 [ 188.888329][ T7203] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 47449 - 0 [ 188.897761][ T7203] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 47449 - 0 [ 188.907111][ T7203] geneve2: entered promiscuous mode [ 188.912811][ T7203] geneve2: entered allmulticast mode [ 189.000678][ T7185] RDS/IB: syz1: added [ 189.010219][ T7185] smc: adding ib device syz1 with port count 1 [ 189.017264][ T7185] smc: ib device syz1 port 1 has pnetid [ 189.046777][ T7185] smc: removing ib device syz1 [ 190.118215][ T7185] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 190.569336][ T7185] syz.0.552 (7185) used greatest stack depth: 18256 bytes left [ 191.181627][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 191.205221][ T7265] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 191.211817][ T7265] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 191.246148][ T7265] vhci_hcd vhci_hcd.0: Device attached [ 191.256738][ T7273] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.309824][ T7265] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.421964][ T7273] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 191.428636][ T7273] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.441438][ T5159] vhci_hcd: vhci_device speed not set [ 191.463578][ T7273] vhci_hcd vhci_hcd.0: Device attached [ 191.523724][ T5159] usb 11-1: new full-speed USB device number 3 using vhci_hcd [ 191.701606][ T5156] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 191.933759][ T5156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.056282][ T5156] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 192.313094][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.653107][ T5156] usb 3-1: config 0 descriptor?? [ 192.981725][ T5111] Bluetooth: Unexpected start frame (len 12) [ 193.114685][ T5156] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 193.176655][ T5156] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0011/input/input6 [ 193.254951][ T29] audit: type=1326 audit(2000000108.869:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.5.591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1629975b29 code=0x0 [ 193.362258][ T5156] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 193.394512][ T7273] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.522238][ T7273] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.620844][ T7294] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(21) [ 193.627582][ T7294] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.643393][ T7294] vhci_hcd vhci_hcd.0: Device attached [ 193.675283][ T5156] usb 3-1: USB disconnect, device number 7 [ 193.831845][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.838194][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.894754][ T7299] vhci_hcd: connection closed [ 193.898183][ T12] vhci_hcd: stop threads [ 193.938683][ T7276] vhci_hcd: connection closed [ 193.941475][ T12] vhci_hcd: release socket [ 193.981435][ T7269] vhci_hcd: connection reset by peer [ 193.993692][ T12] vhci_hcd: disconnect device [ 194.038059][ T12] vhci_hcd: stop threads [ 194.049835][ T12] vhci_hcd: release socket [ 194.072012][ T12] vhci_hcd: disconnect device [ 194.089552][ T12] vhci_hcd: stop threads [ 194.101555][ T12] vhci_hcd: release socket [ 194.118261][ T12] vhci_hcd: disconnect device [ 194.951723][ T779] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 195.151463][ T779] usb 3-1: Using ep0 maxpacket: 16 [ 195.180738][ T779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 195.826697][ T779] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 195.904540][ T4485] Bluetooth: hci5: command 0x0406 tx timeout [ 195.910729][ T4485] Bluetooth: hci3: command 0x0406 tx timeout [ 195.916957][ T5101] Bluetooth: hci2: command 0x0406 tx timeout [ 195.926253][ T4485] Bluetooth: hci0: command 0x0406 tx timeout [ 195.934840][ T5101] Bluetooth: hci1: command 0x0406 tx timeout [ 195.956309][ T779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.012757][ T779] usb 3-1: config 0 descriptor?? [ 196.237466][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.599'. [ 196.563479][ T7355] veth0_vlan: entered allmulticast mode [ 196.696203][ T7357] veth0_vlan: left promiscuous mode [ 196.711807][ T5159] vhci_hcd: vhci_device speed not set [ 196.748775][ T7357] veth0_vlan: entered promiscuous mode [ 196.775617][ T7317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.892167][ T7317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.954246][ T7317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.110136][ T7317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.292112][ T779] hid (null): unknown global tag 0xc [ 197.649136][ T779] hid-generic 0003:0158:0100.0012: unknown main item tag 0x1 [ 197.780785][ T779] hid-generic 0003:0158:0100.0012: unexpected long global item [ 198.082401][ T779] hid-generic 0003:0158:0100.0012: probe with driver hid-generic failed with error -22 [ 198.109623][ T779] usb 3-1: USB disconnect, device number 8 [ 198.948787][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 199.173938][ T7404] loop2: detected capacity change from 0 to 2048 [ 199.181747][ T5154] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 199.274338][ T7404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.351558][ T7404] ext4 filesystem being mounted at /root/syzkaller.trUqYJ/108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.411408][ T5154] usb 2-1: Using ep0 maxpacket: 16 [ 199.419021][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 199.460983][ T5154] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 199.500705][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.543886][ T5089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.564410][ T5154] usb 2-1: config 0 descriptor?? [ 199.751449][ T5207] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 199.828393][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.628'. [ 199.893403][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 199.931441][ T5094] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 199.974734][ T5207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.005175][ T5207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.033195][ T5207] usb 6-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 200.061687][ T5207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.091793][ T5207] usb 6-1: config 0 descriptor?? [ 200.151676][ T5094] usb 5-1: Using ep0 maxpacket: 16 [ 200.160087][ T5094] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 200.185163][ T5094] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 200.224741][ T5094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.231607][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.263942][ T5094] usb 5-1: config 0 descriptor?? [ 200.271947][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.328612][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.349222][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.369000][ T5154] hid (null): invalid report_size 2675 [ 200.375316][ T7406] loop3: detected capacity change from 0 to 40427 [ 200.381599][ T5154] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1 [ 200.389789][ T5154] hid-generic 0003:0158:0100.0013: unexpected long global item [ 200.401742][ T5159] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 200.441594][ T5154] hid-generic 0003:0158:0100.0013: probe with driver hid-generic failed with error -22 [ 200.465303][ T7406] F2FS-fs (loop3): invalid crc value [ 200.486384][ T7418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.636'. [ 200.517678][ T7406] F2FS-fs (loop3): Found nat_bits in checkpoint [ 200.569471][ T5207] cypress 0003:04B4:ED81.0014: hidraw0: USB HID v0.00 Device [HID 04b4:ed81] on usb-dummy_hcd.5-1/input0 [ 200.585464][ T5154] usb 2-1: USB disconnect, device number 4 [ 200.641766][ T5159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.693861][ T5159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.734180][ T5159] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 200.774150][ T5159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.797962][ T5159] usb 3-1: config 0 descriptor?? [ 200.857236][ T8] usb 6-1: USB disconnect, device number 4 [ 200.874415][ T7406] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 200.954104][ T29] audit: type=1804 audit(2000000116.569:88): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.631" name="/root/syzkaller.vUYSo0/111/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 201.045357][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.085136][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.146646][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.172118][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.237751][ T5094] hid (null): unknown global tag 0xc [ 201.262628][ T5159] usbhid 3-1:0.0: can't add hid device: -71 [ 201.268684][ T5159] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 201.280589][ T5094] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 201.306028][ T5094] hid-generic 0003:0158:0100.0015: unexpected long