last executing test programs: 15m31.350847274s ago: executing program 32 (id=1495): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f00000001c0)="d6"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f00000025c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) 8m56.569174557s ago: executing program 33 (id=2646): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, 0xffffffffffffffff, 0x4000000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r2, 0x200000}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000024c0)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1e0101000000000000000000000000fe800000000000000000000000000a000000002020000000000000805c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000146c0000000000001400000000000000000000000006000000000000000000000008000000000000000000000008000000000000000100000000000000fcffffffffffffff03000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000100000000000000000100000000000080fdffffff020001062c00000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b00"], 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x1) r4 = socket$qrtr(0x2a, 0x2, 0x0) accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 8m47.136900381s ago: executing program 4 (id=2701): prlimit64(0x0, 0xe, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$tipc(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000100)="aaf343"}) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 8m44.561961526s ago: executing program 4 (id=2703): socket(0x2, 0x805, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@usrquota}, {@largeio}]}, 0x1, 0x97ef, &(0x7f0000012f40)="$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") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 8m40.319683713s ago: executing program 4 (id=2711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 8m39.203898306s ago: executing program 4 (id=2715): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$binfmt_misc(r0, 0x0, 0xfffffecc) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10800, &(0x7f0000001180)=ANY=[], 0x1, 0x18c, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[], 0xe0}}, 0x4004800) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x80}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xffffffff, 0x59565955, 0x3, @discrete={0x7, 0x3}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x111) acct(&(0x7f0000000040)='./file0\x00') 8m37.560441407s ago: executing program 4 (id=2720): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) syz_open_dev$video4linux(0x0, 0x92e2, 0x0) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000006ac0)=ANY=[@ANYBLOB='quota,iocharset=none,discard=0x000000000000aff9,discard=0x0000000000000006,discard,integrity,quota,iocharset=default,uid=', @ANYRESHEX=0xee01, @ANYBLOB="000000000000000002000000"], 0x1, 0x61fb, &(0x7f0000000480)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jn17nrtQGIg5O/kb2DjmBCSTXZtJ36hTTHhteGtJIRCX7Bd79os+A2vXQKNZNNAiYRRUUXbcNEWEGpzU+ELLmgFKBeoFVIraC/oDaJC5SKqAgpIlWgL2WrOeZ5nZ2ZnZ3bt8frMOZ+PlPyyM2fmnDlzZna/u/nOAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDVra+f+1Qjy7LmP/m/tmTZC5r/vWlyS37Za671FgIAAABX6pf5v5+7IV1wYBU3alnmH1/+na8uLi4uZu/d8Kdjn1tcTFdMZtnYxizLr4su/fB9jdZlgsezicZIy9cjfVa/oc/1o32uH+tz/Xif6zf2uX6iz/XLdsAym4rfx+R3tiP/zy3FLs1uzMby63Z0udXjjY0jI/F3OblGfpvFsaPZfHY8m8tm2pYvlm3ky3/91ua63pLFdY20rGtb8wj56WNH4jY0wj7e0baupfuMfvy6bPJnP33syF+fffbmbrPvbmi7v2I779je3M5PhEuKbW1kG9M+ids50rKd27o8JxvatrOR3675353b+dwqt3PD0mauq87nfCIbyf/7u/l+Gm39tV7aT9vCZT+/LcuyC0ub3bnMsnVlI9nmtktGlp6fieKIbN5H81B6cTa6puP01lUcp805u6P9OO18TcTn/9Zwu9EVtqH1afrxx8dbnvdfLF7OcRo1H/VKr5XOY3DQr5WyHIPxuPhu/qCf6HoM7giP/7HbVz4Gux47XY7B9LhbjsHt/Y7BkfEN+TanJ6GR32bpGNzZtvyGfE2NfD5ze+9jcPrsidPTCx/92N3zJw4fmzs2d3L3zp0zu/fs2bdv3/TR+eNzM8W/L3Nvl9/mbCS9BraHfRdfA6/qWLb1UF384viy99/LfR1O9HgdbulYdtCvw9HOB9dYnxfk8mO6eG28u7nTJy6OZCu8xvLn584rfx2mx93yOhxteR12/Z7S5XU4uorXYXOZ03eu7meW0ZZ/um3Dyt8LruwY3NJyDHb+PNJ5DA7655GyHIMT4bj4/p0rfy/YFrb3iam1/jyyYdkxmB5ueO9pXpJ+3p/Yl49ux+UtzSuuG8/OLcyduefRw2fPntmZhbEuXtJyrHQer5tbHlO27HgdWfPxemD+5U/c0uXyLWFfTdzd/NfEis9Vc5l77+n9XOXf3brvz7ZLd2VhDNh6789u382b+3M8yz7/rY8/9I3HPv/6FfdnM29+YvrKfxZPubTl/XdshfffmPufL9aX7urxDWOjxet3Q9o7Y23vx+1P1Wj+3tXI1/3c9Orej8fCP+v9fnxjj/fjrR3LDvr9eKzzwcX340a/33Zcmc7ncyIcJ8dner8fN5fZumutx+Roz/fj28JshP3/6pAUUi5qOXZWOm7TukZHx8LjGo1raD9Od7ctPxayWXNdT+0KPxSmrVzdcXrHbcXyG1puF63XcTrZseygj9P0u6+VjtNGv9++XZ7O53MiHBc37u59nDaXefreK3/v3BT/s+W9c7zfMTi2Yby5zWPpIMzf77PFTfEYvCc7kp3Kjmez+bXj+fHUyNc1dd/q3ivHwz/r/V65tccxeEfHsoM+BtP3sZWOvcbo8gc/AJ3P50Q4Lp68r/cx2FzmDXsH+7PrHeGStEzLz66dv19b6Xdet3Tspqt1rIyG7fzW3t6/m20uc3zfWnNm7/10V7jkui77qfP1u9JrajZbn/20NWzns/tW3k/N7Wku87n9qzyeDmRZdv7DD+S/7w1/Xzl/7ntfbfu7S7e/6Zz/8AM/eeHRf1jL9gMw/J4vxubie13LX6ZW8/d/AAAAYCjE3D8SZiL/AwAAQGXE3B//r/BE/gcAAIDKiLl/NMykCvn/D/svsvUNz84/fz5LzfzFIF6fdsODxXKx4zoTvp5cXNK8/IEvz/3X359f3eaNZFn2iwf/oOvyWx+M21WYDNt56Y3tly/z1btXte5Dj5xP623tr38h3H98PKs9DLpVcGeyLPv6DZ/J1zP5vov5fPrBQ/l86MITjzeXeW5/8XW8/TMvKZb/i1D+PXD0cNvtnwn74Udhzry1+/6It/vKxVdv2/uepfXF2zW2X58/7CffX9xv/Jyczz5eLB/380rb/41PP/WV5vKPvrL79p8f6b79T4X7/XKY//2yYvnW56D5dbzdJ8P2x/XF293zpW923f5LnyqWP/2mYrlDYcb13xG+3vGmZ+db99ejjcNtjyt7c7FcXP/M9/44vz7eX7z/zu2fOHixbX90Hh9P/2txP9Mdy8fL43qiv+tYf/N+Wo/PuP6n/uhQ237ut/5LDz3zsub9dq7/ro7lTn/4znz9S/fX/olNf/nJz3RdX9yeA397uu3xHHhXeB2H9T/5/nA8huv/51Jxf52frnDoXe3vP3H5L2w53/Z4orf8rFj/pdcey+fGiU2br3vBC6+/8Irmvsuy724s7q/f+o/91am27f/iTcX+iNfHjn7n+lcS13/mI1MnTy2cm59Ne/WxG/LPznlbsT1xe28I762dXx88dfYDc2cmZyZnsmyyuh+hd9m+FOZPinGh99KLy95B73wkPJ+3/PnXN9/+L5+Ol//bu4vLL761+L71qrDcZ8PlW8Lzt7b1L/fkrTflr+/G02ELF5d/XvCV2LbjP/etasHw+Dt/LojH++mXfiDfD83r8u8b8XV9hdv/g9nifr4W9uti+GTm7Tctra91+fjZCBcfLl7vV7z/wttcfF7/Jjzfb/9Rcf9xu+Lj/UH4OeabW9vf7+Lx8bXzI533n3+Kx4XwfpJdKK6PS8X9ffG5m7puXvwckuzCzfnXf5Lu5+Y1PcyVLHx0Yfr4/Mlzj06fnVs4O73w0Y8dPHHq3MmzB/PP8jz4wX63X3p/2py/P83O7bk3y9+tThXjKrvW23/6kSOze2dun507evjc0bOPnJ47c+zIwsKRudmF2w8fPTr3kX63n5+9f+eu/bv37po6Nj97/779+3fvn5o/eaq5GcVG9bFn5kNTJ88czG+ycP+9+3fed9+9M1MnTs3O3b93ZmbqXL/b59+bppq3/v2pM3PHD5+dPzE3tTD/sbn7d+7fs2dX308DPHH66MLk9JlzJ6fPLcydmS4ey+TZ/OLm975+t6eaFv69+Hm2U6P4IL7snXftSZ/P2vTlj694V8UiHR8g+mz4LJpvv+j0vtV8HXP/WJhJFfI/AAAAkIu5fzzMRP4HAACAyoi5f2OYifwPAAAAlRFz/0SY6X8JqEn+r1z/f+v5Va1f/1//v3V/6f/XrP//cNn6/8X7hf7/YFxp/17/P9D/1//X/9f/1/9nAMrW/4+5f1OW+fs/AAAAVFTM/ZvDTOR/AAAAqIyY+68LM5H/AQAAoDJi7n9BmElN8r/+v/6//r/+v/5/9/Xr/w8n/f/e9P/70P+fzurV/78wyO2/Bv3/Ta1f6P9TRmXr/8fc/8Iwk5rkfwAAAKiDmPuvDzOR/wEAAKAyYu6/IcxE/gcAAIDKiLl/S5hJTfK//v8V9f9T50r/v3379f/b6f+H40H/X/9/Hej/96b/34f+v/P/D1f/v43+P2VUtv5/zP0vCjOpSf4HAACAOoi5/8VhJvI/AAAAlM/o5d0s5v6XhJksy/+XuQIAAADgmou5/8asowhek7//6/87/7/+v/6//n/39a++/78h0/8vD/3/3vT/+9D/1//X/9f/Z6DK1v/Pc382kb00zKQm+R8AAADqIOb+m8JM5H8AAACojJj7/1+YifwPAAAAlRFz/9Ywk5rkf/3/yvT/f9761On/6//3Wr/+v/P/V5n+f2/6/33o/+v/6//r/zNQZev/x9x/c5hJTfI/AAAA1EHM/beEmcj/AAAAUBkx9///MBP5HwAAACoj5v5tYSY1yf/6/yXv/8fmqPP/6//r/5ey/z+h/186+v+96f/3of+v/6//r//PQJWt/x9z/8vCTGqS/wEAAKAOYu5/eZiJ/A8AAACVEXP/K8JM5H8AAACojJj7J8NMapL/19L/b1zQ/1/JVT7///gqzv/fRv9f/799/SNt69f/d/7/KtP/703/vw/9f/1//X/9fwaqbP3/mPtvDTOpSf4HAACAOoi5f3uYifwPAAAAlRFz/21hJvI/AAAAVEbM/TvCTGqS/53/fyj6/5n+v/6/8//r/+v/r47+f2/6/33o/19xf/5h/X/9f/1/WpSt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/D1n/f0L/X/9f/1//X/9f/78X/f/e9P/70P93/n/9f/1/Bqps/f+Y+18dZlKT/A8AAAB1EHP/nWEm8j8AAABURsz9d4WZyP8AAABQGTH3T4WZ1CT/D1n/3/n/9f/1//X/9f/1/3vS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v7pMBP5HwAAACoj5v6ZMJOa5H/9f/1//X/9/zX1/1+xdL/6/wX9/3LR/+9N/78P/X/9/2ve/x/T/6dSytb/j7l/Z5hJTfI/AAAA1EHM/bvCTOR/AAAAqIyY+3eHmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/z/3dev/z+c9P97G3z/Pz5E/X/9f/1/5//X/2e5q9n//+ePfCq9rlbb/4+5/74wk5rkfwAAAKiDmPv3hJnI/wAAAFAZMffvDTOR/wEAAKAyYu7fF2ZSk/yv/6//r/+v/6//3339+v/DSf+/N+f/70P/X/9/iPv/zWNL/5+yKdv5/2Pu3x9mUpP8DwAAAHUQc/9rwkzkfwAAAKiMmPt/JcxE/gcAAIDKiLn/V8NMapL/9f/1//X/9f/L3v8f1//X/18D/f/e9P/70P/X/x/i/r/z/1NGZev/x9x/f5hJTfI/AAAA1EHM/b8WZiL/AwAAQGXE3P/aMBP5HwAAACoj5v4DYSY1yf/6/+vU/48X6v/r/+v/O/+//v9Vpf/fm/5/H/r/+v/6//r/DFTZ+v8x978uzKQm+R8AAADqIOb+B8JM5H8AAACojJj7Xx9mIv8DAABAZcTc/4Ywk5rkf/1/5/+/9v3/sbZt1/9fup3+f0H/X/9/LfT/e9P/70P/X/9f/1//n4EqW/8/5v43hpnUJP8DAABAHcTc/6YwE/kfAAAAKiPm/jeHmcj/AAAAUBkx978lzKQm+V//X///2vf/nf9f/7+g/6//Pwj6/73p//eh/6//r/+v/89Ala3/H3P/r4eZ1CT/AwAAQB3E3P9gmIn8DwAAAJURc/9bw0zkfwAAAKiMmPvfFmZSk/yv/6//r/+v/6//3339+v/DSf+/tyHr///y+nC5/n9B/7/c27/W/v9ox9dXpf//w5X6/4sbO2+v/8/VULb+f8z9bw8zqUn+BwAAgDqIuf8dYSbyPwAAAFRGzP3vDDOR/wEAAKAyYu7/jTCTmuR//f/mdiy1l/X/9f/zC/T/9f/1/4eW/n9vQ9b/d/7/Dvr/5d5+5//X/2e5svX/Y+5/V5hJTfI/AAAA1EHM/Q+Fmcj/AAAAUBkx9z8cZiL/AwAAQGXE3P/uMJOa5H/9f+f/1//X/9f/775+/f/hpP/fm/5/H/r/+v9l6///R2X7/9f/72Df3iipsvX/Y+5/JMykJvkfAAAA6iDm/veEmcj/AAAAUBkx9/9mmIn8DwAAAJURc/97w0xqkv/1/4el/z+p/7/G/v94uEz/X/9f/79e9P970//vQ/9f/79s/X/n/2fIla3/H3P/+8JMVp//J1a9JAAAAHBNxNz/W2EmNfn7PwAAANRBzP2/HWYi/wMAAEBlxNz/O2EmNcn/+v/D0v93/v/M+f/1/zsej/6//n8369f/j+88+v/6//r/kf6//r/+P53K1v+Puf93w0xqkv8BAACgDmLuf3+YifwPAAAAQ6Hb/5PdKeb+g2Em8j8AAABURsz9h8JMapL/9f/1//X/S9r//7Pt//T977zj0E79f/1//f81Wdfz/zdf/M7/r/+v/5/o/+v/6//TqWz9/5j7D4eZLAW/tznBPwAAAAy3mPt/L8ykJn//BwAAgDqIuf9ImIn8DwAAAJURc/9smElN8r/+v/6//n9J+/9DfP7/uD+Gqf8/tXGI+v/xTVf/v6t17f+/Z6knrv+/1v7/eNdLO/v/Df3/Nvr/a97+b2dZpv+v/881VLb+f8z9c2EmNcn/AAAAUAch948cLebSFfI/AAAAVEbM/cfCTOR/AAAAqIyY+z8QZlKT/K//r/9f0f5/fpH+f/f1O/+/8/9Xmf5/b+Xp/3fn/P/6/8O8/fr/+v8sV7b+f8z982EmNcn/AAAAUAcx938wzET+BwAAgMqIuf9DYSbyPwAAAFRGzP3Hw0xqkv/1//X/K9r/d/7/HuvX/9f/rzL9/970//vQ/9f/1//X/2egytb/j7n/RJhJTfI/APwfe/fRpFld9nH8bp6mmCnqqXLnwoXufQdilaz1Bbhg40KrLBegYk4M5og5B8xiwACKmDAnMKEYQFEx54AZtcaCua5rprtPn7t75u6+z/n/P5/Fc0HDcG6emgJ/NF8OAEAPcvdfGLfY/wAAANCM3P0XxS32PwAAADQjd//D45ZO9r/+X//fbP9/P/3/bs/X/+v/W6b/H6f/X0L/r//X/+v/Wamp9f+5+x8Rt3Sy/wEAAKAHufsfGbfY/wAAANCM3P0Xxy32PwAAADQjd/+j4pZO9v+2/n9j0Wf/nxmv/r+l/t/7/3d9vv5f/9+yw+3/L73zr3z6f/2//j/o//X/+n+2m1r/n7v/0XFLJ/sfAAAAepC7/zFxy372/3Wr/lQAAADAKuXuf2zc4vv/AAAA0Izc/Y+LWzrZ/97/7/3/+n/9v/5/+Pn6/3ny/v9xPfX/F9907oW3X3OPa/fzfP2//l//r/9ntabW/+fuf3zc0sn+BwAAgB7k7n9C3GL/AwAAQDNy9z8xbrH/AQAAYIaODn41d/+T4pZO9r/+X/+v/4/+/4j+X/+v/2+B/n9cT/3/6Txf/6//1//r/1mtqfX/ufufHLd0sv8BAACgB7n7nxK32P8AAAAwXUP/IvaI3P2XxC32PwAAADQjd/+xuKWT/a//P/j+/7/6/3n0/97/r//X/zdB/z9O/7+E/l//r//X/7NSU+v/c/dfGrd0sv8BAACgB7n7nxq32P8AAADQjNz9T4tb7H8AAABoRu7+p8ctnex//b/3/+v/9f/6/+Hn6//nSf8/Tv+/hP7/TPv5s/X/+n/9P6faZ/9/x8hftlfS/+fuf0bc0sn+BwAAgB7k7n9m3GL/AwAAQDNy9z8rbrH/AQAAoBm5+58dt3Sy//X/+n/9v/7/tPv/nT/17qL/H6b/Pxz6/3GT6f83Nge/rP+fff/v/f/6f/0/W0zt/f+5+58Tt3Sy/wEAAKAHufufG7eM7P99/8N8AAAAYK1y9z8vbvH9fwAAAJi9rM5y9z8/bulk/+v/9f/6f/2/9/8PP3+s/7/2lM+n/58W/f+4yfT/u9D/6//n/Pn1//p/dppa/5+7/wVxSyf7HwAAAHqQu/+yuMX+BwAAgGbk7n9h3GL/AwAAQDNy978obulk/w/3/yd/u/5/b/T/Wz+//n/458eq+v/8I+r/R/v/873/v0/6/3H6/yX0//p//f9u/f/RZT9e/8+QqfX/uftfHLd0sv8BAACgB7n7XxK32P8AAADQjNz9L41b7H8AAABoRu7+l8Utnex/7//X/+v/59f/e///Cet8///i0Pv/Tf3/Hun/x+n/l9D/6//1/+Pv/x/5rwDo/xkytf4/d//L45ZO9j8AAAD0IHf/K+IW+x8AAADm4dR/d2D7v1Aacve/Mm6x/wEAAKAZuftfFbe0s/9H39Wp/9f/6//1//r/4edPq//3/v+90v+P0/8vof8/iH5+s7H+//LdfvwU+v9LDrr/H6H/Z8iW/v+6k19fV/+fu//VcUs7+x8AAAC6l7v/NXGL/Q8AAADNyN3/2rjF/gcAAIBm5O5/XdzSyf4/8P5/5L8+oP/X/+v/9f/6f/3/qun/x+n/l9D/e/+/9//r/1mpLf3/KdbV/+fuf33c0sn+BwAAgB7k7n9D3GL/AwAAQDNy918et9j/AAAA0Izc/W+MWzrZ/97/r//X/+v/9f/Dz9f/z9MZ9fdn6f+L/l//r//X/+v/WYGp9f+5+98Ut3Sy/wEAAKAHufvfHLfY/wAAANCM3P1viVvsfwAAAGhG7v63xi2d7H/9/8H2//l1/b/+f6H/1//r/w9Ft+//3xj6O9FOu/T/Nzz02AO2fkX/r//X/+v/9f/s0d1Gftsk+v/jJ//XZe7+t8Utnex/AAAA6EHu/rfHLfY/AAAANCN3/zviFvsfAAAAmpG7/4q4ZZ/7f6x5mDL9v/f/6//1//r/4efr/+ep2/5/j7z/fwn9v/5f/6//Z6Um0f+f8uu5+98Zt/j+PwAAADQjd/+74hb7HwAAAJqRu//dcYv9DwAAAM3I3f+euKWT/a//1//r//X/+v/h5+v/50n/P07/v8Sc+v8rzqD/3xz+8rr7+TO17s+v/9f/s9PU+v/c/VfGLZ3sfwAAAOhB7v73xi32PwAAADQjd//74hb7HwAAAJqRu//9cUsn+1//r//X/+v/9f/Dz9f/z5P+f5z+f7FYXDXyAYb6/+PnTLP/9/7/yX1+/b/+n52m1v/n7v9A3NLJ/gcAAIAe5O6/Km6x/wEAAKAZufuvjlvsfwAAAGhG7v4Pxi2d7H/9v/5f/6//1/8PP1//P0/6/3H6/yXm9P5//f/kPr/+X//PTlPr/3P3fyhu6WT/AwAAQA9y918Tt9j/AAAA0Izc/R+OW+x/AAAAaEbu/mvjlk72v/5f/6//1//r/4efr/+fp4Pr/xf6f/2//n8J/b/+X//PdlPr/3P3fyRu6WT/AwAAQA9y9380brH/AQAAoBm5+z8Wt9j/AAAA0Izc/R+PWzrZ//p//b/+X/+v/x9+vv5/nrz/f5z+fwn9v/5f/6//Z6WG+/9L1tb/5+7/RNzSyf4HAACAHuTuvy5usf8BAACgGbn7Pxm32P8AAADQjNz9n4pbOtn/+n/9/9b+f7HQ/+v/9f8nHEL/f2Sh/185/f84/f8S+v82+/+zFg31/0d3/fH6f6Zoau//z93/6bilk/0PAAAAPcjd/5m4xf4HAACAZuTu/2zcYv8DAABAM3L3fy5u6WT/6//1/97/r//X/w8/3/v/50n/P07/v4T+v83+3/v/9f+szdT6/9z9n49bOtn/AAAA0IPc/V+IW+x/AAAAaEbu/i/GLfY/AAAANCN3/5filk72v/5f/6//1//r/4efr/+fJ/3/OP3/Evp//b/+X//PSk2t/8/d/+W4pZP9DwAAAD3I3X993GL/AwAAQDNy998Qt9j/AAAA0Izc/V+JWzrZ//p//b/+f579/xH9v/5f/z9oKv3/eefd/0b9v/5f/6//1//r/3s3tf4/d/9X45ZO9j8AAAD0IHf/1+IW+x8AAACakbv/63GL/Q8AAADNyN3/jbilk/2/s/8/e3GiUD1hqP+PRk3/fwr9/9bPr/8f/vnh/f/6f/3/wZtK/+/9/6f3+fX/+v85f/599f/32vnj9f+0aGr9f+7+G+OWTvY/AAAA9CB3/zfjFvsfAAAAmpG7/1txi/0PAAAAzcjdf1Pc0sn+9/5//b/+X/+v/x9+vv5/nvT/4/T/S+j/9f/e/3/Rg/9P/8/qTK3/z93/7bilk/0PAAAAPcjd/524xf4HAACAZuTu/27cYv8DAABAM3L3fy9u6WT/6//1//p//b/+f/j5+v950v+P0/+X7X9qJ/TT/x8Z+uK6+/kzte7P30z/7/3/rNDU+v/c/TfHLZ3sfwAAAOhB7v5b4hb7HwAAAJqRu//7cYv9DwAAAM3I3f+DuKWT/a//1/+33/8/SP+/7fn6f/1/y/T/+Xf0Yfr/Jfrp/wetu5+f++fX/+v/2Wlq/X/u/lvjlk72PwAAAPQgd/8P4xb7HwAAAJqRu/9HcYv9DwAAAM3I3f/juKWT/a//76v/31j02P97/7/+X//fE/3/OP3/Evp//b/+X//PSk2t/8/df9vGZpf7HwAAAObqgfd+2K17/X1vu+v/Hln8JG45f3F8j9/GBgAAACbuzt2/sblY/PSuX/P9fwAAAGhR7v6fxS2d7H/9f1/9f5/v/9f/6//1/z3R/4/T/y+h/9f/6//1/6zU1Pr/3P0/j1tOGX6b+/6zBAAAAKYkd/8v4pZOvv8PAAAAPcjd/8u4Zcf+958DBAAAgLnK3f+ruKWT7//r/yfe/y8OqP+P30//f4L+X/8/9Hz9/zzp/8edYf9/fEP/r/8fof/X/+v/2W5q/X/u/l/HLZ3sfwAAAGjUln+ikLv/N3GL/Q8AAADNyN3/27jF/gcAAIBm5O7/XdzSyf7X/x96/5+p+gG+//9o/ZL3/3fe/192ZPD5+n/9f8v0/+O8/38J/X8r/f85+n/9P9Mwtf4/d//v45ZO9j8AAAD0IHf/H+IW+x8AAACakbv/j3GL/Q8AAADNyN3/p7ilk/2v/5/4+/9Pq//fw/v/u+r/r/n/xaLT/n+X57fT/9/93GPXX/CQq6/U/3PSYfb/+XNB/7/3/n9zyWP1//r/OX9+/b/+n51W3/9v/TvJfvv/3P1/jls62f8AAADQg9z9t8ct9j8AAAA0I3f/X+IW+x8AAACakbv/r3FLJ/tf/6//n0r/n/+/XsP7/4+ddv9/dLFYrKX/z6a49/7f+//1/zt5//+4dff/y+j/9f9z/vz6f/0/O+2//7/vLTffZ/APFf3/1i/ut//P3f+3uKWT/Q8AAAA9yN3/97gl9//Gvv/RPQAAADAxufv/Ebf4/j8AAAA0I3f/P+OWTva//l//P5X+P62h//f+/0Pp/y+oOLXP/v+e9Uv6/4Ol/x+n/19C/6//1//r/1mp1b//f+sX99v/5+7/V9zSyf4HAACAHuTuvyNusf8BAACgGbn7/x232P8AAADQjNz9/4lbOtn/+v9W+/8s4vX/+v+p9P/e/+/9/4dD/z9O/7+E/l//r//X/7NSU+v/c/f/LwAA///fzXiA") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) 8m35.99988863s ago: executing program 4 (id=2729): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r1) socket(0x2b, 0x80801, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) 8m20.775926048s ago: executing program 34 (id=2729): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r1) socket(0x2b, 0x80801, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) 8m10.920855905s ago: executing program 2 (id=2801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1ff) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffff4}}, {@resgid}], [{@uid_gt}]}, 0x1, 0x553, &(0x7f0000000800)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 8m8.259757842s ago: executing program 2 (id=2809): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x2d44, &(0x7f00000027c0)={0x0, 0x2f77, 0x2000, 0x3, 0xa9}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = syz_open_procfs(0x0, &(0x7f0000002700)='net/stat\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r8, 0x0) mmap(&(0x7f0000b33000/0x4000)=nil, 0x4000, 0x2, 0xc3072, 0xffffffffffffffff, 0x273f5000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a3100000000400000001b0a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a3100"], 0xd4}}, 0x0) 8m7.217531119s ago: executing program 2 (id=2813): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0x40, 0x2a4, &(0x7f0000000480)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8m5.736117404s ago: executing program 2 (id=2815): r0 = inotify_init1(0x80000) inotify_add_watch(r0, 0x0, 0x2000008) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd2) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000080)={0x0, "638d0bd930b49e408170e8b600003d0000671bbbab000000000000000700", 0x0, 0x0, 0x0, 0x2, 0x5}) 7m57.688455051s ago: executing program 2 (id=2833): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0) dup2(r2, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000840)="94", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x10000005, @local, 0x4}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) 7m55.857661809s ago: executing program 2 (id=2837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r8, 0x40004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) close(r3) 7m40.289600319s ago: executing program 35 (id=2837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r8, 0x40004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) close(r3) 5m29.112130768s ago: executing program 8 (id=3307): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) 5m23.768045255s ago: executing program 8 (id=3319): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x209, 0x3, 0x4, 0x8}, &(0x7f00000000c0)=0x14) 5m23.252131547s ago: executing program 8 (id=3326): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000bc0)=0x10004, 0x4) 5m19.452136471s ago: executing program 8 (id=3333): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, 0xffffffffffffffff, 0x4000000) r1 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000024c0)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1e0101000000000000000000000000fe800000000000000000000000000a000000002020000000000000805c000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 5m17.998542959s ago: executing program 8 (id=3337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @random='?