global item [ 201.336639][ T5159] usb 3-1: USB disconnect, device number 9 [ 201.352497][ T5094] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22 [ 201.441053][ T8] usb 5-1: USB disconnect, device number 4 [ 202.811956][ T7448] netlink: 'syz.2.644': attribute type 41 has an invalid length. [ 202.816415][ T5090] syz-executor: attempt to access beyond end of device [ 202.816415][ T5090] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 202.871463][ T5090] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 203.111526][ T5094] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 203.323559][ T5094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.361514][ T5094] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 203.384056][ T5094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.443048][ T5094] usb 1-1: config 0 descriptor?? [ 203.898695][ T5094] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 203.941176][ T5094] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0016/input/input7 [ 204.113324][ T5207] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 204.225853][ T5094] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 204.334065][ T5207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.380396][ T5207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.446313][ T5207] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 204.456034][ T5094] usb 1-1: USB disconnect, device number 7 [ 204.511363][ T5207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.575934][ T5207] usb 5-1: config 0 descriptor?? [ 205.017609][ T779] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 205.040991][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.659'. [ 205.058117][ T5207] usbhid 5-1:0.0: can't add hid device: -71 [ 205.096016][ T5207] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 205.151480][ T5207] usb 5-1: USB disconnect, device number 5 [ 205.205449][ T7494] team0: entered promiscuous mode [ 205.241515][ T7494] team_slave_0: entered promiscuous mode [ 205.338334][ T7494] team_slave_1: entered promiscuous mode [ 205.436789][ T7493] team0: left promiscuous mode [ 205.471680][ T7493] team_slave_0: left promiscuous mode [ 205.493274][ T7493] team_slave_1: left promiscuous mode [ 205.508345][ T779] usb 3-1: Using ep0 maxpacket: 16 [ 205.524351][ T779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 205.536095][ T779] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 205.547256][ T779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.563234][ T779] usb 3-1: config 0 descriptor?? [ 205.776657][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.657'. [ 206.226720][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.272212][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.333519][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.361398][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.411219][ T779] hid (null): unknown global tag 0xc [ 206.425262][ T779] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 206.458042][ T779] hid-generic 0003:0158:0100.0017: unexpected long global item [ 206.497091][ T779] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22 [ 206.613946][ T779] usb 3-1: USB disconnect, device number 10 [ 207.121068][ T7527] loop3: detected capacity change from 0 to 2048 [ 207.160921][ T7527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.382198][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 207.452887][ T7537] team0: entered promiscuous mode [ 207.464793][ T7537] team_slave_0: entered promiscuous mode [ 207.481671][ T7537] team_slave_1: entered promiscuous mode [ 207.494561][ T7535] team0: left promiscuous mode [ 207.506283][ T7535] team_slave_0: left promiscuous mode [ 207.531679][ T7535] team_slave_1: left promiscuous mode [ 207.671707][ T5099] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 208.650833][ T7552] loop5: detected capacity change from 0 to 128 [ 208.753874][ T7552] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 208.801437][ T5099] usb 1-1: Using ep0 maxpacket: 16 [ 208.820795][ T5099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 208.845371][ T5099] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 208.880650][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.899498][ T5099] usb 1-1: config 0 descriptor?? [ 209.036372][ T6378] sysv_free_block: flc_count > flc_size [ 209.050079][ T6378] sysv_free_block: flc_count > flc_size [ 209.058136][ T6378] sysv_free_block: flc_count > flc_size [ 209.076463][ T6378] sysv_free_block: flc_count > flc_size [ 209.088895][ T6378] sysv_free_block: flc_count > flc_size [ 209.102358][ T6378] sysv_free_block: flc_count > flc_size [ 209.108570][ T6378] sysv_free_block: flc_count > flc_size [ 209.126069][ T6378] sysv_free_block: flc_count > flc_size [ 209.129984][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.673'. [ 209.138201][ T6378] sysv_free_block: flc_count > flc_size [ 209.147069][ T5154] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 209.164402][ T6378] sysv_free_block: flc_count > flc_size [ 209.205196][ T6378] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 209.357478][ T5154] usb 5-1: Using ep0 maxpacket: 16 [ 209.389081][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.430232][ T5154] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.480814][ T5154] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 209.534771][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.602917][ T5154] usb 5-1: config 0 descriptor?? [ 209.773126][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.809112][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.836692][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.870906][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.923706][ T5099] hid (null): unknown global tag 0xff [ 209.966900][ T5099] hid-generic 0003:0158:0100.0018: unknown main item tag 0x1 [ 209.985602][ T5099] hid-generic 0003:0158:0100.0018: unexpected long global item [ 210.032472][ T5099] hid-generic 0003:0158:0100.0018: probe with driver hid-generic failed with error -22 [ 210.047949][ T5154] microsoft 0003:045E:07DA.0019: No inputs registered, leaving [ 210.150633][ T5154] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 210.166156][ T5207] usb 1-1: USB disconnect, device number 8 [ 210.214243][ T5154] microsoft 0003:045E:07DA.0019: no inputs found [ 210.253046][ T5154] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 210.272626][ T7586] overlayfs: failed to resolve './file1': -2 [ 210.320938][ T5154] usb 5-1: USB disconnect, device number 6 [ 210.688657][ T7573] loop1: detected capacity change from 0 to 32768 [ 210.752333][ T5099] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 210.801379][ T29] audit: type=1326 audit(2000000126.409:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.5.698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1629975b29 code=0x0 [ 210.983685][ T5099] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.007668][ T5099] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.057562][ T5099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.113232][ T5099] usb 3-1: config 0 descriptor?? [ 211.370256][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 211.547875][ T5099] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 211.581407][ T53] Bluetooth: hci4: command tx timeout [ 211.597564][ T5099] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001A/input/input9 [ 211.774085][ T5099] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 211.883348][ T7626] overlayfs: failed to resolve './file1': -2 [ 212.117278][ T5099] usb 3-1: USB disconnect, device number 11 [ 212.546510][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.713'. [ 212.596022][ T7641] team0: entered promiscuous mode [ 212.603264][ T7641] team_slave_0: entered promiscuous mode [ 212.609281][ T7641] team_slave_1: entered promiscuous mode [ 212.626843][ T7641] team_slave_0: entered allmulticast mode [ 212.755178][ T7641] team0: Port device team_slave_0 removed [ 212.809448][ T7637] team0: left promiscuous mode [ 212.834390][ T7637] team_slave_1: left promiscuous mode [ 212.952581][ T5094] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 213.198695][ T5094] usb 5-1: Using ep0 maxpacket: 16 [ 213.238198][ T5094] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.303547][ T5094] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 213.338706][ T7665] overlayfs: failed to resolve './file1': -2 [ 213.358403][ T5094] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 213.403750][ T5094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.462377][ T5094] usb 5-1: config 0 descriptor?? [ 213.511408][ C1] hrtimer: interrupt took 149721 ns [ 213.940389][ T5094] microsoft 0003:045E:07DA.001B: No inputs registered, leaving [ 214.017490][ T5094] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 214.062235][ T5094] microsoft 0003:045E:07DA.001B: no inputs found [ 214.110614][ T5094] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 214.262881][ T5159] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.308189][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 214.553741][ T5159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.620344][ T5159] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.690260][ T5159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.774200][ T5159] usb 1-1: config 0 descriptor?? [ 215.286567][ T5159] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 215.441990][ T5159] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001C/input/input11 [ 215.780393][ T5159] keytouch 0003:0926:3333.001C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 215.814230][ T5099] usb 5-1: USB disconnect, device number 7 [ 215.953817][ T5159] usb 1-1: USB disconnect, device number 9 [ 217.792689][ T7707] loop1: detected capacity change from 0 to 32768 [ 217.955035][ T7707] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.006640][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 218.442750][ T7707] XFS (loop1): Ending clean mount [ 219.522766][ T7706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.975248][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.778'. [ 220.393768][ T7827] binder: 7824:7827 ioctl 400c620e 200003c0 returned -22 [ 220.482495][ T5091] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 221.162074][ T53] Bluetooth: Unexpected start frame (len 18) [ 221.281529][ T7832] netlink: 'syz.5.783': attribute type 10 has an invalid length. [ 221.746026][ T7842] loop1: detected capacity change from 0 to 128 [ 221.753951][ T7842] EXT4-fs: Ignoring removed oldalloc option [ 221.759900][ T7842] ext4: Unknown parameter 'obj_type' [ 221.803165][ T7832] batman_adv: batadv0: Adding interface: team0 [ 221.860779][ T7832] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.895025][ T7839] loop4: detected capacity change from 0 to 2048 [ 221.922705][ T7832] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 221.950418][ T7839] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 222.022916][ T7834] netlink: 'syz.5.783': attribute type 10 has an invalid length. [ 222.037557][ T7839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.086390][ T7834] netlink: 2 bytes leftover after parsing attributes in process `syz.5.783'. [ 222.121008][ T7834] team0: entered promiscuous mode [ 222.126367][ T7834] team_slave_1: entered promiscuous mode [ 222.170545][ T7834] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.198931][ T7834] batman_adv: batadv0: Interface activated: team0 [ 222.224658][ T7834] batman_adv: batadv0: Interface deactivated: team0 [ 222.271534][ T7834] batman_adv: batadv0: Removing interface: team0 [ 222.287325][ T7834] bridge0: port 3(team0) entered blocking state [ 222.297539][ T7834] bridge0: port 3(team0) entered disabled state [ 222.313917][ T7834] team0: entered allmulticast mode [ 222.329224][ T7834] team_slave_1: entered allmulticast mode [ 222.373616][ T7834] bridge0: port 3(team0) entered blocking state [ 222.380143][ T7834] bridge0: port 3(team0) entered forwarding state [ 222.489826][ T7849] ip6tnl1: entered promiscuous mode [ 222.516115][ T7849] ip6tnl1: entered allmulticast mode [ 222.633062][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 222.657075][ T7852] loop4: detected capacity change from 0 to 2048 [ 222.886248][ T7852] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.094806][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 223.334932][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.790'. [ 224.062071][ T5094] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 224.181761][ T5099] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 224.236876][ T7854] loop2: detected capacity change from 0 to 40427 [ 224.261970][ T5094] usb 1-1: Using ep0 maxpacket: 16 [ 224.268530][ T7854] F2FS-fs (loop2): invalid crc value [ 224.278683][ T5094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.305765][ T7854] F2FS-fs (loop2): Found nat_bits in checkpoint [ 224.306898][ T5094] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 224.346176][ T5094] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 224.365550][ T5094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.396082][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.414414][ T5094] usb 1-1: config 0 descriptor?? [ 224.434446][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.461637][ T5099] usb 6-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 224.481792][ T5099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.516252][ T5099] usb 6-1: config 0 descriptor?? [ 224.536823][ T7854] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 