\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x70, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x10, 0x7, 0x0, 0x67, {[@mptcp=@remove_addr={0x1e, 0x47, 0x2, 0x0, "88391a84ed441d2486917d411bdd858b3945eb7b104049c25287cdf6564600b902e2e7d74b3c7698494b8b50fa2b86bdbac1834970ce2e08de17956124ca5ee57d308aea"}]}}}}}}}, 0x0) 5m16.328127374s ago: executing program 8 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000000000000000050000", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) 5m0.902837385s ago: executing program 36 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000000000000000050000", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) 4m58.547914864s ago: executing program 3 (id=3384): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xb, 0x904) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000180)=0x4) 4m56.367012588s ago: executing program 3 (id=3390): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close(r0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000080)={[{@sysvgroups}, {@usrjquota}]}, 0x1, 0x47b, &(0x7f0000000a40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) 4m55.698952202s ago: executing program 3 (id=3394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4m55.001276437s ago: executing program 3 (id=3396): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'macvlan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x9, r2, 0x1, 0xfc, 0x6, @random="ac66aae6d429"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000130001002dbd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="ecff0041096e000008000a00", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 4m53.500947225s ago: executing program 3 (id=3400): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fanotify_init(0x0, 0x1000) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(r1, 0x71, 0x101a, r2, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r4, r5, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) 4m52.072058082s ago: executing program 3 (id=3401): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2008098, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1d3, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x800000a1e) 4m36.079038416s ago: executing program 37 (id=3401): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2008098, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1d3, &(0x7f00000004c0)="$eJzs3L1qFFEUB/CbGE2MJKQStPGijTaDprZQJIK4oKgrfoAwIRNddt0NO1PsisXWVj6HiDZ2gvgCeQu7IIRUqRzRzYeJIY26G8zv18yZ+TNwDgOX4Q7MyuXXz+uLebKYFmF0YiSMXgm9sD4SZsJo2NQLF94/WHt19+Gjm1crlbnxjcsxxukznx6/fHv2c3Hi/ofpj+NheebJyursl+WTy6dWvt17VstjLY/NVhHTON9qFel8I4sLtbyexHi7kaV5FmvNPGvvyBcbraWlbkybC1OTS+0sz2Pa7MZ61o1FKxbtbkyfprVmTJIkTk0G/kT1zXpZhtWyLMvxXijLctgNMWCe/+G2uajfiXEihK+9TrVT7R/7+fUblbmL8aeZ7bvWOp3qka38Uj+PO/OjYXIjn90zPxbOn+vnP7Jrtyq78uNh4d+PDwAAAAAA/6Ukbvl9f39k43TPvF/98n1g1/79WDg9NqAhAAAAgH3l3Rf1tNHI2getGAsHog2FYiDFu3Ag2tguhr0yAQAAf9v2S/+wOwEAAAAAAAAAAAAAAAAAAIDDaxC/Exv2jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+/keAAD///dtbTI=") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x800000a1e) 26.051967413s ago: executing program 1 (id=4059): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, 0x0}}], 0x1, 0x3404c8d4) 25.276643254s ago: executing program 1 (id=4060): add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c003920", @ANYRES64], 0xf) 24.319782264s ago: executing program 1 (id=4066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x159140, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd9d, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4, 0x8, 0x10000, 0x4, 0xe, 0x0, 0xb, 0x7, 0xa, 0x1, 0x1, 0x8, 0x0, 0x801, 0xfffffffe, 0x0, 0xfffffffe, 0x5, 0x6, 0xfffff801, 0x89, 0x8, 0x1ff, 0x0, 0xb, 0xe6b, 0x68a1589b, 0x8, 0x0, 0x2, 0x2]}) 21.568925361s ago: executing program 1 (id=4070): setrlimit(0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(0x0, 0x1, 0x2003) ioctl$I2C_FUNCS(r0, 0x705, 0x0) timer_create(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r6, r4}) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 19.712069144s ago: executing program 6 (id=4075): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x8, 0x0, &(0x7f0000000240)=[@release], 0x0, 0x0, 0x0}) 19.509836016s ago: executing program 1 (id=4077): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x200048a, &(0x7f00000004c0)=ANY=[], 0x1, 0x22d, &(0x7f0000000d00)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) io_setup(0x400, &(0x7f0000000340)) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000008c0)="ff48f3be52163d63412ba8704e9effff07cdf5d9680dff6b2a37ed1585edbb7d0bab85fa38e4505c8d1898f1974240b8aa35200cd7d75f2785bb5f9a4fd05c9d260987827c02f42afcc78cd6676ad26414ecb102e405366d5681e41cd755c666efc5d44b", 0x64}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}, {&(0x7f0000000b80)="626329bc66379ddc9a43619fa468329273eaab66afd5cb2a8436f982f67bcdb92461b4f8d6f209f1b175f2a7160b3d6d7ff0eb6e756307950c02e106911b3aa57639cb3ad9fb22f673d5cde126e391959e249385546b94957c2b702bba4a99156148e4d8d298493b2173e705f11dc50d7d4b27cf925ed7ff64763e9e23fccb388026b8b7a889d1cfe59a73", 0x8b}, {&(0x7f00000006c0)="6902dc0db1299a0098f829a7f27a04f25c38b2177b00000000a386fd35a6f57b7594c71e845b936763c5327dcb91e873f1b6cc9443a3a58526c034555e1f6263948e55b6fa26bdcf210ebc016a8c8575ec593574274b62acf60b091e93efcdb51ed2774833ee48b5e6f1243cb197f374c48cce68de0f32d460ce735da0ceee440bc35938f856dbc8cb88dc2512e0d6aacaf2fae06686392d8b3c72c824974f9593709a1da333dc9724000000000000", 0xaf}, {&(0x7f0000000a40)="adce0efe2b33ce5d08f182cbe289b8b79e452f5fa3bee698ee420fb879c1d69b12139c6dfe382f415cd4c544bfce095638fec98669e461b7cdb08519bb99b73f1aba7b5d97065b508c11cdcdb0a3a9d7e0916d694890537758072439f97303385157c69e6f463e66d0e01a4581f526e81986081d1bfa4ecce1db16", 0x7b}, {0x0}], 0x7, &(0x7f0000000380)}], 0x1, 0x40810) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 18.842726563s ago: executing program 1 (id=4079): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000240)) unshare(0x42000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") 16.652837246s ago: executing program 0 (id=4081): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket(0x2c, 0x3, 0x3c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r2, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 15.698745273s ago: executing program 7 (id=4084): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x5, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 15.379620617s ago: executing program 7 (id=4085): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0x4c7, 0x4004085, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0xfffffffd, 0x4) 14.535969279s ago: executing program 7 (id=4086): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000040000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014240000b5020000140000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], 0x0, 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 14.276272342s ago: executing program 7 (id=4087): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, 0x0}}], 0x1, 0x3404c8d4) 14.067202504s ago: executing program 6 (id=4089): setrlimit(0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(0x0, 0x1, 0x2003) ioctl$I2C_FUNCS(r0, 0x705, 0x0) timer_create(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r6, r4}) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 13.884007395s ago: executing program 7 (id=4090): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x7) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000fc0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000180)={r6}) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r8, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r7, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 11.230601965s ago: executing program 7 (id=4093): ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x6, 0x0, 0x80, 0x9, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="bbb891a57b9a7bb1d8cb60b24f000000006167c04807f35551eeeb262cb0f003b4f353fcc3c08ddf2a0c3b2b1f8b9fa4ece5fe86195d5795332b65a6baeb06d8004d06b98cf649ae47f770522b75493af1dc239cede58ee580077404fffdfe47348caf86127b95510a790eab26e6f71285be39f9085ba8ea3824d2d36507524e8824bcdb6ad7aa4fd9aab379a40ccab4997569b90b3f6ed770f079728d5828eac13acad4b7ade2bbef64ab6430934206c171f6afedeac76b642b2ef1255043411b548fa7bddacafe6bd0a4ee4e45175819862ec7f84fd332c244ce6d5b05544e268bb21fb8484a46b90e08597141959373cd0ef64a9555da3e700102d44cbcc1eb23c0624d515cb4a1ff1b1291c8d257d3ffc5b36a7d9a917efca72cf96678e6a5254ab9b3b4e320faaee04383612e2fc6057f06ec2a088de6954eecac7915cec010d33dbef3154162c8532c7bbdc9bd8be0af86360cc9b9a8ea1669e2c38cd7a058b773cf5ecb672ffb7f9e703729c1e3b839b5ecc1906c271db81d4fe1c81be1484791cb451c09dbcbb46a9f551800eb91c41c28915ca6e15b8e68f8a23b2a7285a330f2438d2a4d", 0x402, r3}, 0x38) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) prctl$PR_SET_NAME(0xf, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r6, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r3}, 0x38) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000002c0)=""/133, &(0x7f0000000240)=0x85) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) unshare(0x66000080) 11.210240044s ago: executing program 6 (id=4094): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0xffffffffffffff7b, 0x5}, 0x51, [0x7, 0x33d, 0xe, 0x2, 0x9, 0x8, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x800000000049, 0x1, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x18, &(0x7f0000000140)={0x40, 0x22, 0x3b, {0x3b, 0xb, "1eb9b1d7080b5c858c9a943606cd17b21b8d6cd7b7d6631781c8942b96076d29fa148419fc9cc80b6abcfa1800000000000000f200000078b3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000580)={0x0, 0xc, 0x1, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, r7, 0x1, 0x72bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xab, 0x7fff, 0xaa2, 0x7, 0x6, 0x9, 0x3]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa6ac85f37b9e2e44}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x98, r7, 0x50d, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x69, 0xc5, "d187d67e3de95cdeb4c511a01a6691965b960caffff98376d1d87f927c76b562876607370180e7e7dfc7bb8c468d9099fd5c2d9fd918b8f06d7ba52420a32792af7de199459fcc573615b06afafbd49d59279a85671e8d3d09b1c744248b2b5dc4b17acf39"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xd036}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) 11.205965588s ago: executing program 0 (id=4095): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000200)={0x3, @bcast}) 9.814793442s ago: executing program 0 (id=4097): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x5, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 9.188166788s ago: executing program 9 (id=4098): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0ae5f6f5cf3eb31254454e92eacdab64eb048b144e4fcc16afe59e7d7dad7696df64aa223d14d69bbe8ee2f76e1d4a32477a7cf108fea86a7e085c1575f683857cff342574109f74cf05e3f63f328f46735ba0578d84b4978ce545621b1666ca7da451d40e961a037822eebcbba9bf9e92af7281442efcaa8e0d3ecd6111d8fc1c742d0e7efe8e51a1c5e6ea04fec02a986cba677d9dc642d110df6f55c786c73f7ce4ebf9415bdb2680d0ff4597006d96e3c164114a4effae84380e492822c002b2e96f160a0784fd0ebe448eddaa801921576287f61a15be332a94eea951c0826874d105173a6b3f2a6e420ed5ef00b1f699b74c524a1859cb7d6dfb7257b6f0b92e17ce21237da0ec892735601b29693dce455876447f76df303a8cb34bd9c9241da9904c1c17d416753c71aeed9cc07d26b4a438df4e302cf120cda73c04d5a1b7295f1cb7ff88084211adde5fdf991f97cb522b56c561ad1119a4675fbf566b77660dfd457467652d23c739cc9ba93bbd5b464c46e46187ce71d7aab533e670c861b227454d7c21f9f16000eee0c1772a152c26acd2744c5553ace622369f15d5354a3b5ac4bb9261a766830d351fa931558dee7ff30768b2e29025c3b115179ed6a12ea76a23db3626bc033f85a43c3c3f50b75b89a418277837ba571189e708f4aaaacc19537e7aa156b7058c200e8f9be1da8a63c7e878f3e733060a1cb24a2a09ea76413efdc4e0b1027a09c6830b4ca5ccd4695e2e0bb1610a21b0cc66012aab283b6c5dfbd20aef8d7ad04e4c618a065a588d05e3f780126eee290cf0f94fb4a2c5a8cb97f60d9e50301a4f01f3787ab052ef8782d6ef0f92385ab59015670a054dab1ab0400be74fdc4ac3d18fb5b5da13e55a05e29ad14dd0abf0435dea601ce80573548f3c8f21ecfcbe5361d1505a91c355d8477fe7e3866be005acae25cbab7bd8684294963c3c95924f7d62ca0ed2d7aa01048cbdcd4d7ae9717d4feb97e1e825f6156e9c5fc456509798d2f5adc9356752a8974894ff5bf9d14aab3ddf18fd4f9af23c66f7e4ef7e345e769260fd9d2a22ddd078dd7e44f904ea78dd3db5b0f4a8d7ce9ae7909cedde165b7458da24d576fc0e18d3c27cccaff21146ad51c1681c629a8f0b8a4ae213c88910c54de9af7890b0a4414e0d38c31d76a130b587b764260655f17f901f96b835a1fecb1f7438f5e18ff60720d37d19b1a9ae3e03dc10aa1c4f2abb918883d56ddd4e74b48a4aeadccf2329956ed18b2001d1e1e80bdf325449beda911916f802234f5b182264754cd3bb26b2ae658cc0ee185a19cba7f9e54e47c32f8b87d0fed97c911d28f971e70be5fb830109a57b600f734a4cc734cbb67a58e6a696ccb39c328c537fe467fd194183aad728f95b0a4afb4557615408a83785c0d313e666d1dab18d49a4feaf12993e73f5537998a", 0x4c7, 0x4004085, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0xfffffffd, 0x4) 8.686911499s ago: executing program 9 (id=4099): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000040000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014240000b5020000140000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], 0x0, 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 8.351911349s ago: executing program 6 (id=4100): syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_notify(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x199c, &(0x7f0000000100)={0x0, 0xd3df, 0x100, 0x2, 0x3bc, 0x0, r0}, 0x0, &(0x7f00000003c0)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x42, [0x9, 0x0, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x5, 0xfffffffb, 0x2004, 0x1, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x6, 0x3, 0x1, 0x36, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0x1, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x6, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0xfffffffe, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x8001, 0x7, 0x9, 0x800e8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x1, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x7fff, 0x4, 0x3, 0x6d7e, 0x4, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xf5c1, 0x3fd, 0x3, 0xcac, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x760, 0xb, 0x402, 0x800, 0x8320fb05, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x8, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x744, 0x4, 0x12, 0x4, 0x10, 0x7fff, 0x2, 0xfffffff8, 0x401, 0xf, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000640)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0xfffd, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x2000018c, &(0x7f0000000180)=ANY=[@ANYBLOB="cbd0321b72e40b075403b0e6902a18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) fstatfs(r7, &(0x7f0000000200)=""/117) 8.209517048s ago: executing program 9 (id=4102): gettid() pipe2(&(0x7f0000000100), 0x4080) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e65746465", @ANYBLOB="34001680300001802c000c80140001"], 0x70}}, 0x24040800) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002ec0)=""/261, 0x105, 0x6) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0xf8, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r6}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x0, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x0, 0x1}, @fd}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x8, 0x1, 0x18}, @flat=@binder={0x73622a85, 0x1101}, @flat=@binder={0x73622a85, 0x2, 0x3}}, &(0x7f0000000700)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 8.159140722s ago: executing program 0 (id=4103): madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) open(&(0x7f00000002c0)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r2, r0, 0x80000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000000)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 6.261671234s ago: executing program 6 (id=4104): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) signalfd(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x800) unshare(0x42000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") 5.416129206s ago: executing program 0 (id=4105): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 5.037493876s ago: executing program 9 (id=4106): setrlimit(0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(0x0, 0x1, 0x2003) ioctl$I2C_FUNCS(r0, 0x705, 0x0) timer_create(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r6, r4}) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 4.627124945s ago: executing program 5 (id=4107): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x20002, 0xffffffffffffffff, 0x1}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x7) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000fc0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000180)={r7}) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r9, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 2.015034462s ago: executing program 38 (id=4079): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000240)) unshare(0x42000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") 1.749608941s ago: executing program 9 (id=4109): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1.724606107s ago: executing program 5 (id=4110): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1.510437353s ago: executing program 5 (id=4111): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0x4c7, 0x4004085, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0xfffffffd, 0x4) 1.403604074s ago: executing program 5 (id=4112): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r1, &(0x7f0000000700)=""/115, 0x73, 0x5) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x8, 0x0, 0xb9}, &(0x7f0000000340)=0x0, &(0x7f0000002300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) close(r1) 1.333926414s ago: executing program 0 (id=4113): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={r4, 0x2, 0x6, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1001, 0x0, 0xa, 0x410, 0x5}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="602c37f7", @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf25150000000c00018008000100", @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x41004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000828bd7000fddbdf250d0000003400018008000100", @ANYRES32=r5, @ANYBLOB="1400020070696d726567300000000000000000001400020076659033edc3c94f6daa68e502000000305f746f5f62617461647600"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x80) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r12, {0xffff}, {0xc, 0xfff3}}}, 0x24}}, 0x0) 949.417204ms ago: executing program 5 (id=4114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000040000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014240000b5020000140000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], 0x0, 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 559.96673ms ago: executing program 5 (id=4115): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x5, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 532.654028ms ago: executing program 6 (id=4116): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 9 (id=4117): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) shutdown(r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): _1) entered blocking state [ 1235.121739][T17322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.162397][T17031] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1235.246725][T17031] usb 6-1: config 0 interface 2 has no altsetting 0 [ 1235.282812][T17322] bridge_slave_1: entered allmulticast mode [ 1235.471246][T17031] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1235.529453][T17031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.562145][T17031] usb 6-1: Product: syz [ 1235.564006][T17322] bridge_slave_1: entered promiscuous mode [ 1235.572273][T17031] usb 6-1: Manufacturer: syz [ 1235.572295][T17031] usb 6-1: SerialNumber: syz [ 1235.583435][T17031] usb 6-1: config 0 descriptor?? [ 1235.834040][T17031] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1235.909311][T17470] overlayfs: failed to resolve './file0': -2 [ 1236.273982][T17031] usb 6-1: USB disconnect, device number 9 [ 1236.916319][T17322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.967206][T17322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.348194][ T1008] bridge_slave_1: left allmulticast mode [ 1237.362145][ T1008] bridge_slave_1: left promiscuous mode [ 1237.397541][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.647775][ T1008] bridge_slave_0: left allmulticast mode [ 1237.684621][ T1008] bridge_slave_0: left promiscuous mode [ 1237.690451][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.899758][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.955817][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.980258][ T1008] bond0 (unregistering): Released all slaves [ 1240.070857][T17322] team0: Port device team_slave_0 added [ 1240.105101][T17322] team0: Port device team_slave_1 added [ 1240.344915][T17509] loop7: detected capacity change from 0 to 8 [ 1242.746551][T17322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.760407][T17521] overlayfs: failed to resolve './file0': -2 [ 1242.794179][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.867697][T17322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.910262][T17322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.936472][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.178438][T17322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.190799][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.202310][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.203569][T17029] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1243.386841][T17029] usb 8-1: Using ep0 maxpacket: 16 [ 1243.420547][T17029] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.469998][T17029] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.532241][T17029] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1243.602945][T17029] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1243.612010][T17029] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.833785][T17029] usb 8-1: config 0 descriptor?? [ 1243.972304][T17034] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1243.983936][T17322] hsr_slave_0: entered promiscuous mode [ 1244.053287][T17322] hsr_slave_1: entered promiscuous mode [ 1244.122479][T17322] debugfs: 'hsr0' already exists in 'hsr' [ 1244.128781][T17322] Cannot create hsr debugfs directory [ 1244.144716][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1244.167663][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1244.181017][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1244.194088][T17034] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.204518][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1244.215722][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1244.232113][T17034] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1244.247597][T17034] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1244.261607][T17034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.269713][T17034] usb 6-1: Product: syz [ 1244.274027][T17034] usb 6-1: Manufacturer: syz [ 1244.278630][T17034] usb 6-1: SerialNumber: syz [ 1244.384341][T17029] hid_parser_main: 86 callbacks suppressed [ 1244.384367][T17029] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 1244.560615][T17538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.642169][T17029] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 1244.660895][T17029] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 1244.673157][T17029] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 1244.680126][T17029] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 1244.692915][T17538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.812568][T17029] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 1244.832195][T17034] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1244.897448][T17034] usb 6-1: USB disconnect, device number 10 [ 1245.009926][T17029] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 1245.040304][ T1008] hsr_slave_0: left promiscuous mode [ 1245.054761][T17029] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 1245.127769][ T1008] hsr_slave_1: left promiscuous mode [ 1245.141672][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.198978][T17030] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1245.213095][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.276985][T17029] usb 8-1: USB disconnect, device number 4 [ 1245.283849][T17030] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1245.296519][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.305348][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.332430][T17034] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1245.347525][T17030] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1245.399959][T17030] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1245.573265][T17034] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 1245.581461][T17034] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.634968][T17034] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1245.690060][ T1008] veth1_macvtap: left promiscuous mode [ 1245.705591][T17034] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 1245.745685][ T1008] veth0_macvtap: left promiscuous mode [ 1245.752487][T17034] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1245.770194][ T1008] veth1_vlan: left promiscuous mode [ 1245.780951][ T1008] veth0_vlan: left promiscuous mode [ 1245.787667][T17034] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 39696, setting to 64 [ 1245.810370][T17034] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1245.829895][T17034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.855649][T17538] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1246.066323][T17538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.083212][T17538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.140182][T17034] usb 6-1: usb_control_msg returned -71 [ 1246.156900][T17034] usbtmc 6-1:16.0: can't read capabilities [ 1246.194822][T17034] usb 6-1: USB disconnect, device number 11 [ 1246.299577][ T52] Bluetooth: hci4: command tx timeout [ 1246.325398][T16226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1246.337651][T16226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1246.356926][T16226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1246.365081][T16226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1246.388272][T16226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1248.015045][T17572] overlayfs: failed to resolve './file0': -2 [ 1248.372573][ T52] Bluetooth: hci4: command tx timeout [ 1248.453378][ T52] Bluetooth: hci5: command tx timeout [ 1249.062788][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1249.136571][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1250.455507][ T52] Bluetooth: hci4: command tx timeout [ 1250.534251][ T52] Bluetooth: hci5: command tx timeout [ 1250.534417][T17029] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1250.583286][T17034] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1250.725368][T17029] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.736535][T17034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.741679][T17029] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1250.765986][T17034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.775963][T17029] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.786923][T17029] usb 8-1: config 0 descriptor?? [ 1250.799550][T17034] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1250.811233][T17034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.840033][T17029] pwc: Askey VC010 type 2 USB webcam detected. [ 1250.844524][T17034] usb 6-1: config 0 descriptor?? [ 1251.236702][T17029] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1251.272632][T17034] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1251.274839][T17029] pwc: recv_control_msg error -32 req 02 val 2700 [ 1251.301127][T17610] overlayfs: failed to resolve './file0': -2 [ 1251.309116][T17034] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1251.317706][T17029] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1251.326650][T17034] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1251.343375][T17029] pwc: recv_control_msg error -32 req 04 val 1000 [ 1251.350883][T17029] pwc: recv_control_msg error -32 req 04 val 1300 [ 1251.362214][T17034] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1251.390293][T17034] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1251.401281][T17034] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1251.419671][T17034] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1251.473177][T17034] logitech 0003:046D:C294.0024: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.5-1/input0 [ 1251.517061][T17034] logitech 0003:046D:C294.0024: no inputs found [ 1251.557807][T17034] usb 6-1: USB disconnect, device number 12 [ 1251.678218][T17616] fido_id[17616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1251.777776][T17029] pwc: recv_control_msg error -71 req 02 val 2100 [ 1251.787525][T17029] pwc: recv_control_msg error -71 req 04 val 1500 [ 1251.794938][T17029] pwc: recv_control_msg error -71 req 02 val 2500 [ 1251.831118][T17029] pwc: recv_control_msg error -71 req 02 val 2400 [ 1251.838534][T17029] pwc: recv_control_msg error -71 req 02 val 2600 [ 1251.855572][ T1008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.868446][T17029] pwc: recv_control_msg error -71 req 02 val 2900 [ 1251.876528][T17029] pwc: recv_control_msg error -71 req 02 val 2800 [ 1251.897084][T17029] pwc: recv_control_msg error -71 req 04 val 1100 [ 1251.904490][T17029] pwc: recv_control_msg error -71 req 04 val 1200 [ 1251.934651][T17029] pwc: Registered as video103. [ 1251.944459][T17029] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input11 [ 1251.995910][T17029] usb 8-1: USB disconnect, device number 5 [ 1252.314746][ T1008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.460438][T17634] loop7: detected capacity change from 0 to 512 [ 1252.466956][T17034] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1252.524222][T17634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.536953][ T52] Bluetooth: hci4: command tx timeout [ 1252.612333][ T52] Bluetooth: hci5: command tx timeout [ 1252.654334][T17034] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.672219][T17034] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1252.681509][T17034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.696831][ T1008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.713480][T17034] usb 6-1: config 0 descriptor?? [ 1252.735667][T17034] pwc: Askey VC010 type 2 USB webcam detected. [ 1252.788551][T14722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.044344][ T1008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.154361][T17034] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1253.188457][T17034] pwc: recv_control_msg error -32 req 02 val 2700 [ 1253.203325][T17034] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1253.221109][T17034] pwc: recv_control_msg error -32 req 04 val 1000 [ 1253.235410][T17034] pwc: recv_control_msg error -32 req 04 val 1300 [ 1253.246243][T17034] pwc: recv_control_msg error -32 req 04 val 1400 [ 1253.263072][T17034] pwc: recv_control_msg error -32 req 02 val 2000 [ 1253.503088][T17034] pwc: recv_control_msg error -32 req 02 val 2100 [ 1253.522177][T17034] pwc: recv_control_msg error -32 req 04 val 1500 [ 1253.532430][T17034] pwc: recv_control_msg error -32 req 02 val 2500 [ 1253.546870][T17034] pwc: recv_control_msg error -32 req 02 val 2400 [ 1253.590530][T17034] pwc: recv_control_msg error -32 req 02 val 2600 [ 1254.166066][T17034] pwc: recv_control_msg error -32 req 02 val 2900 [ 1254.193262][T17034] pwc: recv_control_msg error -32 req 02 val 2800 [ 1254.383864][T17322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1254.405461][T17034] pwc: recv_control_msg error -71 req 04 val 1200 [ 1254.475045][T17034] pwc: Registered as video103. [ 1254.475965][T17322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1254.522674][T17034] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 1254.583520][T17034] usb 6-1: USB disconnect, device number 13 [ 1254.693286][ T52] Bluetooth: hci5: command tx timeout [ 1254.796004][T17322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1254.836672][T17559] chnl_net:caif_netlink_parms(): no params data found [ 1254.945822][T17322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1255.123406][T17674] overlayfs: failed to resolve './file0': -2 [ 1255.370323][T17031] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 1255.560311][T17559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.568443][T17559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.589598][T17559] bridge_slave_0: entered allmulticast mode [ 1255.609062][T17559] bridge_slave_0: entered promiscuous mode [ 1255.617405][T17031] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1256.279785][T17693] fido_id[17693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1256.414345][T17559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.421489][T17559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.488649][T17559] bridge_slave_1: entered allmulticast mode [ 1256.497323][T17559] bridge_slave_1: entered promiscuous mode [ 1257.847495][T17705] loop7: detected capacity change from 0 to 128 [ 1257.856992][T17705] zonefs: Unexpected value for 'explicit-open' [ 1258.097763][T17559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.576294][T17542] chnl_net:caif_netlink_parms(): no params data found [ 1258.732428][T17559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.971695][T17559] team0: Port device team_slave_0 added [ 1259.054952][T17733] overlayfs: failed to resolve './file0': -2 [ 1259.092700][T17559] team0: Port device team_slave_1 added [ 1259.317096][T17542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.338881][T17542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.356520][T17542] bridge_slave_0: entered allmulticast mode [ 1259.375163][T17542] bridge_slave_0: entered promiscuous mode [ 1259.393686][T17542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.408277][T17542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.423147][T17542] bridge_slave_1: entered allmulticast mode [ 1259.451473][T17542] bridge_slave_1: entered promiscuous mode [ 1259.736800][T17559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.752299][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.809347][T17559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.869674][T17542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.888027][T17559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.914273][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.940699][T17559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.076687][ T1008] vxlan0: left allmulticast mode [ 1260.088352][ T1008] vxlan0: left promiscuous mode [ 1260.098909][ T1008] bridge0: port 3(vxlan0) entered disabled state [ 1260.121269][ T1008] bridge_slave_1: left allmulticast mode [ 1260.127106][ T1008] bridge_slave_1: left promiscuous mode [ 1260.133442][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.144058][ T1008] bridge_slave_0: left allmulticast mode [ 1260.151503][ T1008] bridge_slave_0: left promiscuous mode [ 1260.158181][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.575991][ T1008] bridge_slave_1: left allmulticast mode [ 1260.645489][ T1008] bridge_slave_1: left promiscuous mode [ 1260.782356][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.815562][ T1008] bridge_slave_0: left allmulticast mode [ 1260.832175][ T1008] bridge_slave_0: left promiscuous mode [ 1260.852970][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.914535][ T1008] bond_slave_0: left promiscuous mode [ 1260.941331][ T1008] bond_slave_1: left promiscuous mode [ 1263.397585][ T1008] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 1263.460570][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.479994][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.500869][ T1008] bond0 (unregistering): Released all slaves [ 1263.687808][ T1008] bond1 (unregistering): Released all slaves [ 1263.939196][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.955888][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.982228][ T5811] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1263.991880][ T1008] bond0 (unregistering): Released all slaves [ 1264.054998][T17542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.162719][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 1264.181100][ T5811] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1264.211726][ T5811] usb 1-1: config 0 has no interface number 0 [ 1264.230126][ T5811] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1264.251423][ T5811] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1264.285695][ T5811] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1264.311724][ T5811] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1264.933523][T17542] team0: Port device team_slave_0 added [ 1264.946667][ T5811] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1264.956439][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.969283][ T5811] usb 1-1: config 0 descriptor?? [ 1264.999424][ T5811] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1265.254335][T17030] usb 1-1: USB disconnect, device number 7 [ 1265.268659][T17559] hsr_slave_0: entered promiscuous mode [ 1265.280102][T17559] hsr_slave_1: entered promiscuous mode [ 1265.286849][T17559] debugfs: 'hsr0' already exists in 'hsr' [ 1265.293014][T17559] Cannot create hsr debugfs directory [ 1265.305485][T17542] team0: Port device team_slave_1 added [ 1265.336327][T17030] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1265.390833][T17787] loop7: detected capacity change from 0 to 16 [ 1265.428546][T17787] erofs: Unknown parameter '&' [ 1265.435234][T17542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.461474][T17542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.488430][T17542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.601595][T17542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.621907][T17542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.649567][T17542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.677135][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3489'. [ 1265.686349][T17792] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3489'. [ 1267.688284][T17542] hsr_slave_0: entered promiscuous mode [ 1267.741188][T17542] hsr_slave_1: entered promiscuous mode [ 1268.136656][T17542] debugfs: 'hsr0' already exists in 'hsr' [ 1268.143399][T17542] Cannot create hsr debugfs directory [ 1268.313458][T17807] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input13 [ 1269.136802][T17814] loop7: detected capacity change from 0 to 128 [ 1269.150800][T17814] zonefs: Unexpected value for 'explicit-open' [ 1270.760139][ T1008] hsr_slave_0: left promiscuous mode [ 1270.771288][ T1008] hsr_slave_1: left promiscuous mode [ 1270.779250][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.787031][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.803857][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.817826][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.858204][ T1008] hsr_slave_0: left promiscuous mode [ 1270.871916][ T1008] hsr_slave_1: left promiscuous mode [ 1270.879864][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.899556][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.945424][ T1008] veth1_macvtap: left promiscuous mode [ 1270.951115][ T1008] veth0_macvtap: left promiscuous mode [ 1270.969477][ T1008] veth1_vlan: left promiscuous mode [ 1270.979732][ T1008] veth0_vlan: left promiscuous mode [ 1271.092570][T17829] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3500'. [ 1272.517020][T17837] loop7: detected capacity change from 0 to 1024 [ 1272.593611][T17837] hfsplus: Unknown parameter 'node#ompose' [ 1272.789631][T17841] overlayfs: failed to resolve './file1': -2 [ 1273.329809][T17847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14 [ 1275.132909][T17872] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1275.150537][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1275.841556][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1276.243169][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3519'. [ 1276.257398][T17884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3519'. [ 1276.895840][T17888] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input15 [ 1277.732530][ T5811] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1277.904828][ T5811] usb 6-1: Using ep0 maxpacket: 16 [ 1277.912800][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1277.921021][ T5811] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.931457][ T5811] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1277.942982][ T5811] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1277.952237][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.960250][ T5811] usb 6-1: Product: syz [ 1277.960861][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1277.965315][ T5811] usb 6-1: Manufacturer: syz [ 1277.983775][ T5811] usb 6-1: SerialNumber: syz [ 1278.186854][T17322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.207873][ T5811] usb 6-1: 0:2 : does not exist [ 1278.248469][ T5811] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1278.358912][ T5811] usb 6-1: USB disconnect, device number 14 [ 1278.479664][T17475] udevd[17475]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1278.671762][T17322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1279.688425][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1279.688447][ T30] audit: type=1326 audit(1764549799.968:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.0.3530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f731f78f749 code=0x0 [ 1279.717152][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.757558][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.764830][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.775547][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.782733][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.915328][T17920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.922885][T17920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.023994][T17920] bond_slave_0: left promiscuous mode [ 1280.029478][T17920] bond_slave_1: left promiscuous mode [ 1280.459682][T17933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input16 [ 1280.973703][T17920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1281.031521][T17920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1281.201232][T17920] macvlan0: left allmulticast mode [ 1281.732195][T11706] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.800217][T11706] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.826416][T16226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1281.840089][T16226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1281.861806][T11706] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.861845][T16226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1281.891654][T16226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1281.903411][T16226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1282.207086][T11706] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.291862][T17971] loop7: detected capacity change from 0 to 16 [ 1283.312028][T17971] erofs: Unknown parameter '&' [ 1283.701886][T10318] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1283.902895][T10318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.002974][T17981] loop7: detected capacity change from 0 to 128 [ 1284.017551][T17981] zonefs: Unexpected value for 'explicit-open' [ 1284.053472][T16226] Bluetooth: hci2: command tx timeout [ 1284.261929][T10318] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1284.413572][T10318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.447891][T10318] usb 1-1: config 0 descriptor?? [ 1284.477819][T10318] pwc: Askey VC010 type 2 USB webcam detected. [ 1284.653917][T17985] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1284.883776][T10318] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1284.894882][T10318] pwc: recv_control_msg error -32 req 02 val 2700 [ 1284.903198][T10318] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1284.918668][T10318] pwc: recv_control_msg error -32 req 04 val 1000 [ 1284.935637][T10318] pwc: recv_control_msg error -32 req 04 val 1300 [ 1284.956852][T10318] pwc: recv_control_msg error -32 req 04 val 1400 [ 1284.973575][T10318] pwc: recv_control_msg error -32 req 02 val 2000 [ 1284.981324][T10318] pwc: recv_control_msg error -32 req 02 val 2100 [ 1284.993560][T10318] pwc: recv_control_msg error -32 req 04 val 1500 [ 1285.000865][T10318] pwc: recv_control_msg error -32 req 02 val 2500 [ 1285.014176][T10318] pwc: recv_control_msg error -32 req 02 val 2400 [ 1285.036923][T10318] pwc: recv_control_msg error -32 req 02 val 2600 [ 1285.048320][T10318] pwc: recv_control_msg error -32 req 02 val 2900 [ 1285.086979][T11938] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1285.164388][T17559] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1285.186830][T17559] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1285.212614][T17559] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1285.229708][T17559] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1285.273356][T11938] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1285.292189][T11938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.300244][T11938] usb 6-1: Product: syz [ 1285.306307][T11938] usb 6-1: Manufacturer: syz [ 1285.310987][T11938] usb 6-1: SerialNumber: syz [ 1285.327739][T11938] usb 6-1: config 0 descriptor?? [ 1285.467179][T10318] pwc: recv_control_msg error -71 req 04 val 1200 [ 1285.493715][T10318] pwc: Registered as video103. [ 1285.530069][T10318] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 1285.596126][T10318] usb 1-1: USB disconnect, device number 8 [ 1285.719303][T17542] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1285.778676][T17542] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1285.803394][T17542] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1285.873607][T17542] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1285.957557][ T1008] bridge_slave_1: left allmulticast mode [ 1285.964380][ T1008] bridge_slave_1: left promiscuous mode [ 1285.970304][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.991064][ T1008] bridge_slave_0: left allmulticast mode [ 1286.002325][ T1008] bridge_slave_0: left promiscuous mode [ 1286.008209][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.053507][T11938] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1286.063663][T11938] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1286.083728][T11938] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1286.103976][T11938] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1286.132612][T16226] Bluetooth: hci2: command tx timeout [ 1286.155524][T11938] usb 6-1: USB disconnect, device number 15 [ 1287.892385][T11938] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1288.078135][T11938] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 1288.116452][T11938] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1288.160013][T11938] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1288.208326][T11938] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1288.212182][T16226] Bluetooth: hci2: command tx timeout [ 1288.231599][T11938] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1288.270192][T11938] usb 8-1: Product: syz [ 1288.295348][T11938] usb 8-1: Manufacturer: syz [ 1288.329127][T11938] usb 8-1: SerialNumber: syz [ 1288.439129][T11938] usb 8-1: config 0 descriptor?? [ 1288.543466][T11938] hub 8-1:0.0: bad descriptor, ignoring hub [ 1288.598692][T11938] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1288.683298][T11938] usb 8-1: selecting invalid altsetting 0 [ 1288.897832][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.941900][T11938] usb 8-1: USB disconnect, device number 6 [ 1288.953268][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.966359][ T1008] bond0 (unregistering): Released all slaves [ 1289.051297][T17454] udevd[17454]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.070144][T17955] chnl_net:caif_netlink_parms(): no params data found [ 1289.427457][T17542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.613960][T17542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.722872][T17941] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1289.783619][T17559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.872208][T17029] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1289.946124][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.953348][ T6457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.972825][T17941] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1290.012692][T17941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.070157][T17941] usb 1-1: Product: syz [ 1290.092137][T17941] usb 1-1: Manufacturer: syz [ 1290.096767][T17941] usb 1-1: SerialNumber: syz [ 1290.114483][T17029] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.138350][T17029] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1290.146538][T17941] usb 1-1: config 0 descriptor?? [ 1290.156431][T17029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.172947][T17029] usb 6-1: config 0 descriptor?? [ 1290.184465][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.191606][ T6457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.202226][T17029] pwc: Askey VC010 type 2 USB webcam detected. [ 1290.292818][T16226] Bluetooth: hci2: command tx timeout [ 1290.299033][ T1008] hsr_slave_0: left promiscuous mode [ 1290.309870][ T1008] hsr_slave_1: left promiscuous mode [ 1290.322834][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.332341][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.606066][T17029] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1290.615591][T17029] pwc: recv_control_msg error -32 req 02 val 2700 [ 1290.630220][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1290.638321][T17029] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1290.645565][T17029] pwc: recv_control_msg error -32 req 04 val 1000 [ 1290.668801][T17029] pwc: recv_control_msg error -32 req 04 val 1300 [ 1290.682572][T17029] pwc: recv_control_msg error -32 req 04 val 1400 [ 1290.701095][T17029] pwc: recv_control_msg error -32 req 02 val 2000 [ 1290.712882][T17029] pwc: recv_control_msg error -32 req 02 val 2100 [ 1290.722539][T17029] pwc: recv_control_msg error -32 req 04 val 1500 [ 1290.729570][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1290.738441][T17029] pwc: recv_control_msg error -32 req 02 val 2500 [ 1290.748335][T17029] pwc: recv_control_msg error -32 req 02 val 2400 [ 1290.775650][T17029] pwc: recv_control_msg error -32 req 02 val 2600 [ 1290.793193][T17029] pwc: recv_control_msg error -32 req 02 val 2900 [ 1290.879241][T17941] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1290.899138][T17941] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1290.960607][T17941] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1290.977429][T17941] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1291.037615][T17941] usb 1-1: USB disconnect, device number 9 [ 1291.219640][T17029] pwc: recv_control_msg error -71 req 04 val 1200 [ 1291.896051][T17029] pwc: Registered as video103. [ 1291.910418][T17029] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 1292.049962][T17029] usb 6-1: USB disconnect, device number 16 [ 1293.326228][T18104] fuse: Bad value for 'fd' [ 1293.652456][T17955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.659642][T17955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.693454][T17955] bridge_slave_0: entered allmulticast mode [ 1293.717516][T17955] bridge_slave_0: entered promiscuous mode [ 1293.731770][T17955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.739723][T17955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.749708][T17955] bridge_slave_1: entered allmulticast mode [ 1293.761441][T17955] bridge_slave_1: entered promiscuous mode [ 1294.119508][T17559] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.287165][T17955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.410922][T17955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.450574][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.457805][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.602205][T13653] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1295.273307][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.280479][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.331650][T17542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1295.344360][T17542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1295.440534][T13653] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1295.700010][T13653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.894685][T13653] usb 6-1: Product: syz [ 1295.949750][T13653] usb 6-1: Manufacturer: syz [ 1295.999177][T13653] usb 6-1: SerialNumber: syz [ 1296.284414][T13653] usb 6-1: config 0 descriptor?? [ 1296.387711][T18144] fuse: Bad value for 'fd' [ 1296.399839][T17955] team0: Port device team_slave_0 added [ 1296.484596][T17955] team0: Port device team_slave_1 added [ 1296.596291][T17955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.608349][T17955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.638558][T17955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.659140][T17955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.666700][T17955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.693093][T17955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.771300][ T5965] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1296.904153][T17955] hsr_slave_0: entered promiscuous mode [ 1296.910951][T17955] hsr_slave_1: entered promiscuous mode [ 1296.918084][T17955] debugfs: 'hsr0' already exists in 'hsr' [ 1296.927064][T17955] Cannot create hsr debugfs directory [ 1296.962150][ T5965] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.000745][ T5965] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.013116][ T5965] usb 8-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1297.032345][ T5965] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.043186][T13653] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1297.060732][ T5965] usb 8-1: config 0 descriptor?? [ 1297.073115][T13653] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1297.105745][T13653] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1297.125028][T13653] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1297.155600][T13653] usb 6-1: USB disconnect, device number 17 [ 1297.169198][T17542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.500977][ T5965] logitech 0003:046D:C294.0026: unknown main item tag 0x0 [ 1297.540421][ T5965] logitech 0003:046D:C294.0026: unknown main item tag 0x0 [ 1297.554919][ T5965] logitech 0003:046D:C294.0026: unknown main item tag 0x0 [ 1297.566629][ T5965] logitech 0003:046D:C294.0026: unknown main item tag 0x0 [ 1297.577621][ T5965] logitech 0003:046D:C294.0026: unknown main item tag 0x0 [ 1297.592124][ T5965] logitech 0003:046D:C294.0026: unknown main item tag 0x0 [ 1297.602961][ T5965] logitech 0003:046D:C294.0026: unknown main item tag 0x0 [ 1297.617013][T17559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.655901][ T5965] logitech 0003:046D:C294.0026: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.7-1/input0 [ 1297.685646][ T5965] logitech 0003:046D:C294.0026: no inputs found [ 1297.731540][ T5965] usb 8-1: USB disconnect, device number 7 [ 1298.368986][T16226] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 1298.531669][T18177] fido_id[18177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1299.028062][T17542] veth0_vlan: entered promiscuous mode [ 1301.766718][T17542] veth1_vlan: entered promiscuous mode [ 1302.059532][T17542] veth0_macvtap: entered promiscuous mode [ 1302.084124][T17941] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1302.138399][T17955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1302.180957][T17559] veth0_vlan: entered promiscuous mode [ 1302.207002][T17542] veth1_macvtap: entered promiscuous mode [ 1302.248700][T17955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1302.259868][T17941] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1302.284203][T17941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.312145][T17941] usb 6-1: Product: syz [ 1302.316326][T17941] usb 6-1: Manufacturer: syz [ 1302.321584][T17955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1302.341792][T17941] usb 6-1: SerialNumber: syz [ 1302.364859][T17955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1302.374774][T17941] usb 6-1: config 0 descriptor?? [ 1302.464668][T17559] veth1_vlan: entered promiscuous mode [ 1303.384719][T17941] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1303.391899][T17941] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1303.433131][T17941] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1303.441685][T17941] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1303.497729][T17941] usb 6-1: USB disconnect, device number 18 [ 1303.619185][T17559] veth0_macvtap: entered promiscuous mode [ 1303.667157][T17559] veth1_macvtap: entered promiscuous mode [ 1303.728381][T17955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.787387][T17559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1303.838886][T17559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.919921][T17955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.954632][ T3480] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.117977][T18234] loop7: detected capacity change from 0 to 128 [ 1304.146829][T18234] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1304.179282][T18234] hpfs: filesystem error: improperly stopped [ 1304.197299][T18234] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1304.210167][ T3480] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.212851][T18234] hpfs: You really don't want any checks? You are crazy... [ 1304.247716][T18234] hpfs: hpfs_map_sector(): read error [ 1304.248168][ T3480] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.262140][T18234] hpfs: code page support is disabled [ 1304.269083][T18234] hpfs: hpfs_map_4sectors(): unaligned read [ 1304.291709][ T3480] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.301017][T18234] hpfs: hpfs_map_4sectors(): unaligned read [ 1304.353213][T18234] hpfs: filesystem error: unable to find root dir [ 1304.680912][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.688070][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.816086][T18244] hpfs: hpfs_map_4sectors(): unaligned read [ 1304.958109][T16226] Bluetooth: hci6: Invalid connection link type handle 0x00c9 [ 1305.349497][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.356712][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.491911][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.499239][ T6457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.600725][T18249] loop7: detected capacity change from 0 to 512 [ 1305.787339][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1305.809264][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1305.838497][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1305.854191][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1305.874100][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1306.160148][T18249] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1306.443446][T18261] overlayfs: failed to resolve './file0': -2 [ 1306.726055][T14722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.743105][T18261] ceph: No mds server is up or the cluster is laggy [ 1306.750036][T17941] libceph: connect (1)[c::]:6789 error -101 [ 1306.762363][T17941] libceph: mon0 (1)[c::]:6789 connect error [ 1306.992211][T11938] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1307.232262][T11938] usb 6-1: Using ep0 maxpacket: 32 [ 1307.278405][T11938] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1307.337181][T17941] libceph: connect (1)[c::]:6789 error -101 [ 1307.392203][T11938] usb 6-1: config 0 has no interface number 0 [ 1307.465900][T17941] libceph: mon0 (1)[c::]:6789 connect error [ 1307.490238][T11938] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1307.591646][T11938] usb 6-1: config 0 interface 2 has no altsetting 0 [ 1307.666331][T11938] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1307.716165][T11938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.782301][T11938] usb 6-1: Product: syz [ 1307.806975][T11938] usb 6-1: Manufacturer: syz [ 1307.811611][T11938] usb 6-1: SerialNumber: syz [ 1307.973258][ T5838] Bluetooth: hci3: command tx timeout [ 1308.057502][T11938] usb 6-1: config 0 descriptor?? [ 1308.111928][T16226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1308.136715][T16226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1308.146715][T16226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1308.165357][T16226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1308.176053][T16226] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1308.301036][T11938] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1308.407028][T11938] usb 