224.606542][ T29] audit: type=1804 audit(2000000140.219:90): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.789" name="/root/syzkaller.trUqYJ/137/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 224.864807][ T5094] microsoft 0003:045E:07DA.001D: No inputs registered, leaving [ 224.892116][ T5094] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 224.935666][ T5094] microsoft 0003:045E:07DA.001D: no inputs found [ 224.951401][ T5094] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 224.982186][ T5099] cypress 0003:04B4:ED81.001E: hidraw1: USB HID v0.00 Device [HID 04b4:ed81] on usb-dummy_hcd.5-1/input0 [ 225.202845][ T5099] usb 6-1: USB disconnect, device number 5 [ 225.291615][ T5207] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 225.491741][ T5207] usb 4-1: Using ep0 maxpacket: 16 [ 225.508435][ T5207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 225.513906][ T7897] netlink: 'syz.1.802': attribute type 10 has an invalid length. [ 225.540499][ T5207] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 225.555923][ T5207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.576219][ T5207] usb 4-1: config 0 descriptor?? [ 225.590800][ T7897] batman_adv: batadv0: Adding interface: team0 [ 225.638336][ T7897] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.646275][ T7899] syz.2.789: attempt to access beyond end of device [ 225.646275][ T7899] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 225.690047][ T7897] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 225.718722][ T7898] netlink: 'syz.1.802': attribute type 10 has an invalid length. [ 225.754334][ T7898] netlink: 2 bytes leftover after parsing attributes in process `syz.1.802'. [ 225.799898][ T7898] team0: entered promiscuous mode [ 225.843152][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.801'. [ 225.878552][ T7904] loop4: detected capacity change from 0 to 128 [ 225.886565][ T7904] EXT4-fs: Ignoring removed oldalloc option [ 225.892573][ T7904] ext4: Unknown parameter 'obj_type' [ 225.929699][ T7898] team_slave_1: entered promiscuous mode [ 225.943159][ T29] audit: type=1804 audit(2000000141.549:91): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.789" name="/root/syzkaller.trUqYJ/137/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 226.009265][ T7899] syz.2.789: attempt to access beyond end of device [ 226.009265][ T7899] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 226.053024][ T7898] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.063951][ T5254] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 226.067462][ T7898] batman_adv: batadv0: Interface activated: team0 [ 226.081205][ T7898] batman_adv: batadv0: Interface deactivated: team0 [ 226.088831][ T7898] batman_adv: batadv0: Removing interface: team0 [ 226.122442][ T7899] syz.2.789: attempt to access beyond end of device [ 226.122442][ T7899] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.167927][ T7898] bridge0: port 3(team0) entered blocking state [ 226.193104][ T7898] bridge0: port 3(team0) entered disabled state [ 226.210609][ T7898] team0: entered allmulticast mode [ 226.217575][ T7898] team_slave_1: entered allmulticast mode [ 226.236781][ T7898] bridge0: port 3(team0) entered blocking state [ 226.243288][ T7898] bridge0: port 3(team0) entered forwarding state [ 226.403079][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.430950][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.451225][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 226.488054][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.517246][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.566442][ T5207] hid-generic 0003:0158:0100.001F: unknown main item tag 0x1 [ 226.605355][ T5207] hid-generic 0003:0158:0100.001F: unexpected long global item [ 226.638100][ T5207] hid-generic 0003:0158:0100.001F: probe with driver hid-generic failed with error -22 [ 226.737807][ T7916] veth0_vlan: entered allmulticast mode [ 226.752663][ T5159] usb 1-1: USB disconnect, device number 10 [ 226.781644][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 226.786075][ T5094] usb 4-1: USB disconnect, device number 4 [ 227.055037][ T29] audit: type=1326 audit(2000000142.669:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.4.808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7c375b29 code=0x0 [ 227.139877][ T53] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 227.232424][ T53] CPU: 1 PID: 53 Comm: kworker/u9:0 Not tainted 6.10.0-rc5-syzkaller-00200-g5bbd9b249880 #0 [ 