6-1: USB disconnect, device number 19 [ 1309.538234][T18291] macvlan0: entered allmulticast mode [ 1309.701664][ T1008] bridge_slave_1: left allmulticast mode [ 1309.805285][ T1008] bridge_slave_1: left promiscuous mode [ 1309.870751][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.007001][ T1008] bridge_slave_0: left allmulticast mode [ 1310.193289][T16226] Bluetooth: hci3: command tx timeout [ 1310.239741][ T1008] bridge_slave_0: left promiscuous mode [ 1310.679874][T16226] Bluetooth: hci4: command tx timeout [ 1310.929717][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.088386][T18316] loop7: detected capacity change from 0 to 128 [ 1312.101071][T18316] zonefs: Unexpected value for 'explicit-open' [ 1312.262195][T16226] Bluetooth: hci3: command tx timeout [ 1312.942500][T16226] Bluetooth: hci4: command tx timeout [ 1312.949304][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.962607][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.974525][ T1008] bond0 (unregistering): Released all slaves [ 1313.135204][T17955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.682832][T17955] veth0_vlan: entered promiscuous mode [ 1313.745246][T17955] veth1_vlan: entered promiscuous mode [ 1314.013096][ T1008] hsr_slave_0: left promiscuous mode [ 1314.321295][T16226] Bluetooth: hci3: command tx timeout [ 1314.356510][ T1008] hsr_slave_1: left promiscuous mode [ 1314.423598][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.687002][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.034128][T16226] Bluetooth: hci4: command tx timeout [ 1315.068741][ T1008] veth1_macvtap: left promiscuous mode [ 1315.391418][ T1008] veth0_macvtap: left promiscuous mode [ 1315.462675][ T1008] veth1_vlan: left promiscuous mode [ 1315.468231][ T1008] veth0_vlan: left promiscuous mode [ 1317.182132][T16226] Bluetooth: hci4: command tx timeout [ 1318.382435][T16226] Bluetooth: hci1: unexpected cc 0x042f length: 32 > 7 [ 1318.389467][T16226] Bluetooth: hci1: unexpected event for opcode 0x042f [ 1319.027293][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1319.247888][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1321.854539][T18253] chnl_net:caif_netlink_parms(): no params data found [ 1322.279211][T18388] vlan2: entered promiscuous mode [ 1322.310183][T18388] syz_tun: entered promiscuous mode [ 1322.570738][T17955] veth0_macvtap: entered promiscuous mode [ 1322.640538][T18253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.648817][T18253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.678351][T18253] bridge_slave_0: entered allmulticast mode [ 1322.689202][T18253] bridge_slave_0: entered promiscuous mode [ 1322.713438][T18253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.723061][T18253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.730345][T18253] bridge_slave_1: entered allmulticast mode [ 1322.741005][T18253] bridge_slave_1: entered promiscuous mode [ 1322.796263][T17955] veth1_macvtap: entered promiscuous mode [ 1322.871373][T18253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.880817][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1322.933793][T18253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.044194][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1323.064273][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.088963][T17955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.110629][T18278] chnl_net:caif_netlink_parms(): no params data found [ 1323.113515][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1323.145986][T18253] team0: Port device team_slave_0 added [ 1323.162912][T18253] team0: Port device team_slave_1 added [ 1323.168814][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1323.200086][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.245299][ T24] usb 6-1: config 0 descriptor?? [ 1323.325387][T18253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.359098][T18253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.427641][T18253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.477577][T18253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.485146][T18253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.514966][T18253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.728305][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 1323.823974][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1324.008028][ T24] usb 6-1: USB disconnect, device number 20 [ 1324.200887][T17955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.286370][ T3480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.412000][ T1008] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.541316][T18278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.549201][T18278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.556618][T18278] bridge_slave_0: entered allmulticast mode [ 1324.565528][T18278] bridge_slave_0: entered promiscuous mode [ 1324.608228][ T3480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.620668][ T3480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.825789][ T1008] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.854866][T18278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.863334][T18278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.870534][T18278] bridge_slave_1: entered allmulticast mode [ 1324.878937][T18278] bridge_slave_1: entered promiscuous mode [ 1325.296900][ T3480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.409971][T18253] hsr_slave_0: entered promiscuous mode [ 1325.423704][T18253] hsr_slave_1: entered promiscuous mode [ 1325.443248][T18253] debugfs: 'hsr0' already exists in 'hsr' [ 1325.453190][T18253] Cannot create hsr debugfs directory [ 1325.521902][T18278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.578002][ T1008] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.626865][T18278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.333877][T18278] team0: Port device team_slave_0 added [ 1326.393876][ T1008] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.458382][T18278] team0: Port device team_slave_1 added [ 1326.538761][T18438] vlan2: entered promiscuous mode [ 1326.556136][T18438] syz_tun: entered promiscuous mode [ 1326.813912][T18278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.831317][T18278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.881399][T18278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.900181][T18278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.908212][T18278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.932218][T17030] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1326.938601][T18278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.210965][T18450] loop7: detected capacity change from 0 to 128 [ 1327.231074][T18450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1327.244051][T18450] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1327.262270][T17030] usb 1-1: Using ep0 maxpacket: 8 [ 1327.269820][T17030] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1327.280417][T17030] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1327.289242][T17030] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.319418][T18450] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1327.337234][T17030] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1327.362306][T17030] usb 1-1: config 250 has no interface number 0 [ 1327.371524][T18450] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1327.399117][T17030] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1327.409793][T17030] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1327.419668][T17030] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1327.429949][T17030] usb 1-1: Product: syz [ 1327.434590][T17030] usb 1-1: SerialNumber: syz [ 1327.452813][T17030] hub 1-1:250.228: bad descriptor, ignoring hub [ 1327.459561][T17030] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1327.520008][T14722] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1327.569548][T18278] hsr_slave_0: entered promiscuous mode [ 1327.578500][T18278] hsr_slave_1: entered promiscuous mode [ 1327.585952][T18278] debugfs: 'hsr0' already exists in 'hsr' [ 1327.591772][T18278] Cannot create hsr debugfs directory [ 1327.724398][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.746636][T14825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.763475][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.778950][T14825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1328.530767][T17030] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 1328.693810][T17030] usb 1-1: device firmware changed [ 1328.702717][T17030] usb 1-1: USB disconnect, device number 10 [ 1328.949610][ T1008] bridge_slave_1: left allmulticast mode [ 1328.966278][ T1008] bridge_slave_1: left promiscuous mode [ 1328.985722][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.024857][ T1008] bridge_slave_0: left allmulticast mode [ 1329.030539][ T1008] bridge_slave_0: left promiscuous mode [ 1329.065554][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.072240][T17030] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1330.275138][T17030] usb 1-1: device not accepting address 11, error -71 [ 1330.787389][T16226] Bluetooth: hci6: unexpected cc 0x042f length: 32 > 7 [ 1330.794505][T16226] Bluetooth: hci6: unexpected event for opcode 0x042f [ 1330.900273][T18489] loop7: detected capacity change from 0 to 1024 [ 1330.908017][T18489] hfsplus: Unknown parameter 'node#ompose' [ 1331.447805][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.464492][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.476297][ T1008] bond0 (unregistering): Released all slaves [ 1331.584490][T18481] vlan2: entered promiscuous mode [ 1332.454089][ T1008] hsr_slave_0: left promiscuous mode [ 1332.675147][ T1008] hsr_slave_1: left promiscuous mode [ 1332.900687][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1332.998107][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.013317][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1333.023208][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.056954][ T1008] veth1_macvtap: left promiscuous mode [ 1333.062844][ T1008] veth0_macvtap: left promiscuous mode [ 1333.068595][ T1008] veth1_vlan: left promiscuous mode [ 1333.076240][ T1008] veth0_vlan: left promiscuous mode [ 1333.437790][ T24] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 1333.459489][T18533] loop1: detected capacity change from 0 to 1024 [ 1333.499786][ T24] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1333.542249][T10318] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1333.618222][T18535] fido_id[18535]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1333.635922][T14825] hfsplus: b-tree write err: -5, ino 4 [ 1333.712215][T10318] usb 8-1: Using ep0 maxpacket: 8 [ 1333.720880][T10318] usb 8-1: config 0 has no interfaces? [ 1333.744487][T10318] usb 8-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1333.782273][T10318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.832392][T10318] usb 8-1: config 0 descriptor?? [ 1334.214044][T18530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.255115][T18530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.298867][T17938] usb 8-1: USB disconnect, device number 8 [ 1334.440907][T18546] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3684'. [ 1334.872146][T16226] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 1335.174010][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1335.383887][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1335.555935][T18557] overlayfs: missing 'lowerdir' [ 1335.736154][T18560] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3689'. [ 1336.135847][T16226] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1336.148408][T16226] Bluetooth: hci2: Injecting HCI hardware error event [ 1336.178510][ T5838] Bluetooth: hci2: hardware error 0x00 [ 1336.592395][T18569] loop7: detected capacity change from 0 to 256 [ 1336.628222][T18569] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000005) [ 1336.640116][T18569] exFAT-fs (loop7): failed to count the number of clusters in root [ 1336.648827][T18569] exFAT-fs (loop7): failed to recognize exfat type [ 1336.963923][T18569] loop7: detected capacity change from 0 to 32768 [ 1336.998585][T18569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3692 (18569) [ 1337.034994][T18569] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1337.045652][T18569] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 1337.054836][T18569] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1337.738721][T18569] BTRFS info (device loop7): rebuilding free space tree [ 1337.775673][T18569] BTRFS info (device loop7): disabling free space tree [ 1337.784092][T18569] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1337.794188][T18569] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1337.811396][T18569] BTRFS info (device loop7): checking UUID tree [ 1337.837823][T18569] BTRFS info (device loop7): enabling ssd optimizations [ 1337.844875][T18569] BTRFS info (device loop7): turning off barriers [ 1337.851424][T18569] BTRFS info (device loop7): turning on flush-on-commit [ 1337.858534][T18569] BTRFS info (device loop7): turning on async discard [ 1337.865449][T18569] BTRFS info (device loop7): enabling disk space caching [ 1337.873675][T18569] BTRFS info (device loop7): force clearing of disk cache [ 1337.880914][T18569] BTRFS info (device loop7): use zstd compression, level 3 [ 1337.888219][T18569] BTRFS info (device loop7): max_inline set to 0 [ 1338.766964][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1339.377824][T14722] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1339.519575][T18253] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1339.799484][T18253] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1339.884514][T18253] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1339.941290][T18603] overlayfs: missing 'lowerdir' [ 1339.956198][T18253] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1340.698081][T18614] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1341.138953][T18617] loop7: detected capacity change from 0 to 512 [ 1341.157167][T18617] EXT4-fs: Ignoring removed orlov option [ 1341.167237][T18617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1341.175453][T18617] System zones: 1-12 [ 1341.195057][T18617] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.3702: corrupted in-inode xattr: e_value size too large [ 1341.228223][T18617] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3702: couldn't read orphan inode 15 (err -117) [ 1341.259455][T18253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.345636][T18617] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1341.456050][T18253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.564397][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.571572][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.614966][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.622341][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1341.791541][T14722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.033715][ T5838] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 1342.591113][T18278] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1343.776161][T18278] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1344.131853][T18278] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1344.374314][T18278] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1345.517840][T18649] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3708'. [ 1346.023303][T18653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3709'. [ 1346.185985][T18278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.280427][T18278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.340876][T18253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.405190][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.412474][ T6457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.422674][T10318] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1346.481667][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.488880][ T6457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.603664][T10318] usb 1-1: Using ep0 maxpacket: 8 [ 1346.644118][T10318] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1346.692420][T10318] usb 1-1: config 0 has no interface number 0 [ 1346.727689][T10318] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1346.783669][T10318] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1346.965730][T10318] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1347.002928][T10318] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1347.047894][T10318] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1347.090413][T10318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.135338][T10318] usb 1-1: config 0 descriptor?? [ 1347.181446][T10318] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1347.396076][ T5965] usb 1-1: USB disconnect, device number 13 [ 1347.426638][ T5965] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1347.657072][T18253] veth0_vlan: entered promiscuous mode [ 1349.448761][T18253] veth1_vlan: entered promiscuous mode [ 1349.516129][T18278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.205908][T18253] veth0_macvtap: entered promiscuous mode [ 1352.533280][T18253] veth1_macvtap: entered promiscuous mode [ 1352.591108][T18253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1352.600171][T18708] fuse: Bad value for 'group_id' [ 1352.644352][T18708] fuse: Bad value for 'group_id' [ 1352.669689][T18253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1352.774026][ T1008] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.810133][ T1008] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.865561][ T1008] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.896008][ T1008] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.994562][T18716] loop1: detected capacity change from 0 to 4096 [ 1353.088289][T18716] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1354.073340][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.124116][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.312214][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.320119][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.429593][T18278] veth0_vlan: entered promiscuous mode [ 1354.517424][T18278] veth1_vlan: entered promiscuous mode [ 1354.622572][T17031] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1354.667047][T18278] veth0_macvtap: entered promiscuous mode [ 1354.792206][T17031] usb 8-1: Using ep0 maxpacket: 8 [ 1354.903283][T17031] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1354.928417][T18278] veth1_macvtap: entered promiscuous mode [ 1354.944607][T17031] usb 8-1: config 0 has no interface number 0 [ 1354.966475][T18750] loop1: detected capacity change from 0 to 128 [ 1354.974214][T18750] zonefs: Unexpected value for 'explicit-open' [ 1354.990592][T17031] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1355.026705][T18278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.089918][T17031] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1355.095491][T18278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.131930][T17031] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1355.188923][T17031] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1355.215849][ T6348] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.277437][ T6348] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.288564][T17031] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1355.318966][T17031] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.339058][ T6348] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.368557][ T6348] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.384196][T17031] usb 8-1: config 0 descriptor?? [ 1355.414885][T17031] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1355.621257][T17029] usb 8-1: USB disconnect, device number 9 [ 1355.678360][T17029] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1355.747258][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.773333][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.896203][T14825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.915504][T14825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.655494][T18769] 9pnet_virtio: no channels available for device syz [ 1361.228725][T18778] fuse: Bad value for 'group_id' [ 1361.280355][T18778] fuse: Bad value for 'group_id' [ 1361.360558][T18783] 9pnet_fd: Insufficient options for proto=fd [ 1361.791402][T18787] loop7: detected capacity change from 0 to 32768 [ 1361.885192][T18787] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3739 (18787) [ 1362.064028][T18792] bridge1: entered promiscuous mode [ 1362.070043][T18792] bridge1: entered allmulticast mode [ 1362.146436][T18787] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1362.156758][T18787] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 1362.543922][T16226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1362.585180][T16226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1362.605841][T16226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1362.622607][T18787] BTRFS info (device loop7): setting nodatasum [ 1362.628817][T18787] BTRFS info (device loop7): setting nodatacow [ 1362.635011][T18787] BTRFS info (device loop7): turning on async discard [ 1362.641849][T18787] BTRFS info (device loop7): enabling free space tree [ 1362.648659][T18787] BTRFS info (device loop7): enabling auto defrag [ 1362.655124][T18787] BTRFS info (device loop7): max_inline set to 0 [ 1362.662553][T16226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1362.670843][T16226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1362.778281][ T30] audit: type=1800 audit(1764549883.058:114): pid=18787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3739" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 1362.892984][T18817] loop9: detected capacity change from 0 to 256 [ 1362.966003][T18817] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1363.076842][T14722] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1363.093893][T18825] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3743'. [ 1363.136588][T18817] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1363.263419][T18828] ubi31: attaching mtd0 [ 1363.528147][T18828] ubi31: scanning is finished [ 1363.533553][T18828] ubi31: empty MTD device detected [ 1364.197598][T18828] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1364.340796][T18828] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1364.723809][T16226] Bluetooth: hci5: command tx timeout [ 1364.762527][T18828] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1365.665751][T18828] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1366.056912][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.483612][T18828] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1366.572306][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.668151][T18828] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1366.772211][T16226] Bluetooth: hci5: command tx timeout [ 1366.915983][T18828] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1012260905 [ 1367.217381][T18828] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1367.515699][T18833] ubi31: background thread "ubi_bgt31d" started, PID 18833 [ 1368.852353][T16226] Bluetooth: hci5: command tx timeout [ 1369.107753][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3756'. [ 1369.243877][T18882] loop6: detected capacity change from 0 to 256 [ 1369.333349][T18882] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1369.407181][T18882] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1369.540854][T18803] chnl_net:caif_netlink_parms(): no params data found [ 1369.848963][T18886] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3758'. [ 1369.926913][T18889] loop7: detected capacity change from 0 to 128 [ 1369.996723][T18889] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1370.009474][T18889] hpfs: filesystem error: improperly stopped [ 1370.226582][T18896] loop6: detected capacity change from 0 to 512 [ 1370.812546][T18889] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1370.854239][T18896] FAT-fs (loop6): bogus number of FAT sectors [ 1370.860529][T18896] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1370.928043][T18889] hpfs: You really don't want any checks? You are crazy... [ 1370.942179][T16226] Bluetooth: hci5: command tx timeout [ 1370.968918][T18889] hpfs: hpfs_map_sector(): read error [ 1371.052188][T18889] hpfs: code page support is disabled [ 1371.057787][T18889] hpfs: hpfs_map_4sectors(): unaligned read [ 1371.099588][T18889] hpfs: hpfs_map_4sectors(): unaligned read [ 1371.126206][T18889] hpfs: filesystem error: unable to find root dir [ 1371.160347][T18803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.194976][T18803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.216719][T18803] bridge_slave_0: entered allmulticast mode [ 1371.224849][T18803] bridge_slave_0: entered promiscuous mode [ 1371.233811][T18803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.248386][T18803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.256166][T18803] bridge_slave_1: entered allmulticast mode [ 1371.264478][T18803] bridge_slave_1: entered promiscuous mode [ 1371.624634][T18907] hpfs: hpfs_map_4sectors(): unaligned read [ 1372.064279][T16226] Bluetooth: hci6: Invalid connection link type handle 0x00c9 [ 1372.193366][T17029] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1372.484151][T18803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1372.530032][T18803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1372.554694][T17029] usb 10-1: Using ep0 maxpacket: 8 [ 1372.573557][T17029] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1372.606941][T17029] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1372.660752][T17029] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1372.712850][T17029] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1372.780082][T17029] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1372.845927][T17029] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1372.937910][T18803] team0: Port device team_slave_0 added [ 1372.983326][T17029] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.225199][T18803] team0: Port device team_slave_1 added [ 1373.949549][T17029] usb 10-1: GET_CAPABILITIES returned 0 [ 1373.972362][T17029] usbtmc 10-1:16.0: can't read capabilities [ 1374.084674][T18931] siw: device registration error -23 [ 1374.775844][T17029] usb 10-1: USB disconnect, device number 2 [ 1374.990511][T18803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.049821][T18803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.032953][T18940] loop1: detected capacity change from 0 to 1024 [ 1376.160146][T18803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.265508][T18803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.295755][T18803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1377.148013][T18954] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3774'. [ 1377.617856][T18803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.331988][T18803] hsr_slave_0: entered promiscuous mode [ 1380.380247][T18803] hsr_slave_1: entered promiscuous mode [ 1380.396030][T18803] debugfs: 'hsr0' already exists in 'hsr' [ 1380.443476][T18803] Cannot create hsr debugfs directory [ 1384.315185][T19014] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3791'. [ 1385.563173][T19021] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1385.573065][T19021] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1385.582772][T19021] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1385.722089][ T30] audit: type=1800 audit(1764549905.848:115): pid=19021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3793" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1387.990550][T19041] loop7: detected capacity change from 0 to 128 [ 1387.997806][T19041] zonefs: Unexpected value for 'explicit-open' [ 1388.966921][T19054] ubi: mtd0 is already attached to ubi31 [ 1391.491141][T19078] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1391.500741][T19078] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1391.663212][T13653] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1392.117721][T18803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1392.193711][T18803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1392.262110][T13653] usb 1-1: Using ep0 maxpacket: 8 [ 1392.266098][T18803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1392.292977][T13653] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1392.301197][T13653] usb 1-1: config 0 has no interface number 0 [ 1392.334915][T18803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1392.738176][T19086] loop7: detected capacity change from 0 to 32768 [ 1392.746563][T13653] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1392.772978][T13653] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1392.804167][T19086] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1392.812560][T19086] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1392.841311][T13653] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1392.842975][T19086] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1392.866379][T10318] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1392.873337][T13653] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1392.900119][T10318] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1392.968504][T13653] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1393.015366][T13653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.053842][T13653] usb 1-1: config 0 descriptor?? [ 1393.135656][T13653] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1393.225579][T10318] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 325ms [ 1393.259802][T10318] gfs2: fsid=syz:syz.0: jid=0: Done [ 1393.280943][T19086] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1393.351341][T17029] usb 1-1: USB disconnect, device number 14 [ 1393.428598][T18803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.514367][T17029] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1393.608721][T18803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.718576][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.725908][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.997052][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.004366][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.441051][T19129] loop1: detected capacity change from 0 to 128 [ 1395.448427][T19129] zonefs: Unexpected value for 'explicit-open' [ 1399.325133][T18803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.266737][T18803] veth0_vlan: entered promiscuous mode [ 1402.301517][T18803] veth1_vlan: entered promiscuous mode [ 1402.459586][T19190] loop7: detected capacity change from 0 to 512 [ 1402.502587][T19190] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1402.560743][T18803] veth0_macvtap: entered promiscuous mode [ 1402.580914][T19190] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.3826: iget: bad i_size value: 38620345925642 [ 1402.611063][T18803] veth1_macvtap: entered promiscuous mode [ 1402.681098][T18803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.711602][T18803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.756466][T19190] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3826: couldn't read orphan inode 15 (err -117) [ 1402.869575][T19190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1402.989125][T11114] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.043461][ T6348] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.081968][T19190] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3826: bg 0: block 5: invalid block bitmap [ 1403.088212][T19194] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1403.362118][ T6348] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.396737][T14825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.409966][T19190] overlayfs: failed to verify upper root origin [ 1403.420251][T17029] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1403.912658][T17029] usb 8-1: Using ep0 maxpacket: 32 [ 1404.016620][T17029] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1404.082124][T17029] usb 8-1: config 0 has no interface number 0 [ 1404.157088][T17029] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1404.334694][T17029] usb 8-1: config 0 interface 2 has no altsetting 0 [ 1404.362414][T19204] svc: failed to register nfsdv3 RPC service (errno 512). [ 1404.375356][T17029] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1404.454648][T19204] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1404.473333][T17029] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.481360][T17029] usb 8-1: Product: syz [ 1404.593841][T17029] usb 8-1: Manufacturer: syz [ 1404.598489][T17029] usb 8-1: SerialNumber: syz [ 1404.713199][T17029] usb 8-1: config 0 descriptor?? [ 1404.791312][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.845791][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.082221][ T6348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.155063][ T6348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.368156][T17029] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1405.477262][T17029] usb 8-1: USB disconnect, device number 10 [ 1405.605719][T18776] udevd[18776]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1406.488668][T18775] udevd[18775]: incorrect cramfs checksum on /dev/loop5 [ 1406.566879][T14722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.169543][T19238] loop1: detected capacity change from 0 to 128 [ 1407.176886][T19238] zonefs: Unexpected value for 'explicit-open' [ 1407.524859][T19219] loop9: detected capacity change from 0 to 32768 [ 1407.602566][T19219] (syz.9.3833,19219,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1407.667830][T19219] (syz.9.3833,19219,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1407.753205][T19219] JBD2: Ignoring recovery information on journal [ 1407.959833][T19219] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1408.137378][T18839] udevd[18839]: incorrect cramfs checksum on /dev/loop5 [ 1408.599123][T19257] loop6: detected capacity change from 0 to 8 [ 1409.206189][T18253] ocfs2: Unmounting device (7,9) on (node local) [ 1411.054385][T19275] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3845'. [ 1411.319201][T19277] loop9: detected capacity change from 0 to 128 [ 1411.328157][T19277] zonefs: Unexpected value for 'explicit-open' [ 1411.357121][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1411.405846][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1411.422706][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1411.446610][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1411.454561][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1413.033820][T19290] loop9: detected capacity change from 0 to 1024 [ 1413.099209][T19290] EXT4-fs: Ignoring removed orlov option [ 1413.301662][T19290] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1413.652623][ T5838] Bluetooth: hci7: command tx timeout [ 1414.779559][T18253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.984341][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1415.732741][ T5838] Bluetooth: hci7: command tx timeout [ 1416.438243][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1416.792893][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1417.228822][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1417.488424][T19278] chnl_net:caif_netlink_parms(): no params data found [ 1417.808387][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1417.821644][ T5838] Bluetooth: hci7: command tx timeout [ 1418.864844][T19278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.891256][T19278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.915999][T19278] bridge_slave_0: entered allmulticast mode [ 1418.976905][T19278] bridge_slave_0: entered promiscuous mode [ 1419.025906][T19278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.036821][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1419.053779][T19278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.090502][T19278] bridge_slave_1: entered allmulticast mode [ 1419.138585][T19278] bridge_slave_1: entered promiscuous mode [ 1419.609528][T19278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.696676][T19278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.733356][T19387] loop9: detected capacity change from 0 to 256 [ 1419.821347][T19387] exfat: Deprecated parameter 'namecase' [ 1419.855707][T19387] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1419.902847][ T5838] Bluetooth: hci7: command tx timeout [ 1419.931725][T19278] team0: Port device team_slave_0 added [ 1419.958291][T19278] team0: Port device team_slave_1 added [ 1420.255133][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1420.359735][T19278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.399087][T19278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.510164][T19278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.537393][T19278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.550566][T19278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.585793][T19278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.112389][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1422.346163][T19278] hsr_slave_0: entered promiscuous mode [ 1422.368475][T19278] hsr_slave_1: entered promiscuous mode [ 1422.394776][T19278] debugfs: 'hsr0' already exists in 'hsr' [ 1422.400536][T19278] Cannot create hsr debugfs directory [ 1422.608004][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1422.925217][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1424.208587][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1424.531217][T19432] 9pnet_fd: Insufficient options for proto=fd [ 1427.277145][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1427.506180][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.513689][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.151108][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3884'. [ 1428.197190][T18775] udevd[18775]: incorrect cramfs checksum on /dev/loop5 [ 1428.810892][T19470] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1428.923465][T19475] loop7: detected capacity change from 0 to 128 [ 1428.931000][T19475] zonefs: Unexpected value for 'explicit-open' [ 1429.033443][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1429.312248][T19470] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1429.495244][T19278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1429.642774][T16226] Bluetooth: hci3: command 0x0406 tx timeout [ 1430.788685][T19278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1430.894145][T19278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1430.929980][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1431.026877][T19278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1432.486893][T19278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.652883][T19278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.668754][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1433.079908][T19525] loop9: detected capacity change from 0 to 128 [ 1433.087357][T19525] zonefs: Unexpected value for 'explicit-open' [ 1433.755755][T15494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.763069][T15494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.904333][T15494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.911503][T15494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.687485][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1434.695033][T16226] Bluetooth: hci4: command 0x0406 tx timeout [ 1434.857228][T19544] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1434.953539][T19544] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1435.201571][T19278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.231753][T19551] loop1: detected capacity change from 0 to 4096 [ 1435.269850][T19551] EXT4-fs: Ignoring removed bh option [ 1435.331527][T19551] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1435.575579][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1435.628053][T19551] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1435.835169][T19278] veth0_vlan: entered promiscuous mode [ 1435.842713][T19562] loop7: detected capacity change from 0 to 256 [ 1435.850510][T19562] exfat: Deprecated parameter 'namecase' [ 1435.862573][T19551] System zones: 0-5 [ 1435.889200][T19551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.951761][T19562] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1436.140553][T19278] veth1_vlan: entered promiscuous mode [ 1437.601565][T19551] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1437.657390][T19562] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3907'. [ 1438.003062][T19278] veth0_macvtap: entered promiscuous mode [ 1438.072943][T19278] veth1_macvtap: entered promiscuous mode [ 1438.199785][T19278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.279027][T18775] udevd[18775]: incorrect cramfs checksum on /dev/loop5 [ 1438.311236][T19278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.652225][T15494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.055854][T15494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.076328][T17955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.089250][T15494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.368553][T14825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.394931][ T30] audit: type=1326 audit(1764549959.688:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19589 comm="syz.1.3913" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d1d58f749 code=0x0 [ 1439.817688][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1439.927032][T19575] loop6: detected capacity change from 0 to 32768 [ 1440.031878][T19575] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 1440.051368][ T6207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.146730][ T6207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.064130][T11114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.142411][T11114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.158356][ T30] audit: type=1800 audit(1764549961.438:117): pid=19575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3909" name="file1" dev="loop6" ino=14674 res=0 errno=0 [ 1441.975742][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1442.057335][T18278] ocfs2: Unmounting device (7,6) on (node local) [ 1442.069104][T19612] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1442.140348][T19612] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1442.188045][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1442.532779][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1443.181562][T19635] overlayfs: failed to resolve './file0': -2 [ 1445.300340][T19663] loop7: detected capacity change from 0 to 32768 [ 1445.448865][T19663] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1445.457128][T19663] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1445.488414][T19663] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1445.498409][T17031] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1446.065860][T17031] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1446.254560][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1447.510159][T17031] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1444ms [ 1447.562240][T17031] gfs2: fsid=syz:syz.0: jid=0: Done [ 1447.602484][T19663] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1447.797358][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1447.827675][T19685] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1447.834949][T19687] 9pnet_fd: Insufficient options for proto=fd [ 1447.902932][T19685] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1448.062126][T17938] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1448.252355][T17938] usb 6-1: Using ep0 maxpacket: 8 [ 1448.298889][T17938] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1448.352196][T17938] usb 6-1: config 0 has no interface number 0 [ 1448.404603][T17938] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1448.514932][T17938] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1448.602224][T17938] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1448.641314][T17938] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1448.682410][T17938] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1448.805625][T17938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.878995][T17938] usb 6-1: config 0 descriptor?? [ 1448.950238][T17938] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1449.206133][T17938] usb 6-1: USB disconnect, device number 21 [ 1450.081816][T17938] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1451.942360][T19726] syz.7.3945 (19726) used greatest stack depth: 15832 bytes left [ 1454.836690][T19754] siw: device registration error -23 [ 1455.639564][T18775] udevd[18775]: incorrect cramfs checksum on /dev/loop5 [ 1455.910461][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1456.992136][T17029] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1457.111953][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1457.352200][T17029] usb 7-1: Using ep0 maxpacket: 8 [ 1457.411304][T17029] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1457.625991][T17029] usb 7-1: config 0 has no interface number 0 [ 1457.641835][T17029] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1457.677688][T17029] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1457.723595][T17029] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1457.825099][T17029] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1457.920010][T17029] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1457.934658][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1457.987571][T17029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.071938][T17029] usb 7-1: config 0 descriptor?? [ 1458.142703][T17029] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1458.290245][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1458.387921][T17938] usb 7-1: USB disconnect, device number 10 [ 1458.439871][T17938] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1458.898414][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1460.056548][ T5838] Bluetooth: hci7: link tx timeout [ 1460.063826][ T5838] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1460.076709][ T5838] Bluetooth: hci7: link tx timeout [ 1460.081911][ T5838] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1460.090372][ T5838] Bluetooth: hci7: link tx timeout [ 1460.095672][ T5838] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1460.273306][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1462.242173][ T5838] Bluetooth: hci7: command 0x0406 tx timeout [ 1462.528222][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1463.878637][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1464.152464][T17030] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1465.670909][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1465.733943][T17030] usb 7-1: Using ep0 maxpacket: 8 [ 1465.758295][T17030] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1465.795740][T17030] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1465.812918][T19855] binder: 19854:19855 unknown command 0 [ 1465.818489][T19855] binder: 19854:19855 ioctl c0306201 200000000080 returned -22 [ 1465.847123][T17030] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 1465.910024][T17030] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 1465.964941][T17030] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1466.024980][T17030] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1466.322247][T17030] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.101182][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1467.122113][T17030] usb 7-1: Product: syz [ 1467.169833][T17030] usb 7-1: Manufacturer: syz [ 1467.212551][T17030] usb 7-1: SerialNumber: syz [ 1467.303252][T17030] usb 7-1: config 0 descriptor?? [ 1467.522270][T17030] usb 7-1: can't set config #0, error -71 [ 1467.992652][T17941] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1468.463774][T17941] usb 8-1: device descriptor read/64, error -71 [ 1470.442710][T17941] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1470.527460][T17030] usb 7-1: USB disconnect, device number 11 [ 1470.660799][T19892] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1470.671463][T19892] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1470.681507][T19892] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1471.150359][T19901] netlink: 'syz.7.3991': attribute type 1 has an invalid length. [ 1472.500024][T19917] loop7: detected capacity change from 0 to 16 [ 1472.568468][T19917] erofs: Unknown parameter '&' [ 1472.659050][T19908] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1472.677681][T19921] loop9: detected capacity change from 0 to 512 [ 1472.722802][T11114] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.778193][T11114] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.789217][T19921] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.4000: iget: bad i_size value: 38620345925642 [ 1473.030427][T11114] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.231379][T11114] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.973771][T19921] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.4000: couldn't read orphan inode 15 (err -117) [ 1474.030470][T19921] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1474.248171][T19944] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4000: bg 0: block 5: invalid block bitmap [ 1474.292556][T19929] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1474.423523][ T5965] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1476.656708][T18253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1476.713794][ T5965] usb 8-1: no configurations [ 1476.739793][ T5965] usb 8-1: can't read configurations, error -22 [ 1476.902134][ T5965] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1476.957431][T19956] loop1: detected capacity change from 0 to 4096 [ 1476.977051][ T3507] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1477.018270][T19956] EXT4-fs: Ignoring removed bh option [ 1477.058247][T19956] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1477.149239][T19956] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1477.159905][T19956] System zones: 0-5 [ 1477.209429][T19964] loop9: detected capacity change from 0 to 2048 [ 1477.316746][T19956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1477.330434][T19964] EXT4-fs: Ignoring removed i_version option [ 1477.379952][T19964] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1477.400921][ T5965] usb 8-1: device descriptor read/all, error -71 [ 1477.407732][T19964] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1477.667209][ T30] audit: type=1326 audit(1764549997.958:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19962 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1478.767549][ T5965] usb usb8-port1: attempt power cycle [ 1479.024547][T17955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.042779][ T30] audit: type=1326 audit(1764549997.958:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19962 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1479.163602][ T30] audit: type=1326 audit(1764549997.958:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19962 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1479.201832][ T30] audit: type=1326 audit(1764549997.958:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19962 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1479.289136][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1479.349720][T18253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.410860][ T30] audit: type=1326 audit(1764549997.958:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19962 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1479.572645][ T30] audit: type=1326 audit(1764549997.958:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19962 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1479.633331][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1479.643842][ T30] audit: type=1326 audit(1764549997.958:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19962 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1479.666436][ T30] audit: type=1326 audit(1764549997.958:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19962 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1479.689309][ T30] audit: type=1326 audit(1764549997.988:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19962 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1479.739870][ T30] audit: type=1326 audit(1764549997.988:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19962 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1479.888212][T18775] udevd[18775]: incorrect cramfs checksum on /dev/loop5 [ 1480.142737][T19995] loop9: detected capacity change from 0 to 512 [ 1480.164782][T18775] udevd[18775]: incorrect cramfs checksum on /dev/loop5 [ 1480.339116][T18775] udevd[18775]: incorrect cramfs checksum on /dev/loop5 [ 1480.857731][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1481.326419][T17029] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1482.163549][T20027] netlink: 277 bytes leftover after parsing attributes in process `syz.9.4024'. [ 1482.286982][T17029] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.329195][T19992] udevd[19992]: incorrect cramfs checksum on /dev/loop5 [ 1482.343886][T17029] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1482.387389][T17029] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1482.413483][ T5965] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1482.460716][T17029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.514346][T20033] loop7: detected capacity change from 0 to 512 [ 1482.590218][T17029] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1482.591824][T20033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1482.614080][ T5965] usb 2-1: no configurations [ 1482.618690][ T5965] usb 2-1: can't read configurations, error -22 [ 1482.724169][T20033] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.4026: iget: bad i_size value: 38620345925642 [ 1482.764977][T20033] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4026: couldn't read orphan inode 15 (err -117) [ 1482.892208][ T5965] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1482.955811][T20033] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1483.093330][ T5965] usb 2-1: no configurations [ 1483.099166][ T5965] usb 2-1: can't read configurations, error -22 [ 1483.144310][T17029] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1483.187797][ T5965] usb usb2-port1: attempt power cycle [ 1483.239317][T19232] udevd[19232]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1483.280716][T17029] usb 7-1: USB disconnect, device number 12 [ 1483.423339][T17030] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1483.642146][ T5965] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1483.699145][T17030] usb 8-1: Using ep0 maxpacket: 32 [ 1483.751107][T17030] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1483.797527][ T5965] usb 2-1: no configurations [ 1483.832035][ T5965] usb 2-1: can't read configurations, error -22 [ 1483.848609][T17030] usb 8-1: config 0 has no interface number 0 [ 1483.947739][T17030] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1484.252087][T17030] usb 8-1: config 0 interface 2 has no altsetting 0 [ 1484.261834][ T5965] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1484.712142][T20039] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1484.751633][T17030] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1484.772036][T17030] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.793544][T17030] usb 8-1: Product: syz [ 1484.797902][T17030] usb 8-1: Manufacturer: syz [ 1484.802722][ T5965] usb 2-1: no configurations [ 1484.848930][ T5965] usb 2-1: can't read configurations, error -22 [ 1484.862406][T17030] usb 8-1: SerialNumber: syz [ 1484.903852][ T5965] usb usb2-port1: unable to enumerate USB device [ 1485.058146][T17030] usb 8-1: config 0 descriptor?? [ 1485.518999][T20051] loop6: detected capacity change from 0 to 40427 [ 1485.551243][T20051] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1485.559201][T20051] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1485.612577][T20051] F2FS-fs (loop6): invalid crc value [ 1485.763864][T20051] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1485.832485][T17030] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1485.840279][T20051] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1485.849629][T20051] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1485.894320][T16226] Bluetooth: hci5: command 0x0406 tx timeout [ 1485.906333][T20059] loop1: detected capacity change from 0 to 16 [ 1486.003725][T20059] erofs: Unknown parameter '&' [ 1486.039323][T14722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.233254][T17030] usb 8-1: USB disconnect, device number 16 [ 1486.593546][T17034] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1486.888296][T18819] udevd[18819]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1486.997485][T17034] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.047803][T17034] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1487.156908][T17034] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1487.382734][T17034] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1487.418667][T17034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.480272][T17034] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1487.556440][T17034] usb 2-1: invalid MIDI out EP 0 [ 1487.926459][T17034] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1488.258257][T17034] usb 2-1: USB disconnect, device number 11 [ 1488.292162][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1488.298029][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1488.298123][ T30] audit: type=1326 audit(1764550008.588:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.9.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1488.666585][ T30] audit: type=1326 audit(1764550008.588:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.9.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1488.824488][ T30] audit: type=1326 audit(1764550008.578:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.9.