227.242552][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 227.252716][ T53] Workqueue: hci5 hci_rx_work [ 227.257436][ T53] Call Trace: [ 227.260728][ T53] [ 227.263673][ T53] dump_stack_lvl+0x241/0x360 [ 227.268393][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.273629][ T53] ? __pfx__printk+0x10/0x10 [ 227.278251][ T53] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.283909][ T53] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 227.289229][ T53] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 227.294645][ T53] sysfs_create_dir_ns+0x2ce/0x3a0 [ 227.299796][ T53] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 227.305464][ T53] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.311130][ T53] kobject_add_internal+0x435/0x8d0 [ 227.316374][ T53] kobject_add+0x152/0x220 [ 227.320828][ T53] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.326482][ T53] ? preempt_schedule_thunk+0x1a/0x30 [ 227.331877][ T53] ? device_add+0x3e7/0xbf0 [ 227.336417][ T53] ? __pfx_kobject_add+0x10/0x10 [ 227.341386][ T53] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.347040][ T53] ? _raw_spin_unlock+0x3e/0x50 [ 227.351947][ T53] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.357605][ T53] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.363257][ T53] ? get_device_parent+0x165/0x410 [ 227.368412][ T53] device_add+0x4e5/0xbf0 [ 227.372789][ T53] hci_conn_add_sysfs+0xe8/0x200 [ 227.377762][ T53] le_conn_complete_evt+0xc9f/0x12e0 [ 227.383110][ T53] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 227.388867][ T53] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.394522][ T53] ? __mutex_unlock_slowpath+0x21d/0x750 [ 227.400186][ T53] ? __copy_skb_header+0x437/0x5b0 [ 227.405329][ T53] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.410985][ T53] ? skb_pull_data+0x112/0x230 [ 227.415790][ T53] hci_le_enh_conn_complete_evt+0x185/0x420 [ 227.421738][ T53] hci_event_packet+0xa55/0x1540 [ 227.426711][ T53] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 227.432045][ T53] ? __pfx_hci_event_packet+0x10/0x10 [ 227.437445][ T53] ? do_raw_spin_unlock+0x13c/0x8b0 [ 227.442685][ T53] ? __entry_text_end+0xfdfc5/0x1020c9 [ 227.448163][ T53] ? hci_send_to_monitor+0xd8/0x7f0 [ 227.453400][ T53] ? kcov_remote_start+0x9e/0x7e0 [ 227.458456][ T53] hci_rx_work+0x3e8/0xca0 [ 227.462924][ T53] ? process_scheduled_works+0x945/0x1830 [ 227.468666][ T53] process_scheduled_works+0xa2e/0x1830 [ 227.474273][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 227.480287][ T53] ? assign_work+0x364/0x3d0 [ 227.484908][ T53] worker_thread+0x86d/0xd50 [ 227.489541][ T53] ? __kthread_parkme+0x169/0x1d0 [ 227.494595][ T53] ? __pfx_worker_thread+0x10/0x10 [ 227.499732][ T53] kthread+0x2f2/0x390 [ 227.503836][ T53] ? __pfx_worker_thread+0x10/0x10 [ 227.508973][ T53] ? __pfx_kthread+0x10/0x10 [ 227.513594][ T53] ret_from_fork+0x4d/0x80 [ 227.518044][ T53] ? __pfx_kthread+0x10/0x10 [ 227.522663][ T53] ret_from_fork_asm+0x1a/0x30 [ 227.527480][ T53] [ 235.421504][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 243.741585][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.701497][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 287.901499][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 301.341546][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.191278][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 332.198351][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7928/1:b..l [ 332.206652][ C0] rcu: (detected by 0, t=10502 jiffies, g=26185, q=228 ncpus=2) [ 332.214372][ C0] task:syz.5.810 state:R running task stack:27360 pid:7928 tgid:7924 ppid:6378 flags:0x00000000 [ 332.226611][ C0] Call Trace: [ 332.229902][ C0] [ 332.232843][ C0] __schedule+0x17e8/0x4a20 [ 332.237386][ C0] ? __pfx___schedule+0x10/0x10 [ 332.242261][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.247896][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.253521][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.259494][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 332.264520][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 332.269802][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 332.274912][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 332.280623][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.286258][ C0] irqentry_exit+0x5e/0x90 [ 332.290676][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.296662][ C0] RIP: 0010:array_map_get_next_key+0x33/0x110 [ 332.302732][ C0] Code: 53 49 89 d6 48 89 f5 