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ef58f749 code=0x7ffc0000 [ 1488.940663][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1488.948782][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.956903][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1489.020221][T20094] fuse: Bad value for 'fd' [ 1489.028057][T20091] loop9: detected capacity change from 0 to 4096 [ 1489.052615][T20091] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1489.104555][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1489.208331][ T30] audit: type=1800 audit(1764550009.498:141): pid=20091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4039" name="file1" dev="loop9" ino=30 res=0 errno=0 [ 1489.252061][T17030] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1489.362221][T17034] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1489.437536][T17030] usb 6-1: no configurations [ 1489.446694][T17030] usb 6-1: can't read configurations, error -22 [ 1489.538106][T17034] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1489.563977][T17034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.593139][T17034] usb 1-1: config 0 descriptor?? [ 1489.653335][T17030] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1490.476566][T17034] ath6kl: Unsupported hardware version: 0x0 [ 1490.507101][T17030] usb 6-1: no configurations [ 1490.511725][T17030] usb 6-1: can't read configurations, error -22 [ 1490.511855][T17034] ath6kl: Failed to init ath6kl core: -22 [ 1490.536271][T17034] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1490.642344][T17030] usb usb6-port1: attempt power cycle [ 1490.842423][T17034] usb 1-1: USB disconnect, device number 15 [ 1491.799983][T17030] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1491.836002][T17030] usb 6-1: no configurations [ 1491.840636][T17030] usb 6-1: can't read configurations, error -22 [ 1492.722067][T17030] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1492.934056][T20134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4051'. [ 1493.046686][T17030] usb 6-1: device not accepting address 25, error -71 [ 1493.059277][T17030] usb usb6-port1: unable to enumerate USB device [ 1493.204651][T19992] udevd[19992]: incorrect cramfs checksum on /dev/loop5 [ 1495.074909][T20149] fuse: Bad value for 'fd' [ 1495.528127][T20163] netlink: 4456 bytes leftover after parsing attributes in process `syz.7.4057'. [ 1496.342745][T20166] loop7: detected capacity change from 0 to 16 [ 1496.361032][T20166] erofs: Unknown parameter '&' [ 1498.926743][T20191] comedi comedi3: das16m1: I/O port conflict (0x4,16) [ 1501.275711][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1501.467627][T18775] udevd[18775]: incorrect cramfs checksum on /dev/loop5 [ 1501.610993][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1501.908181][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1502.089258][T20223] loop1: detected capacity change from 0 to 16 [ 1502.138071][T20223] erofs: Unknown parameter '&' [ 1503.012176][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1504.960575][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1505.401859][T11938] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1505.776243][T11938] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1505.793144][T11938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.826520][T11938] usb 6-1: config 0 descriptor?? [ 1506.290545][T11938] ath6kl: Unsupported hardware version: 0x0 [ 1506.344821][T11938] ath6kl: Failed to init ath6kl core: -22 [ 1506.366597][T20267] loop1: detected capacity change from 0 to 512 [ 1506.459655][T11938] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1506.472796][T20267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1506.485518][T20267] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1506.593800][T11938] usb 6-1: USB disconnect, device number 26 [ 1507.326658][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1512.076254][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1512.137368][T20310] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4093'. [ 1512.211102][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1512.727309][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1513.357335][T20334] input: syz1 as /devices/virtual/input/input19 [ 1514.350705][T20337] binder: BINDER_SET_CONTEXT_MGR already set [ 1514.356915][T20337] binder: 20331:20337 ioctl 4018620d 200000004a80 returned -16 [ 1515.066285][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1515.827507][T20347] loop6: detected capacity change from 0 to 512 [ 1516.331749][T20347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.344417][T20347] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1516.983788][T19226] udevd[19226]: incorrect cramfs checksum on /dev/loop5 [ 1519.832135][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1519.953543][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1520.437115][T20375] bridge0: port 3(vxlan0) entered blocking state [ 1520.460002][T19232] udevd[19232]: incorrect cramfs checksum on /dev/loop5 [ 1520.469107][T20375] bridge0: port 3(vxlan0) entered disabled state [ 1520.493133][T20375] vxlan0: entered allmulticast mode [ 1520.518666][T20375] vxlan0: entered promiscuous mode [ 1520.619612][T20395] veth1_to_bond: entered allmulticast mode [ 1520.808950][T16226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1520.836672][T16226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1520.845060][T16226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1520.854091][T16226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1520.861818][T16226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1520.899719][T18278] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.938947][T20398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4113'. [ 1521.123128][T18775] udevd[18775]: incorrect cramfs checksum on /dev/loop5 [ 1521.578647][ T31] INFO: task syz-executor:5822 blocked for more than 143 seconds. [ 1521.594389][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1521.623019][ T31] Blocked by coredump. [ 1521.641126][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1521.681332][ T31] task:syz-executor state:D stack:21224 pid:5822 tgid:5822 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1521.802502][ T31] Call Trace: [ 1522.002446][ T31] [ 1522.077631][ T31] __schedule+0x1798/0x4cc0 [ 1522.214232][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1522.220022][ T31] ? __lock_acquire+0xab9/0xd20 [ 1522.262024][ T31] ? __pfx___schedule+0x10/0x10 [ 1522.266915][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1522.326160][ T31] ? schedule+0x91/0x360 [ 1522.342131][ T31] schedule+0x165/0x360 [ 1522.346323][ T31] schedule_timeout+0x9a/0x270 [ 1522.351125][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1522.384152][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1522.392286][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1522.407519][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1522.413660][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1522.429318][ T31] ? wait_for_completion+0x267/0x5d0 [ 1522.434961][ T31] wait_for_completion+0x2bf/0x5d0 [ 1522.440101][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1522.446553][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1522.462052][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1522.477824][ T31] ? __flush_work+0xd2/0xbc0 [ 1522.492099][ T31] ? __flush_work+0xd2/0xbc0 [ 1522.507956][ T31] __flush_work+0x9b9/0xbc0 [ 1522.512765][ T31] ? __flush_work+0xd2/0xbc0 [ 1522.517354][ T31] ? __pfx___flush_work+0x10/0x10 [ 1522.542038][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1522.547355][ T31] ? __pfx___cancel_work+0x10/0x10 [ 1522.573087][ T31] ? __pfx___might_resched+0x10/0x10 [ 1522.578391][ T31] ? __cancel_work+0x254/0x2e0 [ 1522.583538][ T31] ? __pfx___cancel_work+0x10/0x10 [ 1522.588674][ T31] __cancel_work_sync+0xbe/0x110 [ 1522.622919][ T31] hci_cmd_sync_clear+0x30/0x230 [ 1522.627963][ T31] hci_unregister_dev+0x194/0x510 [ 1522.672148][ T31] vhci_release+0x152/0x1a0 [ 1522.676748][ T31] ? __pfx_vhci_release+0x10/0x10 [ 1522.681773][ T31] __fput+0x44c/0xa70 [ 1522.712094][ T31] task_work_run+0x1d4/0x260 [ 1522.716731][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1522.721867][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1522.742017][ T31] ? kmem_cache_free+0x19b/0x690 [ 1522.746980][ T31] do_exit+0x6b5/0x2300 [ 1522.751152][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1522.792038][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1522.797225][ T31] ? __pfx_do_exit+0x10/0x10 [ 1522.801828][ T31] do_group_exit+0x21c/0x2d0 [ 1522.822029][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1522.827694][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1522.850550][ T31] get_signal+0x1285/0x1340 [ 1522.855652][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 1522.863339][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1522.869525][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 1522.902063][ T31] exit_to_user_mode_loop+0x72/0x130 [ 1522.907375][ T31] do_syscall_64+0x2bd/0xfa0 [ 1522.932169][T16226] Bluetooth: hci1: command tx timeout [ 1522.979029][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1522.984585][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.990654][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1523.012088][ T31] ? exc_page_fault+0xab/0x100 [ 1523.016864][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.034243][ T31] RIP: 0033:0x7f5c4cb8e15c [ 1523.038658][ T31] RSP: 002b:00007fff31dad5b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1523.063387][ T31] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00007f5c4cb8e15c [ 1523.071359][ T31] RDX: 0000000000000030 RSI: 00007fff31dad670 RDI: 00000000000000f9 [ 1523.092139][ T31] RBP: 00007fff31dad61c R08: 0000000000000000 R09: 0079746972756365 [ 1523.100135][ T31] R10: 00007fff31dacf70 R11: 0000000000000246 R12: 00000000000002ff [ 1523.122070][ T31] R13: 00000000000927c0 R14: 000000000014b246 R15: 00007fff31dad670 [ 1523.130072][ T31] [ 1523.133726][ T31] [ 1523.133726][ T31] Showing all locks held in the system: [ 1523.141429][ T31] 1 lock held by khungtaskd/31: [ 1523.152835][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1523.184356][ T31] 3 locks held by kworker/u9:0/52: [ 1523.189543][ T31] #0: ffff88802642c948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1523.248677][ T31] #1: ffffc90000bd7ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1523.268967][ T31] #2: ffff888030450dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1523.279040][ T31] 2 locks held by dhcpcd/5488: [ 1523.283841][ T31] #0: ffff88802f08a6e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1523.294402][ T31] #1: ffffffff8f2cc288 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1523.303336][ T31] 2 locks held by getty/5587: [ 1523.307995][ T31] #0: ffff888032ef60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1523.317906][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1523.328078][ T31] 3 locks held by kworker/u8:11/6457: [ 1523.333975][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1523.353291][ T31] #1: ffffc9000b637ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1523.364589][ T31] #2: ffffffff8f2cc288 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1523.373908][ T31] 3 locks held by kworker/1:16/17939: [ 1523.379289][ T31] #0: ffff88801a051948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1523.390348][ T31] #1: ffffc90004cafba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1523.401512][ T31] #2: ffffffff8df43040 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1523.411644][ T31] 2 locks held by syz.1.4079/20240: [ 1523.416985][ T31] #0: ffffffff8f2bf410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1523.426968][ T31] #1: ffffffff8f2cc288 (rtnl_mutex){+.+.}-{4:4}, at: ipmr_net_exit_batch+0x20/0x90 [ 1523.436692][ T31] 2 locks held by syz.7.4093/20320: [ 1523.441886][ T31] #0: ffffffff8f2bf410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1523.453608][ T31] #1: ffffffff8f2cc288 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 1523.463551][ T31] 2 locks held by syz.0.4113/20392: [ 1523.468761][ T31] #0: ffff888076a535c8 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1523.479155][ T31] #1: ffffffff8f2cc288 (rtnl_mutex){+.+.}-{4:4}, at: packet_release+0x482/0xd00 [ 1523.488463][ T31] 2 locks held by syz.0.4113/20398: [ 1523.493793][ T31] #0: ffffffff8f2cc288 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x346/0x700 [ 1523.502828][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1523.513791][ T31] 2 locks held by syz-executor/20399: [ 1523.519154][ T31] #0: ffffffff8f2bf410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1523.528637][ T31] #1: ffffffff8f2cc288 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 1523.538854][ T31] 1 lock held by syz.5.4115/20404: [ 1523.544034][ T31] #0: ffff888031bd1468 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0xc5f/0x1460 [ 1523.555785][ T31] 1 lock held by syz.5.4115/20405: [ 1523.560907][ T31] #0: ffffffff8f2cc288 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 1523.570905][ T31] 2 locks held by syz.5.4115/20407: [ 1523.576289][ T31] #0: ffff888031bd1468 (&pipe->mutex){+.+.}-{4:4}, at: splice_to_socket+0xf5/0xf00 [ 1523.585892][ T31] #1: ffffffff8f2cc288 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 1523.595409][ T31] 1 lock held by syz.6.4116/20409: [ 1523.600514][ T31] #0: ffffffff8f2cc288 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x107/0xf60 [ 1523.610325][ T31] 1 lock held by syz.9.4118/20416: [ 1523.615547][ T31] #0: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1523.626885][ T31] [ 1523.629263][ T31] ============================================= [ 1523.629263][ T31] [ 1523.637819][ T31] NMI backtrace for cpu 1 [ 1523.637837][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1523.637869][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1523.637885][ T31] Call Trace: [ 1523.637895][ T31] [ 1523.637905][ T31] dump_stack_lvl+0x189/0x250 [ 1523.637948][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1523.637983][ T31] ? __pfx__printk+0x10/0x10 [ 1523.638024][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1523.638152][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1523.638186][ T31] ? __pfx__printk+0x10/0x10 [ 1523.638212][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1523.638245][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1523.638302][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1523.638336][ T31] watchdog+0xf60/0xfa0 [ 1523.638375][ T31] ? watchdog+0x1e2/0xfa0 [ 1523.638407][ T31] kthread+0x711/0x8a0 [ 1523.638444][ T31] ? __pfx_watchdog+0x10/0x10 [ 1523.638468][ T31] ? __pfx_kthread+0x10/0x10 [ 1523.638499][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1523.638532][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1523.638566][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1523.638594][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1523.638628][ T31] ? __pfx_kthread+0x10/0x10 [ 1523.638663][ T31] ret_from_fork+0x4bc/0x870 [ 1523.638692][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1523.638727][ T31] ? __switch_to_asm+0x39/0x70 [ 1523.638747][ T31] ? __switch_to_asm+0x33/0x70 [ 1523.638766][ T31] ? __pfx_kthread+0x10/0x10 [ 1523.638802][ T31] ret_from_fork_asm+0x1a/0x30 [ 1523.638843][ T31] [ 1523.638852][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1523.804199][ C0] NMI backtrace for cpu 0 [ 1523.804220][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1523.804244][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1523.804259][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1523.804297][ C0] Code: 5e 93 c9 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 81 21 00 f3 0f 1e fa fb f4 33 93 c9 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1523.804316][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1523.804336][ C0] RAX: 11fea5d168c03200 RBX: ffffffff81967b47 RCX: 11fea5d168c03200 [ 1523.804353][ C0] RDX: 0000000000000001 RSI: ffffffff8d70f556 RDI: ffffffff8bbf0960 [ 1523.804369][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 1523.804386][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cf770 [ 1523.804403][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 1523.804420][ C0] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 1523.804438][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1523.804458][ C0] CR2: 0000200000404030 CR3: 0000000059c9b000 CR4: 0000000000350ef0 [ 1523.804475][ C0] Call Trace: [ 1523.804485][ C0] [ 1523.804493][ C0] default_idle+0x13/0x20 [ 1523.804515][ C0] default_idle_call+0x73/0xb0 [ 1523.804539][ C0] do_idle+0x1e7/0x510 [ 1523.804569][ C0] ? __pfx_do_idle+0x10/0x10 [ 1523.804603][ C0] cpu_startup_entry+0x44/0x60 [ 1523.804628][ C0] rest_init+0x2de/0x300 [ 1523.804654][ C0] start_kernel+0x3ae/0x410 [ 1523.804753][ C0] x86_64_start_reservations+0x24/0x30 [ 1523.804854][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1523.804907][ C0] common_startup_64+0x13e/0x147 [ 1523.804950][ C0] [ 1524.154106][T20392] veth1_to_bond: left allmulticast mode [ 1524.653060][T20240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.016112][T16226] Bluetooth: hci1: command tx timeout [ 1526.277238][ T6457] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.638075][ T6457] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.765859][ T6457] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.889252][ T6457] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.092434][T16226] Bluetooth: hci1: command tx timeout [ 1527.171528][ T6457] vxlan0: left allmulticast mode [ 1527.183957][ T6457] vxlan0: left promiscuous mode [ 1527.189476][ T6457] bridge0: port 3(vxlan0) entered disabled state [ 1527.199244][ T6457] bridge_slave_1: left allmulticast mode [ 1527.206558][ T6457] bridge_slave_1: left promiscuous mode [ 1527.212834][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.224362][ T6457] bridge_slave_0: left allmulticast mode [ 1527.230013][ T6457] bridge_slave_0: left promiscuous mode [ 1527.237369][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.700437][ T6457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.719064][ T6457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.733736][ T6457] bond0 (unregistering): Released all slaves [ 1528.550025][ T6457] hsr_slave_0: left promiscuous mode [ 1528.563269][ T6457] hsr_slave_1: left promiscuous mode [ 1528.569390][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.596489][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.608340][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.628484][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.666620][ T6457] veth1_macvtap: left promiscuous mode [ 1528.683260][ T6457] veth0_macvtap: left promiscuous mode [ 1528.689003][ T6457] veth1_vlan: left promiscuous mode [ 1528.702867][ T6457] veth0_vlan: left promiscuous mode [ 1529.405903][ T6457] team0 (unregistering): Port device team_slave_1 removed [ 1529.452435][ T6457] team0 (unregistering): Port device team_slave_0 removed [ 1530.266031][ T6457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.349940][ T6457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.459839][ T6457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.536126][ T6457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.767196][ T6457] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.865829][ T6457] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.975037][ T6457] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.072404][ T6457] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.275034][ T6457] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.392155][ T6457] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.449699][ T6457] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.517162][ T6457] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0