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 ce b4 df ff 48 85 ed 74 59 48 89 e8 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 95 00 00 00 8b 6d 00 48 83 c3 24 48 89 d8 48 c1 e8 03 [ 332.322354][ C0] RSP: 0018:ffffc9000316fb98 EFLAGS: 00000212 [ 332.328415][ C0] RAX: 0000000000000004 RBX: ffff88802ab48000 RCX: 0000000000040000 [ 332.336397][ C0] RDX: ffffc900164c9000 RSI: 00000000000070d2 RDI: 00000000000070d3 [ 332.344360][ C0] RBP: ffff88801c2d59c0 R08: ffffffff81a6421e R09: 1ffffffff25f50b0 [ 332.352344][ C0] R10: dffffc0000000000 R11: ffffffff81b67550 R12: ffffffff81a641ed [ 332.360325][ C0] R13: 0000000000000a7c R14: ffff88802ad46e00 R15: dffffc0000000000 [ 332.368312][ C0] ? generic_map_lookup_batch+0x67d/0xf90 [ 332.374031][ C0] ? __pfx_array_map_get_next_key+0x10/0x10 [ 332.379924][ C0] ? generic_map_lookup_batch+0x6ae/0xf90 [ 332.385652][ C0] ? array_map_get_next_key+0x22/0x110 [ 332.391114][ C0] generic_map_lookup_batch+0x775/0xf90 [ 332.396678][ C0] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 332.402748][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.408372][ C0] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 332.414440][ C0] bpf_map_do_batch+0x2d4/0x690 [ 332.419291][ C0] __sys_bpf+0x654/0x810 [ 332.423707][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 332.428483][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.434481][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.440802][ C0] ? do_syscall_64+0x100/0x230 [ 332.445679][ C0] __x64_sys_bpf+0x7c/0x90 [ 332.450096][ C0] do_syscall_64+0xf3/0x230 [ 332.454610][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.460521][ C0] RIP: 0033:0x7f1629975b29 [ 332.464925][ C0] RSP: 002b:00007f162a78e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.473333][ C0] RAX: ffffffffffffffda RBX: 00007f1629b04070 RCX: 00007f1629975b29 [ 332.481301][ C0] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 332.489268][ C0] RBP: 00007f16299f6756 R08: 0000000000000000 R09: 0000000000000000 [ 332.497240][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.505204][ C0] R13: 000000000000006e R14: 00007f1629b04070 R15: 00007ffc7e7f78a8 [ 332.513183][ C0] [ 332.516208][ C0] rcu: rcu_preempt kthread starved for 10359 jiffies! g26185 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 332.527415][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 332.537388][ C0] rcu: RCU grace-period kthread stack dump: [ 332.543261][ C0] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 332.555041][ C0] Call Trace: [ 332.558322][ C0] [ 332.561265][ C0] __schedule+0x17e8/0x4a20 [ 332.565810][ C0] ? __pfx___schedule+0x10/0x10 [ 332.570687][ C0] ? __pfx_lock_release+0x10/0x10 [ 332.575726][ C0] ? __asan_memset+0x23/0x50 [ 332.580314][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 332.586117][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.592443][ C0] ? schedule+0x90/0x320 [ 332.596681][ C0] schedule+0x14b/0x320 [ 332.600832][ C0] schedule_timeout+0x1be/0x310 [ 332.605687][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 332.611058][ C0] ? __pfx_process_timeout+0x10/0x10 [ 332.616517][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.622163][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 332.627706][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 332.632557][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 332.637486][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 332.643561][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 332.648851][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 332.654742][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.660373][ C0] ? finish_swait+0xd4/0x1e0 [ 332.664955][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 332.669540][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 332.674821][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 332.680716][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.686336][ C0] ? __kthread_parkme+0x169/0x1d0 [ 332.691366][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 332.696574][ C0] kthread+0x2f2/0x390 [ 332.700654][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 332.705846][ C0] ? __pfx_kthread+0x10/0x10 [ 332.710429][ C0] ret_from_fork+0x4d/0x80 [ 332.714846][ C0] ? __pfx_kthread+0x10/0x10 [ 332.719429][ C0] ret_from_fork_asm+0x1a/0x30 [ 332.724204][ C0] [ 332.727213][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 332.733518][ C0] Sending NMI from CPU 0 to CPUs 1: [ 332.738717][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30